peekmd
v1.0.3Create and share rendered markdown web pages via API with optional TTL, supporting rich formatting, auto-expiring links, and burn-after-read deletion.
⭐ 0· 92·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe a service that renders and shares markdown. The SKILL.md contains concrete API endpoints and usage that match that purpose. The skill requests no extra binaries, env vars, or installs — consistent with a simple API wrapper.
Instruction Scope
Instructions only direct the agent to send markdown to the peekmd.peekmd.workers.dev endpoints and to call burn/health/pricing endpoints. This stays within the declared purpose. However, the runtime instructions explicitly instruct the agent to transmit arbitrary markdown (up to 500 KB) to an external third-party endpoint; the SKILL.md also asserts 'no logging' and other privacy guarantees that cannot be verified from the instruction file alone. Agents following these instructions will exfiltrate any content they are given to that external URL, so the skill must not be used to render secrets or PII.
Install Mechanism
There is no install spec and no code files — lowest-risk model for local execution. Nothing is written to disk by the skill itself.
Credentials
The skill declares no required environment variables or credentials. It documents optional Authorization (Stripe) and X-PAYMENT headers for paid tiers — reasonable and proportional for a remote API. The instructions do not try to read local env vars or config paths.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skill/system configs. Autonomous invocation is allowed by default (normal) and should be considered since calls will reach an external network endpoint.
Assessment
This skill is a thin, instruction-only client for an external rendering service. Before installing or using it, consider: (1) Any content you pass (markdown) will be sent to peekmd.peekmd.workers.dev — do NOT send secrets, passwords, or PII. The SKILL.md's privacy claims ('no logging', 'data stays in Cloudflare') are assertions you should verify by reviewing the linked GitHub repo or the service owner; they are not enforced by the skill. (2) Paid tiers require you to provide payment credentials or API keys to the third party — treat those keys as sensitive and prefer short-lived keys or a self-hosted instance if you need stricter control. (3) Because this is instruction-only, no local code runs, but the agent will perform network calls autonomously when invoked; limit agent permissions or user prompts if you want manual approval before sending content. If you need stronger guarantees, review the referenced GitHub repo and consider self-hosting the service.Like a lobster shell, security has layers — review code before you run it.
latestvk978vn1gs9qhp6swaxar7fknqh83dj2r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.