ClawHub

Formatgate

v1.0.0

Convert between JSON, YAML, and TOML formats. All 6 conversion directions supported. Round-trip safe. Useful for agents that receive data in one format and n...

⭐ 0· 54·0 current·0 all-time
by@mirni
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (format conversion) align with the included code and SKILL.md. Required binary (python) and pip packages (fastapi, uvicorn, pydantic, pyyaml) are appropriate for a small local web service that performs parsing/serialization.
✓
Instruction Scope
SKILL.md only instructs running a local FastAPI server and calling POST /v1/convert with content/input/output fields. It does not ask the agent to read arbitrary files, environment variables, or send data to external endpoints.
✓
Install Mechanism
Install spec uses PyPI packages via a pip-style 'uv' entry (fastapi, uvicorn, pydantic, pyyaml). This is a common and proportionate mechanism for a Python web service. No downloads from untrusted URLs or archive extraction were used.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The code does not access secrets or other environment data.
✓
Persistence & Privilege
The skill does not request always:true or modify other skills' configs. It runs as a normal user-started local service; autonomous invocation is allowed by platform defaults but not granted extra privileges here.
Assessment
This skill appears to do exactly what it says: a small local HTTP service for converting JSON/YAML/TOML. Before installing, note: (1) it will pip-install dependencies from PyPI — audit or pin versions if you require stricter supply-chain controls; (2) it uses tomllib (Python 3.11+) for TOML parsing, so ensure your python version is compatible; (3) the SKILL.md starts a web server on port 8008 — avoid binding to 0.0.0.0 on untrusted networks to prevent exposure; and (4) while behavior is coherent, always vet third-party packages (fastapi/uvicorn/pyyaml) for the environment where you'll run this service.

Like a lobster shell, security has layers — review code before you run it.

latestvk9777rp3fab46n7bsmc550s7f984s2a1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔄 Clawdis
Binspython

Install

uv

Comments