ClawHub

ragora

v1.0.1

Use Ragora MCP tools and REST API to discover, search, and synthesize answers from knowledge bases. Trigger when the user asks for grounded answers from Ragora collections, cross-collection comparison, source-backed summaries, due diligence research, or verification using marketplace data.

⭐ 2· 917·0 current·0 all-time
by@mregmi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested resources and behavior. The skill only declares RAGORA_API_KEY as required and documents MCP/REST endpoints consistent with Ragora integration; there are no unrelated credentials, binaries, or config paths requested.
✓
Instruction Scope
SKILL.md instructs the agent to use Ragora MCP tools and REST endpoints (health checks, collections, search, billing) and to include source attribution and error handling. It does not instruct reading local files, scanning unrelated env vars, or sending data to endpoints outside the Ragora domains documented (mcp.ragora.app, api.ragora.app, ragora.app). It also explicitly warns not to print API keys.
✓
Install Mechanism
No install specification or downloaded code — instruction-only skill. This minimizes disk/write risk and there are no external archives or installer URLs to inspect.
✓
Credentials
Only one environment secret (RAGORA_API_KEY) is required, which is proportional and expected for an API-backed knowledge-base integration. The SKILL.md does not attempt to access other environment variables or unrelated credentials.
✓
Persistence & Privilege
Skill is not always-enabled, does not request system-wide changes, and is instruction-only (no code that would persist or modify other skills). The default agent autonomy (disable-model-invocation=false) is unchanged and expected for skills.
Assessment
This skill is coherent and asks only for a Ragora API key. Before installing: ensure the RAGORA_API_KEY you provide is for the account you expect and has appropriate scope, store it in a secret manager (not in plaintext), and monitor billing/credits for pay-per-use marketplace collections. Remember that using this skill will send user queries and retrieved content to Ragora endpoints (mcp.ragora.app / api.ragora.app), so avoid sending sensitive secrets or private data to be searched unless you trust the service and have appropriate data-handling agreements. Rotate keys if you stop using the skill and review access logs on your Ragora account if available.

Like a lobster shell, security has layers — review code before you run it.

latestvk97df4xced5e347443gkjz1nbx80zecy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔎 Clawdis
EnvRAGORA_API_KEY
Primary envRAGORA_API_KEY

Comments