← Back to Skills Marketplace
ivangdavila

Forms

by Iván · GitHub ↗ · v1.0.0
linuxdarwinwin32 ⚠ suspicious
764
Downloads
2
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install forms
Description
Create and deploy mobile-friendly forms with customizable fields, real-time validation, conditional logic, and integration options for various platforms.
README (SKILL.md)

Quick Reference

Topic File
Field types by use case types.md
Platform comparisons platforms.md
Code generation (React, Flutter) code.md
Validation patterns validation.md
Integrations (webhooks, CRMs) integrations.md
Self-hosted options selfhosted.md

User Profile

\x3C!-- Edit to customize form suggestions -->

Preferred Stack

\x3C!-- react | flutter | vue | html | no-code -->

Primary Use Case

\x3C!-- leads | surveys | applications | feedback | registration -->

Default Platform

\x3C!-- google-forms | typeform | tally | heyform | code-only -->

Data Storage

Store form definitions and templates in ~/forms/:

  • templates — Reusable form definitions (JSON/YAML)
  • submissions — Collected responses (if self-hosted)
  • feedback — What converts well, what fails

Core Rules

  • Ask use case before suggesting fields — lead form ≠ application form
  • Progressive disclosure: start minimal, reveal complexity if needed
  • Mobile-first: every form must work on phone
  • Never more than 7 fields for lead capture — each field drops conversion ~10%
  • Multi-step > single long form for 5+ fields
  • Validate on blur, not just submit — immediate feedback
  • Always include: clear labels, error states, success confirmation
  • GDPR checkbox mandatory for EU — link to privacy policy
  • Honeypot over CAPTCHA when possible — less friction
  • File uploads need type + size limits — prevent abuse
  • Conditional logic syntax: IF field=value THEN show/hide field
  • Test on real devices — emulators miss keyboard quirks
Usage Guidance
This skill is a documentation/guide bundle for building and deploying forms. Before using it: (1) understand examples showing API keys and webhook URLs are placeholders — only provide credentials to integrations you trust; (2) if you self-host, review docker-compose and DATABASE_URL/SESSION_SECRET values locally before running and use secret management (don't commit secrets to source control); (3) verify any webhook endpoints you configure (avoid sending submissions to unknown third-party URLs); (4) follow the security checklist in selfhosted.md (HTTPS, rate limiting, CSRF, file scanning) if you collect PII/PHI or handle payments; (5) if you want the agent to perform live integration actions, ensure you supply only narrowly scoped credentials and review every external call.
Capability Analysis
Type: OpenClaw Skill Name: forms Version: 1.0.0 The skill bundle is classified as suspicious due to the presence of `curl` and `docker` commands within markdown files (`integrations.md`, `selfhosted.md`). While these commands are presented as examples for developers to implement integrations or deploy self-hosted solutions, their inclusion introduces a potential for shell execution if the AI agent's environment is not robustly sandboxed or if it misinterprets code blocks as direct commands. This risk exists despite the `SKILL.md` file explicitly declaring `"bins":[]`, indicating the skill should not require or execute external binaries. The commands themselves appear to be for legitimate purposes (e.g., adding subscribers to Mailchimp, deploying HeyForm), but their presence creates an RCE vulnerability risk if the agent's execution model is flawed.
Capability Assessment
Purpose & Capability
Name/description (build/deploy forms) match the content: field types, validation, conditional logic, code samples, platform comparisons and integration examples. Nothing in the bundle asks for unrelated system access or secrets beyond the normal third‑party API keys expected for integrations.
Instruction Scope
SKILL.md and the included docs direct the agent to suggest fields, store templates/submissions under ~/forms/, and provide code/webhook examples. There are no instructions to read unrelated host files, harvest credentials, or exfiltrate data to unknown endpoints; external endpoints shown are typical integration targets (Zapier, Mailchimp, Slack, etc.).
Install Mechanism
No install spec and no code files executed at runtime (instruction-only). This minimizes risk because nothing is downloaded or written by the skill itself.
Credentials
The docs include many example environment variables and tokens (MAILCHIMP_API_KEY, HUBSPOT_TOKEN, DATABASE_URL, SESSION_SECRET, webhook URLs, etc.). These are examples for optional integrations/self-hosting and are not declared as required by the skill. Requiring many different service keys would be disproportionate, but here they are demonstration placeholders rather than mandatory requests.
Persistence & Privilege
The skill does not request persistent installation or elevated privileges; always:false and no modifications to other skill configs are suggested. Self-hosting instructions describe normal service environment variables (e.g., SESSION_SECRET) for users who choose to deploy.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install forms
  3. After installation, invoke the skill by name or use /forms
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Slug forms
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Forms?

Create and deploy mobile-friendly forms with customizable fields, real-time validation, conditional logic, and integration options for various platforms. It is an AI Agent Skill for Claude Code / OpenClaw, with 764 downloads so far.

How do I install Forms?

Run "/install forms" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Forms free?

Yes, Forms is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Forms support?

Forms is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).

Who created Forms?

It is built and maintained by Iván (@ivangdavila); the current version is v1.0.0.

💬 Comments