← 返回 Skills 市场
phoenix2479

GateCrash Forms

作者 Phoenix2479 · GitHub ↗ · v0.2.0
cross-platform ⚠ suspicious
762
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install gatecrash-forms
功能描述
CLI-first form builder with BYOK philosophy. Generate beautiful HTML forms from JSON schemas, handle submissions via your own SMTP server, store responses lo...
使用说明 (SKILL.md)

GateCrash Forms Skill

CLI-first form builder with BYOK (Bring Your Own Keys) philosophy

Generate beautiful, secure HTML forms from JSON schemas. Email notifications via YOUR SMTP server, response storage on YOUR infrastructure. No external services, no gatekeeping.

✨ Kimi Claw Ready

Perfect for Kimi's 24/7 cloud agents:

  • ✅ Works natively in Kimi.com browser tabs
  • ✅ Installed via ClawHub's 5,000+ skill library
  • ✅ 40GB cloud storage for form responses
  • ✅ Agent-friendly email providers (agentmail.to, Resend)

Your AI assistant can now generate and manage forms for you!

Quick Start

Generate a Form

./scripts/generate.sh examples/feedback.json output.html

Start Server

./scripts/serve.sh 3000

Visits http://localhost:3000 to see all forms.

Initialize Project

./scripts/init.sh

Creates forms/ and responses/ directories with example forms.

Features

  • 🎨 8+ Field Types: text, email, textarea, select, radio, checkbox, scale/rating, date
  • 🔒 Security Hardened: XSS prevention, CSRF tokens, honeypot spam protection, rate limiting
  • 📧 BYOK Email: Use your own SMTP server (Zoho, Gmail, SendGrid, etc.)
  • 💾 Local Storage: Responses saved as JSON or CSV
  • 🎨 Beautiful UI: Gradient purple theme, responsive design
  • 🚀 Self-Hosted: Deploy anywhere Node.js runs

Configuration

Set up your SMTP credentials globally:

gatecrash-forms config smtp.host smtp.example.com
gatecrash-forms config smtp.port 465
gatecrash-forms config smtp.secure true
gatecrash-forms config smtp.auth.user [email protected]
gatecrash-forms config smtp.auth.pass your-password

Or configure per-form in the JSON schema.

Example Form Schema

{
  "title": "Customer Feedback",
  "description": "We'd love to hear from you!",
  "fields": [
    {
      "type": "scale",
      "name": "rating",
      "label": "Overall satisfaction",
      "min": 1,
      "max": 5,
      "required": true
    },
    {
      "type": "checkbox",
      "name": "topics",
      "label": "What interested you most?",
      "options": ["Product", "Service", "Price", "Experience"]
    },
    {
      "type": "textarea",
      "name": "comments",
      "label": "Additional comments",
      "maxLength": 500
    }
  ],
  "submit": {
    "email": "[email protected]",
    "storage": "responses/feedback.json"
  }
}

Use Cases

  • Customer Feedback: Collect product/service feedback
  • Contact Forms: Simple contact forms for websites
  • Event Registration: Sign up forms for workshops/events
  • Surveys: Market research, user surveys
  • Lead Generation: Capture leads without third-party services

Philosophy: We Crash Gates

GateCrash Forms is NOT a service. It's a toolmaker.

  • ✅ Your SMTP server (email notifications)
  • ✅ Your storage (form responses)
  • ✅ Your deployment (host anywhere)
  • ✅ Your data (no external servers)

No GateCrash accounts. No GateCrash servers. No gatekeeping.

Links

Commands Reference

# Generate form from schema
gatecrash-forms generate schema.json output.html

# Start HTTP server
gatecrash-forms serve [port]

# Set global config
gatecrash-forms config \x3Ckey> \x3Cvalue>

# Initialize project
gatecrash-forms init

# Show help
gatecrash-forms help

License

MIT - Use it, fork it, sell it. Just don't gatekeep it.


Made with 🔥 by Dinki & Molty

"We crash gates. We don't build new ones."

安全使用建议
This skill appears coherent with its stated purpose, but take these practical precautions before installing or providing SMTP credentials: 1) Verify the npm package and author on the npm registry and GitHub link (review package contents and recent activity). 2) Inspect where the CLI stores configuration (so you know where SMTP credentials are written) and consider using an app-specific password or limited mailbox account rather than your main email credentials. 3) If you plan to expose the server publicly, review security settings (TLS, rate limits, CSRF implementation) and run the service in an isolated environment. 4) Note the small metadata/version mismatch in _meta.json vs. registry version — minor, but you may want to confirm you have the intended release. If you need higher assurance, review the gatecrash-forms source code before use.
功能分析
Type: OpenClaw Skill Name: gatecrash-forms Version: 0.2.0 The skill bundle is a wrapper for the `gatecrash-forms` npm package, which handles sensitive data like SMTP credentials (including passwords) and stores form responses locally. While the instructions in `SKILL.md` and `README.md` are functional and do not explicitly instruct the AI agent to perform malicious actions like exfiltration or unauthorized access, the direct handling of sensitive credentials and local file system writes by the underlying tool represents a significant risk. The reliance on an external npm package (`gatecrash-forms`) also introduces a supply chain vulnerability. These capabilities, though plausibly needed for the stated purpose, are high-risk and warrant a 'suspicious' classification due to the potential for misuse or compromise of the underlying tool.
能力评估
Purpose & Capability
Name/description (form builder, BYOK) match the declared binaries (gatecrash-forms, node), the npm install of package gatecrash-forms, example schemas, and CLI wrapper scripts. Requested artifacts are appropriate for a self-hosted form generator.
Instruction Scope
SKILL.md only instructs installing the CLI, generating forms, serving them, initializing a project, and configuring SMTP via the CLI. It does not direct the agent to read unrelated system files, exfiltrate data, or call unexpected external endpoints. Example commands and file paths are limited to the project (forms/, responses/).
Install Mechanism
Install is via the public npm package 'gatecrash-forms' (global install). This is a standard, traceable install method — no arbitrary download URLs or archive extraction are used in the skill metadata or SKILL.md.
Credentials
The skill declares no required environment variables and does not demand unrelated credentials. It documents storing SMTP credentials via the CLI (smtp.auth.user/pass), which is expected for an email-forwarding form tool. The skill does not request excessive or unrelated secrets.
Persistence & Privilege
always is false and the skill does not request permanent platform-level presence or modify other skills. It will install a CLI binary and store its own config (expected behavior for a CLI tool).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install gatecrash-forms
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /gatecrash-forms 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.0
Kimi Claw support: Native integration, enhanced features, agent-ready documentation
v0.1.3
Update author email to GitHub address
v0.1.2
Remove hardcoded SMTP provider references, use generic placeholders
v0.1.1
Security improvements: Added SECURITY.md, updated examples to use placeholder emails
v0.1.0
Initial release: CLI-first form builder with BYOK philosophy
元数据
Slug gatecrash-forms
版本 0.2.0
许可证
累计安装 0
当前安装数 0
历史版本数 5
常见问题

GateCrash Forms 是什么?

CLI-first form builder with BYOK philosophy. Generate beautiful HTML forms from JSON schemas, handle submissions via your own SMTP server, store responses lo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 762 次。

如何安装 GateCrash Forms?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install gatecrash-forms」即可一键安装,无需额外配置。

GateCrash Forms 是免费的吗?

是的,GateCrash Forms 完全免费(开源免费),可自由下载、安装和使用。

GateCrash Forms 支持哪些平台?

GateCrash Forms 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 GateCrash Forms?

由 Phoenix2479(@phoenix2479)开发并维护,当前版本 v0.2.0。

💬 留言讨论