Latest release: v0.1.5Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the included files (bundle manifests, README, package.json). Nothing in the package requests unrelated capabilities (no binaries, env vars, or external installs).
Instruction Scope
SKILL.md only instructs local validation steps (jq on the package files and npm pack --dry-run) and suggests a publish command. There are no instructions to read unrelated system files, exfiltrate data, or call external endpoints.
Install Mechanism
No install spec or code files are present; this is instruction-only metadata and does not write or execute code on install.
Credentials
The skill requires no environment variables or credentials. The bundle manifest contains a link labeled apiKey, but this is only a documentation link and not a runtime credential request.
Persistence & Privilege
always is false and the skill does not request persistent system presence or alter other skill configurations. Autonomous invocation is allowed by default, but there is no code here to act on that capability.
Assessment
This bundle is metadata-only and appears safe to install. It does not contain executable code or request credentials. If you intend to use KPainter features, review the referenced 'kpainter' and 'kpainter-openclaw' packages (and their homepage) before granting any API keys or secrets, since runtime behavior would come from those packages rather than this bundle.Verification
Tags
KPainter OpenClaw Bundle
OpenClaw bundle-plugin package for KPainter.
What it is
This package is a lightweight bundle-family metadata pack for KPainter's OpenClaw distribution surface.
It does not execute code. Instead, it declares:
- bundle-family package identity separate from the
kpainterskill and thekpainter-openclawcode plugin - host targets for
desktopandmobile - a small bundle manifest describing what this package is meant to accompany
This is useful when a downstream host or marketplace flow wants a bundle-only artifact line without overloading the code-plugin package name.
Files
package.jsonopenclaw.bundle.jsondist/bundle-manifest.jsondist/README.md
Current intent
This bundle currently acts as a distribution metadata pack that points to the real KPainter surfaces:
- skill:
kpainter - code plugin:
kpainter-openclaw - homepage:
https://kpainter.ai/
Validation
Before publishing:
cd plugins/kpainter-openclaw-bundle
jq . package.json >/dev/null
jq . openclaw.bundle.json >/dev/null
jq . dist/bundle-manifest.json >/dev/null
npm pack --dry-run
Suggested publish command
clawhub package publish ./plugins/kpainter-openclaw-bundle \
--family bundle-plugin \
--name kpainter-openclaw-bundle \
--display-name "KPainter OpenClaw Bundle" \
--version 0.1.5 \
--bundle-format openclaw-bundle \
--host-targets desktop,mobile \
--changelog "Shorten bundle summaries and keep GPT-Image-2 as a trailing note"
Current caveats
- This package is intentionally bundle-only metadata, not a runnable plugin.
- If KPainter later needs host-specific assets or a concrete bundle binary layout, publish a new version that adds those artifacts under the same package name.