Neonous
v1.0.4Operate the Neonous AI agent platform — create agents, chat, manage tools, run workflows.
⭐ 0· 193·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (operate Neonous agents, chat, workflows) match the declared requirements: NEONOUS_API_KEY, NEONOUS_URL, and curl/jq. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs only about calling Neonous endpoints (listing/creating/updating/deleting agents, chat, workflows). It instructs sending message histories and agent configs to Neonous — expected for this functionality, but that does transmit user content to the remote service. The docs also advise using the web UI for visual/secret tasks.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by the skill itself.
Credentials
Requested env vars (NEONOUS_API_KEY, NEONOUS_URL) and required binaries are proportional and necessary for calling the Neonous API. The primary credential is NEONOUS_API_KEY as declared; no other secret env vars are requested.
Persistence & Privilege
Skill is not force-included (always: false) and is user-invocable. It does not request persistent system privileges or access to other skills' configs.
Assessment
This skill is internally consistent: it will use the NEONOUS_URL and your NEONOUS_API_KEY to call Neonous API endpoints via curl/jq. Before installing, confirm the NEONOUS_URL is the legitimate Neonous domain you trust and provide a key with the minimum scope needed (rotate and revoke if uncertain). Remember that chat calls and agent configs will be transmitted to the remote service, so avoid sending sensitive secrets in prompts or agent instructions unless you trust Neonous' storage policies. If you need stricter isolation, prefer using the web UI as the SKILL.md recommends or create a scoped API key for automation. If anything about the publisher (owner ID or homepage) looks unfamiliar, verify the vendor documentation before use.Like a lobster shell, security has layers — review code before you run it.
latestvk974mz8vg4j1831rep66gp68fh82tjfx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
Binscurl, jq
EnvNEONOUS_API_KEY, NEONOUS_URL
