技能 calil-books
📦

calil-books

内容修订 r1 低风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Find Books Available at Japanese Libraries

Finding a book nearby requires checking library holdings and current loan status. This skill guides Calil API searches and turns availability responses into clear borrowing options.

支持: Claude Codex Code(CC)
📊 74 合格

使用我的智能体安装

将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "calil-books" from https://skillstore.io/skills/tahodev-calil-books.md and its manifest at https://skillstore.io/api/skills/tahodev-calil-books/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划,并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文,而不是读取完整页面时,请使用这些链接。

测试它

正在使用“calil-books”。 Illustrative scenario: summarize a completed lookup with available, checked-out, and absent branch results.

预期结果:

  • Illustrative output, not a live lookup.
  • Branch A: available to borrow.
  • Branch B: checked out; a reservation link was provided.
  • Branch C: no holdings. This is a normal result, not an API failure.

正在使用“calil-books”。 Illustrative scenario: the API continues processing after the polling limit.

预期结果:

Illustrative output: The library lookup did not finish within the polling limit. No final availability result is available. Please try again later.

正在使用“calil-books”。 Illustrative scenario: a branch reports holdings without a clear loan status.

预期结果:

Illustrative output: The branch holds the book, but borrowing availability is unknown. Contact the library before visiting.

安全审计

低风险
v1 • 2026/10/13 打开版本化报告

All 42 static findings are benign Markdown formatting, expected Calil URLs, readable Japanese prose, library identifiers, or a fixed documentation link. No evidence found of prompt injection, malicious execution, or unauthorized data transmission in SKILL.md. One low-severity semantic finding concerns API keys exposed through expanded curl command arguments.

1
已扫描文件
120
分析行数
0
复核项
0
已忽略误报

已确认安全问题 (1)

低
API Key Exposure Through Command Arguments
The curl examples expand CALIL_APPKEY into URL arguments. The key can appear in process listings or captured command logs despite the guidance to keep credentials private.
Shell expansion places the key directly in curl's URL argument. Actual disclosure depends on process visibility and logging; no evidence found of deliberate exfiltration.
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/tahodev-calil-books/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-calil-books/security.svg)](https://skillstore.io/skills/tahodev-calil-books?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/tahodev-calil-books?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-calil-books/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/tahodev-calil-books.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

tahodev. (2026). calil-books security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-calil-books/audits/1

BibTeX 引用

@techreport{tahodev-tahodev-calil-books-2026, author = {tahodev}, title = {calil-books security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/tahodev-calil-books/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "calil-books security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "tahodev" date-released: "2026-10-13" url: "https://skillstore.io/skills/tahodev-calil-books/audits/1" identifiers: - type: other value: "skillstore:tahodev-calil-books:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
85
可维护性
87
内容
65
社区
83
规范符合性

你能构建什么

Find a Borrowable Book Nearby

A local reader supplies an ISBN and municipality to identify libraries reporting available copies.

Compare Course Reading Availability

A student checks several ISBNs across selected library systems and separates available copies from checked-out or absent holdings.

Support Regional Reading Research

A researcher compares holdings across municipalities while recording uncertain statuses and respecting caching limits.

试试这些提示

Discover Local Libraries
Find libraries in [prefecture] and [municipality] using Calil. Show their formal names and library system identifiers.
Check One Book
Check ISBN [ISBN] in [library system]. Report branch-level loan status and any reservation link returned by Calil.
Compare Several Books
Compare ISBNs [ISBN list] across [library systems]. Group results into available, unavailable, absent, and uncertain holdings.
Handle Asynchronous Regional Searches
Find library systems in [region] and check [ISBN list]. Poll at least two seconds apart, stopping after ten attempts or two minutes. Distinguish API failures from absent holdings. Never display the API key.

最佳实践

  • Keep CALIL_APPKEY private and avoid exposing expanded credential URLs in process arguments or logs.
  • Confirm the ISBN and region before searching; discover regional library identifiers instead of assuming Tokyo defaults.
  • Request plain JSON, enforce timeouts and polling limits, and follow Calil usage and caching terms.

避免

  • Pasting API keys into chats, source files, commits, or visible command logs.
  • Polling indefinitely, ignoring request limits, or permanently storing API results without checking the terms.
  • Treating absent holdings as an API error or uncertain holdings as guaranteed borrowing availability.

常见问题

Do I need an API key?
Yes. Create a Calil account and obtain a free API key from its dashboard. Keep the key private.
Which AI tools are supported?
The skill is listed for Claude, Codex, and Claude Code. Live lookups also require network access and an HTTP-capable execution environment.
Can I search by book title?
The documented holdings workflow requires a 10-digit or 13-digit ISBN. The skill does not provide title-to-ISBN discovery.
Is the skill limited to Tokyo?
No. It can discover library systems in other Japanese regions. Tokyo defaults apply only when the user lives there and specifies no libraries.
Can it reserve or purchase a book?
It can show reservation links returned by Calil, but it does not complete reservations. Purchases and ebooks are outside scope.
Why can an availability lookup take time?
Calil checks holdings asynchronously. The skill polls with the returned session and stops after ten attempts or approximately two minutes.

开发者详情

作者

tahodev

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

引用

7f17813fb6af1acc7d8fd3fb5f05480f5be52783

维护新鲜度

2026/10/13

使用量

0 次下载 · 0 次浏览

文件结构

📄 SKILL.md

tahodev 的更多技能

查看全部
查看全部