Skill Index
v1.0.0Auto-scan all installed skills, generate a categorized INDEX.md, and keep it in sync via git hooks. Triggers: skill index, scan skills, update index, skill c...
⭐ 0· 62·0 current·0 all-time
byKen Wang@kenwang-dev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the code and SKILL.md: the scripts scan skills/, parse SKILL.md frontmatter, categorize entries, and write skills/INDEX.md. Required capabilities (git, bash) align with the stated purpose.
Instruction Scope
Instructions and scripts stay within the stated scope (search skills/, parse, generate INDEX.md). They also instruct installing Git hooks that run register.sh on commit/pull and the pre-commit hook will automatically git add the generated INDEX.md when skills/ changes — this is expected but can be surprising because it mutates commits without further confirmation.
Install Mechanism
No external downloads or installs. It's an instruction-only skill with included shell scripts. The only on-disk changes occur when you run install-hooks.sh (it writes .git/hooks/pre-commit and post-merge) and register.sh (writes skills/INDEX.md). No network endpoints or remote code pulls are used.
Credentials
The skill requests no environment variables or credentials. It does assume local tools (bash 4+, git, grep -P, realpath, mktemp); these are reasonable for the task but may impact portability rather than security.
Persistence & Privilege
always:false and model invocation are normal. However, install-hooks.sh gives the skill persistent behavior at the repo level by installing Git hooks that run automatically on commit and after merges; this grants it ongoing influence over commits in that repository (auto-updating and staging INDEX.md).
Assessment
This skill appears to do what it says: it scans local SKILL.md files and generates a categorized skills/INDEX.md, and its install script writes Git hooks that auto-update the index on commit/pull. Before installing: 1) Inspect register.sh and install-hooks.sh yourself (they are plain shell scripts) and confirm you accept the behavior of auto-adding INDEX.md to commits. 2) Run bash skills/skill-index/register.sh manually first to see the generated INDEX.md and confirm formatting. 3) Back up existing .git/hooks or review their contents before running install-hooks.sh. 4) Note compatibility: scripts use grep -P and realpath and expect Bash 4+. 5) If you prefer not to alter commits automatically, skip installing hooks and run register.sh manually or wire it into your own CI instead.Like a lobster shell, security has layers — review code before you run it.
latestvk97d97ffdjw2qsy088gwvdxmg1845tyc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.