ClawHub

Balzac

v1.0.9

AI content platform CLI — create workspaces, manage SEO keywords, generate article suggestions, write articles, and publish to WordPress, Webflow, Wix, GoHig...

⭐ 0· 61·0 current·0 all-time
byVincenzo Ruggiero@vincenzor
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary ('balzac'), and required env var (BALZAC_API_KEY) align with a CLI that talks to the Balzac service and publishes content. The supported integrations (WordPress, Webflow, etc.) are consistent with the skill's stated purpose.
✓
Instruction Scope
SKILL.md limits actions to installing/using the balzac CLI and using BALZAC_API_KEY; commands shown call the CLI and pipe JSON to jq. There are no instructions to read unrelated system files or export unrelated credentials. Publishing/integration steps will contact external services, which is expected for this tool.
ℹ
Install Mechanism
There is no registry-level install spec, but SKILL.md recommends installing the official-looking npm package (npm install -g balzac-cli). Installing an npm CLI is a reasonable install method for this purpose; users should still verify the npm package and publisher before global install.
✓
Credentials
Only one env var (BALZAC_API_KEY) is required and is directly related to the service. The skill does not request unrelated credentials or system config paths.
✓
Persistence & Privilege
always:false (no forced presence). The skill is user-invocable and allows normal autonomous invocation, which is the platform default and appropriate here.
Scan Findings in Context
[NO_SCAN_FINDINGS] expected: The package is instruction-only and contained no code files for the regex scanner to analyze; the lack of findings is expected in this context.
Assessment
This skill appears coherent for controlling the Balzac CLI. Before installing: 1) Verify the npm package 'balzac-cli' and its publisher on npm (review downloads, repository link, and recent releases) before running a global install. 2) Only supply a BALZAC_API_KEY you trust; review Balzac's privacy/terms because article content and site data will be sent to their service. 3) Integrations (WordPress/Webflow/Wix/etc.) will require additional credentials or tokens stored by the CLI—provide those only to trusted services and consider using least-privilege accounts. 4) If you allow autonomous agent invocation, remember the agent could run balzac CLI commands using the provided API key; keep keys scoped and rotate/revoke if needed. 5) Note the registry metadata omission of a formal install spec is minor but you may want to inspect the upstream project and homepage (https://developer.hirebalzac.ai) before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk9710gyxv4c3xy8pnvjxm9kaj183jv0j

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✍️ Clawdis
Binsbalzac
EnvBALZAC_API_KEY

Comments