Dev Environment
v2.0.4Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Dev Environment concepts, best practices, and implementation patt...
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description describe a documentation/reference tool and the included SKILL.md and scripts provide only text outputs and help content. There are no unrelated requirements (no credentials, no external services), so the requested capabilities match the stated purpose.
Instruction Scope
SKILL.md explicitly states all commands output heredoc text with no network access or credentials. The runtime script implements those commands and only prints static documentation. Minor inconsistencies: SKILL.md version (2.0.3), registry version (2.0.4), and script VERSION (2.0.2) differ; the cheatsheet references a 'troubleshooting' command that isn't implemented. These are quality issues but do not expand scope or indicate malicious behavior.
Install Mechanism
No install spec is provided and the skill is instruction/script-only. No downloads, third-party package installs, or archive extraction occur. This is low-risk from an install mechanism perspective.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The script also does not read environment variables or secret files. The credential/environment access is proportionate to a read-only reference tool.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges or modify system/agent-wide settings. It is user-invocable and can be invoked autonomously per platform defaults; this is expected and acceptable given the limited scope.
Assessment
This skill appears to be a simple, read-only reference implemented as a shell script and markdown instructions. It does not request credentials or perform network calls. Before installing, you may want to: (1) note the small version mismatches in the metadata (harmless but signals minor maintenance issues); (2) review the script if you plan to run it in an environment with strict policies; and (3) run it in a sandbox or test account if you have high security requirements. Overall it is coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latest
Dev Environment
Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Dev Environment concepts, best practices, and implementation patt... No API keys or credentials required.
Commands
| Command | Description |
|---|---|
intro | intro reference |
quickstart | quickstart reference |
patterns | patterns reference |
debugging | debugging reference |
performance | performance reference |
security | security reference |
migration | migration reference |
cheatsheet | cheatsheet reference |
Output Format
All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.
Powered by BytesAgain | bytesagain.com | hello@bytesagain.com
Comments
Loading comments...
