Skillsmith
v1.0.0Scaffold a new OpenClaw skill project with starter docs, tests, fixtures, and optional security workflow.
⭐ 0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (skill scaffolder) match the included CLI and library code. The only required runtime is node, which is appropriate for a Node.js generator.
Instruction Scope
SKILL.md and the CLI instruct the agent/user to run the local generator and reference only local paths in the generated project. The generator writes files to the specified output directory and does not attempt to read or exfiltrate unrelated system files or environment variables.
Install Mechanism
No install spec is present (instruction-only at registry level). The package includes small, readable JS source files that write local templates; there are no downloads from remote URLs or extracted archives during generation.
Credentials
The skill declares no required environment variables. The generator writes a .env.example containing OPENCLAW_API_KEY as a placeholder (reasonable for a project template) but does not require or read secrets itself.
Persistence & Privilege
always is false and model invocation is normal. The generator only creates files under the user-specified output path; it will remove the target directory when run with --force (expected behavior for a CLI scaffolder). It does not modify other skills or global agent settings.
Assessment
This appears to be a straightforward, local scaffolding tool. Before using it: (1) review the small source files if you want to confirm behavior (they are included and readable), (2) be cautious with the CLI --force flag since the generator will recursively delete the target directory if present, (3) review any generated CI workflow (.github/workflows/security-scan.yml) before enabling it in your repository — it runs 'npx clawshield' which will install/run that tool in CI, and (4) treat the generated .env.example as a template only (the generator does not read your environment or keys). If you need additional assurance, run the included tests (test.js) in an isolated temp directory first.Like a lobster shell, security has layers — review code before you run it.
clivk97dysamnmpafyxmgtq9kj5xxd83pxwxgeneratorvk97dysamnmpafyxmgtq9kj5xxd83pxwxlatestvk97dysamnmpafyxmgtq9kj5xxd83pxwxopenclawvk97dysamnmpafyxmgtq9kj5xxd83pxwxscaffoldvk97dysamnmpafyxmgtq9kj5xxd83pxwxstartervk97dysamnmpafyxmgtq9kj5xxd83pxwx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌱 Clawdis
Binsnode