Bytesagain Coffee
v1.0.0Professional reference for specialty coffee brewing, bean origins, and ratios. 支持专业咖啡冲泡指南、粉水比计算及产地风味百科。100% technical documentation, no external dependencies.
⭐ 0· 57·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match the included content (brewing guides, ratios). Minor mismatch: SKILL.md lists 'python3' as a requirement but nothing in the instructions or script uses Python. The script does use 'bc' for arithmetic but 'bc' is not declared in requirements. These are small documentation inconsistencies rather than functional surprises.
Instruction Scope
SKILL.md is instruction-only and stays on-topic (how to brew, sample prompts). The included script prints brewing tips and computes ratios; it does not read external files, environment variables, or network endpoints. No broad data collection or off-skill transmission is present.
Install Mechanism
There is no install spec; the skill is instruction-first with a single small script. Nothing is downloaded or written to disk by an installer, so install risk is low.
Credentials
The skill declares no required environment variables or credentials, which is appropriate. The only proportionality issue is the unnecessary mention of python3 in SKILL.md and the script's undocumented dependence on 'bc' for ratio calculation.
Persistence & Privilege
always is false and the skill does not request persistent system presence or modify other skills/config. It can be invoked by the model autonomously (platform default), which is expected and not flagged here.
Assessment
The skill appears to do what it says: provide coffee brewing guidance and a small helper script. Before installing: (1) note the SKILL.md lists 'python3' but the script is bash-only — this is likely a documentation error; (2) the script uses 'bc' for arithmetic but does not declare it — ensure 'bc' is available or adjust the script; (3) the package source and owner are unknown and there's no homepage, so inspect scripts yourself (they are short and human-readable) and run in a sandbox if you are unsure; (4) because there are no credentials requested and no network calls, the privacy risk is low. If you want absolute assurance, ask the author for clarification about the python3 requirement or remove/adjust the unused requirement before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97c1fa0m1da8d2b6fwrgfwr2583qtf4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.