Skill Writer

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: skill-writer Version: 1.0.0 The skill 'skill-writer' is designed to instruct an AI agent on how to create well-structured and effective SKILL.md files for the OpenClaw/MoltHub platform. All content, including markdown instructions and code examples, is aligned with this educational purpose. The commands shown (e.g., `npx molthub@latest publish`) are legitimate interactions with the platform, presented as examples for skill creation and publishing, not as directives for malicious actions. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection intended to subvert the agent's current operation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user chooses to run this command, their system may fetch and execute the latest MoltHub CLI package to search the registry.

Why it was flagged

The skill documents a user-directed npx command using `@latest`, which can fetch and run the current MoltHub package version. This is aligned with the skill-writing purpose and is also reflected by the npx requirement, but it is still worth noticing as a mutable external CLI invocation.

Skill content
Check for slug collisions before publishing: `npx molthub@latest search "your-slug"`
Recommendation

Run the command only when needed, and consider pinning or reviewing the package source if reproducibility or supply-chain trust is important.