Auto-Coding
v1.1.0智能自主编码系统 - 八步循环流程，多 Agent 协作完成从需求到代码的完整开发
⭐ 0· 315·2 current·2 all-time
by@krislu1221·duplicate of @krislu1221/auto-coding-correctversion (3.1.1)·canonical: @krislu1221/auto-coding
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to orchestrate multi‑agent coding (design→decompose→code→test→refine→output) and the included modules (workflow, dependency manager, agent soul loader, model selector, task manager) match that purpose. Files written (project output under /tmp by default) and the use of sessions_spawn for sub‑agent/model calls are consistent with the stated functionality.
Instruction Scope
SKILL.md confines operations to project dirs and to reading programming Agent personas. The code follows that: it writes dependency and project files under the project_dir and loads Agent prompts from an agency-agents-zh-like directory. Minor mismatch: SKILL.md says it “supports environment variable” for agency path, but AgentSoulLoader actually builds a path under the home directory rather than reading an explicit environment variable. Also AgentSoulLoader will probe several locations under the user's home for an agency-agents directory and will read specific .md files — this is expected for its purpose but does involve reading files outside /tmp.
Install Mechanism
No install spec (instruction-only plus shipped Python source). There is no network download or external installer; risk from installation actions is low. The code is shipped as plain Python files and will be executed in-process if invoked.
Credentials
The skill declares no required environment variables, no credentials, and no special binaries. Its local file reads/writes (project dir, dependency file, and reading agency-agent persona .md files) are proportional to its stated functionality. It does log and print discovered paths; no secret-scoped environment variables are requested.
Persistence & Privilege
always:false and no system-wide modifications are requested. The skill writes to its own project_dir (default /tmp/auto-coding-project) and log files under that project directory; it does not request persistent platform privileges or alter other skills' configs.
Assessment
This skill appears to do what it says: orchestrate multi‑agent coding and generate project files. Before installing, consider: 1) AgentSoulLoader searches for and reads specific persona .md files under locations in your home directory — verify those files contain only prompts and no sensitive data. 2) The skill will call models via OpenClaw's sessions_spawn (network/model usage) — monitor token usage and network access if you have limits. 3) Projects default to /tmp; change project_dir if you want outputs stored elsewhere. 4) The SKILL.md claims an environment-variable override for agency path but the loader currently uses home-based paths — if you need stricter control, inspect/modify AgentSoulLoader to read an explicit env var or set agency files in a controlled directory. If you want higher assurance, review model_selector.py and task_manager.py (included) to confirm there are no unexpected external endpoints or behaviors.Like a lobster shell, security has layers — review code before you run it.
latestvk970vcaaa04ebfdptnzn1qyqb5839nz3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.