← Back to Skills Marketplace
phoenix2479

GateCrash Forms

by Phoenix2479 · GitHub ↗ · v0.2.0
cross-platform ⚠ suspicious
762
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install gatecrash-forms
Description
CLI-first form builder with BYOK philosophy. Generate beautiful HTML forms from JSON schemas, handle submissions via your own SMTP server, store responses lo...
README (SKILL.md)

GateCrash Forms Skill

CLI-first form builder with BYOK (Bring Your Own Keys) philosophy

Generate beautiful, secure HTML forms from JSON schemas. Email notifications via YOUR SMTP server, response storage on YOUR infrastructure. No external services, no gatekeeping.

✨ Kimi Claw Ready

Perfect for Kimi's 24/7 cloud agents:

  • ✅ Works natively in Kimi.com browser tabs
  • ✅ Installed via ClawHub's 5,000+ skill library
  • ✅ 40GB cloud storage for form responses
  • ✅ Agent-friendly email providers (agentmail.to, Resend)

Your AI assistant can now generate and manage forms for you!

Quick Start

Generate a Form

./scripts/generate.sh examples/feedback.json output.html

Start Server

./scripts/serve.sh 3000

Visits http://localhost:3000 to see all forms.

Initialize Project

./scripts/init.sh

Creates forms/ and responses/ directories with example forms.

Features

  • 🎨 8+ Field Types: text, email, textarea, select, radio, checkbox, scale/rating, date
  • 🔒 Security Hardened: XSS prevention, CSRF tokens, honeypot spam protection, rate limiting
  • 📧 BYOK Email: Use your own SMTP server (Zoho, Gmail, SendGrid, etc.)
  • 💾 Local Storage: Responses saved as JSON or CSV
  • 🎨 Beautiful UI: Gradient purple theme, responsive design
  • 🚀 Self-Hosted: Deploy anywhere Node.js runs

Configuration

Set up your SMTP credentials globally:

gatecrash-forms config smtp.host smtp.example.com
gatecrash-forms config smtp.port 465
gatecrash-forms config smtp.secure true
gatecrash-forms config smtp.auth.user [email protected]
gatecrash-forms config smtp.auth.pass your-password

Or configure per-form in the JSON schema.

Example Form Schema

{
  "title": "Customer Feedback",
  "description": "We'd love to hear from you!",
  "fields": [
    {
      "type": "scale",
      "name": "rating",
      "label": "Overall satisfaction",
      "min": 1,
      "max": 5,
      "required": true
    },
    {
      "type": "checkbox",
      "name": "topics",
      "label": "What interested you most?",
      "options": ["Product", "Service", "Price", "Experience"]
    },
    {
      "type": "textarea",
      "name": "comments",
      "label": "Additional comments",
      "maxLength": 500
    }
  ],
  "submit": {
    "email": "[email protected]",
    "storage": "responses/feedback.json"
  }
}

Use Cases

  • Customer Feedback: Collect product/service feedback
  • Contact Forms: Simple contact forms for websites
  • Event Registration: Sign up forms for workshops/events
  • Surveys: Market research, user surveys
  • Lead Generation: Capture leads without third-party services

Philosophy: We Crash Gates

GateCrash Forms is NOT a service. It's a toolmaker.

  • ✅ Your SMTP server (email notifications)
  • ✅ Your storage (form responses)
  • ✅ Your deployment (host anywhere)
  • ✅ Your data (no external servers)

No GateCrash accounts. No GateCrash servers. No gatekeeping.

Links

Commands Reference

# Generate form from schema
gatecrash-forms generate schema.json output.html

# Start HTTP server
gatecrash-forms serve [port]

# Set global config
gatecrash-forms config \x3Ckey> \x3Cvalue>

# Initialize project
gatecrash-forms init

# Show help
gatecrash-forms help

License

MIT - Use it, fork it, sell it. Just don't gatekeep it.


Made with 🔥 by Dinki & Molty

"We crash gates. We don't build new ones."

Usage Guidance
This skill appears coherent with its stated purpose, but take these practical precautions before installing or providing SMTP credentials: 1) Verify the npm package and author on the npm registry and GitHub link (review package contents and recent activity). 2) Inspect where the CLI stores configuration (so you know where SMTP credentials are written) and consider using an app-specific password or limited mailbox account rather than your main email credentials. 3) If you plan to expose the server publicly, review security settings (TLS, rate limits, CSRF implementation) and run the service in an isolated environment. 4) Note the small metadata/version mismatch in _meta.json vs. registry version — minor, but you may want to confirm you have the intended release. If you need higher assurance, review the gatecrash-forms source code before use.
Capability Analysis
Type: OpenClaw Skill Name: gatecrash-forms Version: 0.2.0 The skill bundle is a wrapper for the `gatecrash-forms` npm package, which handles sensitive data like SMTP credentials (including passwords) and stores form responses locally. While the instructions in `SKILL.md` and `README.md` are functional and do not explicitly instruct the AI agent to perform malicious actions like exfiltration or unauthorized access, the direct handling of sensitive credentials and local file system writes by the underlying tool represents a significant risk. The reliance on an external npm package (`gatecrash-forms`) also introduces a supply chain vulnerability. These capabilities, though plausibly needed for the stated purpose, are high-risk and warrant a 'suspicious' classification due to the potential for misuse or compromise of the underlying tool.
Capability Assessment
Purpose & Capability
Name/description (form builder, BYOK) match the declared binaries (gatecrash-forms, node), the npm install of package gatecrash-forms, example schemas, and CLI wrapper scripts. Requested artifacts are appropriate for a self-hosted form generator.
Instruction Scope
SKILL.md only instructs installing the CLI, generating forms, serving them, initializing a project, and configuring SMTP via the CLI. It does not direct the agent to read unrelated system files, exfiltrate data, or call unexpected external endpoints. Example commands and file paths are limited to the project (forms/, responses/).
Install Mechanism
Install is via the public npm package 'gatecrash-forms' (global install). This is a standard, traceable install method — no arbitrary download URLs or archive extraction are used in the skill metadata or SKILL.md.
Credentials
The skill declares no required environment variables and does not demand unrelated credentials. It documents storing SMTP credentials via the CLI (smtp.auth.user/pass), which is expected for an email-forwarding form tool. The skill does not request excessive or unrelated secrets.
Persistence & Privilege
always is false and the skill does not request permanent platform-level presence or modify other skills. It will install a CLI binary and store its own config (expected behavior for a CLI tool).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install gatecrash-forms
  3. After installation, invoke the skill by name or use /gatecrash-forms
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Kimi Claw support: Native integration, enhanced features, agent-ready documentation
v0.1.3
Update author email to GitHub address
v0.1.2
Remove hardcoded SMTP provider references, use generic placeholders
v0.1.1
Security improvements: Added SECURITY.md, updated examples to use placeholder emails
v0.1.0
Initial release: CLI-first form builder with BYOK philosophy
Metadata
Slug gatecrash-forms
Version 0.2.0
License
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is GateCrash Forms?

CLI-first form builder with BYOK philosophy. Generate beautiful HTML forms from JSON schemas, handle submissions via your own SMTP server, store responses lo... It is an AI Agent Skill for Claude Code / OpenClaw, with 762 downloads so far.

How do I install GateCrash Forms?

Run "/install gatecrash-forms" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GateCrash Forms free?

Yes, GateCrash Forms is completely free (open-source). You can download, install and use it at no cost.

Which platforms does GateCrash Forms support?

GateCrash Forms is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GateCrash Forms?

It is built and maintained by Phoenix2479 (@phoenix2479); the current version is v0.2.0.

💬 Comments