PasteClaw
v1.0.0Use Pasteclaw.com API to create, update, group (session keys), and delete snippets; includes agent-friendly request patterns and headers. Like pastebin but for agents
⭐ 1· 1.8k·1 current·1 all-time
by@tairov
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and all instructions only describe creating, updating, grouping, fetching, and deleting snippets on pasteclaw.com. No unrelated binaries, credentials, or installs are requested.
Instruction Scope
The SKILL.md stays within the paste/snippet domain, but example commands use curl -k which disables TLS certificate verification (a security risk). The docs also encourage sending agent/model/tool metadata in headers (possible privacy/telemetry leakage). Examples instruct handling editToken and sessionKey (expected), but ensure tokens are treated as secrets and not logged or placed in URLs.
Install Mechanism
No install spec or code files — instruction-only skill. This is the lowest-risk install model; nothing is written to disk by an installer.
Credentials
The skill requests no environment variables or platform credentials (good). It does recommend sending optional model/tool metadata in headers which could leak internal agent identifiers to an external service — this is a privacy consideration but not a credential mismatch.
Persistence & Privilege
always:false and no install means the skill does not request persistent or elevated platform privileges. It does not attempt to modify other skills or system settings.
Assessment
This skill is internally coherent for publishing snippets, but review the following before enabling: (1) avoid using the provided curl examples with -k (which disables TLS certificate checks) — prefer strict TLS verification; (2) do not send sensitive user data, credentials, or private keys to pasteclaw.com; (3) treat editToken and sessionKey as secrets (never place them in URLs or logs); (4) consider not sending model/tool identifiers in X-Pasteclaw-Meta if you want to minimize telemetry/agent fingerprinting; and (5) verify the legitimacy, retention, and privacy policies of pasteclaw.com before sharing private or proprietary content.Like a lobster shell, security has layers — review code before you run it.
latestvk973r3jnyhzab1s0qd5rgqgqsd80ctah
License
MIT-0
Free to use, modify, and redistribute. No attribution required.