CRUD Code Generator

PassAudited by ClawScan on May 12, 2026.

Overview

This instruction-only skill appears to do what it claims—generate CRUD code and validation steps—but it will modify project files and run build commands, so users should review changes.

This looks like a normal CRUD scaffolding helper. Before installing or using it, confirm that you are comfortable letting it inspect the selected project structure, write generated Java/Vue/SQL files, and run Maven or npm validation commands. Review all generated code and SQL before committing, deploying, or applying database changes.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may add or change files in your backend/frontend repositories and create SQL scripts that affect application permissions if later applied.

Why it was flagged

The skill instructs the agent to create multiple backend, frontend, and SQL files in the user's project. This is expected for CRUD scaffolding, but it is still source-code mutation authority.

Skill content
按以下顺序生成文件... Entity... DTO... Mapper... ServiceImpl... Controller;在 `sql/{year}/{month}/` 目录下创建两个 SQL 文件
Recommendation

Use this only in the intended repository, keep version control enabled, and review generated diffs and SQL before committing or running them.

What this means

Running Maven or npm commands can execute build plugins or scripts from the selected project.

Why it was flagged

The skill includes shell commands to build the backend and optionally run the frontend dev server. These are disclosed validation steps and fit the stated purpose, but build scripts can execute project-defined code.

Skill content
cd {backend-root}
mvn clean package -q;如果用户确认需要验证:cd {frontend-root}
npm run dev
Recommendation

Run validation only for trusted projects and confirm the backend/frontend paths before allowing commands to execute.