ClawHub

Readdy.ai WebSite Builder

v1.0.5

This skill should be used when the user asks to "create a website", "generate a website", "build a website", "modify a website", "update my Readdy project",...

⭐ 2· 149·0 current·0 all-time
by@frankready2025
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill is presented as a Readdy.ai website builder and includes a CLI script that talks only to https://readdy.ai endpoints and a small local config store. The only minor inconsistency: the SKILL.md and scripts require a Readdy API Key, but the registry metadata does not declare any primary credential or required env var. Functionally, the requested artifacts (node, local file storage, network access to readdy.ai) match the stated purpose.
✓
Instruction Scope
SKILL.md contains strict runtime rules (must run the provided script, do not modify it, preserve user query verbatim) and documents the commands the agent should run. The script only reads/writes a single config file in the user's home (~/.openclaw/readdy.json) and communicates with readdy.ai. There are no instructions to read unrelated files, call other endpoints, or exfiltrate additional data.
✓
Install Mechanism
No install spec or remote downloads. The package is instruction-only plus two local scripts; nothing is fetched or extracted at install time. This is low-risk from an install perspective.
ℹ
Credentials
The skill legitimately requires a Readdy API Key, and the code saves it to ~/.openclaw/readdy.json (file mode 0600). However the registry metadata does not declare this credential (no primary credential or required env var), creating an administrative inconsistency the user should be aware of. No other unrelated credentials, config paths, or secrets are requested by the code.
✓
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It writes only its own credential file under ~/.openclaw and does not modify other skills or system-wide agent settings.
Assessment
This skill appears to be a straightforward CLI client for readdy.ai. Before installing: 1) Confirm you obtained the API key from https://readdy.ai/user/api-key and that you trust that site; the script will store that key at ~/.openclaw/readdy.json (file mode 0600). 2) The registry metadata does not list the API key as a required credential even though the SKILL.md and scripts require one — treat that as an administrative/metadata omission, not an additional secret request. 3) Inspect or review scripts/readdy.mjs yourself if you want to verify there are no unexpected network targets (the code uses only https://readdy.ai). 4) Be aware operations (create/modify) may run for many minutes and require network connectivity. If you are uncomfortable providing your Readdy API key, do not enable the skill; instead use the service via their web console or a separate vetted client.

Like a lobster shell, security has layers — review code before you run it.

latestvk97215e843cmwasnxrtdvw8cgd83j55f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

OSLinux · macOS · Windows
Binsnode

Comments