Manage Avito.ru account, items, and messenger via API. Use for listing items, checking balance, reading chats, and getting account info.

What to consider before installing: - The code implements the advertised Avito actions (auth, list items/chats, balance) and calls api.avito.ru — that part looks coherent. - The skill requires your Avito Client ID and Client Secret and will obtain/print access tokens; the registry metadata does not declare these required credentials. Only provide credentials if you trust the skill author and environment. - Tokens and API responses are printed to stdout — they can be captured in logs. Prefer running these scripts locally in a controlled environment or modifying them to avoid printing secrets. - The package expects the Python 'requests' library but doesn't declare it as a dependency; ensure your runtime has it rather than installing third-party packages from unknown sources. - The skill owner and homepage are unknown; if you need this functionality, consider using an official SDK or verifying the author (or requesting the author update metadata to declare required env vars and remove/secure prints) before granting secrets.

Type: OpenClaw Skill Name: avito Version: 1.0.0 The skill bundle is benign. All Python scripts (`auth.py`, `get_balance.py`, `get_self.py`, `list_chats.py`, `list_items.py`) interact exclusively with the legitimate Avito API domain (`api.avito.ru`) to perform account management tasks as described. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation. The `SKILL.md` file provides clear instructions for using the skill and does not contain any prompt injection attempts or instructions for the AI agent to perform actions outside the stated purpose.