Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Skill Scaffold

AI agent skill scaffolding CLI. Create skills for OpenClaw, Moltbot, Claude, Cursor, ChatGPT, Copilot instantly. Vibe-coding ready. MCP compatible.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
1 · 3k · 16 current installs · 16 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (skill scaffolder) match the included files and code: the package provides a CLI that creates SKILL.md, README.md, scripts/, and optional bin/ CLI files. No unrelated capabilities, credentials, or binaries are requested.
Instruction Scope
The SKILL.md and README instruct how to use the CLI and how to edit/publish generated skills. There are no instructions to read unrelated system files, exfiltrate data, or access secrets. Runtime behavior is limited to generating files and directories.
Install Mechanism
No install spec in the registry metadata; the package is a normal npm-style CLI with source in bin/ and package.json. There are no remote downloads, URL shorteners, or archive extraction steps in the code. The installer risk is low.
Credentials
The skill declares no required environment variables, credentials, or config paths. The code uses process.cwd() and provided flags; it does not read secrets or other environment variables beyond defaults.
Persistence & Privilege
No elevated persistence requested: always is false, and the skill does not attempt to modify other skills or system-wide agent settings. It only writes files into the target output directory supplied by the user.
Assessment
This package is internally coherent and appears benign, but before installing globally you should: (1) verify the npm package and repository authorship (registry metadata showed no homepage but package.json points to a GitHub repo), (2) inspect the CLI source (bin/skill-scaffold.js) yourself — it writes files and sets an executable bit for generated CLI files, (3) avoid running it into directories that contain important data (the tool aborts if the target dir already exists, but always review output), and (4) prefer running it in a sandbox or local project folder first. If you plan to publish generated skills, review generated SKILL.md and any code for secrets or external endpoints before publishing.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.4
Download zip
aivk97fbf6p718a8cs9z5wx0sw5jh80c3wdclawdbotvk97fbf6p718a8cs9z5wx0sw5jh80c3wdclivk97fbf6p718a8cs9z5wx0sw5jh80c3wdgeneratorvk97fbf6p718a8cs9z5wx0sw5jh80c3wdlatestvk97ep1c2sa1rzcbqj8c1q8w4ph80yqd1openclawvk97fbf6p718a8cs9z5wx0sw5jh80c3wdscaffoldvk97fbf6p718a8cs9z5wx0sw5jh80c3wdskillvk97fbf6p718a8cs9z5wx0sw5jh80c3wd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Skill Scaffold

Create AI agent skills in seconds. Supports OpenClaw/Moltbot, MCP servers, and generic skill structures.

Trigger Words

Use this skill when the user mentions:

  • "create a skill"
  • "scaffold a skill"
  • "new skill template"
  • "skill generator"
  • "make a openclaw skill"
  • "mcp server template"

Quick Start

# Install globally
npm install -g skill-scaffold

# Create a OpenClaw skill
skill-scaffold my-awesome-skill

# Create an MCP server
skill-scaffold my-api --template mcp

# With all options
skill-scaffold weather-bot --template openclaw --cli --description "Weather alerts for agents"

Commands

CommandDescription
skill-scaffold <name>Create skill with default (openclaw) template
skill-scaffold <name> --template mcpCreate MCP server scaffold
skill-scaffold <name> --template genericCreate minimal skill
skill-scaffold <name> --cliInclude CLI binary scaffold
skill-scaffold --helpShow help

Templates

OpenClaw (default)

Full skill structure for OpenClaw/Moltbot agents:

  • SKILL.md with YAML frontmatter, trigger words, commands table
  • README.md with badges, installation, features
  • scripts/ folder for helpers

MCP

Model Context Protocol server scaffold:

  • SKILL.md with MCP config examples
  • Tools and resources documentation
  • Ready for Claude Desktop/Cursor integration

Generic

Minimal structure:

  • Basic SKILL.md
  • Simple README.md

Options

OptionDescriptionDefault
--template <type>Template: openclaw, mcp, genericopenclaw
--author <name>Author nameNextFrontierBuilds
--description <text>Skill descriptionAuto-generated
--dir <path>Output directoryCurrent directory
--cliInclude CLI binary scaffoldfalse
--no-scriptsSkip scripts folderfalse

Usage Examples

# Create in current directory
skill-scaffold my-skill

# Create in specific directory
skill-scaffold my-skill --dir ~/clawd/skills

# MCP server with custom author
skill-scaffold github-mcp --template mcp --author "YourName"

# Full CLI tool
skill-scaffold awesome-cli --cli --description "Does awesome things"

Output Structure

my-skill/
├── SKILL.md       # Main documentation (OpenClaw reads this)
├── README.md      # GitHub/npm readme
├── scripts/       # Helper scripts (optional)
└── bin/           # CLI binary (if --cli flag used)
    └── my-skill.js

After Creating

  1. cd my-skill
  2. Edit SKILL.md with your actual documentation
  3. Add implementation (scripts or bin/)
  4. Test locally
  5. Publish: clawdhub publish . or npm publish

Notes

  • Skill names must be lowercase with hyphens only
  • SEO keywords are auto-included in generated files
  • Works with OpenClaw, Moltbot, and any agent that reads SKILL.md

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…