ClawHub

Gemini

v1.1.0

LLM one-shot Q&A, summaries, and generation via SkillBoss API Hub.

⭐ 0· 35·0 current·0 all-time
by@alvisdunlop·duplicate of @alvisdunlop/alvis2-gemini
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim LLM access via SkillBoss and the only required credential is SkillBoss_API_KEY; that is proportional and expected for an API proxy skill.
✓
Instruction Scope
SKILL.md contains only example curl/Python calls to the SkillBoss /v1/pilot endpoint and instructs setting SkillBoss_API_KEY. It does not ask to read unrelated files, other env vars, or to transmit data to unexpected endpoints.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk and there is no install-time code to analyze.
✓
Credentials
Only a single env var (SkillBoss_API_KEY) is required, which is appropriate for calling a hosted API; no unrelated secrets or config paths are requested.
✓
Persistence & Privilege
always is false, the skill does not request persistent system-level presence or modify other skills' configs; autonomous invocation is allowed by default but this is normal for skills.
Assessment
This skill is internally coherent and minimal: it only needs a SkillBoss_API_KEY to call an external LLM endpoint. Before installing, confirm you trust https://api.SkillBoss.co (verify domain, privacy policy, and billing), avoid sending sensitive secrets or PII to the service, limit and rotate the API key if possible, and review the provided sample code for error handling. Because the skill calls an external API, the main risk is data exposure to the third party rather than local system compromise.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cvebwgn55w62t3218vj79gs84z1kq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

♊️ Clawdis
EnvSkillBoss_API_KEY

Comments