ClawHub

Mal Lookup

v1.3.1

Direct MyAnimeList lookup tool. Bypasses Jikan/API issues by using MAL's internal endpoints.

⭐ 0· 1k·0 current·0 all-time
by@zun43d
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (MAL lookups) match the declared requirements: curl, jq, grep, awk are reasonable for querying web endpoints and parsing JSON/HTML. No unrelated credentials, binaries, or config paths are requested. Note: the skill's source/homepage are unknown, so authorship/transparency is limited but not inconsistent with the stated function.
✓
Instruction Scope
SKILL.md describes only web queries to MyAnimeList internal endpoints (load.json, prefix.json) and CLI usage patterns. It does not instruct the agent to read local files, environment variables, or transmit unrelated data. The use of undocumented/internal endpoints is an implementation choice but not a scope creep.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk category. Nothing will be downloaded or written to disk by an installer.
✓
Credentials
No environment variables, credentials, or config paths are required. This is proportional to a read-only web lookup tool. If private MAL data were needed, credentials would be expected but none are requested.
✓
Persistence & Privilege
always is false, agent invocation is allowed (normal). The skill does not request persistent system presence or modify other skills/configuration.
Assessment
This skill appears consistent and low-risk: it only needs standard CLI tools to query MyAnimeList endpoints and doesn't ask for secrets. Two practical cautions: (1) the skill's source/homepage is unknown — lack of author transparency means you should be cautious if you require an auditable source; (2) it relies on MAL internal/undocumented endpoints, which can change or violate site terms and may break or be rate-limited. If you need stronger guarantees, prefer an official API (or a well-known wrapper like Jikan) or ask the maintainer for source code/homepage before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk978r3jrhz9s8dwbqeanj1sxv180vd1x

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎌 Clawdis
Binscurl, jq, grep, awk

Comments