scryfall-cards

Search and retrieve Magic: The Gathering card data using the Scryfall API. Use this skill when the user asks about MTG cards, wants to search for cards by name, type, color, mana cost, oracle text, set, or any other card attribute. Also use for getting card images, prices, rulings, legality information, or random cards. Triggers include mentions of MTG, Magic, Magic: The Gathering, card names, deck building questions, or requests for card information.

This skill appears safe and does exactly what it claims: it issues HTTP requests to the Scryfall public API and formats results. Before installing, consider: (1) the source is 'unknown' — review the included scripts yourself if you plan to run them locally; (2) the script will make outbound network requests to api.scryfall.com (no credentials are sent), so if you need to limit network egress run it in a sandbox; (3) if you want tighter control, inspect the Python file for any changes and ensure Python and requests/urllib behavior are acceptable in your environment. If you only need read-only card lookups, no secrets or special permissions are required.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The skill bundle is benign. The `SKILL.md` provides clear, functional instructions for the AI agent to interact with the Scryfall API, without any evidence of prompt injection attempts aimed at subverting the agent's behavior. The `scripts/scryfall_search.py` script uses standard Python libraries (`urllib.request`, `json`, `argparse`) to make HTTP requests exclusively to the legitimate `https://api.scryfall.com` endpoint. There is no code for data exfiltration, malicious execution, persistence, or any other high-risk behaviors. The `references/search_syntax.md` is purely informational documentation.