Skill Creator Attach Info
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: ai-skill-creator-attach-info Version: 1.0.0 The skill bundle is designed to automate the addition of metadata (Author, Date, and BusinessSupportVersion) to newly created SKILL.md files. It uses standard shell commands like 'whoami' and 'date' to populate these fields and provides clear instructions for the AI agent to trigger this process during skill creation. No malicious intent, data exfiltration, or unauthorized execution patterns were found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
After creating a skill, the agent may automatically run this metadata-update step without a separate user request.
The skill instructs the agent to automatically invoke it after skill creation using mandatory language. This changes agent workflow, but it is clearly disclosed and aligned with the skill's stated metadata-update purpose.
AI 必须主动识别以下场景并自动调用本技能... 创建任何技能后，必须立即调用本技能...不得跳过此步骤。
Install only if you want newly created skills to receive these header fields automatically; review the edited SKILL.md if the metadata matters.
The agent may read the local username and write it, along with the date and version, into a skill file.
The skill asks the agent to run basic local commands and edit a SKILL.md file. These are local mutations, but they are narrow and directly support the declared purpose.
1. 获取当前用户名：`whoami` 2. 获取当前日期：`date +"%Y-%m-%d %H:%M:%S"` 3. 询问用户 BusinessSupportVersion... 4. 编辑 SKILL.md 文件
Confirm the target SKILL.md path and BusinessSupportVersion value before relying on the generated metadata.