Nima Skill Creator
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: nima-skill-creator Version: 0.1.1 The skill bundle is a utility for creating and managing other OpenClaw skills. It contains Python scripts (init_skill.py, package_skill.py, validate_skill.py) that perform standard file system operations like directory creation, file templating, and ZIP archiving, all of which are consistent with the stated purpose. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the helper can add a new skill under the local Codex skills directory.
The skill explicitly tells the user or agent to run a bundled Python scaffolding script. This is central to the stated purpose, but it executes local code and creates persistent files.
python3 scripts/init_skill.py my-skill --path "${CODEX_HOME:-$HOME/.codex}/skills" --resources scripts,referencesRun the scripts only after confirming the target directory and review generated files before relying on the new skill.
If a user keeps unrelated or sensitive files inside the skill folder, they could be included in the local package archive.
The packaging helper archives files from the selected skill directory. This is expected for packaging, but it will include whatever non-ignored files are present there.
for path in iter_files(skill_dir):
zf.write(path, path.relative_to(skill_dir))Before sharing or installing a packaged archive, inspect the skill directory and resulting zip contents for unintended files.