Bat
v2.0.3Log and search local text entries from the command line. Use when adding quick notes, searching past entries, or exporting a simple activity log.
⭐ 0· 289·1 current·1 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and behavior match: the script and SKILL.md implement a local text-logging/search utility that stores files under a user data directory. No unrelated credentials, binaries, or external services are requested.
Instruction Scope
Instructions and the included script operate only on local files (data.log and history.log) in the configured data directory. Minor inconsistencies: SKILL.md lists version v2.0.2 (pack metadata v2.0.3) while the script sets VERSION="2.0.0"; the remove command logs removals to history.log but does not actually modify data.log to mark or delete entries as described. These are functional/maintenance issues rather than security concerns.
Install Mechanism
No install spec; instruction-only plus a small included shell script. Nothing is downloaded or extracted from remote URLs and no packages are installed. Low-installation risk.
Credentials
No credentials or secrets requested. The script respects BAT_DIR and XDG_DATA_HOME (and falls back to HOME) to choose a local storage path — this is proportionate to a file-based CLI logger.
Persistence & Privilege
always is false (normal). The skill writes only to its own data directory (~/.local/share/bat by default). It does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do exactly what it claims: it writes and reads plain-text logs under your data directory and does not contact external services or request secrets. Before installing, review or run the bundled script (scripts/script.sh) to confirm behavior and to understand where files will be created (BAT_DIR or XDG_DATA_HOME or ~/.local/share/bat). Be aware of minor version mismatches and that the remove command only logs removals rather than editing data.log; if you need guaranteed deletion behavior, inspect/modify the script first. If you want to be extra cautious, run the script in a sandboxed account or container to confirm it meets your expectations.Like a lobster shell, security has layers — review code before you run it.
latestvk97afhs09tp9hf35wkvahwrad983550f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.