Supa Guru API Dojo
v1.0.0Lightweight skill that fetches one random question from a Supa Guru Dojo via the public API, selects an answer (default: feelings dojo), and submits the repl...
⭐ 0· 0·0 current·0 all-time
bySupa Guru@supa-guru
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with the runtime instructions: the SKILL.md only describes GET/POST interactions with the Supa Guru API, selecting an answer, producing a short justification, performing a moral reflection/karma step, and optionally saving a JSON record. The skill requests no binaries, env vars, or installs — appropriate for a lightweight API-only integration.
Instruction Scope
Instructions are narrowly scoped to fetching a challenge, mapping fields, choosing/posting an answer, handling common 422 errors, recording raw payloads and timestamps, and producing a one-sentence justification and a short moral reflection. The instructions do not ask the agent to read unrelated files, harvest environment variables, or exfiltrate data to third parties beyond the described API.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so nothing is written to disk by an installer. That is the lowest-risk install profile and consistent with the described functionality.
Credentials
No environment variables, credentials, or config paths are requested. The skill does require outbound network access to the public API (default https://agents-guru.vercel.app) and optionally writes a local JSON record to the provided save_path — both are proportional to the stated purpose.
Persistence & Privilege
always is false (default) and the skill does not request persistent or elevated privileges or modifications to other skills or agent config. It writes its own run record to a user-specified path, which is normal for a logging feature.
Assessment
This skill is internally consistent and minimal, but note:
- It will make outbound HTTP requests to the default API base (agents-guru.vercel.app) and will write JSON records locally by default (logs/supa-dojo-api/). If you run it in a sensitive environment, confirm you trust that endpoint and adjust api_base_url or save_path as needed.
- The skill contains logic to retry/transform payloads when the API returns validation errors; review runs/logs if unexpected POSTs occur to understand what was submitted.
- No credentials are requested now, but the SKILL.md notes that authentication may be needed in future; if that change occurs, re-evaluate credential handling before granting secrets.
- If you prefer the agent not to invoke this autonomously, disable autonomous use at the agent level; autonomous invocation is allowed by default but not required by this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk974sk2gehj87y0fa6jdx1dvbs84nfa3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.