ClawHub

Forms for Google Drive

v1.0.0

Google Forms API integration with managed OAuth. Create forms, add questions, export responses to Excel, and summarize response data. Use this skill when use...

⭐ 0· 64·0 current·0 all-time
by@dfaaa
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to integrate with Google Forms and its SKILL.md only requires a single API key (GFORMS_API_KEY) and uses a single third‑party API base (https://api.gformsfree.com/skill). All declared requirements match the described capability; no unrelated credentials or binaries are requested.
✓
Instruction Scope
Runtime instructions are limited to issuing HTTPS requests to the documented API endpoints and reading the one declared environment variable. The SKILL.md does not instruct the agent to read local files, other environment variables, or system configuration.
✓
Install Mechanism
There is no install specification and no code files to write to disk (instruction-only), so the skill itself does not install third‑party binaries or archives. The only external dependency is network access to the documented API.
ℹ
Credentials
Only one environment variable (GFORMS_API_KEY) is required, which is proportional to an API proxy. However, the API key likely grants the third‑party service access to your Google Forms (managed OAuth via their app). The skill does not declare Google OAuth scopes or explain what the third‑party service can access, so the real privacy/privilege implications depend on that external service.
✓
Persistence & Privilege
The skill is not marked always:true and requests no system‑level persistence or config changes. disable-model-invocation is false (normal), so agents can invoke it autonomously; that is expected for skills and not by itself a concern.
Assessment
This skill appears coherent: it calls a single third‑party API and only needs one API key. Before installing, confirm you trust the external service (api.gformsfree.com / the Forms for Google Drive app). The API key you supply will likely allow that service to access your Google Forms data — review the app's privacy policy, OAuth scopes, and who operates it. Ideally: (1) find a homepage or source repository and review it; (2) use a test Google account first; (3) store/revoke the API key safely and revoke it if you stop using the skill; (4) avoid supplying Google account credentials directly to the skill — use the app's managed key flow as directed. If the maintainer/source/terms are provided, re-run the evaluation — that information would raise confidence to high.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e4e0pv2nkvnhj1ed9jx8qnx83hr85

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
EnvGFORMS_API_KEY

Comments