Avbuzz
v1.1.0Query AV new releases, rankings, and actress info from FANZA GraphQL API. No authentication required. Supports direct curl queries and optional Discord/Teleg...
⭐ 0· 242·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (FANZA AV search) match the runtime instructions and requirements — the skill only needs an HTTP client (curl) to query a public GraphQL endpoint. package.json and SKILL.md both describe the same functionality.
Instruction Scope
Instructions are explicit curl commands against the documented public endpoint and include date helpers for JST. They do not instruct reading local secrets or unrelated system files. Minor ambiguity: SKILL.md mentions 'optional Discord/Telegram bot deployment' but provides no bot-install or token instructions — this is not harmful but is incomplete and could confuse users expecting bot integration steps.
Install Mechanism
Install spec is a single Homebrew formula for curl. Installing curl via brew is safe but typically unnecessary on systems that already have curl; no downloads from untrusted URLs or archive extraction are used. This is low-risk but slightly redundant.
Credentials
The skill declares no required environment variables or config paths, which matches its no-auth public-API usage. package.json includes an 'openclaw' dependency entry listing a generic 'exec' tool; that indicates the skill expects to run shell commands (curl/date), which is consistent with the SKILL.md but worth noting because shell execution grants ability to run arbitrary commands if the underlying skill were changed.
Persistence & Privilege
The skill does not request always:true, does not require writing system-wide configs, and is instruction-only. It has no elevated persistence or privileged installation behavior.
Assessment
This skill appears to do what it says: run curl against FANZA's public GraphQL API to fetch AV releases, rankings, and actress info. Before installing: ensure you are comfortable with adult content and that using such content is legal where you are; verify the skill source (package.json points to a GitHub homepage but the registry entry is 'unknown'); be cautious when using or adapting the skill to run as a bot (Discord/Telegram) — bot deployment will require tokens/secrets which are not requested here and must be stored/handled securely. If you need higher assurance, ask the author for the repository link or a signed release so you can review the exact code that would run (especially any changes that would use shell exec beyond the provided curl examples).Like a lobster shell, security has layers — review code before you run it.
latestvk974vvh9r1s4nftxwzcvj8zz5h8267kj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🗴 Clawdis
OSmacOS · Linux · Windows
Binscurl
Install
curl (HTTP client)
brew install curl