Maritime Watch

Monitors Chornomorsk port status by aggregating weather, vessel tracking, security alerts, and news with cross-validated data inputs.

This skill currently contains only placeholder code and does not implement the promised functionality. It does not request secrets now, so it does not appear to exfiltrate data in its current form, but the mismatch between the documentation and the implementation is a warning sign. Before installing or using it in any environment: 1) ask the author for the full source and a verifiable homepage/origin; 2) verify which real endpoints will be called (replace example.com) and confirm whether API keys are required; 3) review any future changes to the script that add network endpoints or credential usage; 4) run and test the skill in a sandboxed environment first; and 5) do not rely on this skill for operational decisions until proper data-fetching, validation, and error handling are implemented.

Type: OpenClaw Skill Name: maritime-watch Version: 1.0.0 The `main.sh` script uses `curl` to fetch data from external placeholder URLs (`example.com`), demonstrating a network access capability. While the script is explicitly incomplete with `TODO` comments and an 'Not implemented yet' output, this capability, combined with the potential for shell injection if the `port` input from `SKILL.md` were implemented without sanitization, makes it suspicious. There is no clear malicious intent, but it exhibits risky capabilities and an incomplete state that could lead to vulnerabilities or malicious behavior in future iterations.