← 返回 Skills 市场
NBA-games
作者
highdeserthacker
· GitHub ↗
· v1.0.1
· MIT-0
99
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install nba-games
功能描述
Gets upcoming and/or recent NBA game results for a specified team. Use this skill when asked about scheduled, upcoming, or past games for any NBA team.
安全使用建议
This skill does what it says (fetch NBA games) but its install step asks you to download and run a third-party Python script from GitHub without pinning the commit or providing a checksum. That script would run with whatever privileges your agent has and could read files or exfiltrate data. Before installing: (1) review the script at the provided GitHub URL yourself; (2) ask the publisher to pin to a specific commit or provide a checksum/signature; (3) prefer executing the script in a sandbox or container; (4) request the skill bundle include the code (so it can be statically reviewed) or replace it with a well-known, audited package or an official API. Also ask the maintainer to fix the inconsistent path in the Team ID lookup example.
功能分析
Type: OpenClaw Skill
Name: nba-games
Version: 1.0.1
The skill uses a 'curl-to-execute' pattern in SKILL.md, downloading a Python script from a remote GitHub repository (highdeserthacker/nba-schedule) to the local filesystem for execution. This introduces a supply chain risk where the remote script could be modified to include malicious logic without changing the skill bundle itself. Additionally, there is a path inconsistency between the installation directory ($HOME/.openclaw/...) and the Team ID Lookup instructions (/home/node/python/...), which may indicate an unverified or environment-specific configuration.
能力评估
Purpose & Capability
Name/description align with what the instructions do: fetch NBA schedules/results. Declared runtime requirement (python3) is proportionate and there are no unexpected credential or config demands.
Instruction Scope
The SKILL.md instructs to curl a remote Python script and then run it. That gives the downloaded script full ability to execute arbitrary Python on the host. Additionally, the Team ID lookup example uses a different hard-coded path (/home/node/python/...) than the install path ($HOME/.openclaw/skills/...), indicating sloppy or inconsistent instructions that could lead to accidental execution of other files or confusion.
Install Mechanism
No packaged install; the install step downloads a single Python file from raw.githubusercontent.com and saves it under the user's home. While GitHub raw URLs are common, the download is unpinned (no specific commit/tag) and no checksum/signature is provided — running the file executes arbitrary third‑party code, which is a notable risk.
Credentials
The skill declares no environment variables, credentials, or config paths. That is appropriate for its purpose. Note: the downloaded script, once run, could itself read environment variables or files even though none are declared in the skill metadata.
Persistence & Privilege
The install writes a file to $HOME/.openclaw/skills/nba_games/nba-schedule.py, which is typical for instruction-based skills. The skill is not marked always:true and does not request system-wide privileges, but it does create and later execute a file in the user's home directory — consider this a modest persistence surface.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nba-games - 安装完成后，直接呼叫该 Skill 的名称或使用
/nba-games触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added installation instructions to download nba-schedule.py if not already present.
- Updated script path references to use $HOME/.openclaw/skills/nba_games/nba-schedule.py instead of a bind-mounted directory.
- Clarified usage examples with the new local script path.
- Removed container path references for improved portability and clarity.
- Minor documentation clean-up for script usage and installation.
v1.0.0
Initial publish. List upcoming and recent games for your favorite NBA team. e.g. make recent scores and upcoming games part of your daily brief.
元数据
常见问题
NBA-games 是什么？
Gets upcoming and/or recent NBA game results for a specified team. Use this skill when asked about scheduled, upcoming, or past games for any NBA team. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 99 次。
如何安装 NBA-games？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nba-games」即可一键安装，无需额外配置。
NBA-games 是免费的吗？
是的，NBA-games 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
NBA-games 支持哪些平台？
NBA-games 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 NBA-games？
由 highdeserthacker（@highdeserthacker）开发并维护，当前版本 v1.0.1。
推荐 Skills