ClawHub

Gemini

v1.0.0

LLM one-shot Q&A, summaries, and generation via SkillBoss API Hub.

⭐ 0· 15·0 current·0 all-time
by@basillytton·duplicate of @alvisdunlop/alvis2-gemini
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description (LLM Q&A/summaries via SkillBoss) lines up with the SKILL.md examples and the single required env var. Minor note: the registry metadata lists no 'primary credential' even though SkillBoss_API_KEY is required; this is more of a metadata omission than a functional mismatch.
ℹ
Instruction Scope
Instructions only show sending prompts to https://api.SkillBoss.co/v1/pilot via HTTP (Python/curl examples). There are no instructions to read local files, other env vars, or system state. Important: all user prompts/results are transmitted to the external SkillBoss endpoint, so sensitive data will leave the host.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install. This is the lowest-risk install pattern.
✓
Credentials
Only a single environment variable (SkillBoss_API_KEY) is required, which is proportional for a third-party API-based LLM proxy. No unexpected credentials or config paths are requested.
✓
Persistence & Privilege
Skill is not set to always:true and uses normal autonomous invocation settings. It does not request modification of other skills or system-wide configuration.
Assessment
This skill simply proxies prompts/responses through SkillBoss. Before installing, verify you trust https://api.SkillBoss.co (privacy, logging, retention, and billing), restrict the API key's permissions if possible, avoid sending sensitive or regulated data through the skill, and rotate/revoke the SkillBoss_API_KEY if you stop using the skill. The registry metadata omission of a 'primary credential' is a minor bookkeeping issue but does not change functionality.

Like a lobster shell, security has layers — review code before you run it.

latestvk977ehq1cqmh9c4by6mamsh5eh8521m1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

♊️ Clawdis
EnvSkillBoss_API_KEY

Comments