Skill Maker (ChenXi)
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a coherent skill-building helper, but it should be reviewed because it can mine private context and install persistent agent instructions.
Install only if you are comfortable with a skill that creates or updates other skills. When using it, specify exact source ranges, avoid secrets, review the generated SKILL.md before activation, back up any existing skill it replaces, and do not publish generated skills until you have manually checked them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private or misleading context could be summarized into a persistent skill and reused in future tasks.
The skill tells the agent to automatically retrieve conversation, project-file, and historical-skill context to create a reusable skill. Those sources can contain private data or instruction-like content, and the artifacts do not define strict exclusions, retention limits, or mandatory review before reuse.
1. 最近会话中的同主题对话（按关键词匹配）。 2. 当前任务相关文件和已有技能草稿。 3. 历史技能中相似的 Trigger / Procedure / Example。
Use explicit topic, time, and source scopes; inspect the generated SKILL.md for secrets or injected instructions; and require user review before saving it as an active skill.
A poor, poisoned, or overly broad generated skill could persist and influence later agent behavior.
The skill directs the agent to write or upgrade files in the active OpenClaw skills directory. That is persistent agent configuration, but the artifact does not require staging drafts, backups, overwrite checks, or explicit confirmation before activation.
输出路径（强制） - 默认写入：`~/.openclaw/skills/<skill-name>/SKILL.md` ... 替换旧技能：先读旧版，再保留有效部分做增量升级。
Write generated skills to a draft location first, back up existing skills before replacement, and manually approve changes before moving them into ~/.openclaw/skills or publishing them.
Users must rely on the supplied markdown instructions rather than a verifiable upstream project.
The artifact set is instruction-only and has no installable code, but provenance information is limited, so users have less basis for trusting the skill author or update path.
Source: unknown; Homepage: none
Review the SKILL.md and reference file carefully before installing, especially because this skill can create other persistent skills.