Reading Buddy

A social reading platform enabling users to register books, create and join virtual reading rooms, and share real-time chat and reading insights.

This skill appears coherent and implements a local CLI-backed social reading tool. Before installing/run: 1) review the source yourself if possible; npm install will fetch public packages and build a native module (better-sqlite3) which may compile native code on your machine. 2) The CLI will create a SQLite DB at ~/.reading-buddy/reading-buddy.db — if you want to sandbox it, run it inside a container or VM. 3) If you do not want network activity during npm install, inspect package.json/package-lock or vendor the deps. 4) No credentials are requested, but treat any future configuration that asks for external API keys (e.g., OAuth, cloud storage) as needing separate review.

Type: OpenClaw Skill Name: reading-buddy Version: 1.0.0 The 'Reading Buddy' skill is a well-structured social reading platform implementation using Node.js and SQLite. The code follows security best practices, specifically using parameterized queries via the better-sqlite3 library in files like bookService.ts and chatService.ts to prevent SQL injection. There is no evidence of data exfiltration, unauthorized network access, or malicious execution; all file operations are restricted to a local database directory (~/.reading-buddy). The project structure and dependencies are appropriate for its stated purpose.