mtg-edh-deckbuilder

Search and retrieve Magic: The Gathering card data using the Scryfall API. Use this skill when the user asks about MTG cards, wants to search for cards by name, type, color, mana cost, oracle text, set, or any other card attribute. Also use for getting card images, prices, rulings, legality information, or random cards. Triggers include mentions of MTG, Magic, Magic: The Gathering, card names, deck building questions, or requests for card information.

This skill appears to be what it claims: a simple Scryfall client. Before installing, note that: - The skill will make outbound HTTP requests to api.scryfall.com for each query, so avoid entering any sensitive data (passwords, tokens, private keys) into search fields because they would be sent to Scryfall. - No credentials are required, and there is no install step that fetches remote code, but the repository owner/homepage is not provided — if you need stronger assurance, inspect the included script (scripts/scryfall_search.py) yourself to confirm behavior. - The skill returns card image URLs and price data from Scryfall; those resources are hosted externally and will be loaded from Scryfall when used. Overall the skill is coherent and proportional to its purpose.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The OpenClaw skill bundle for Scryfall MTG card search is classified as benign. The `SKILL.md` provides clear, well-scoped instructions for the AI agent to interact with the Scryfall API, without any prompt injection attempts to subvert its purpose or security. The `scripts/scryfall_search.py` script uses standard Python libraries (`urllib.request`) to make HTTP GET requests exclusively to `https://api.scryfall.com`, which is the stated and expected API endpoint. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or attempts to access sensitive local resources.