ClawHub

JubJub — Verified Media Ownership and Social Publishing

v1.1.0

Publish content across TikTok, Instagram, YouTube, Facebook, LinkedIn, Vimeo, Vimeo OTT, and Mux. Manage team workflows, collaborate with your team, and trac...

⭐ 0· 87·0 current·0 all-time
byTom McCarthy@aquaflans
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description map to the declared API surface (workspace/content/platform/launch/team tools) and the single required env var (JUBJUB_API_KEY) is appropriate for an API-backed publishing platform. Note: the skill metadata shows 'Source: unknown' and no homepage; that reduces provenance/trust but does not make the requirements incoherent with the stated purpose.
✓
Instruction Scope
SKILL.md describes calling JubJub's HTTP API (base URL and header provided) and enumerates tools and required fields. The instructions do not direct the agent to read local files, system credentials, or unrelated environment variables, nor to call unexpected external endpoints. Paid actions are handled via payment credentials supplied in the tool _meta payload (x402 or MPP) — this is within the domain of the service.
✓
Install Mechanism
No install spec and no code files — instruction-only. This minimizes disk/write risk; nothing is downloaded or installed by the skill itself.
ℹ
Credentials
Only JUBJUB_API_KEY is required and is proportional to the API integration. However, the runtime docs reference passing blockchain/payment credentials (x402 USDC or MPP) in tool call metadata for per-action billing; those are not declared env vars and would need to be supplied at call time. Users should be careful about providing payment credentials to an agent.
✓
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not request elevated or persistent system privileges and does not modify other skills or global agent settings.
Assessment
This skill appears coherent: it expects a JubJub API key and instructs the agent to call jubjubapp.com endpoints for publishing and on‑chain proof. Two practical cautions: (1) provenance is weak — the registry entry lists no homepage and an unknown source, so only install if you trust this publisher. (2) paid operations require payment credentials (x402/MPP) passed in the tool call metadata; avoid sharing long‑lived private keys or wallet seed phrases with the agent. If you need higher assurance, ask the publisher for a homepage, documentation, or an official SDK/repository before installing.

Like a lobster shell, security has layers — review code before you run it.

basevk97e1w2wzf4hgqkxeb4nsk8431837kp1contentvk97e1w2wzf4hgqkxeb4nsk8431837kp1instagramvk97e1w2wzf4hgqkxeb4nsk8431837kp1latestvk97e1w2wzf4hgqkxeb4nsk8431837kp1mcpvk97e1w2wzf4hgqkxeb4nsk8431837kp1mppvk97e1w2wzf4hgqkxeb4nsk8431837kp1onchainvk97e1w2wzf4hgqkxeb4nsk8431837kp1paymentsvk97e1w2wzf4hgqkxeb4nsk8431837kp1publishingvk97e1w2wzf4hgqkxeb4nsk8431837kp1social-mediavk97e1w2wzf4hgqkxeb4nsk8431837kp1tiktokvk97e1w2wzf4hgqkxeb4nsk8431837kp1videovk97e1w2wzf4hgqkxeb4nsk8431837kp1x402vk97e1w2wzf4hgqkxeb4nsk8431837kp1youtubevk97e1w2wzf4hgqkxeb4nsk8431837kp1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvJUBJUB_API_KEY
Primary envJUBJUB_API_KEY

Comments