Red Alert

Israel Red Alert API — real-time and historical rocket/missile alert data. Query alerts by city, time range, generate shelter time stats. Uses redalert.oriel...

This skill appears internally coherent for its stated purpose. Before installing: 1) If you will run the realtime/daemon scripts, run npm install in an isolated sandbox and verify package-lock.json to reduce npm supply-chain risk. 2) The listener writes JSONL files to /data/clawd/tmp — ensure that path and file permissions are acceptable and won't expose sensitive data. 3) The RED_ALERT_API_KEY is optional; only provide it if you need authenticated real-time access. 4) Expect a persistent socket.io connection if you use the daemon — monitor network egress and logs. 5) If you prefer lower risk, use the history-only analyze.mjs (which requires no key) or run realtime listeners manually rather than granting autonomous invocation. If you want more assurance, ask the publisher for provenance (homepage/owner) or run the code in a controlled environment first.

Type: OpenClaw Skill Name: red-alert Version: 1.2.0 The 'red-alert' skill bundle provides tools for monitoring and analyzing Israeli emergency alert data from legitimate third-party APIs (redalert.orielhaim.com and tzevaadom.co.il). The scripts (analyze.mjs, realtime.mjs, and listener-daemon.mjs) implement standard REST and Socket.IO logic to fetch, filter, and log alert history and real-time events. There is no evidence of data exfiltration, malicious execution, or prompt injection; the use of environment variables for API keys and local file logging in /data/clawd/tmp/ is consistent with the stated purpose of the skill.