安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and permissions are consistent with a library availability monitor; there are no obvious mismatches or hidden endpoints.
评估建议
This skill appears to do exactly what it says: it scrapes the Shenzhen Library API, stores tracked books in book_list.json, and can notify via console or SMTP email. Before installing or running: 1) Review config.yaml (it will contain any SMTP password you provide) and consider using an app-specific or throwaway SMTP account if you’re concerned; 2) Inspect the included Python files (they are provided) and only run pip install -r requirements.txt from a trusted environment; 3) Be aware that 'pyth...详细分析 ▾
✓ 用途与能力
Name/description (monitor library book availability for Shenzhen Library) aligns with requested permissions (network/filesystem/shell) and included code (scraper, scheduler, notifier, book storage). There are no unrelated credentials or services requested.
✓ 指令范围
SKILL.md instructs the agent to run the packaged Python CLI (main.py add/list/check/remove/toggle/monitor) and to use a local config.yaml and book_list.json. The instructions do not ask the agent to read unrelated system files, nor to exfiltrate data to unknown endpoints; network calls go to the Shenzhen library API endpoints implemented in the scraper.
ℹ 安装机制
There is no install spec (instruction-only install), but the package includes Python source and a requirements.txt. SKILL.md instructs users to run pip install -r requirements.txt manually. This is low risk, but the skill will execute local Python code when invoked, so users should review source before running.
✓ 凭证需求
The skill declares no required environment variables. Notification via email requires SMTP credentials, but those are stored in config.yaml (local file) rather than environment variables; this is proportionate to the stated notification feature. requirements.txt includes python-dotenv though the code does not use it—minor inconsistency.
ℹ 持久化与权限
always:false and the skill does not modify other skills or system-wide configs. However, running the 'monitor' command starts a long-running scheduler loop that performs periodic network requests and writes to book_list.json; if invoked by the agent it will spawn a persistent process until stopped.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/6
Version 1.0.1 - No functional or documentation changes detected in this version. - No file changes were made from the previous release.
● 无害
安装命令
点击复制官方npx clawhub@latest install skill-openclaw-library-monitor
镜像加速npx clawhub@latest install skill-openclaw-library-monitor --registry https://cn.longxiaskill.com
技能文档
A skill to monitor library book availability and get notified when books become available for borrowing.
When to Use
Use this skill when you want to:
- Track book availability at Shenzhen Library
- Get notified when a book becomes available for borrowing
- Monitor multiple books and their availability status
- Automate library book availability checking
Setup
Before using this skill, ensure:
- Python 3.8+ is installed
- Dependencies are installed:
pip install -r requirements.txt - Configuration file
config.yamlis set up (copy fromconfig.yaml.example)
Commands
Add a Book
Add book "Python Programming" by "Guido van Rossum" with monitoring enabled
List All Books
List all monitored books
Check Book Availability
Check availability of all books
Remove a Book
Remove book with ID abc123
Toggle Monitoring
Toggle monitoring for book abc123
Start Scheduled Monitoring
Start monitoring scheduler
Configuration
The skill uses config.yaml for settings:
library: name: "Shenzhen Library" base_url: "https://www.szlib.org.cn/" search_url: "https://www.szlib.org.cn/opac/" timeout: 30scheduler: enabled: true interval_minutes: 30 retry_on_failure: true max_retries: 3
notification: enabled: true methods: - console - email email: smtp_server: smtp.qq.com smtp_port: 587 sender: your_email@qq.com password: your_smtp_password recipients: - recipient@example.com
Notes
- The skill supports Shenzhen Library by default
- Other libraries can be added by implementing custom scrapers
- Book data is stored in
book_list.json - Please set reasonable check intervals to avoid overloading library servers