Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gsd Claw

Spec-driven development with built-in verification for substantial projects. Use when user wants to plan a project, scope a feature, build something with structure, or says "GSD mode", "let's plan", "scope out", "spec-driven". Workflow is Discuss → Plan → Execute → Verify. Based on glittercowboy's GSD system (MIT license). NOT for quick questions or simple tasks.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
3 · 1.3k · 3 current installs · 3 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the provided instructions and file templates. The SKILL.md and assets define a project planning → execution → verification workflow; all required artifacts (plans, context, summaries) are present. There are no declared environment variables, binaries, or installs that contradict the stated purpose.
Instruction Scope
Instructions direct the agent to create and write files under {project}/.gsd/, spawn sub-agents for research and execution, run 'verify' commands, and commit changes 'if applicable'. These actions are expected for an execution-capable project workflow but do give the agent discretionary access to the workspace and to run commands. The SKILL.md does not attempt to read secrets or unusual system paths, nor does it specify external endpoints. Users should be aware the skill intends to modify project files and may run commands (e.g., tests, verification scripts).
Install Mechanism
Instruction-only skill with no install spec and no code files to execute. This minimizes install-time risk; nothing is downloaded or written by an installer.
Credentials
The skill requests no environment variables, no credentials, and no config paths. This is proportionate for a local project planning/execution tool. Note: the instructions implicitly assume common developer tooling (git, test runners) may be available but none are required as declared environment items.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modification of other skills. It intends to create a .gsd directory inside project workspaces (normal for a project-oriented skill). Autonomous invocation is allowed by default but not excessive here.
Assessment
This skill is an instruction-only manifest of the GSD workflow and appears internally consistent. Before installing or enabling it, be aware: (1) it will create and modify files under your project (a {.gsd} directory) and may commit changes — ensure the agent has only the repository/workspace access you intend; (2) it can spawn sub-agents and run verification commands (tests, file checks), so make sure your environment's test/CI tooling and any commands the skill runs are safe and do not have access to secrets; (3) the SKILL.md assumes typical developer tools (git, test runners) but does not declare them — verify those tools are present and that you consent to commits or other side effects; (4) because it requests no credentials and has no install step, there's no obvious network/data-exfiltration vector in the provided files, but review generated .gsd outputs and verification commands before accepting automated commits or deployments. If you want lower risk, run this skill in an isolated workspace or require manual approval before any commit or external action.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk974snvbgbng36ryhj91gfzgsd80pa7f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

GSD Claw

A spec-driven development system adapted for OpenClaw. Transforms vague ideas into verified, working implementations through structured workflows.

Based on: glittercowboy/get-shit-done
Original Author: Lex Christopherson (@glittercowboy)
License: MIT

When to Use

Trigger this skill when user says:

  • "Let's plan [project/feature]"
  • "I want to build [something]"
  • "Scope out [project name]"
  • "GSD mode" or "spec-driven"
  • "Plan and execute [task]"
  • Any substantial project that needs structure

NOT for: Quick questions, simple tasks, chat conversations.

Core Philosophy

From the original GSD:

"The complexity is in the system, not in your workflow."

Principles:

  1. Plans ARE prompts — Executable instructions, not documents to interpret
  2. Verification built-in — Every task has acceptance criteria
  3. Fresh context per task — Subagents prevent context rot
  4. Solo developer + AI — No enterprise theater

Workflow Overview

┌─────────────────────────────────────────────────────────────┐
│  1. DISCUSS     Capture decisions before planning           │
│  2. PLAN        Research → Create verified specs            │
│  3. EXECUTE     Work through tasks with deviation rules     │
│  4. VERIFY      Confirm deliverables actually work          │
└─────────────────────────────────────────────────────────────┘

Phase 1: DISCUSS

Purpose: Capture user's vision BEFORE any planning.

Process:

  1. Ask about the goal (what are we building?)
  2. Identify gray areas based on domain:
    • Visual features → layout, interactions, empty states
    • APIs → response format, error handling
    • Content → structure, tone, depth
  3. For each area, ask until user is satisfied
  4. Document decisions in {project}/.gsd/CONTEXT.md

Output Structure:

# Context: [Project/Phase Name]

## Decisions (Locked)
- [User decision 1]
- [User decision 2]

## Agent Discretion (Freedom Areas)
- [Area where agent can choose approach]

## Deferred Ideas (Out of Scope)
- [Not doing this now]

Rule: Never assume. Always ask.


Phase 2: PLAN

Purpose: Create executable task specs with built-in verification.

Research (Optional but Recommended)

Spawn sub-agent to investigate:

  • Technical approach options
  • Potential pitfalls
  • Best practices for the domain

Save to: {project}/.gsd/RESEARCH.md

Create Plans

Each plan = 2-3 tasks maximum (context efficiency).

Task XML Structure:

<task type="auto">
  <name>Task N: Action-oriented name</name>
  <files>src/path/file.ts, src/other/file.ts</files>
  <action>
    What to do, what to avoid and WHY.
    Be specific. No guessing.
  </action>
  <verify>Command or check to prove completion</verify>
  <done>Measurable acceptance criteria</done>
</task>

Task Types:

  • type="auto" — Agent executes autonomously
  • type="checkpoint:verify" — User must verify
  • type="checkpoint:decision" — User must choose

Plan Verification

Before execution, verify plans against:

  • Tasks are specific and actionable
  • Each task has verify + done criteria
  • Scope matches CONTEXT.md decisions
  • No enterprise bloat

Save plans to: {project}/.gsd/plans/{phase}-{N}-PLAN.md


Phase 3: EXECUTE

Purpose: Work through tasks with deviation handling.

