Bird Watching Mode

v1.0.0

Bird-watching log workflow: ask for place on enable, resolve eBird region via superpicky-cli region-query, persist to workspace/bird.json; record sightings (...

0· 56·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included scripts (set_region, append_sighting, identify_photo, export_csv). The only external dependency is the sibling superpicky-cli (invoked via its scripts/run.sh), which is appropriate for eBird region queries and BirdID calls; no unrelated credentials or system accesses are requested.
Instruction Scope
SKILL.md correctly instructs the agent to run the included scripts with absolute paths and to prompt the user for a place. It also mentions delivering CSVs to the user (chat attachment, email, etc.), which is vague and gives the agent discretion about delivery channels — not inherently malicious but worth noting. The scripts themselves only read/write workspace/bird.json, read image files, and invoke the external superpicky-cli run.sh; they do not attempt to read unrelated system files or environment variables.
Install Mechanism
No install spec; this is instruction + script bundle. All code is included in the repo and nothing is downloaded or extracted at install time.
Credentials
The skill declares no required environment variables or credentials. It optionally respects SUPERPICKY_CLI_SKILL to locate a sibling superpicky-cli installation; this optional env var is reasonable. No secrets (TOKENS/KEYS/PASSWORDS) are requested. You should still ensure superpicky-cli (if present) is trusted because these scripts invoke its run.sh.
Persistence & Privilege
always is false and the skill does not request permanent platform-wide privileges. It writes only to the user-specified project workspace (workspace/bird.json and CSV outputs) which is consistent with its purpose.
Assessment
This skill appears internally consistent and implements a local bird-logging workflow. Before installing: 1) confirm you trust the sibling superpicky-cli skill (the included scripts call its scripts/run.sh and that script will execute arbitrary code/network calls); 2) be aware the skill will read image files and write workspace/bird.json and CSVs under whatever PROJECT path you provide (use a dedicated project directory if you are cautious); 3) SKILL.md allows the agent to 'send' CSVs (attachments, email, etc.) — decide which delivery channels you allow your agent to use; 4) run the included tests (scripts/run_tests.sh) locally if you want to audit behavior before enabling. Overall the bundle is coherent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk971c4bq99tmgf1f4zg3g3vn4x83jttd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments