ClawHub

Fabric.co API skill

v1.0.1

Create, search, and manage Fabric resources via the Fabric HTTP API (notepads/notes, folders, bookmarks, files, tags).

⭐ 1· 2.1k·1 current·1 all-time
byTristan Manchester@tristanmanchester
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise HTTP access to Fabric; required env var is FABRIC_API_KEY and helpers target https://api.fabric.so. Declared required binaries (node/python3/python/curl) match the cross-platform helpers and the README's curl examples.
✓
Instruction Scope
SKILL.md instructs only Fabric-related actions (create/search/manage resources), documents endpoints, and provides helper usage. It does not instruct reading unrelated local files or secrets beyond FABRIC_API_KEY; optional FABRIC_BASE is referenced but appropriate. The docs caution about not pasting the API key into prompts.
✓
Install Mechanism
Instruction-only skill with no install spec; included Node/Python scripts are plain, use standard libraries/fetch, and do not download or execute remote code. No high-risk download URLs or archive extraction are present.
✓
Credentials
Only FABRIC_API_KEY is required (declared as primaryEnv). The scripts optionally read FABRIC_BASE (non-sensitive). No unrelated credentials or system config paths are requested.
✓
Persistence & Privilege
Skill is not always-enabled and does not request system-wide persistence or modify other skills. It runs helpers locally and uses the provided API key for requests.
Assessment
This skill appears to do exactly what it claims: a simple, documented HTTP client for the Fabric API that needs only your Fabric API key. Before installing, confirm you trust the skill source (owner ID is opaque here) and only provide a FABRIC_API_KEY you expect the agent to use. Be cautious when invoking absolute URLs with the --with-key flag (or equivalent) because that forces the API key to be sent to arbitrary hosts; prefer relative API paths or omit --with-key. If you need extra assurance, review the bundled scripts (fabric.mjs / fabric.py) yourself — they are short and only perform HTTP calls and basic I/O.

Like a lobster shell, security has layers — review code before you run it.

latestvk975ge7q1sr1faqvt96kft9s8n81xn59

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧵 Clawdis
Any binnode, python3, python, curl
EnvFABRIC_API_KEY
Primary envFABRIC_API_KEY

Comments