Execution Rules

  1. Read plan as literal instructions
  2. Execute each task in order
  3. Verify done criteria before moving on
  4. Apply deviation rules automatically
  5. Document everything

Deviation Rules

Apply automatically — track for summary:

RuleTriggerActionPermission
BugBroken behavior, errors, security issuesFix → verify → trackAuto
Missing CriticalMissing validation, auth, error handlingAdd → verify → trackAuto
BlockingPrevents completion (missing deps, wrong types)Fix blocker → trackAuto
ArchitecturalNew table, schema change, breaking APISTOP → ask userAsk

Rule 4 (Architectural) Format:

⚠️ Architectural Decision Needed

Current task: [task name]
Discovery: [what prompted this]
Proposed change: [modification]
Why needed: [rationale]
Alternatives: [other approaches]

Proceed? (yes / different approach / defer)

Fresh Context Pattern

For multi-task execution, spawn sub-agents:

  • Each sub-agent gets fresh 200k context
  • Main context stays lean for user interaction
  • Prevents quality degradation

Task Completion

After each task:

  1. Verify done criteria met
  2. Commit changes (if applicable)
  3. Record in summary
  4. Move to next task

Phase 4: VERIFY

Purpose: Confirm deliverables actually work.

Automated Verification

  • Run verify commands from each task
  • Check files exist
  • Run tests if applicable

User Acceptance

Walk user through testable deliverables:

  1. Extract what they should be able to do now
  2. Present one at a time
  3. Get yes/no or issue description
  4. If issues found → create fix plans

If all pass: Mark phase complete.
If issues: Don't debug manually — create fix plan and re-execute.


File Structure

{project}/
└── .gsd/
    ├── PROJECT.md           # Vision, always loaded
    ├── STATE.md             # Current position, decisions, blockers
    ├── REQUIREMENTS.md      # Scoped v1/v2 requirements
    ├── ROADMAP.md           # Phases and progress
    ├── CONTEXT.md           # User decisions from discuss phase
    ├── RESEARCH.md          # Domain research (optional)
    └── plans/
        ├── 01-01-PLAN.md    # Phase 1, Plan 1
        ├── 01-01-SUMMARY.md # Execution results
        └── ...

Templates: Copy from assets/ directory when initializing project files.


Quick Mode

For small tasks that don't need full planning:

Trigger: "Quick: [task description]"

Process:

  1. Skip research and discussion
  2. Create single plan with 1-3 tasks
  3. Execute with deviation rules
  4. Verify and commit

When to use:

  • Bug fixes
  • Small features
  • Config changes
  • One-off tasks

State Management

STATE.md Template

# Project State

## Current Position
Phase: [N]
Plan: [N of M]
Status: [planning | executing | verifying | blocked]

## Decisions Made
- [Decision 1] — [rationale]
- [Decision 2] — [rationale]

## Blockers
- [Blocker if any]

## Deviations Applied
- [Rule N] [Description] — [resolution]

Update STATE.md after each significant action.


Anti-Patterns (Banned)

From original GSD:

Enterprise theater

  • Story points, sprint ceremonies
  • Human time estimates (days/weeks)
  • RACI matrices, stakeholder syncs

Vague tasks

<!-- BAD -->
<task>
  <name>Add authentication</name>
  <action>Implement auth</action>
  <verify>???</verify>
</task>

Filler language

  • "Let me...", "I'd be happy to..."
  • "Great question!", "Excellent!"

Direct, imperative, technical


OpenClaw Adaptations

Original GSDOpenClaw Version

GSDOpenClaw
/gsd:command slash commandsNatural language triggers
Claude Code Task() spawningsessions_spawn sub-agents
.claude/ directory{project}/.gsd/ directory
Bash scriptsPowerShell/cross-platform
git commit protocolOptional, user preference

Preserved Core:

  • XML task structure with verify/done
  • Deviation rules
  • Fresh context via sub-agents
  • State management
  • Plan verification loop

Example Usage

User: "Let's plan the ORO website SEO overhaul"

Agent (DISCUSS):

Starting GSD workflow for: ORO Website SEO Overhaul

Before planning, I need to understand your vision.

1. What's the primary goal?
   a) Rank higher for specific keywords
   b) Improve technical SEO scores
   c) Both
   d) Something else

2. Any pages that are highest priority?
3. Budget constraints for tools/services?
4. Timeline expectations?

After discussion → creates CONTEXT.md

Agent (PLAN):

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 GSD ► PLANNING: ORO SEO Overhaul
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Spawning research sub-agent...
[Research complete]

Creating plans...
- Plan 1: Technical SEO fixes (3 tasks)
- Plan 2: Content optimization (2 tasks)
- Plan 3: Performance improvements (3 tasks)

Verifying plans against requirements...
✓ All checks passed

Ready to execute?

Credits

This skill is adapted from Get Shit Done (GSD) by Lex Christopherson (@glittercowboy).

Thank you Lex for creating an incredibly effective system for building things with AI.


Version History

  • 1.0.0 — Initial OpenClaw adaptation

Files

8 total
Select a file
Select a file to preview.

Comments

Loading comments…