你的私人调酒师 - 提供鸡尾酒推荐、配方查询和调制指南。支持搜索特定鸡尾酒、按原料查找、随机推荐和场景化推荐。数据库中包含 1635+ 款鸡尾酒配方！

This skill appears to do what it says: local CSV-based cocktail search and recommendations via simple bash scripts. Before installing or enabling it: 1) note the minor documentation mismatch (skill.json claims scripts/cocktail-boy which is not in the package) — fix or verify the intended entrypoint; 2) inspect scripts/query.sh yourself (it's short, uses awk/grep/cut/shuf) to confirm you’re comfortable running them; 3) do not blindly paste any suggested ~/.bashrc lines — if you want a shortcut, add it manually after review; 4) run demo.sh in a sandbox or with stdout/stderr visible to confirm behavior; and 5) because the skill can be invoked autonomously by agents (platform default), only enable it for agents you trust. Overall there are no secrets, network calls, or obscure installers in this package.

Type: OpenClaw Skill Name: cocktail-boy Version: 1.0.0 The 'cocktail-boy' skill is a legitimate tool for searching and recommending cocktail recipes from a local CSV database. The core logic in `scripts/query.sh` uses standard Unix utilities like `awk` and `grep` to parse data, and while it lacks rigorous input sanitization (allowing for potential regex injection), this is a minor vulnerability rather than a sign of malice. There is no evidence of data exfiltration, unauthorized network access, or persistence; a mention of `~/.bashrc` in the documentation appears to be a suggestion for user aliases rather than an automated modification. Some minor inconsistencies exist, such as unimplemented commands and missing files mentioned in the README, but these are characteristic of unintentional bugs.