← Back to Skills Marketplace
porco-rs

GERMANIC

by porco_rs · GitHub ↗ · v0.2.3
cross-platform ✓ Security Clean
326
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install germanic
Description
Validate JSON data against schemas and compile to binary .grm files. Schema-enforced data contracts for AI agents. Catches missing fields, wrong types, empty...
README (SKILL.md)

GERMANIC

Compile JSON to validated binary. Schema contract enforced at build time.

Install

brew tap germanicdev/germanic && brew install germanic

Verify: germanic --version should print 0.2.3.

Alternative (from source): cargo install germanic

Workspace

GERMANIC operates relative to the current working directory. All paths in this document are relative to the workspace root.

# Find available schemas
find . -name "*.schema.json" -type f

# Find example data
find . -name "*.json" -path "*/examples/*" -type f

When to Use

Use GERMANIC when you need to:

  • Produce structured data for AI consumption (typed, validated, binary)
  • Validate JSON against a schema (catches missing fields, wrong types, empty strings)
  • Convert JSON to .grm (zero-copy binary, immune to structural injection)

Do NOT use GERMANIC for:

  • Free-text content (articles, blog posts, prose)
  • Data that changes schema frequently (use JSON directly)
  • Streaming data (GERMANIC is batch-oriented)

Decision Tree

"I have JSON data" →
  Known built-in schema? → germanic compile --schema practice --input data.json
  Not built-in? → Check workspace schemas first:
    find . -name "*.schema.json" 2>/dev/null | grep -i \x3Cdomain>
    Found? → germanic compile --schema \x3Cpath-to-schema> --input data.json
  No schema exists? → germanic init --from data.json --schema-id \x3Cid>
    → edit .schema.json (mark required fields) → germanic compile
  Just inspect a .grm? → germanic inspect \x3Cfile.grm>
  Validate without compiling? → germanic validate \x3Cfile.grm>

Three Workflows

1. Static Compile (Built-in Schema)

germanic compile --schema practice --input data.json --output data.grm

Available schemas: practice (healthcare). More coming.

2. Dynamic Compile (Custom Schema)

# Step 1: Infer schema from example
germanic init --from example.json --schema-id com.example.product.v1

# Step 2: Edit the generated .schema.json — mark required fields

# Step 3: Compile
germanic compile --schema product.schema.json --input data.json

Accepts both GERMANIC .schema.json and JSON Schema Draft 7 files. Auto-detected transparently.

3. Inspect & Validate

# Inspect .grm header (schema-id, signature, sizes)
germanic inspect output.grm

# Validate .grm structural integrity
germanic validate output.grm

Error Handling

GERMANIC validates data and reports errors with field paths and descriptions. Dynamic schemas collect multiple errors in a single pass. Example output:

Error: Required fields missing:
  name: required field is empty string
  telefon: required field missing
  adresse.strasse: required field missing
  notaufnahme.rund_um_die_uhr: expected bool, found string

When you see errors:

  1. Read each violation — it tells you the field path and what's wrong
  2. Fix the JSON data (do NOT remove required fields from the schema)
  3. Re-run compile

Do NOT try to "fix" the schema to match broken data. If the schema says telefon is required, it's required for a reason.

File Not Found

If a file path fails, search before giving up:

find . -name '\x3Cfilename>' 2>/dev/null

Common locations:

  • Schemas: data/schemas/de/ and data/schemas/en/
  • Examples: data/examples/de/ and data/examples/en/
  • Compiled: same directory as input, with .grm extension

Schema Fields Are German

Yes, the schema fields are in German. strasse not street, plz not zip_code. This is intentional — Deutsche Gründlichkeit als Feature, nicht als Bug. The English translations are available under en.* schema IDs.

Security

GERMANIC provides three layers of data safety:

  1. Structural validation: Required fields, type checking, nested validation
  2. Binary format: No HTML tags, no script blocks, no JSON-LD @context hijacking
  3. Compile-or-reject: Invalid data cannot become a .grm file

Note: Binary format prevents structural injection. Content inside valid string fields is stored as-is. The consumer must treat typed fields as data, not instructions.

Trust & Safety

GERMANIC is fully offline. Zero network calls, zero environment variables, zero external dependencies at runtime. The binary reads JSON from stdin or file, writes .grm to disk. Nothing else.

