← Back to Skills Marketplace
doninocode

Corpus

by doninocode · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
441
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install corpus
Description
Access a user's Corpus library from OpenClaw. Use when the user asks to search saved content, fetch item details, save links into Corpus, or create reminders...
README (SKILL.md)

Corpus Skill

Use this skill to read and write a user's Corpus data through the Corpus API.

Required environment variables

  • CORPUS_API_TOKEN: user token for Corpus API access.

Generate CORPUS_API_TOKEN

  1. Install Corpus AI for iPhone: https://apps.apple.com/us/app/corpus-ai/id6748364607
  2. Open the app and sign in.
  3. Go to Integrations -> OpenClaw.
  4. Create an API token and copy it (the full value is shown once).
  5. Set that value as CORPUS_API_TOKEN in your OpenClaw skill env.

Optional environment variables

  • CORPUS_API_BASE_URL: API base URL (default: https://corpusai.app).
  • CORPUS_TIMEOUT_SECONDS: HTTP timeout in seconds (default: 30).

OpenClaw config example

{
  "skills": {
    "entries": {
      "corpus": {
        "path": "/absolute/path/to/skills/corpus",
        "env": {
          "CORPUS_API_TOKEN": "csk_live_or_jwt_token_here",
          "CORPUS_API_BASE_URL": "https://corpusai.app"
        }
      }
    }
  }
}

Commands

Run all commands through:

python3 {baseDir}/scripts/corpus_api.py \x3Ccommand> [options]

Available commands:

  • profile
  • list-content --limit 20 --cursor \x3Ccursor>
  • search --query "\x3Ctext>" --limit 8
  • content --user-content-id \x3Cid>
  • save-url --url \x3Curl> [--user-note "\x3Cnote>"]
  • create-reminder --title "\x3Ctitle>" --description "\x3Cdesc>" --scheduled-date-utc "2026-02-18T16:00:00Z" [--user-content-id \x3Cid>]

Recommended workflow for implementation tasks

When a user asks for "find items in Corpus and implement":

  1. Use search with a focused query.
  2. Use content for top hits to collect concrete steps.
  3. Produce an implementation plan with explicit file changes.
  4. Apply code changes in the current working repository after user confirmation.

Safety rules

  • Never print or log CORPUS_API_TOKEN.
  • Prefer read operations before write operations.
  • Before write operations (save-url, create-reminder), confirm user intent if the instruction is ambiguous.
Usage Guidance
This skill appears to do what it says: talk to the Corpus API using your CORPUS_API_TOKEN. Before installing or enabling it, verify you trust the skill source (the GitHub repo), store the token with least privilege (use a dedicated token you can revoke), and review the included scripts yourself. Be cautious when the agent proposes write actions or 'apply code changes' to your repository — require explicit user confirmation for any file modifications. Rotate or revoke the token if you stop using the skill.
Capability Analysis
Type: OpenClaw Skill Name: corpus Version: 1.0.1 The `SKILL.md` contains an instruction for the AI agent to 'Apply code changes in the current working repository after user confirmation.' This instruction, while part of a legitimate workflow, introduces a significant prompt injection risk. If an attacker successfully manipulates the agent, this could lead to unauthorized file modifications in the user's repository, representing a high-impact vulnerability. The `scripts/corpus_api.py` code itself is benign, performing standard API interactions with the Corpus service (defaulting to https://corpusai.app) and handling the API token responsibly, without evidence of intentional malicious behavior like data exfiltration or arbitrary code execution.
Capability Assessment
Purpose & Capability
Name/description (search, fetch, save, reminders) align with the declared requirements: python3 binary and a single CORPUS_API_TOKEN. The default API base URL matches the project homepage and the commands map to Corpus API endpoints.
Instruction Scope
SKILL.md stays within the Corpus API scope and warns not to print the token and to confirm writes. One notable instruction: the recommended workflow suggests applying code changes 'in the current working repository after user confirmation' — this is functional for implementation tasks but grants the agent a path to modify local files once the user consents. Confirmations and limited scope are recommended before any writes/edits.
Install Mechanism
No install spec; this is an instruction-only skill with a small included Python script. No downloads, package managers, or archive extraction are used.
Credentials
Only CORPUS_API_TOKEN is required (primaryEnv). Optional vars (CORPUS_API_BASE_URL, CORPUS_TIMEOUT_SECONDS) are documented. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request persistent agent privileges or modify other skills' configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install corpus
  3. After installation, invoke the skill by name or use /corpus
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added step-by-step instructions for generating and configuring the `CORPUS_API_TOKEN` via the Corpus AI iPhone app. - No other changes to commands or functionality.
v1.0.0
Initial release of the Corpus skill: - Enables access to a user's Corpus library for searching, fetching details, saving links, and creating reminders. - Uses the Corpus API; requires a `CORPUS_API_TOKEN`. - Provides commands for profile info, content listing, search, detail fetch, URL saving, and reminder creation. - Includes safety rules to protect user tokens and confirms writes when intent is unclear.
Metadata
Slug corpus
Version 1.0.1
License
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Corpus?

Access a user's Corpus library from OpenClaw. Use when the user asks to search saved content, fetch item details, save links into Corpus, or create reminders... It is an AI Agent Skill for Claude Code / OpenClaw, with 441 downloads so far.

How do I install Corpus?

Run "/install corpus" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Corpus free?

Yes, Corpus is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Corpus support?

Corpus is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Corpus?

It is built and maintained by doninocode (@doninocode); the current version is v1.0.1.

💬 Comments