← 返回 Skills 市场
764
总下载
2
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install forms
功能描述
Create and deploy mobile-friendly forms with customizable fields, real-time validation, conditional logic, and integration options for various platforms.
使用说明 (SKILL.md)
Quick Reference
| Topic | File |
|---|---|
| Field types by use case | types.md |
| Platform comparisons | platforms.md |
| Code generation (React, Flutter) | code.md |
| Validation patterns | validation.md |
| Integrations (webhooks, CRMs) | integrations.md |
| Self-hosted options | selfhosted.md |
User Profile
\x3C!-- Edit to customize form suggestions -->
Preferred Stack
\x3C!-- react | flutter | vue | html | no-code -->
Primary Use Case
\x3C!-- leads | surveys | applications | feedback | registration -->
Default Platform
\x3C!-- google-forms | typeform | tally | heyform | code-only -->
Data Storage
Store form definitions and templates in ~/forms/:
- templates — Reusable form definitions (JSON/YAML)
- submissions — Collected responses (if self-hosted)
- feedback — What converts well, what fails
Core Rules
- Ask use case before suggesting fields — lead form ≠ application form
- Progressive disclosure: start minimal, reveal complexity if needed
- Mobile-first: every form must work on phone
- Never more than 7 fields for lead capture — each field drops conversion ~10%
- Multi-step > single long form for 5+ fields
- Validate on blur, not just submit — immediate feedback
- Always include: clear labels, error states, success confirmation
- GDPR checkbox mandatory for EU — link to privacy policy
- Honeypot over CAPTCHA when possible — less friction
- File uploads need type + size limits — prevent abuse
- Conditional logic syntax:
IF field=value THEN show/hide field - Test on real devices — emulators miss keyboard quirks
安全使用建议
This skill is a documentation/guide bundle for building and deploying forms. Before using it: (1) understand examples showing API keys and webhook URLs are placeholders — only provide credentials to integrations you trust; (2) if you self-host, review docker-compose and DATABASE_URL/SESSION_SECRET values locally before running and use secret management (don't commit secrets to source control); (3) verify any webhook endpoints you configure (avoid sending submissions to unknown third-party URLs); (4) follow the security checklist in selfhosted.md (HTTPS, rate limiting, CSRF, file scanning) if you collect PII/PHI or handle payments; (5) if you want the agent to perform live integration actions, ensure you supply only narrowly scoped credentials and review every external call.
功能分析
Type: OpenClaw Skill
Name: forms
Version: 1.0.0
The skill bundle is classified as suspicious due to the presence of `curl` and `docker` commands within markdown files (`integrations.md`, `selfhosted.md`). While these commands are presented as examples for developers to implement integrations or deploy self-hosted solutions, their inclusion introduces a potential for shell execution if the AI agent's environment is not robustly sandboxed or if it misinterprets code blocks as direct commands. This risk exists despite the `SKILL.md` file explicitly declaring `"bins":[]`, indicating the skill should not require or execute external binaries. The commands themselves appear to be for legitimate purposes (e.g., adding subscribers to Mailchimp, deploying HeyForm), but their presence creates an RCE vulnerability risk if the agent's execution model is flawed.
能力评估
Purpose & Capability
Name/description (build/deploy forms) match the content: field types, validation, conditional logic, code samples, platform comparisons and integration examples. Nothing in the bundle asks for unrelated system access or secrets beyond the normal third‑party API keys expected for integrations.
Instruction Scope
SKILL.md and the included docs direct the agent to suggest fields, store templates/submissions under ~/forms/, and provide code/webhook examples. There are no instructions to read unrelated host files, harvest credentials, or exfiltrate data to unknown endpoints; external endpoints shown are typical integration targets (Zapier, Mailchimp, Slack, etc.).
Install Mechanism
No install spec and no code files executed at runtime (instruction-only). This minimizes risk because nothing is downloaded or written by the skill itself.
Credentials
The docs include many example environment variables and tokens (MAILCHIMP_API_KEY, HUBSPOT_TOKEN, DATABASE_URL, SESSION_SECRET, webhook URLs, etc.). These are examples for optional integrations/self-hosting and are not declared as required by the skill. Requiring many different service keys would be disproportionate, but here they are demonstration placeholders rather than mandatory requests.
Persistence & Privilege
The skill does not request persistent installation or elevated privileges; always:false and no modifications to other skill configs are suggested. Self-hosting instructions describe normal service environment variables (e.g., SESSION_SECRET) for users who choose to deploy.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install forms - 安装完成后，直接呼叫该 Skill 的名称或使用
/forms触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Forms 是什么？
Create and deploy mobile-friendly forms with customizable fields, real-time validation, conditional logic, and integration options for various platforms. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 764 次。
如何安装 Forms？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install forms」即可一键安装，无需额外配置。
Forms 是免费的吗？
是的，Forms 完全免费（开源免费），可自由下载、安装和使用。
Forms 支持哪些平台？
Forms 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux, darwin, win32）。
谁开发了 Forms？
由 Iván（@ivangdavila）开发并维护，当前版本 v1.0.0。
推荐 Skills