ClawHub

Artidrop

v1.3.5

Publish AI-generated content (HTML pages, Markdown reports, multi-file sites, dashboards, visualizations) to a shareable URL using Artidrop. Use when: user a...

⭐ 1· 130·0 current·0 all-time
byWen@wenguo17
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (publish AI-generated pages/sites) match the declared requirements: Node is required and the install spec pulls the artidrop npm package which provides the 'artidrop' CLI. No unrelated credentials, binaries, or paths are requested.
✓
Instruction Scope
SKILL.md instructs the agent to run the Artidrop CLI (publish/get/list/delete) on user-provided files or stdin and to read ARTIDROP_API_KEY only for optional authenticated features. It does not instruct the agent to read unrelated system files or exfiltrate data beyond the explicit publish action. The doc asserts uploads only occur when publish commands are run.
ℹ
Install Mechanism
Install uses the npm package 'artidrop' which is expected for a Node CLI. npm installs are standard but carry the usual registry risk (package code will be written to disk and executed). No arbitrary URL downloads or extract-from-unknown-host steps are present.
ℹ
Credentials
Only one optional env var (ARTIDROP_API_KEY) is referenced for authenticated features, which is proportional. Minor metadata inconsistency: registry shows 'Required env vars: [object Object]' (serialization bug) — the SKILL.md clarifies ARTIDROP_API_KEY is optional.
✓
Persistence & Privilege
Skill does not request 'always: true' and does not attempt to modify other skills or system-wide settings. It can be invoked autonomously (platform default), which is normal for user-invocable skills.
Assessment
This skill appears to do what it says: it installs the official Artidrop CLI and uses it to publish content. Before installing, verify the npm package and publisher (check the package page, download counts, and recent versions), and review Artidrop's privacy/terms if you will publish sensitive content. Use anonymous publishing for one-off or sensitive content; only set ARTIDROP_API_KEY if you need managing/updating artifacts. Note the registry metadata contains a minor serialization bug (shows '[object Object]' for required envs) — confirm in the SKILL.md that ARTIDROP_API_KEY is optional. If you need stronger assurance, inspect the npm package source or limit the account/API key scope used for OpenClaw.

Like a lobster shell, security has layers — review code before you run it.

latestvk97et3qz7by9fv6yq58jjsjjr5849e9x

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🚀 Clawdis
Binsnode
Env[object Object]

Install

Install Artidrop CLI (npm)
Bins: artidrop
npm i -g artidrop

Comments