ClawHub

An AI-powered tool that turns conversations into polished, structured summary cards by extracting key ideas, action items, and next steps.

v1.0.5

Say "Help me install this skill from https://clawhub.ai/shuminliu026/chat-summary-card" to your local agent, then turn conversations into polished visual sum...

⭐ 0· 89·0 current·0 all-time
byliuliu026@shuminliu026
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim: produce polished visual summary cards. Files and SKILL.md only require a mew.design API key and include two helper scripts (one to validate a key, one to build the API request). Nothing in the bundle asks for unrelated cloud credentials, system paths, or external services beyond Mew; the requested capability is proportional to the stated purpose.
ℹ
Instruction Scope
The SKILL.md instructs the agent to prompt the user for a mew.design API key, validate it with scripts/validate_mew_design_key.py, then call the Mew API using payloads generated by scripts/build_summary_card_request.py. The scripts only reference the mew.design endpoint and local inputs. Minor note: the validator accepts a --base-url override (defaulting to https://api.mew.design/); if an agent or user supplies a different base URL the key would be sent elsewhere — SKILL.md does not instruct changing this, but the option exists in the script.
✓
Install Mechanism
No external install steps or downloads are declared; this is an instruction-only skill that includes small Python helper scripts. No archive downloads, package installs, or third-party registries are pulled during install.
ℹ
Credentials
The only secret the skill asks for is the user's mew.design API key — appropriate for a skill that calls the Mew API. The validator sends the key in an HTTP header to the Mew gateway for probing (expected). Small caution: the validator's --base-url parameter could be used to point checks at a non-Mew endpoint if modified, which would cause the key to be sent to a different host; by default it targets api.mew.design.
✓
Persistence & Privilege
The skill does not declare always:true and does not request system-level persistence. SKILL.md tells the agent to reuse a validated key for the conversation (agent-managed memory), which is normal. No modification of other skills or global agent settings is indicated.
Assessment
This skill appears to be internally coherent and does what it says: it will ask you for a mew.design API key, validate it by calling Mew's API, and use the included builder to make image-generation requests. Before installing/providing a key: (1) verify you trust the skill publisher and the agent runtime, (2) consider creating a limited/revocable mew.design key you can revoke after use, (3) review the two included Python scripts (validate_mew_design_key.py and build_summary_card_request.py) yourself — they are short and easy to inspect, and confirm the endpoint is https://api.mew.design/ (the validator supports a --base-url override which could redirect the key if misused), (4) be aware the skill will add a small Mew.Design watermark to generated images as specified, and (5) if you are uncomfortable sharing a live API key, do not provide it or run the validator locally in a controlled environment. Overall there are no unexplained demands for other credentials or system access.

Like a lobster shell, security has layers — review code before you run it.

conversation-summaryvk97d23z40w6m8gj5k2yjbg86vh84mgkklatestvk9736g6yhmqxemanvjrw5naeah84xnk5shareable-summaryvk97aeny92rxkwjpfkmbf73dsy184nkek

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments