ClawHub

Skill Creator Attach Info

v1.0.0

创建技能后完善头部信息。触发场景：(1) 调用 skill-creator 技能创建新技能后；(2) 用户说'创建技能'、'新建技能'、'添加技能'时；(3) 完成 SKILL.md 文件创建后。必须在创建任何技能后立即调用此技能添加 Author、Date、BusinessSupportVersion 信息。

⭐ 1· 303·1 current·1 all-time
by@quntion
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description state the job is to add header metadata after skill creation; the instructions (adding Author/Date/BusinessSupportVersion to SKILL.md) directly implement that and do not request unrelated capabilities or credentials.
ℹ
Instruction Scope
Runtime instructions call local commands whoami and date and then edit the SKILL.md file (expected for adding Author/Date). This is within scope, but it does read the local account name (may reveal system identity) and will modify files under the user's .trae/skills path — users should expect automatic file edits.
✓
Install Mechanism
No install spec or code is present (instruction-only), so nothing is written to disk by an installer and no external packages are fetched.
✓
Credentials
No environment variables, credentials, or config paths are requested. The only system access is to run whoami/date and edit SKILL.md, which is proportional to the stated task.
ℹ
Persistence & Privilege
always is false (good). The skill requires the agent to proactively detect triggers and automatically invoke it to modify SKILL.md files; autonomous invocation is platform-default but this behaviour means the agent will auto-edit newly created skill files — users should be aware and consent to that automatic modification.
Assessment
This skill is coherent for its purpose: it will run local whoami and date commands and then edit the new skill's SKILL.md to add Author, Date, and BusinessSupportVersion. Before installing, decide whether you want the agent to automatically modify SKILL.md files (the skill is designed to run when it detects 'create skill' or when skill-creator finishes). Note that whoami will record the local account name as Author — if you prefer a different author string or want to avoid exposing your system username, configure the agent to prompt for or override the Author value, or do not enable automatic invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ezz9tg7e60abhypws151hds82ynas

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments