ClawHub

Dinobase

v1.0.0

Set up and query business data across 100+ sources (Stripe, HubSpot, Salesforce, etc.) via SQL. Agent-driven setup, cross-source joins, mutations.

⭐ 0· 41·0 current·0 all-time
byEmanuele Capparelli@kappa90
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description describe a CLI that syncs and queries many SaaS sources; the skill requires a 'dinobase' binary and the SKILL.md exclusively documents dinobase CLI usage. Requested binaries and CLI flags align with the stated purpose.
✓
Instruction Scope
SKILL.md instructs the agent only to run the dinobase CLI commands (init, whoami, add, auth --headless, sync, query, etc.), present auth/login URLs to the user, and ask for confirmation before mutations. It does not direct reading unrelated files or environment secrets beyond the user-supplied API keys needed to connect sources.
ℹ
Install Mechanism
Install uses an 'uv' package entry (package: dinobase) that will create a 'dinobase' binary. 'uv' is not a widely-known public installer in this report, so verify the installer source and package provenance (official release page on dinobase.ai or a trusted registry) before installing.
✓
Credentials
The skill declares no environment variables or credentials. Runtime use does involve user-provided service credentials (Stripe keys, HubSpot tokens, etc.), which is expected for this connector. There are no unexplained or unrelated credential requests in the instructions.
✓
Persistence & Privilege
The skill is not always-enabled and does not request special system-wide privileges. It expects a local CLI binary to be installed and invoked; autonomous invocation is allowed by default (normal for skills), but no additional persistent configuration or cross-skill modification is requested.
Assessment
This skill appears to be what it says: an agent wrapper for the Dinobase CLI. Before installing: (1) verify the installer source — confirm 'uv' package maps to the official dinobase release (check https://dinobase.ai or the vendor's documented install instructions); (2) prefer local-mode if you want data kept on-device and avoid sending secrets to cloud services; (3) never paste API keys into public chat — the agent will prompt you to provide keys or open OAuth URLs; (4) the agent can run the CLI autonomously by default, so if you want to limit risk run it interactively or restrict autonomous invocation for this skill. If you need more assurance about the installer, ask the skill publisher for a canonical download URL or a signed release artifact.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e9gxdfzxc84e85qafddt74n841z34

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦕 Clawdis
Binsdinobase

Install

Install Dinobase (uv)
Bins: dinobase
uv tool install dinobase

Comments