PinePaper
v1.0.0Create and animate vector-based text, shapes, diagrams, and visualizations on an infinite canvas with resolution-independent export and rich animation and re...
⭐ 0· 103·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (vector-first animation tool) matches the SKILL.md content: API calls, item creation, animation, relations, export formats, and agent-mode usage. There are no unrelated environment variables, binaries, or config paths declared.
Instruction Scope
The instructions show APIs (app.create, app.animate, relations, Agent Mode / MCP tool usage). They do not direct the agent to read local files, system credentials, or arbitrary system paths, nor do they instruct exfiltration to unexpected endpoints in the provided content. (If later sections request credentials or local file access, re-evaluate.)
Install Mechanism
No install spec or code files are present (instruction-only). This minimizes footprint and there is no download/extract or package-install risk.
Credentials
The skill declares no required environment variables, primary credential, or config paths. The API references (MCP tool, window.PinePaperAgent) align with a web/agent integration model and don't imply access to unrelated credentials.
Persistence & Privilege
always is false and the skill does not request system-wide persistence or modification of other skills. disable-model-invocation is the default (false), allowing autonomous invocation which is normal for skills and is not by itself a concern.
Assessment
This skill appears to be a coherent instruction reference for PinePaper's agent APIs and does not request credentials or install code. Before using: (1) confirm any MCP server endpoint (e.g., @pinepaper.studio/mcp-server) you connect to is the official service you trust; some PinePaper integrations may require API keys when actually used — only provide those if necessary and to the legitimate service; (2) if later prompts or sections request local file access or environment secrets, stop and re-evaluate; (3) because the skill is agent-invocable, be cautious about letting the agent act autonomously with any credentials you later supply.Like a lobster shell, security has layers — review code before you run it.
latestvk9761dw0w7dw6y26ybkf9f5vr983ahhr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.