Builder

Builder - command-line tool for everyday use

Security Scan

The skill's documentation claims a 'project builder' utility, but the included script is a different 'gaming' tool that writes logs under your home directory and the SKILL.md and code disagree about commands and configuration — this mismatch and a truncated file listing warrant caution.

Purpose & Capability

SKILL.md describes a project scaffolding/build tool (commands like run, add, list, export) and documents a BUILDER_DIR env var; the included scripts/script.sh is labeled a gaming toolkit (commands like roll, score, rank, leaderboard, etc.). The intended capability in the metadata/documentation does not match the actual code. The SKILL.md mentions a configurable BUILDER_DIR, but the script hardcodes DATA_DIR as ${HOME}/.local/share/builder and does not read BUILDER_DIR. This is an incoherent pairing of purpose vs implementation.

Instruction Scope

SKILL.md instructs the agent toward commands that don't exist in the script (e.g., builder run, add, list), so following the prose would not match runtime behavior. The script itself reads/writes log files under ~/.local/share/builder, appends user-provided strings to .log files and history.log, and provides search/export features. These file reads/writes are local (no obvious network calls in the shown portion), but the code listing is truncated before the end — the remainder could change behavior. The instructions are therefore misleading and grant the agent discretion to run mismatched commands.

Install Mechanism

No install spec (instruction-only) — lowest installation risk. However, the skill bundle includes a shell script (scripts/script.sh). Because there is no formal install, the script would be executed as-is when invoked, and its presence means code will run on the host if the skill is used. No downloads or external installers are present in the manifest.

Credentials

The skill declares no required environment variables, but SKILL.md suggests a BUILDER_DIR variable while the script uses a hardcoded DATA_DIR under $HOME. The script implicitly depends on $HOME and standard UNIX utilities (grep, wc, tail, du). It does not request credentials or external secrets in the provided portion.

Persistence & Privilege

The skill is not marked always:true and requests no system-wide config changes. Its runtime behavior (from the visible code) writes files only under the user's home directory (~/.local/share/builder) and does not attempt to modify other skills or global agent configuration in the visible portion.

What to consider before installing

Do not install or run this skill without review. The documentation and the included script disagree about what the tool actually is (project builder vs gaming toolkit), and the SKILL.md mentions a configurable BUILDER_DIR that the script doesn't use. The bundle includes a shell script that will create and append to files under ~/.local/share/builder; if you or the agent pass sensitive strings to it they will be stored in plaintext logs. Additionally, the provided script output in the manifest is truncated — the missing tail could contain network calls or other surprising behavior. Recommended actions before installing: 1) obtain and review the full scripts/script.sh content (confirm there are no network calls or credential exfiltration), 2) run the tool in an isolated/sandbox environment if you must test it, 3) prefer skills whose documentation and code match and that come from a verifiable homepage/author, and 4) avoid sending any secrets or sensitive data to this tool. If you want help analyzing the remainder of the script, provide the full untruncated file and I will re-check.

Project builder — scaffold new projects, generate boilerplate, configure build systems.

Commands

Command	Description
builder help	Show usage info
builder run	Run main task
builder status	Check current state
builder list	List items
builder add <item>	Add new item
builder export <fmt>	Export data

Usage

builder help
builder run
builder status

Examples

# Get started
builder help

# Run default task
builder run

# Export as JSON
builder export json

Output

Results go to stdout. Save with builder run > output.txt.

Configuration

Set BUILDER_DIR to change data directory. Default: ~/.local/share/builder/

---

Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback