Manager
v2.0.4Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Manager concepts, best practices, and implementation patterns.
⭐ 0· 250·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Manager reference for devtools) match the included artifacts: SKILL.md documents static commands and scripts/script.sh prints reference text. All required fields are absent (no env, no binaries) which is appropriate for a read-only reference tool. Minor nit: the script's VERSION is 2.0.3 while registry metadata is 2.0.4 (versioning inconsistency only).
Instruction Scope
SKILL.md instructs only to provide plain-text reference outputs and explicitly states no external API calls or network access. The included script only emits heredoc content and performs no file reads, network calls, or access to environment variables. Documentation mentions external tools (tcpdump, wireshark) as examples but does not instruct using them or accessing system state.
Install Mechanism
No install specification is provided (instruction-only), so nothing is downloaded or written to disk by an installer. The package includes a harmless shell script that outputs static docs; no external installs or archive extraction are present.
Credentials
The skill declares no required environment variables or credentials, which aligns with its stated purpose. The quickstart text generically mentions 'access credentials' as prerequisites for real-world setups, but this is documentation wording rather than a runtime requirement — there is no evidence the skill attempts to access or require credentials.
Persistence & Privilege
always is false and there are no install steps that modify agent/system configuration. The skill does not request persistent presence or elevated privileges and does not attempt to modify other skills or system settings.
Assessment
This skill appears to be a safe, local reference that simply prints static documentation. Before installing, you can: (1) verify the GitHub source and bytesagain.com homepage match and are trustworthy; (2) review scripts/script.sh yourself (it is short and only emits text); and (3) note the minor version mismatch between the metadata (2.0.4) and the script (2.0.3) — likely benign but worth confirming. Also remember that the agent can invoke the skill autonomously (default behavior), but this skill does not request secrets or network access, so the blast radius is small.Like a lobster shell, security has layers — review code before you run it.
latestvk975snbt0476d6j2vg6tfef1n183gfkc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.