ClawHub

SeggWat CLI

v0.17.4

Use the SeggWat CLI to manage feedback, projects, and ratings from the terminal. Trigger this skill whenever the user wants to collect, triage, query, or aut...

⭐ 0· 105·0 current·0 all-time
by@hauju
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The SKILL.md describes a CLI for managing feedback, projects, and ratings and all commands, auth methods, and config paths align with that purpose. Minor metadata mismatch: the registry lists no homepage but the docs reference https://seggwat.com — this is consistent with the tool but the registry metadata could be incomplete.
✓
Instruction Scope
Runtime instructions stay within the stated domain: installing the CLI, authenticating (API key or OAuth), running CRUD and stats commands, and caching tokens at ~/.config/seggwat/tokens.json. The doc references use of SEGGWAT_API_KEY and SEGGWAT_API_URL as optional flags/env vars; it does not instruct the agent to access unrelated files or secrets.
ℹ
Install Mechanism
The skill is instruction-only (no install spec) but recommends installing via 'cargo install' or a remote shell installer hosted at https://seggwat.com/static/install.sh. Fetching and running a remote install script is a common convenience but carries higher risk than a reviewed package—verify the script and prefer pinned releases or installing from a trusted package source.
✓
Credentials
The only environment variables mentioned are SEGGWAT_API_KEY and SEGGWAT_API_URL (and token caching path). Those are appropriate and proportionate for a CLI that authenticates to a feedback service. The registry lists no required env vars; the SKILL.md uses them as optional/authenticated usage, which is reasonable.
✓
Persistence & Privilege
No elevated privileges requested. The skill does not set always:true, does not request system-wide config changes, and only references storing tokens under the user's config directory (~/.config/seggwat), which is typical for a CLI.
Assessment
This skill appears coherent for a SeggWat CLI: it documents installation, API key auth, and commands for feedback and ratings. Before installing or running the provided installer script: inspect https://seggwat.com/static/install.sh (avoid piping unknown scripts directly into a shell), prefer installing via cargo or a pinned release if possible, and only provide a scoped API key for CI (use least privilege). Note the registry metadata omits a homepage but the SKILL.md references seggwat.com — verify you trust that domain. If you use CI, store SEGGWAT_API_KEY in your pipeline secrets and rotate/revoke tokens when no longer needed.

Like a lobster shell, security has layers — review code before you run it.

latestvk973yny6jh7svhn0gpsef8r1vn83akj1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments