ClawHub

QuiverAI

v1.0.0

Generate and vectorize SVG graphics via the QuiverAI API (Arrow model). Use when the user asks to create logos, icons, or illustrations as SVG, convert raste...

⭐ 0· 339·0 current·0 all-time
by@charmmm718
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, endpoints, and example SDK usage all describe generating and vectorizing SVGs via QuiverAI. The single required environment variable (QUIVERAI_API_KEY) is exactly the credential needed to call the documented API.
✓
Instruction Scope
SKILL.md only contains curl/SDK examples and parameter/response docs for api.quiver.ai; it does not instruct reading unrelated files, accessing other environment variables, or sending data to third-party endpoints beyond the QuiverAI API.
✓
Install Mechanism
There is no install spec and no code files (instruction-only). The doc mentions an optional public npm SDK (@quiverai/sdk) but does not download or execute arbitrary code — this is low-risk and proportionate.
✓
Credentials
Only QUIVERAI_API_KEY is required and declared as the primary credential. That single key is appropriate for an API-integration skill; there are no unrelated secrets or excessive env requirements.
✓
Persistence & Privilege
always is false, no config paths or system modifications are requested, and the skill does not ask to persist beyond normal operation. disable-model-invocation is default (false) which is expected and not flagged alone.
Assessment
This skill appears internally consistent and low-risk because it only documents calls to api.quiver.ai and requires a single QuiverAI API key. Before installing: 1) Confirm you trust Quiver.ai and understand their billing (requests may consume credits). 2) Treat QUIVERAI_API_KEY like any secret — provide only to agents you trust, rotate it if shared, and avoid embedding it in public places. 3) Be aware that any raster images you send will be uploaded to the QuiverAI service (check their privacy/terms if images are sensitive). 4) If you prefer, create a limited/throwaway API key for testing. The scanner had no code to analyze (instruction-only), so disk execution risk is low — but runtime network calls to the QuiverAI API will occur when the skill is used.

Like a lobster shell, security has layers — review code before you run it.

latestvk974304j7pfavxh9dshc5jt3y581xre9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖋️ Clawdis
EnvQUIVERAI_API_KEY
Primary envQUIVERAI_API_KEY

Comments