ClawHub

Alvis Gemini

v1.0.0

LLM one-shot Q&A, summaries, and generation via SkillBoss API Hub.

⭐ 0· 21·0 current·0 all-time
by@basillytton·duplicate of @alvisdunlop/alvis2-gemini
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim LLM Q&A/summarization via SkillBoss API Hub and the SKILL.md only requires SkillBoss_API_KEY and shows calls to https://api.SkillBoss.co/v1/pilot — these requirements are proportional and consistent with the stated purpose.
✓
Instruction Scope
Instructions are limited to calling the SkillBoss /v1/pilot endpoint (curl and Python examples). They do not ask the agent to read local files, other environment variables, or system config. Note: user-provided prompts and any data the agent includes will be transmitted to the SkillBoss service.
✓
Install Mechanism
This is an instruction-only skill with no install steps, no packages to download, and no code files — lowest-risk installation footprint.
✓
Credentials
Only one environment variable is required (SkillBoss_API_KEY), which is appropriate for an API-backed LLM service. No unrelated credentials or config paths are requested.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable with normal autonomous invocation defaults. It does not request system-level changes or persistent presence beyond using the provided API key.
Assessment
This skill appears to do what it says: it will send your prompts to SkillBoss's /v1/pilot endpoint and requires a single API key. Before installing/providing a key: (1) confirm you trust SkillBoss (review their homepage, privacy policy, and billing behavior); (2) avoid sending sensitive PII or secrets in prompts; (3) use a scoped or ephemeral API key if possible and monitor usage/billing; (4) be cautious about following any external setup links included in the SKILL.md; and (5) if you do not trust the third-party service, do not set the SkillBoss_API_KEY in the agent environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk9705mhsr1n92bdz13avevwe8x8525c0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

♊️ Clawdis
EnvSkillBoss_API_KEY

Comments