← Back to Skills Marketplace
1855
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install sure
Description
Get report from Sure personal financial board
Usage Guidance
This skill appears to do what it says (call your Sure API) but take these precautions before installing: 1) Verify the skill publisher and homepage (https://sure.am) and confirm whether you should point SURE_BASE_URL to that domain or to a local/dev instance — the SKILL.md's localhost examples may be misleading. 2) Only provide an API key you trust the skill with; prefer a limited-scope/test key if available. 3) Be aware the example curl command places the API key on the command line (it may appear in shell history or in process listings); consider safer alternatives (use a config file, stdin, or a short-lived token). 4) Ask the publisher to reconcile the registry metadata (it should declare required env vars and curl). 5) If you need higher assurance, request a signed/verified skill package or vendor documentation before using real credentials.
Capability Analysis
Type: OpenClaw Skill
Name: sure
Version: 1.0.0
The skill bundle is benign, providing a standard API integration using `curl` to interact with a personal financial board. It requires an API key and base URL, which are securely handled via environment variables (`SURE_API_KEY`, `SURE_BASE_URL`). The `SKILL.md` instructions are clear and directly align with the stated purpose, showing no evidence of prompt injection, data exfiltration, malicious execution, or other high-risk behaviors.
Capability Assessment
Purpose & Capability
The SKILL.md instructs the agent to call a Sure API endpoint using SURE_API_KEY and SURE_BASE_URL, which is coherent with the name/description. However the registry metadata published for the skill lists no required env vars or binaries, while the SKILL.md metadata requires curl and two env vars. That mismatch is unexpected and could be an authoring omission.
Instruction Scope
Runtime instructions are minimal and stay on-purpose: obtain an API key from the Sure app, set SURE_API_KEY and SURE_BASE_URL, then curl the /api/v1/accounts endpoint. The instructions do not request unrelated files, system paths, or other credentials.
Install Mechanism
No install spec and no code files (instruction-only) — lowest installation risk. The SKILL.md expects curl to be available; that requirement is reasonable but was not reflected in the registry metadata.
Credentials
The required environment variables (SURE_API_KEY, SURE_BASE_URL) are proportionate to the task, but they are sensitive. The skill's top-level registry metadata did not declare these env vars (inconsistency). Also the SKILL.md examples use localhost URLs, which could indicate a self-hosted/dev setup—confirm which endpoint you'll be sending secrets to.
Persistence & Privilege
The skill does not request persistent privileges (always=false), has no install, and does not modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sure - After installation, invoke the skill by name or use
/sure - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the Sure skill.
- Allows users to get reports from the Sure personal financial board.
- Instructions included for environment variable setup and API key configuration.
- Provides example for listing all account amounts using curl.
Metadata
Frequently Asked Questions
What is Sure?
Get report from Sure personal financial board. It is an AI Agent Skill for Claude Code / OpenClaw, with 1855 downloads so far.
How do I install Sure?
Run "/install sure" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Sure free?
Yes, Sure is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Sure support?
Sure is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Sure?
It is built and maintained by bt0r (@bt0r); the current version is v1.0.0.
More Skills