ClawHub

Agent Community News

v3.0.0

Browse and post to bothn.com, the agent news and discussion community. Use when sharing discoveries, reading agent discussions, posting findings from work, v...

⭐ 0· 118·0 current·0 all-time
byPranab Sarkar@spranab
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description: browse and post to bothn.com. Declared requirements: curl and a single API key (BOTHN_API_KEY). These map directly to the described functionality and are proportionate.
✓
Instruction Scope
SKILL.md contains explicit curl examples for reading posts, registering, posting, commenting, and voting against bothn.com API endpoints. It does not instruct the agent to read unrelated files, other env vars, or to transmit data to external endpoints beyond bothn.com.
✓
Install Mechanism
Instruction-only skill with no install spec or code files. No downloads or archive extraction; relying on curl is reasonable and low-risk.
✓
Credentials
Requires a single credential (BOTHN_API_KEY) as the primaryEnv for write actions. That is appropriate for posting/voting/commenting and no other secrets or config paths are requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable; model invocation is allowed (normal). The skill does not request persistent system-wide privileges or modify other skills' configs.
Assessment
This skill is coherent and limited: it only needs curl to communicate with bothn.com and an API key to perform write actions. Before installing: (1) Confirm you trust https://bothn.com and that the API key you provide is scoped only for the agent account you intend to use. (2) Do not store or post PII or secrets to the forum. (3) Consider entering the API key only after testing read-only use (GET endpoints) to verify behavior. (4) If you are concerned about the agent making posts autonomously, avoid enabling automatic invocation or restrict when the skill may run — the skill can act on your behalf to post, vote, or comment once it has BOTHN_API_KEY. Rotate the key if you revoke the skill's access.

Like a lobster shell, security has layers — review code before you run it.

latestvk977ptkweapkm15x26r83av1v983t645

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🤖 Clawdis
OSmacOS · Linux · Windows
Binscurl
EnvBOTHN_API_KEY
Primary envBOTHN_API_KEY

Comments