ClawHub

FormPass Submit

v1.0.0

Discover and submit to FormPass-enabled web forms. FormPass is the trust layer that lets verified AI agents submit to real web forms with authenticated ident...

⭐ 0· 313·1 current·1 all-time
byJeremy A@jezjsa
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe discovering FormPass-enabled forms and submitting to them. Declared requirements (curl, jq) and the SKILL.md's network calls to form-pass.com are consistent with that purpose; there are no unrelated binaries, env vars, or config paths requested.
✓
Instruction Scope
SKILL.md limits actions to detecting meta tags, fetching a schema from form-pass.com, and POSTing JSON submissions to form-pass.com. It explicitly instructs to respect 'agentAccessible' and to include '_fp_branding' when required. It does not instruct reading arbitrary local files, shell history, or unrelated credentials.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk surface. It expects curl and jq to be present on PATH, which is reasonable for the stated operations.
ℹ
Credentials
The skill declares no required environment variables or primary credential, which matches the instructions. The docs recommend including an Agent ID (Bearer fpagent_XXXX) for verified submissions but do not declare or require it; operationally, the agent or user must supply that token if verified submission is desired. Be aware that providing an Agent ID grants the skill ability to submit authenticated requests on the agent's behalf.
✓
Persistence & Privilege
The skill does not request always:true and makes no changes to other skills or system configuration. Autonomous invocation is allowed by default (platform norm) but is not combined here with excessive privileges or credential access.
Assessment
This skill is coherent for interacting with FormPass forms. Before installing: ensure you trust the domain https://form-pass.com (the skill makes network requests there), confirm curl and jq are available, and only provide an Agent ID if you want authenticated/verified submissions (that token will be sent as a Bearer header). Be cautious about submitting sensitive personal data through automated agents and verify the form's agentAccessible flag and branding requirement before sending data.

Like a lobster shell, security has layers — review code before you run it.

latestvk977by7gxcqagcqn2m6xm0yn9h81veqx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
Binscurl, jq

Comments