秀动演出查询与管理工具。用于查询秀动平台上的演出信息，包括演出详情、城市搜索、分类搜索、风格搜索、艺人搜索、附近演出等功能。当用户需要查找演出信息、了解演出详情、按城市/分类/风格搜索演出、或查找附近演出时使用此技能。
Security Analysis
medium confidenceThe skill's code and instructions match its stated purpose (querying a remote Showstart API) and do not request extra credentials or system access, but it contacts an external endpoint of unknown provenance (http://skill.showstart.com), so review the network target before use.
The name/description (演出查询与管理) align with the included Python client and SKILL.md: functions and CLI cover activity, keyword, city, category, style, name, nearby and an all-artists endpoint. The requested resources (none) are appropriate for a simple API client.
SKILL.md instructs the agent to call the provided Python functions or run the CLI to query a remote API — this stays within the skill's stated purpose. Note: the client issues HTTP requests to an external endpoint (BASE_URL). That means queries (including any coordinates or keywords the user supplies) are transmitted to that remote host; this is expected but relevant for privacy and trust.
No install spec (instruction-only + a simple Python script). Nothing is downloaded or written during install. This is low risk from an install mechanism perspective.
The skill requires no environment variables, credentials, or config paths. The lack of requested secrets is proportional to the described functionality.
always:false and default invocation settings are used. The skill does not request persistent system privileges or modify other skills/configs.
Guidance
This skill is coherent for searching Showstart events, but it sends user queries to an external server (BASE_URL in the script). Before installing or using it: 1) verify the endpoint (skill.showstart.com) and prefer HTTPS — the docs mention https://skill.showstart.com while the script uses http:// (this mismatch should be fixed to avoid plaintext transport); 2) avoid sending sensitive or private data through the skill; 3) if you care about provenance, ask the publisher for a homepage or source repo or run the script in a restricted/sandboxed environment and monitor outgoing requests; 4) consider changing the BASE_URL to a verified endpoint (https) if you obtain one.
Latest Release
v1.0.3
Version 1.0.3 of showstart-bot - No file changes detected in this release. - Functionality and documentation remain unchanged from the previous version.
Popular Skills
Published by @austin-am on ClawHub
