Skill Panwisdom Creator

PassAudited by ClawScan on May 13, 2026.

Overview

This is an instruction-only Chinese guide for creating OpenClaw skills, with some normal examples involving local files, CLI commands, publishing, and optional background-task patterns.

This skill appears safe to install as a guide for creating other skills. Before letting an agent run commands, publish packages, or start background sessions based on its examples, review the generated files and approve those actions explicitly.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If followed, the agent could help publish a skill package, so the user should review the skill contents and metadata before publishing.

Why it was flagged

The skill includes a publishing command as part of the documented workflow. Publishing is a meaningful external action, but it is clearly related to creating skills and appears as an example rather than hidden or automatic behavior.

Skill content
clawhub publish ./my-skill --slug my-skill --name "My Skill" --version 1.0.0
Recommendation

Keep publishing as an explicit user-approved step, especially for public or shared skills.

What this means

When creating or testing skills, the agent may suggest local commands or file changes.

Why it was flagged

The guide recommends using execution and file-writing capabilities when building skills. This is expected for skill development, and the artifacts do not include executable code or hidden commands.

Skill content
优先用内置能力(`exec`、文件读写、标准库)。引入外部 API 时,必须写清楚前提条件和出错怎么办。
Recommendation

Review commands before running them and avoid executing untrusted scripts from existing or generated skills without inspection.

What this means

A generated skill could be designed to continue work in the background after the main session changes.

Why it was flagged

The documentation shows an optional background-task pattern for long operations. It is disclosed, has a timeout in the example, and is not automatically invoked by this instruction-only skill.

Skill content
sessions_spawn({ task: "后台任务描述", runTimeoutSeconds: 300 })
// 主会话重启后,后台任务继续跑
Recommendation

Use background sessions only for clearly requested long-running tasks, with timeouts and user-visible status.