ClawHub

Dynamic UI

v1.2.0

Render tables, charts, stats, cards, and dashboards as images using HTML templates and wkhtmltoimage.

⭐ 2· 755·2 current·2 all-time
byAsh Bhat@theashbhat
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binaries (wkhtmltoimage, jq), templates, and a shell renderer script all align with a visual-rendering skill. No unrelated credentials, config paths, or binaries are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to run scripts/render.sh with JSON input (stdin or --data), produce images, and optionally save to ~/.openclaw/media/ for messaging. The script reads only the provided JSON and internal templates. It does allow user-supplied image URLs (validated to block file:, javascript:, vbscript:, and non-image data:), which means wkhtmltoimage may fetch remote images — this is expected for image embedding but is the primary external-network behavior to be aware of.
✓
Install Mechanism
Install spec uses standard package managers (apt/brew) to install wkhtmltopdf and jq. This is proportionate and expected for wkhtmltoimage usage; no downloads from arbitrary URLs or unusual extract steps are present.
✓
Credentials
The skill declares no required environment variables or credentials. The runtime script does not reference hidden env vars or external credentials. It writes temporary files and (recommended) output under the user's home media directory, which is reasonable for generated images.
✓
Persistence & Privilege
The skill is not always-on (always: false). It does not request elevated platform-wide privileges or modify other skills' configs. Autonomous invocation is permitted by default (disable-model-invocation: false) — this is the platform default and not by itself a red flag.
Assessment
This skill appears to do exactly what it says: it runs a local shell script that uses jq to parse JSON and wkhtmltoimage to convert HTML templates into PNGs. Before installing, note: (1) you must install wkhtmltoimage and jq; (2) the renderer may fetch user-supplied image URLs over the network (http/https or data:image/* are allowed), so only provide trusted image URLs if you are concerned about external network requests; (3) the skill recommends saving outputs to ~/.openclaw/media/ (a normal place for agent media); (4) if you want extra assurance, review scripts/render.sh locally (it's included) — the code is shell-based and readable. Overall the skill is internally coherent and proportionate to its purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cbqzhng37k1fxhz4h4kdmps829fvs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binswkhtmltoimage, jq

Install

Install wkhtmltoimage + jq (brew)
Bins: wkhtmltoimage, jq

Comments