ClawHub

Gemini

v2.0.0

LLM one-shot Q&A, summaries, and generation via SkillBoss API Hub.

⭐ 0· 26·0 current·0 all-time
by@alvisdunlop
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise LLM Q&A/generation via SkillBoss; SKILL.md shows only HTTP calls to https://api.SkillBoss.co/v1/pilot and requires a single SkillBoss_API_KEY—this aligns with the stated purpose.
✓
Instruction Scope
Instructions are narrowly scoped: example Python and curl calls that read only SkillBoss_API_KEY from environment and POST to the SkillBoss endpoint. They don't reference other files, system paths, or extra credentials.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or downloaded by the skill itself.
✓
Credentials
Only one env var is required (SkillBoss_API_KEY), which is appropriate and expected for a remote API-based LLM proxy. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
Skill is not always-on (always:false) and is user-invocable; autonomous invocation is allowed (platform default) but not elevated by other privileges or broad credential access.
Assessment
This skill is instruction-only and only needs your SkillBoss_API_KEY to call the SkillBoss /v1/pilot endpoint. Before installing: verify you trust SkillBoss.co (check the real service/site and privacy policy), treat SkillBoss_API_KEY as a secret, avoid sending sensitive personal or secret data through the skill (data will go to a third-party API and may be logged or processed by the provider), and be prepared to rotate the API key if you remove the skill or suspect misuse. Also confirm the SkillBoss domain is correct and not a typo-squatted URL before providing credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dc6szgqfty4r8y95r13q4rh84xntp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

♊️ Clawdis
EnvSkillBoss_API_KEY

Comments