Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Feature Forge
v0.1.2Generates complete features from natural language — components, API routes, migrations, types, and tests
⭐ 0· 149·1 current·1 all-time
byGuilherme Favaron@guifav
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's claimed purpose (generate full-stack features for Next.js+Supabase) matches the actions described in SKILL.md (modify src/, create migrations, run tsc/tests). However registry metadata shown earlier lists no required env vars or binaries while both SKILL.md and claw.json declare node/npx/git and NEXT_PUBLIC_SUPABASE_* env vars — this mismatch is unexplained and reduces trust.
Instruction Scope
Runtime instructions explicitly direct the agent to read the repository (src/, migrations/, package.json), create/modify files, run npx supabase gen types, run TypeScript compile checks, and run the test suite. Those steps are consistent with generating and verifying code but grant the agent broad discretion to execute arbitrary repo commands and modify files; SKILL.md forbids reading .env files and making runtime API calls, but those are self-imposed constraints and rely on the executor to enforce them.
Install Mechanism
This is an instruction-only skill with no install spec or downloaded code. That minimizes supply-chain risk from external downloads. The claw.json indicates required binaries (node, npx, git) which aligns with the instructions to run local commands.
Credentials
The skill claims it only needs public client-side env vars (NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY), which is plausible for generating templates. However registry-level 'Requirements' reported earlier said none, while claw.json and SKILL.md declare these env vars — an inconsistency. Also claw.json lists a 'filesystem' permission (expected for code-gen) but that is high privilege and should be acknowledged by the user.
Persistence & Privilege
always:false and disable-model-invocation:false (normal). The skill will read and write repository files and run commands but does not request permanent 'always' presence. There is no evidence it modifies other skills or system-wide settings.
What to consider before installing
What to check before installing:
- Metadata mismatch: SKILL.md and claw.json require node/npx/git and NEXT_PUBLIC_SUPABASE_* env vars, but registry 'Requirements' listed none; confirm with the publisher which is authoritative and why the registry record differs.
- Filesystem & command execution: The skill will read and modify your repo and run commands (npx, tsc, tests). Run it only on a disposable branch or in a sandbox/container so changes are reviewable and won't affect production.
- Env vars: The requested env vars are client-side/public Supabase keys (lower risk), but ensure no admin/service_role keys are ever provided. The skill states it will not read .env files; nevertheless, avoid running it in environments where secrets are accessible to the agent runtime.
- Source provenance: The registry 'Source' was unknown and homepage was missing in the earlier summary, though claw.json references a GitHub URL. Prefer skills with a verifiable source repo and a known author—ask for the upstream repo link and inspect it yourself.
- Review outputs: Require the skill to produce a patch/PR or a list of file diffs rather than committing directly, and review generated migrations and API routes before applying to your database.
If the publisher provides a public repo that matches the published metadata and you can run the skill in an isolated environment (or it can be constrained to only output diffs), the risks are much lower. If you cannot verify provenance or cannot sandbox execution, do not grant it filesystem/command execution access to important repositories.Like a lobster shell, security has layers — review code before you run it.
latestvk975je1th38rgwzmxdm6rsq89n83fq5r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.