plugin-creator
v0.1.2Build, review, and debug OpenClaw plugins with the official plugin SDK. Use when creating or modifying `extensions/<id>` plugins, `openclaw.plugin.json`, plu...
⭐ 2· 81·0 current·0 all-time
by@pazyork
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description ask for building/reviewing OpenClaw plugins and the bundle contains SDK-guidance docs and an in-repo example plugin (observability-lab). The included files, manifests, and references match the declared purpose and do not request unrelated credentials or binaries.
Instruction Scope
SKILL.md and references guide the agent to inspect typical plugin artifacts (package.json, openclaw.plugin.json, index.ts, tests, session logs) and to prefer official docs and patterns. That scope is appropriate for plugin debugging, but it explicitly mentions reading runtime files and session logs (e.g., ~/.openclaw/agents/main/sessions/*.jsonl) — expected for debugging, but the user should be comfortable with those local reads when following the guidance.
Install Mechanism
No install spec (instruction-only skill). The repository includes example source files but the skill itself doesn't auto-download or execute remote code. This is a low-risk distribution model for a docs/example skill.
Credentials
The skill declares no required env vars or credentials. The example plugin code performs local filesystem I/O (creating ~/.openclaw plugin state directories, appending telemetry.jsonl). That file I/O is coherent with the Observability Lab example but could record transcripts/telemetry — users should be aware of local data written by the example when installing or running the plugin.
Persistence & Privilege
Skill flags are default (not always:true) and autonomous invocation is allowed (normal). The example plugin demonstrates writing persistent telemetry under plugin state directories; the skill itself does not attempt to modify other skills or system-wide agent settings, but installing the example plugin in a runtime will create and write files under the user's OpenClaw state directory.
Assessment
This skill appears coherent for building and debugging OpenClaw plugins and mostly provides documentation and an example plugin. Before installing or running the example plugin, review the included example code (especially the telemetry/observability code) because it writes events and may capture session/transcript data to files under your OpenClaw state (~/.openclaw/plugins/observability-lab/telemetry.jsonl). If you plan to install the example plugin in a real environment, consider: (1) inspecting package.json and openclaw.plugin.json for runtime dependencies, (2) running it in an isolated or test workspace first, (3) checking what data is logged and whether any sensitive transcripts could be recorded, and (4) following the skill's recommended pre-install validation steps (scoped tests, pnpm build, plugins inspect) before deployment.Like a lobster shell, security has layers — review code before you run it.
latestvk972dse2ct5pmqd5n9h9ymmp3h83mjzg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.