Lucky Skill Creator
Analysis
This skill appears to be a legitimate skill-building helper whose local file creation and packaging behavior is expected for its purpose.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
for file_path in skill_path.rglob("*"):
...
zipf.write(file_path, arcname)The packaging helper recursively includes files from the user-selected skill directory into a .skill archive. This is expected for a packager, but selecting the wrong directory could bundle unintended files.
example_script.write_text(EXAMPLE_SCRIPT.format(skill_name=skill_name)) example_script.chmod(0o755)
The initializer can create an executable example script as part of a new skill template. This is disclosed and aligned with the skill-creation purpose, but generated executable placeholders should be reviewed.
