kshern
v1.0.1Use the Context Hub chub CLI to fetch current third-party SDK, API, and cloud-service documentation before writing, modifying, or reviewing integration code....
⭐ 0· 165·0 current·0 all-time
by@kshern
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md consistently describes using the Context Hub 'chub' CLI to search and fetch third‑party docs, which matches the skill description. Minor inconsistencies: the package name metadata (kshern) and slug (use-chub-cli) differ, the SKILL.md assumes availability of 'chub' (or a repo-local Node entrypoint) but the skill declares no required binaries. These are plausibility/packaging omissions rather than functional mismatches.
Instruction Scope
Instructions stay within the stated purpose (search, fetch, selectively load docs, annotate, and optionally send feedback). Two things to note: (1) the guide refers to using a repository-local entrypoint (node ./cli/bin/chub), which implies reading repository layout and invoking Node — the skill does not declare Node as a required binary; (2) the 'chub annotate' and 'chub feedback' commands can write local annotations and (with approval) send feedback upstream, so the agent may create or modify files in the project and may contact Context Hub endpoints when running the CLI.
Install Mechanism
There is no install spec and no code files executed by the skill itself. This is instruction-only, which is low-risk from an install/execution standpoint.
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md also does not instruct the agent to read secrets or unrelated environment variables.
Persistence & Privilege
The skill is not force-enabled (always: false). It may instruct the agent to write local annotations (chub annotate) which will persist in the repository; it also includes guidance around sending feedback but requires user approval. These are expected for a documentation‑fetching workflow but you should be aware the agent could modify repo files when running the CLI.
Assessment
This skill is largely coherent for its purpose, but before installing consider: (1) confirm you have or trust the 'chub' CLI and Node on machines where the agent will run — the SKILL.md expects them though they are not listed as requirements; (2) understand that running chub can write annotations to the repository (chub annotate) and may contact Context Hub endpoints — only allow feedback commands if you approve sending data upstream; (3) the skill source/homepage is not provided here; if you need stronger assurance, review the upstream Context Hub repo referenced in the SKILL.md and inspect the chub CLI implementation and network behavior before enabling autonomous runs. If you don't want the agent to modify your repository, restrict its file-write permissions or run the skill in a sandboxed workspace.Like a lobster shell, security has layers — review code before you run it.
latestvk97f2175b14s2rqymbfv148wnd82tpgh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.