Turnip Prophet

Predict Animal Crossing New Horizons turnip prices using the game's exact algorithm. Use when a user asks about turnip prices, ACNH turnips, stalk market, tu...

This skill appears to do exactly what it says: predict ACNH turnip prices and optionally add scheduled reminders. Before installing/using: 1) Review scripts (scripts/cron_handler.sh, turnip_predict.py) yourself — they operate only on local files and call your openclaw CLI. 2) If offered, only enable cron reminders if you are comfortable the skill will send messages using your existing OpenClaw credentials; the setup flow promises to show the exact cron lines before adding them. 3) The SKILL.md will run pip3 install matplotlib (and may call sudo apt-get / brew to install jq); be prepared for those package installs. 4) If you change your mind, remove memory/turnip-config.json from the skill directory and remove the cron lines from your crontab. The only minor oddity: the registry metadata claims 'no install spec' even though the SKILL.md contains install commands — this is a packaging/documentation mismatch but not a functional red flag.

Type: OpenClaw Skill Name: turnip-prophet Version: 1.2.4 The skill is classified as suspicious due to its installation of system packages requiring `sudo` (jq) and its ability to set up cron jobs that execute commands (`openclaw gateway call message.send`) on behalf of the user. While these actions are transparently communicated to the user in SKILL.md and require explicit confirmation, they represent significant privilege escalation and automated execution capabilities. Additionally, the construction of shell commands in SKILL.md and scripts/cron_handler.sh, particularly when embedding JSON strings as arguments, presents a potential vulnerability for shell or JSON injection if the OpenClaw agent does not rigorously sanitize or quote inputs, although no explicit malicious payloads are present in the skill itself.