Sahabat Bumil 🤰

Panduan kehamilan lengkap untuk ibu hamil Indonesia dengan info nutrisi, perkembangan janin, kesehatan, persiapan melahirkan, dan perencanaan biaya lokal.

What to check before installing or running this skill: - Verify provenance: ask the author for a canonical repository URL (the README and packaging script contain placeholder 'yourusername' but manifest points to 'defzky'). Prefer installing only from the official repo/author you can verify. - Inspect the code for network activity: search the src/ files for 'requests', 'playwright', 'urllib', or hard-coded endpoints to see what external sites would be contacted and why. - Resolve dependency mismatch: SKILL.md lists playwright (and mentions web scraping) but requirements.txt only includes requests. If the skill actually uses Playwright, installing it requires extra steps and browser binaries; confirm whether scraping code is present and safe. - Investigate hidden characters: examine SKILL.md and other docs for unicode control characters (e.g., run cat -v SKILL.md or use a hex viewer). Hidden control characters can indicate content obfuscation or prompt-injection attempts. - Run in a sandbox: if you want to test, run the skill inside an isolated environment (container or VM) and monitor network connections and filesystem writes. - Check for data exfiltration paths: look for code that collects user data, reads arbitrary files, or posts to external endpoints. The skill currently does not request credentials, but code could still transmit data — verify any requests.post/put calls and their destinations. - Ask for an updated requirements.txt and a short security note: request that the maintainer publish a complete requirements.txt and explain what external data sources are scraped and how personally identifiable data (if any) is handled. Given the prompt-injection artifact and the dependency/repo inconsistencies, do not install the skill into a production agent or give it broad autonomous privileges until those issues are resolved.

Type: OpenClaw Skill Name: sahabat-bumil Version: 1.2.0 The Sahabat Bumil skill bundle is a purely informational tool providing pregnancy guidance, nutrition advice, and hospital information for the Indonesian context. The Python source files (src/financial_planning.py, src/indonesian_nutrition.py, etc.) contain static data dictionaries and simple retrieval logic with no evidence of network exfiltration, file system access, or dangerous execution patterns. While the README mentions Playwright for web scraping, no such implementation exists in the provided code, and the packaging script (package-for-clawhub.sh) follows standard build procedures.