ClawHub

Pakat Email Marketing

v1.1.2

Interact with Pakat email marketing API (new.pakat.net) - REQUIRES PAKAT_API_KEY environment variable. Use when the user wants to manage email lists, subscri...

⭐ 1· 1.8k·0 current·0 all-time
byHadi Farnoud@hadifarnoud
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the required artifacts: SKILL.md + API reference + OpenAPI describe interacting with new.pakat.net. Required binary 'curl' and the single env var PAKAT_API_KEY are appropriate and proportional for an HTTP-based API client.
✓
Instruction Scope
SKILL.md contains explicit curl examples that only call https://new.pakat.net/api/* endpoints, documents required headers and encoding rules, and warns about safe encoding to avoid shell injection. It does not instruct reading unrelated files or exfiltrating data to other endpoints.
✓
Install Mechanism
Instruction-only skill (no install spec or code). That minimizes on-disk risk; no downloads or package installs are specified.
ℹ
Credentials
The skill only asks for one secret (PAKAT_API_KEY), which is appropriate. Minor inconsistency: SKILL.md metadata declares PAKAT_API_KEY as the primary credential, while the registry summary above showed 'Primary credential: none' — likely a metadata mismatch but not a security red flag.
✓
Persistence & Privilege
Flags: always:false and normal autonomous invocation allowed. The skill does not request persistent system-wide privileges or configuration changes.
Assessment
This skill appears coherent for managing Pakat email resources and only needs your Pakat API key and curl. Before installing: ensure the API key you supply is from your Pakat account (https://new.pakat.net/customer/api-keys), avoid using overly privileged or long-lived keys if possible, do not paste the key into public logs or chat, and consider creating a dedicated API key for the agent with limited scope. Note the small metadata mismatch about the 'primary credential' in the registry — it doesn't change functionality but you may want to confirm the skill's source since 'Homepage' and 'Source' are missing from the registry entry.

Like a lobster shell, security has layers — review code before you run it.

latestvk97aknej9mhpyvmnmdjjxfmfwd81qtx9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl
EnvPAKAT_API_KEY

Comments