ClawHub

Formora Survey

v1.1.2

Create, edit, publish, and distribute Formora AI surveys, polls, and forms. Supports organic channels (Telegram, Email, QR code, X) and live paid ads (Google...

⭐ 1· 82·0 current·0 all-time
bydavid l euler@davideuler
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (create/edit/publish/distribute surveys) match the declared required env (FORMORA_API_KEY) and the included script which talks to api.formora.dev. Optional environment variables correspond to the listed distribution channels (Telegram, Email, X) and paid-ads integrations (Google/Meta). Nothing requested appears unrelated to the skill's stated purpose.
ℹ
Instruction Scope
SKILL.md strictly prescribes create->preview->confirm->publish->distribute workflow and requires explicit user confirmation before publishing. It documents distribution and ads flows and references local ads state storage. The instructions call the bundled CLI (scripts/formora.py) which makes network requests and can invoke external tools (e.g., 'himalaya' for email via subprocess). This use is expected for the described features but worth noting because optional channels may trigger external command execution and network calls when configured.
✓
Install Mechanism
No install spec — instruction-only with a bundled script. Nothing is downloaded or written to disk by an installer. Risk from installation mechanism is minimal; runtime will write an ads_state JSON ledger to a local path if ads features are used.
✓
Credentials
Only one required env (FORMORA_API_KEY) is declared and used for API calls to api.formora.dev. Additional env vars are optional and clearly tied to distribution/ads functionality. No unrelated secrets are required by default.
✓
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges. It stores an ads ledger in a local path (configurable via FORMORA_ADS_STATE_PATH) but does not modify other skills or global agent settings.
Assessment
This skill appears coherent with its stated purpose. Before installing, consider: (1) the required FORMORA_API_KEY will be sent to api.formora.dev—confirm you trust that service; (2) optional tokens (Telegram, X, Google/Meta ads) are only needed for those features—do not set them unless you want the skill to post/send on your behalf; (3) the script may call external tools (e.g., himalaya) via subprocess when email or other channels are used—review the script if you have strict host policies; (4) ads state is persisted to a local JSON file (FORMORA_ADS_STATE_PATH) so check its location and contents if you use paid-ads features. If you do not configure distribution or ads envs, the skill's footprint is limited to calls to the Formora API.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cds8cmh8pp7c9kj8ypqwmdn83xaya

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
EnvFORMORA_API_KEY

Comments