Wine Cellar

Comprehensive wine cellar management skill for tracking inventory, providing meal-based recommendations, acting as a virtual sommelier, tracking consumption/...

This skill is not obviously malicious, but there are inconsistencies and missing pieces you should consider before installing: - The documentation claims several helper scripts and data files (e.g., add_wine.py, log_consumption.py, generate_report.py, consumption_log.json, purchase_history.json) that are not present. That may mean the skill is incomplete or the docs are out of date. Verify the exact behavior you need (e.g., logging consumption) by testing the included scripts first. - The included scripts operate only on JSON files inside the skill directory (data/). They will create or overwrite files there via save_json. Back up any important data and run the skill in an isolated environment if possible. - There are no network calls in the shipped code, but lookup_barcode.py contains TODO comments to call external wine APIs in future. If the skill is updated to call external services it may require API keys; treat such updates as security-relevant and review any new network code and required environment variables before enabling. - Recommended immediate steps: review and run the included scripts in a sandbox, confirm they only touch the skill's data/ folder, and verify that recommended features you expect are implemented. If you need the missing advertised scripts, ask the publisher for a complete release or inspect updates closely. If you will allow autonomous invocation in an agent, be aware the skill can read/write the local skill data files—ensure that is acceptable for your environment.

Type: OpenClaw Skill Name: wine-cellar Version: 1.0.0 The wine-cellar skill is a well-documented and functional tool for managing a personal wine inventory. The Python scripts (lookup_barcode.py, recommend_pairing.py, and utils.py) perform standard data processing and local JSON file I/O within the skill's directory. There is no evidence of network exfiltration, command injection, or malicious prompt instructions in SKILL.md.