Weekend Scout

Weekend Scout discovers next-weekend outdoor events, festivals, fairs, and road-trip ideas near the user's city and nearby cities. It builds home-city picks...

Before installing or running this skill: 1) Inspect install/install_skill.py to see what it does (does it call pip to install locally, fetch remote code, or run arbitrary shell commands?). 2) Inspect weekend_scout/telegram.py and config.py to confirm Telegram bot token/chat_id storage location and that tokens are not transmitted anywhere except Telegram's API. 3) Review any network calls in the code (WebFetch/WebSearch callers) to ensure they go to expected endpoints and that no hard-coded unusual remote endpoints exist. 4) If you lack confidence, run the installer and the skill in a sandboxed environment or VM and/or audit the code paths that run during bootstrap and send. 5) Be cautious that the SKILL.md explicitly forbids inspecting package source during a normal run — that is a design choice that prevents on-the-fly auditing; treat it as a reason to perform an explicit manual review before granting execution.

Type: OpenClaw Skill Name: weekend-scout Version: 1.0.2 The 'weekend-scout' skill bundle is a well-engineered tool designed to discover outdoor events and deliver them to Telegram. It consists of a Python CLI package for data management (SQLite caching, GeoNames integration, and Telegram delivery) and platform-specific SKILL.md files that guide AI agents through a multi-phase discovery workflow. The Python code is transparent, uses standard libraries (requests, pyyaml), and includes robust diagnostic logging in 'diagnostics.py' that explicitly redacts sensitive keys like tokens and passwords. The installer script 'install/install_skill.py' handles cross-platform setup and Python environment restrictions (PEP 668) legitimately. No evidence of data exfiltration, malicious execution, or prompt injection was found; the behavior is entirely consistent with the stated purpose of the skill.