Clawhub Renderkit Skill
v1.4.0Render structured data as beautiful hosted web pages, and create hosted forms for data collection, using the RenderKit API. Use this for visual pages, survey...
⭐ 2· 819·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the declared requirements: the skill only needs curl and RENDERKIT_API_KEY and its SKILL.md exclusively describes HTTP calls to https://renderkit.live endpoints for rendering pages and creating forms.
Instruction Scope
Instructions are narrowly scoped to issuing curl requests to renderkit.live and using the RENDERKIT_API_KEY. They do allow sending arbitrary content to the remote API (expected for this use) — this means the agent could transmit sensitive data if asked to render it, so users should avoid sending secrets or PII to the service.
Install Mechanism
No install spec and no code files (instruction-only); nothing is written to disk and no third-party packages are fetched, which minimizes install-time risk.
Credentials
Only a single API credential (RENDERKIT_API_KEY) is required and declared as the primary credential. That is proportional for a hosted-API integration and matches the runtime instructions.
Persistence & Privilege
The skill does not request always:true and uses normal autonomous invocation defaults. It does not request system config paths or other skills' credentials and has no install steps that would give it persistent system presence.
Assessment
This skill is internally consistent, but before installing: 1) verify renderkit.live is a trusted provider and review its privacy/data-retention policy because anything you send (including user content) will be stored/served by that service; 2) avoid sending secrets or highly sensitive PII to the RenderKit API; 3) use a limited-scope API key if the service supports it and rotate/revoke keys if you stop using the skill; 4) note minor docs inconsistencies in SKILL.md (a couple example paths differ), so double-check the official API docs at https://renderkit.live/docs.md if you need exact endpoints; and 5) since the source/publisher is unknown, consider testing with a throwaway account/key first.Like a lobster shell, security has layers — review code before you run it.
latestvk970kw038wca7t2atcd9k15kf581vewystablevk979bfwa54crg6hy581srhqyb1813bkp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl
EnvRENDERKIT_API_KEY
Primary envRENDERKIT_API_KEY
