Read Typeform forms and responses directly via the Typeform API. Use when you need to list forms, retrieve survey responses, or get form performance stats. C...
Security Analysis
high confidenceThe skill is internally consistent with its stated purpose: it only needs a Typeform read token and python3, calls api.typeform.com directly, and the included script performs the described read-only operations.
Name/description claim reading forms/responses via the Typeform API — the skill only requires TYPEFORM_TOKEN and python3 which match that purpose. No unrelated services, binaries, or credentials are requested.
SKILL.md instructs running the included Python script to list forms, fetch responses, and get insights. The instructions reference only the script path and the Typeform API; they do not request other files, system state, or unrelated env vars.
No install spec (instruction-only plus a small Python script). The script uses only Python stdlib (urllib) and does not download or execute third-party artifacts; low install risk.
Only one env var (TYPEFORM_TOKEN) is required and declared as primaryEnv. That aligns with Typeform API access and is proportional to the skill's functionality.
always:false (default) and the skill does not request persistent system-wide changes or modify other skills. It can be invoked autonomously (platform default), which is expected for a skill of this type.
Guidance
This skill appears to do exactly what it says: it runs a small Python script that calls api.typeform.com using the TYPEFORM_TOKEN you provide. Before installing, be aware that the token grants read access to your forms, responses, and insights — responses may contain sensitive user data. Use a token with the minimum scopes needed, store it securely (avoid exposing it in shared environments), and rotate/revoke the token when you no longer need the skill. If you want extra assurance, review the included scripts/typeform.py (it uses only the Python standard library and only sends requests to api.typeform.com). Finally, note that the agent can invoke the skill autonomously by default; if you want tighter control, restrict when the skill may be used or avoid enabling autonomous behaviors in your agent configuration.
Latest Release
v1.0.1
Update display name to Native Typeform
More by @codeninja23
Published by @codeninja23 on ClawHub
