← Back to Skills Marketplace
NBA-games
by
highdeserthacker
· GitHub ↗
· v1.0.1
· MIT-0
99
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install nba-games
Description
Gets upcoming and/or recent NBA game results for a specified team. Use this skill when asked about scheduled, upcoming, or past games for any NBA team.
Usage Guidance
This skill does what it says (fetch NBA games) but its install step asks you to download and run a third-party Python script from GitHub without pinning the commit or providing a checksum. That script would run with whatever privileges your agent has and could read files or exfiltrate data. Before installing: (1) review the script at the provided GitHub URL yourself; (2) ask the publisher to pin to a specific commit or provide a checksum/signature; (3) prefer executing the script in a sandbox or container; (4) request the skill bundle include the code (so it can be statically reviewed) or replace it with a well-known, audited package or an official API. Also ask the maintainer to fix the inconsistent path in the Team ID lookup example.
Capability Analysis
Type: OpenClaw Skill
Name: nba-games
Version: 1.0.1
The skill uses a 'curl-to-execute' pattern in SKILL.md, downloading a Python script from a remote GitHub repository (highdeserthacker/nba-schedule) to the local filesystem for execution. This introduces a supply chain risk where the remote script could be modified to include malicious logic without changing the skill bundle itself. Additionally, there is a path inconsistency between the installation directory ($HOME/.openclaw/...) and the Team ID Lookup instructions (/home/node/python/...), which may indicate an unverified or environment-specific configuration.
Capability Assessment
Purpose & Capability
Name/description align with what the instructions do: fetch NBA schedules/results. Declared runtime requirement (python3) is proportionate and there are no unexpected credential or config demands.
Instruction Scope
The SKILL.md instructs to curl a remote Python script and then run it. That gives the downloaded script full ability to execute arbitrary Python on the host. Additionally, the Team ID lookup example uses a different hard-coded path (/home/node/python/...) than the install path ($HOME/.openclaw/skills/...), indicating sloppy or inconsistent instructions that could lead to accidental execution of other files or confusion.
Install Mechanism
No packaged install; the install step downloads a single Python file from raw.githubusercontent.com and saves it under the user's home. While GitHub raw URLs are common, the download is unpinned (no specific commit/tag) and no checksum/signature is provided — running the file executes arbitrary third‑party code, which is a notable risk.
Credentials
The skill declares no environment variables, credentials, or config paths. That is appropriate for its purpose. Note: the downloaded script, once run, could itself read environment variables or files even though none are declared in the skill metadata.
Persistence & Privilege
The install writes a file to $HOME/.openclaw/skills/nba_games/nba-schedule.py, which is typical for instruction-based skills. The skill is not marked always:true and does not request system-wide privileges, but it does create and later execute a file in the user's home directory — consider this a modest persistence surface.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nba-games - After installation, invoke the skill by name or use
/nba-games - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added installation instructions to download nba-schedule.py if not already present.
- Updated script path references to use $HOME/.openclaw/skills/nba_games/nba-schedule.py instead of a bind-mounted directory.
- Clarified usage examples with the new local script path.
- Removed container path references for improved portability and clarity.
- Minor documentation clean-up for script usage and installation.
v1.0.0
Initial publish. List upcoming and recent games for your favorite NBA team. e.g. make recent scores and upcoming games part of your daily brief.
Metadata
Frequently Asked Questions
What is NBA-games?
Gets upcoming and/or recent NBA game results for a specified team. Use this skill when asked about scheduled, upcoming, or past games for any NBA team. It is an AI Agent Skill for Claude Code / OpenClaw, with 99 downloads so far.
How do I install NBA-games?
Run "/install nba-games" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is NBA-games free?
Yes, NBA-games is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does NBA-games support?
NBA-games is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created NBA-games?
It is built and maintained by highdeserthacker (@highdeserthacker); the current version is v1.0.1.
More Skills