ClawHub

3D Maker Companion

v1.0.2

Professional assistant for 3D printing, laser engraving, and 3D modeling workflows. Supports generating visual references for sculpting (Forger/ZBrush), crea...

⭐ 2· 283·1 current·1 all-time
by@jaulustus
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description (3D generation, sculpting references, printing guidance) aligns with the code and required MESHY_API_KEY. Minor mismatch: descriptive text claims DCC 'bridges' and direct slicer exports, but the included code only implements simple Meshy.ai API client calls (text->3D, image->3D, task status). Those integrations are described as workflow capabilities rather than implemented connectors.
ℹ
Instruction Scope
SKILL.md instructs installing the Python requests package and using scripts/meshy_client.py to set or use MESHY_API_KEY; the script reads MESHY_API_KEY from the environment or a .env file and makes HTTPS calls to api.meshy.ai. The instructions do not request unrelated files, system-wide credentials, or external endpoints beyond api.meshy.ai—however, they do instruct storing the API key to a local .env file in the skill root.
✓
Install Mechanism
There is no heavyweight install spec—SKILL.md's metadata suggests a single pip install requests command. No downloads from untrusted URLs or archive extraction are present. The provided client is pure Python with no obfuscated code.
ℹ
Credentials
Only MESHY_API_KEY is required and is used by the client as expected. Caveat: the client offers a convenience command that writes the API key to a .env file in the skill directory (persistence to disk). If you prefer not to persist credentials to disk, set the env var at runtime instead.
ℹ
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. Its only persistent side effect is creating/reading a .env file in the skill root to store the API key. Autonomous invocation is allowed (platform default) but not combined with other high-risk behaviors.
Assessment
This skill appears coherent and implements a small Meshy.ai client. Before installing: 1) Only provide a MESHY_API_KEY you trust — the skill will send requests to https://api.meshy.ai. 2) Be aware the helper can write your key to a .env file in the skill directory if you run the set-key command; if you prefer not to persist secrets to disk, set MESHY_API_KEY in the environment instead. 3) The SKILL.md advertises DCC/slicer 'bridges' but the shipped code does not implement direct engine or slicer plugins — expect the skill to generate assets via Meshy and then manually import/export to your tools. 4) The install step runs pip install requests; review that action in your environment if you restrict package installs.

Like a lobster shell, security has layers — review code before you run it.

3d-modelingvk97axn6rrmb2b26txnt7qpbc4n82jrtkMeshyvk97axn6rrmb2b26txnt7qpbc4n82jrtkbambulabvk97axn6rrmb2b26txnt7qpbc4n82jrtkd-printingvk97axn6rrmb2b26txnt7qpbc4n82jrtklaser-engravingvk97axn6rrmb2b26txnt7qpbc4n82jrtklatestvk97bcw34fr3gj2ydxmyan1c54582jkrbmakervk97axn6rrmb2b26txnt7qpbc4n82jrtkmeshyvk976mt0154v9dkrhbvf0ns8h8582k1gdreference-generationvk97axn6rrmb2b26txnt7qpbc4n82jrtkworkflowvk97axn6rrmb2b26txnt7qpbc4n82jrtk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMESHY_API_KEY

Comments