ClawHub

Clawrma

v1.0.1

Use Clawrma for web fetch, web search, screenshots, snapshots, and inference, or as a fallback when built-in tools are not configured, blocked, expensive.

⭐ 0· 34·0 current·0 all-time
byChris@tnchr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, command map, and npm install (clawrma -> clawrma binary) are consistent: a CLI tool for fetching, search, screenshots, snapshots, and inference. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md only instructs installing/using the clawrma CLI and running its commands (including interactive 'clawrma auth setup' if needed). It does not direct the agent to read unrelated files, environment variables, or exfiltrate data. Note: the CLI may prompt for authentication and will handle credentials locally (not specified in the skill).
ℹ
Install Mechanism
Install spec is an npm package (moderate risk). npm packages can run install scripts and write files; this is expected for a CLI but merits reviewing the package source and install scripts before trusting a third‑party package.
✓
Credentials
The skill declares no required env vars or credentials, which aligns with using a local CLI that performs interactive auth. There are no extraneous credential requests in the SKILL.md.
ℹ
Persistence & Privilege
The skill does not request 'always: true' or elevated platform privileges. Installing the npm CLI will place a binary on disk and the CLI's auth flow may persist tokens/config in the user profile—standard for CLIs but worth reviewing.
Assessment
This skill appears internally consistent, but before installing: (1) inspect the GitHub repo and the npm package contents (particularly package.json and any postinstall scripts); (2) check the package maintainer and npm download history; (3) be prepared for the CLI to prompt for authentication and to store tokens/config in your home directory—review where/how it stores credentials; (4) if you are uncertain, run the install/use inside an isolated environment (container or VM) or audit the package locally before global installation; (5) be aware 'infer' and account-related commands may require creating an account and could incur costs—review the service's privacy and billing details.

Like a lobster shell, security has layers — review code before you run it.

latestvk976jv6s4c1fe0pnxh16asce9d841tjf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Install

Node
Bins: clawrma
npm i -g clawrma

Comments