ClawHub

Instapaper

v0.2.9

Use when operating the instapaper-cli (ip) tool or troubleshooting it: authenticating, listing/exporting/importing bookmarks, bulk mutations, folders/highlights/text, choosing output formats (ndjson/json/plain), cursor-based sync, and interpreting stderr-json/exit codes for automation.

⭐ 2· 2.1k·0 current·0 all-time
by@vburojevic
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description match the content: the skill is a usage/troubleshooting guide for the instapaper-cli (ip). All commands, flags, cursor/config paths, and output formats described are relevant to that purpose.
ℹ
Instruction Scope
Instructions stay within the CLI's scope (auth, list/export/import, mutations, cursors, progress, stderr-json). They reference config/cursor files (e.g., ~/.config/ip/cursor.json) which is expected for a CLI-based sync tool. Note: the SKILL.md recommends INSTAPAPER_CONSUMER_KEY and INSTAPAPER_CONSUMER_SECRET and demonstrates password use, but the registry metadata did not declare required env vars — this is an omission in metadata but not necessarily malicious.
ℹ
Install Mechanism
No install spec in the skill bundle (instruction-only), which is low-risk. The docs instruct installing ip via 'go install' or a third‑party Homebrew tap; both are normal but pull code from external sources — verify the repository/tap is legitimate before running those commands.
ℹ
Credentials
The only sensitive items mentioned are INSTAPAPER_CONSUMER_KEY and INSTAPAPER_CONSUMER_SECRET and occasional user passwords (with advice to use --password-stdin). Those credentials are proportionate to interacting with Instapaper. However, the skill metadata did not declare them as required env vars, so the guidance to set them is only in the README; treat that as an instruction the operator must follow and protect the secrets accordingly.
✓
Persistence & Privilege
The skill is not always-enabled, does not request persistent system privileges, and contains no install-time hooks or scripts. As instruction-only content it will not autonomously persist or modify other skills' config.
Assessment
This skill is an instructions-only guide for the instapaper 'ip' CLI and appears internally consistent. Before using it: (1) verify the ip binary source (check the GitHub repo and the Homebrew tap) before running go install or brew install; (2) keep INSTAPAPER_CONSUMER_KEY/SECRET and your password secret and prefer --password-stdin as the docs advise; (3) review any config/cursor files the tool will read (e.g., ~/.config/ip/*) if you care about data exposure; (4) because the skill metadata doesn't declare those env vars, supplying credentials is a manual step—do not paste them into untrusted prompts or public chat history. If you want higher assurance, run the ip binary in an isolated environment (container/VM) and inspect its network endpoints and code before giving it real credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk977f1x6jcbwea3p7yetx95fbx7zj7sr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments