Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Native Airtable

v0.1.0

Read Airtable bases, tables, and records directly via the Airtable API. Use when you need spreadsheet/database data from Airtable. Calls api.airtable.com dir...

2· 650·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for codeninja23/native-airtable.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Native Airtable" (codeninja23/native-airtable) from ClawHub.
Skill page: https://clawhub.ai/codeninja23/native-airtable
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: AIRTABLE_PAT
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install native-airtable

ClawHub CLI

Package manager switcher

npx clawhub@latest install native-airtable
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included CLI script and required env var. The skill only needs python3 and an Airtable PAT (AIRTABLE_PAT) to call api.airtable.com, which is exactly what a native Airtable reader should require.
Instruction Scope
SKILL.md instructs the agent to set AIRTABLE_PAT and run the provided script under /mnt/skills/user/.... The script only reads AIRTABLE_PAT, makes HTTPS calls to api.airtable.com, and prints responses to stdout. It does not read other system files, config paths, or send data to external endpoints beyond api.airtable.com.
Install Mechanism
No install spec is provided (instruction-only with a bundled script) and the only runtime dependency is python3. No downloads, package installs, or third-party installers are requested.
Credentials
The skill declares a single required environment variable AIRTABLE_PAT (also primaryEnv). That matches the functionality and is proportionate; no unrelated secrets or multiple credentials are requested.
Persistence & Privilege
The skill is not forced as always:true and is user-invocable. It does not attempt to modify other skills or system-wide settings. Autonomous invocation remains possible (platform default) but is not combined with any extra privileges.
Assessment
This skill appears to do exactly what it claims: call api.airtable.com using a Personal Access Token (AIRTABLE_PAT) and print results. Before installing, consider: - Use a least-privilege PAT (scopes data.records:read and schema.bases:read and limit the bases it can access). If possible create a token that only covers the bases the agent must read. - The script prints record data to stdout; anything the agent does with that output (logging, forwarding) is your responsibility. Don’t provide a PAT that exposes unrelated sensitive bases. - The code has minor correctness issues (search formula formatting and fields handling) and does not sanitize user-supplied formula/query strings — avoid running untrusted queries if you’re worried about unexpected Airtable formula behavior. - If the PAT is ever exposed or you stop using the skill, revoke the token in your Airtable account. Overall this skill is internally consistent and low-risk, but follow standard secret-management practices and review output handling in your agent environment.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspython3
EnvAIRTABLE_PAT
Primary envAIRTABLE_PAT
latestvk97e3s2df3wz20zfqvaxfvt62h81rveg
650downloads
2stars
1versions
Updated 7h ago
v0.1.0
MIT-0

Airtable

Read bases, tables, and records directly via api.airtable.com.

Setup (one-time)

  1. Go to https://airtable.com/create/tokens
  2. Click + Create new token, give it a name
  3. Add scopes:
    • data.records:read
    • schema.bases:read
  4. Under Access, select which bases to grant access to (or all)
  5. Copy the token — it starts with pat
  6. Set the environment variable:
    AIRTABLE_PAT=pat_your_token_here
    

Commands

List all accessible bases

python3 /mnt/skills/user/airtable/scripts/airtable.py list-bases

List tables in a base

python3 /mnt/skills/user/airtable/scripts/airtable.py list-tables <base_id>

List records in a table

python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "Table Name"
python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "Table Name" --limit 50

Filter records with a formula

python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "Tasks" --filter "{Status}='Done'"
python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "Contacts" --filter "NOT({Email}='')"

Filter to specific fields only

python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "People" --fields "Name,Email,Company"

Use a specific view

python3 /mnt/skills/user/airtable/scripts/airtable.py list-records <base_id> "Tasks" --view "Active Tasks"

Get a specific record

python3 /mnt/skills/user/airtable/scripts/airtable.py get-record <base_id> "Table Name" <record_id>

Search records

python3 /mnt/skills/user/airtable/scripts/airtable.py search-records <base_id> "Contacts" "Smith"
python3 /mnt/skills/user/airtable/scripts/airtable.py search-records <base_id> "Contacts" "smith@acme.com" --field "Email"

Notes

  • Free plan: unlimited bases, 1,000 records per base. API reads work on free.
  • Base IDs start with app, record IDs start with rec.
  • Table names are case-sensitive and must match exactly. Use quotes if the name has spaces.
  • Airtable deprecated old API keys in Feb 2024. Only Personal Access Tokens (PAT) work now.

Comments

Loading comments...