openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

Skill flagged: https://clawhub.ai/vince-winkintel/sendgrid-skills #146

New Issue
Open
opened 2026-02-15 17:15:55 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:55 -05:00
Owner
Copy Link
Copy Source

Originally created by @vince-winkintel on GitHub (Feb 12, 2026).

Skill Information

Skill URL: https://clawhub.ai/vince-winkintel/sendgrid-skills
GitHub Repository: https://github.com/vince-winkintel/sendgrid-skills
Current Version: v1.1.0 (v1.2.0 pending publish)
Author: vince-winkintel

Issue

The sendgrid-skills skill has been flagged on ClawHub. I believe this is incorrect and request a review.

Skill Description

SendGrid Skills provides OpenClaw agent skills for sending and receiving emails via the SendGrid API. The skill includes:

  • send-email sub-skill: Send transactional emails via SendGrid v3 Mail Send API
  • sendgrid-inbound sub-skill: Receive inbound emails via SendGrid Inbound Parse Webhook
  • Automation scripts: Helper scripts for testing and validation

Why This Should Not Be Flagged

  1. Legitimate Use Case: SendGrid is a well-known, legitimate email service provider (owned by Twilio)
  2. Transparent Functionality: All code is open source and clearly documented
  3. No Malicious Behavior: The skill simply wraps the SendGrid API for email sending/receiving
  4. Security Best Practices: Includes authentication validation, error handling, and security guidelines
  5. Published Versions: Has been published and used without issues (v1.0.0, v1.1.0)

Skill Metadata

The skill properly declares its requirements in SKILL.md frontmatter:

  • Environment variables: SENDGRID_API_KEY (required for SendGrid API)
  • Binaries: curl (for HTTP requests), jq (for JSON processing in scripts)
  • No system access: Only makes external HTTP calls to SendGrid API
  • No file system writes: Except optional script execution

Recent Updates

The v1.2.0 update (currently blocked from publishing due to this flag) adds:

  • send-html-email.sh script for HTML email support
  • Improved JSON escaping via jq
  • Better error handling

All changes are visible in the GitHub repository and follow OpenClaw skill best practices.

Scanners

If scanners were run, I'd expect:

  • ✅ VirusTotal: Benign (standard SendGrid API wrapper)
  • ✅ OpenClaw verdict: Benign (no malicious patterns)

Request

Please review the sendgrid-skills skill and unflag it. The skill provides legitimate email functionality via a trusted provider (SendGrid/Twilio) and follows all OpenClaw skill guidelines.

Thank you for your time.

Additional Context:

  • Skill has been optimized following openclaw/skills/skill-creator patterns
  • Includes comprehensive documentation, troubleshooting, and automation scripts
  • Part of a suite of productivity skills (also published: gitlab-cli-skills, planetscale-cli-skills)
Originally created by @vince-winkintel on GitHub (Feb 12, 2026). ## Skill Information **Skill URL:** https://clawhub.ai/vince-winkintel/sendgrid-skills **GitHub Repository:** https://github.com/vince-winkintel/sendgrid-skills **Current Version:** v1.1.0 (v1.2.0 pending publish) **Author:** vince-winkintel ## Issue The sendgrid-skills skill has been flagged on ClawHub. I believe this is incorrect and request a review. ## Skill Description SendGrid Skills provides OpenClaw agent skills for sending and receiving emails via the SendGrid API. The skill includes: - **send-email** sub-skill: Send transactional emails via SendGrid v3 Mail Send API - **sendgrid-inbound** sub-skill: Receive inbound emails via SendGrid Inbound Parse Webhook - **Automation scripts**: Helper scripts for testing and validation ## Why This Should Not Be Flagged 1. **Legitimate Use Case**: SendGrid is a well-known, legitimate email service provider (owned by Twilio) 2. **Transparent Functionality**: All code is open source and clearly documented 3. **No Malicious Behavior**: The skill simply wraps the SendGrid API for email sending/receiving 4. **Security Best Practices**: Includes authentication validation, error handling, and security guidelines 5. **Published Versions**: Has been published and used without issues (v1.0.0, v1.1.0) ## Skill Metadata The skill properly declares its requirements in SKILL.md frontmatter: - **Environment variables**: `SENDGRID_API_KEY` (required for SendGrid API) - **Binaries**: `curl` (for HTTP requests), `jq` (for JSON processing in scripts) - **No system access**: Only makes external HTTP calls to SendGrid API - **No file system writes**: Except optional script execution ## Recent Updates The v1.2.0 update (currently blocked from publishing due to this flag) adds: - `send-html-email.sh` script for HTML email support - Improved JSON escaping via `jq` - Better error handling All changes are visible in the GitHub repository and follow OpenClaw skill best practices. ## Scanners If scanners were run, I'd expect: - ✅ **VirusTotal**: Benign (standard SendGrid API wrapper) - ✅ **OpenClaw verdict**: Benign (no malicious patterns) ## Request Please review the sendgrid-skills skill and unflag it. The skill provides legitimate email functionality via a trusted provider (SendGrid/Twilio) and follows all OpenClaw skill guidelines. Thank you for your time. --- **Additional Context:** - Skill has been optimized following openclaw/skills/skill-creator patterns - Includes comprehensive documentation, troubleshooting, and automation scripts - Part of a suite of productivity skills (also published: gitlab-cli-skills, planetscale-cli-skills)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#146
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?