Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cli Tool Generator

Generate ready-to-use Bash or Python CLI tool skeletons with argument parsing, help docs, error handling, and shell completions in seconds.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 54 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The files (generator.sh, validator.sh, preflight.sh, tests) implement a CLI scaffolder as described. However, SKILL.md and the tests refer to a top-level 'cligen' CLI entrypoint which is not present in the provided file manifest. This mismatch means the instructions ('run cligen create') cannot be executed as-is from the bundle and suggests a packaging/entrypoint omission.
Instruction Scope
SKILL.md instructs running local commands (cligen create/validate/completions/doctor) and validating generated code. The instructions do not ask the agent to read unrelated system secrets or exfiltrate data; the scripts operate on local files and standard system utilities. The validator reads files under the target path and the generator may create config files (./config.ini) — expected behavior for this tool.
Install Mechanism
No install spec (instruction-only) is present; the package contains shell scripts only and does not download external archives. There are no URLs or extract/install steps in the manifest. This is low-risk from an install mechanism perspective, though executing included scripts still runs code on the host.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The scripts use common system commands (bash, git, sed, awk, date, whoami), and read/write local files (generated tools, config.ini). No evidence of unrelated credential access or external service tokens.
Persistence & Privilege
always is false and disable-model-invocation is false (normal). The skill does not request permanent system-wide changes in its manifest; its scripts may install a generated tool into user-specified directories (e.g., /usr/local/bin) if run with appropriate permissions, which is expected behavior for a scaffolder.
What to consider before installing
This skill appears to implement a legitimate CLI scaffolding tool, but before installing or running it: (1) note that the package references a top-level 'cligen' entrypoint (used by README and tests) which is missing from the provided files — ask the publisher for the missing wrapper or provide one yourself; (2) inspect the missing entrypoint (or create a safe shim) to confirm it doesn't perform network calls or unexpected operations; (3) run the scripts in a sandbox (container or VM) the first time, because they write files and can install generated tools into directories like /usr/local/bin if run with sufficient permissions; (4) be aware the README includes both an MIT license and commercial pricing terms — clarify licensing/commercial usage before using in a business setting; (5) if you need higher assurance, request the author/publisher to republish with the declared 'cligen' entrypoint and a reproducible install method, or run the provided test suite in an isolated environment. If the missing 'cligen' file is fixed and the entrypoint shows only local file operations (no network/credential use), my classification would likely change to benign.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.2.1
Download zip
latestvk979d7rw3dqx5pthqd6vp7et9x838kja

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

version: 1.2.1

cligen - CLI Tool Generator

Fast CLI tool scaffolding generator for Bash & Python

Overview

Generate production-ready CLI tool skeletons with proper argument parsing, help docs, error handling, and shell completions — in seconds.

Usage

For the AI Agent

When the user asks to "create a CLI tool" or "generate a command-line tool":

  1. Run cligen create with the appropriate parameters
  2. If the user specifies requirements, translate them into --commands
  3. Validate the generated tool with cligen validate
  4. Report results to the user

CLI Commands

# Generate a new CLI tool (Bash)
cligen create --name mytool --lang bash --commands "status,deploy,config" --desc "My deployment tool"

# Generate a new CLI tool (Python)
cligen create --name mytool --lang python --commands "build,test" --desc "Build tool"

# Validate an existing CLI tool
cligen validate ./mytool/

# Generate shell completions
cligen completions --shell bash --commands "build,test,deploy"

# Check development environment
cligen doctor

Options

OptionDescriptionDefault
--name NAMETool name (required)-
--desc DESCTool description""
--lang LANGLanguage: bash|pythonbash
--commands CMDsComma-separated commandshelp,version
--output DIROutput directory./<name>
--non-interactiveSkip promptsfalse

What Gets Generated

  • Main script — executable entry point with full arg parsing & dispatch
  • README.md — usage documentation
  • .gitignore — language-appropriate ignores
  • requirements.txt — (Python only) dependency file

Best Practice Checks

The validate command checks 10 criteria:

  1. Executable main script
  2. Valid shebang
  3. Strict mode (Bash: set -euo pipefail)
  4. Error handling
  5. Argument parsing
  6. Help documentation
  7. Version information
  8. README.md
  9. .gitignore
  10. Copyright header

File Structure

skills/cli-tool-generator/
├── SKILL.md              # This file
├── cligen                # CLI entry point
├── src/
│   ├── generator.sh      # Core generation logic
│   ├── preflight.sh      # Environment checks
│   ├── validator.sh      # Best practice validation
│   ├── templates/        # (reserved for future templates)
│   └── completions/      # (reserved for future completions)
├── tests/
│   └── test_all.sh       # Full test suite
└── package.json

Trigger Phrases

  • "create a CLI tool"
  • "generate a command-line tool"
  • "CLI scaffold"
  • "新建命令行工具"
  • "生成CLI工具"

📄 许可证与版权声明

MIT License Copyright (c) 2026 思捷娅科技 (SJYKJ) 免费使用、修改和重新分发时,需注明出处。 出处:GitHub: https://github.com/zhaog100/xiaomili-skills | ClawHub: https://clawhub.com | 创建者: 思捷娅科技 (SJYKJ) 商业使用授权:个人免费 | 小微¥999/年 | 中型¥4,999/年 | 大型¥19,999/年

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…