by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it bundles an MCP server and a small fetch helper that query public content.osu.edu endpoints and does not request unrelated credentials, installs, or system access.
评估建议
This skill appears to do exactly what it says: query public OSU content endpoints via a small Node-based MCP server or a fetch script. Before installing or running: (1) review and run npm install/build in a controlled environment (npm packages will be pulled from public registries), (2) be aware that directory/person-search tools query public directory data (consider privacy/usage policies), and (3) if you will expose the MCP server to other software, run it in a network-limited sandbox or inspe...详细分析 ▾
✓ 用途与能力
The name and SKILL.md describe fetching public Ohio State content APIs and the included code implements tools that only call content.osu.edu endpoints. The package.json and source files match the stated MCP server purpose. (Registry metadata lacked a short description, but the SKILL.md provides the expected purpose.)
✓ 指令范围
Runtime instructions only show (a) running the bundled node fetch helper or (b) building/running the provided MCP server; all examples target content.osu.edu. The instructions do not request reading unrelated files or environment variables. Note: the directory/person-search endpoints can return personal directory data — that is expected for the stated purpose but has privacy implications you should consider.
✓ 安装机制
No install spec in the registry (instruction-only), but source includes a Node project. Building requires npm install and tsc; dependencies are standard npm packages (lockfile present). No downloads from arbitrary URLs or extract operations were observed.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths. That is proportional to its functionality (public HTTP fetches).
✓ 持久化与权限
always is false and the skill does not request special platform privileges. Running the MCP server is a normal local service; nothing in the files attempts to modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/8
Initial public release of ohio-state-api. - Provides easy access to The Ohio State University Content APIs covering a wide range of campus data (bus, dining, buildings, events, library, parking, and more). - Supports direct HTTP fetch via a helper script, or use with curl for raw JSON. - Bundles an MCP-compatible Node.js server for tool-based access. - Includes usage examples, workflow tips, and documentation for common API endpoints. - Designed for developers and users needing a repeatable way to fetch or inspect Ohio State campus API data.
● 无害
安装命令 点击复制
官方npx clawhub@latest install ohio-state-api
镜像加速npx clawhub@latest install ohio-state-api --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制