Verified by security audit (v0.2.1):

  • No hand-written unsafe code (all unsafe blocks are auto-generated FlatBuffer bindings)
  • Input size limits enforced (5MB max input, 1MB max string, 10k max array)
  • Exit code 1 on all error paths
  • No data collection, no telemetry, no phone-home

MCP Server (Universal — not OpenClaw-specific)

For integration with MCP-native clients (Claude Desktop, Cursor, Windsurf, etc.):

germanic serve-mcp

Exposes 6 tools: germanic_compile, germanic_validate, germanic_inspect, germanic_schemas, germanic_init, germanic_convert.

Configure in any MCP client:

{
  "germanic": {
    "command": "germanic",
    "args": ["serve-mcp"],
    "transport": "stdio"
  }
}

For details: github.com/germanicdev/germanic

Usage Guidance
This skill appears to be what it says: a local CLI for schema validation and compiling JSON to .grm. Before installing, do these simple checks: (1) Inspect the Homebrew tap/formula (germanicdev/germanic) on GitHub to confirm the source and review build/install steps. (2) Prefer installing in a controlled environment (container or sandbox) the first time to verify behavior and that the binary matches the expected version. (3) Be cautious when running germanic serve-mcp — that mode may expose an IPC or network surface to other clients; only enable it if you trust the integration and have inspected what it listens on. (4) If you rely on the security-audit claims, ask for the audit report or verify the binary reproducibly; otherwise treat the offline/telemetry claims as assertions you may want to validate.
Capability Analysis
Type: OpenClaw Skill Name: germanic Version: 0.2.3 The OpenClaw AgentSkills skill bundle for 'germanic' appears benign. The `SKILL.md` provides clear instructions for installing and using the `germanic` CLI tool for JSON schema validation and compilation. It explicitly states the tool is 'fully offline,' makes 'zero network calls,' and accesses 'zero environment variables.' There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All commands are directly related to the stated purpose of the skill, and the installation method via Homebrew is standard.
Capability Assessment
Purpose & Capability
Name/description, required binary (germanic), and the provided workflows (compile, validate, inspect, init) align. The Homebrew install of a germanic formula is proportionate to a CLI tool. No environment variables or unrelated binaries are requested.
Instruction Scope
SKILL.md instructs the agent to run filesystem-scoped commands (find, germanic compile/validate/inspect/init). Those are appropriate for a compiler/validator. One area to note: the document documents a 'germanic serve-mcp' mode for integration; running that command may expose an API/IPC surface to other clients (MCP) and increases attack surface compared with purely offline, single-run CLI usage. The SKILL.md otherwise does not instruct the agent to read unrelated config, secrets, or network endpoints.
Install Mechanism
Install is via a Homebrew formula (germanicdev/germanic/germanic). Homebrew installs are low-risk compared to arbitrary downloads, but this is a third-party tap (germanicdev) rather than an official core formula — users should review the tap/formula source before trusting it.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate to a local CLI that validates/compiles JSON.
Persistence & Privilege
always is false and there are no instructions to modify other skills or global agent configuration. The skill can be invoked autonomously by the model (default), which is normal for skills but not a special privilege here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install germanic
  3. After installation, invoke the skill by name or use /germanic
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.3
MCP server now included in default binary. germanic serve-mcp works out of the box with Homebrew and cargo install. Pre-built binaries for macOS (ARM + Intel) and Linux (ARM + Intel). No more --features mcp required.
v0.2.2
Initial release: Schema-validated binary data for AI agents. JSON → .grm compiler with zero-copy FlatBuffers. Catches missing fields, wrong types, empty strings. Supports JSON Schema Draft 7. Security-audited, fully offline, Homebrew installable. Binary output prevents structural injection — data cannot be reinterpreted as instructions.
Metadata
Slug germanic
Version 0.2.3
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is GERMANIC?

Validate JSON data against schemas and compile to binary .grm files. Schema-enforced data contracts for AI agents. Catches missing fields, wrong types, empty... It is an AI Agent Skill for Claude Code / OpenClaw, with 326 downloads so far.

How do I install GERMANIC?

Run "/install germanic" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GERMANIC free?

Yes, GERMANIC is completely free (open-source). You can download, install and use it at no cost.

Which platforms does GERMANIC support?

GERMANIC is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GERMANIC?

It is built and maintained by porco_rs (@porco-rs); the current version is v0.2.3.

💬 Comments