test1

v1.0.0

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capa...

0· 93·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill is a 'skill creator' template and includes SKILL.md, references/, and three helper scripts (init_skill.py, package_skill.py, quick_validate.py) that are reasonable for this purpose. Minor metadata inconsistency: the registry Owner ID (kn727kdf...) differs from the ownerId in _meta.json (kn7ajm...), which is a bookkeeping/packaging mismatch to verify with the publisher but does not change functional coherence.
Instruction Scope
SKILL.md is a guidance document for building skills and does not instruct the agent to read arbitrary system files, exfiltrate data, or access credentials. It notes that scripts may be executed, but does not autonomously instruct the agent to run them or to reach out to external endpoints.
Install Mechanism
There is no install spec (instruction-only in registry terms). The bundled scripts are plain Python files with local filesystem operations (create directories, write files, zip archives) — expected for a templating/packaging tool. No downloads, external installers, or archive extraction from remote URLs are present.
Credentials
The skill requests no environment variables, no credentials, and the code does not read secrets or configuration paths. The scripts perform local filesystem operations only and do not access network or credential stores.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. Nothing in the package modifies other skills' configuration or system-wide settings.
Assessment
This package appears to be a legitimate skill-authoring/template helper. Before installing or running any scripts: (1) verify the package publisher (resolve the ownerId/_meta.json mismatch if you need provenance), (2) inspect the included scripts locally — they create directories, write files, and create zip archives (benign operations) — and (3) only run the scripts when you expect local filesystem changes. If you plan to allow an agent to execute these scripts autonomously, ensure that behavior is intended, because executing bundled scripts will modify your filesystem (create skill folders, write example files, package .skill archives).

Like a lobster shell, security has layers — review code before you run it.

latestvk971qjxr07gp3g06cc7qh8srrh83h855

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments