Skillsmith

Scaffold a new OpenClaw skill project with starter docs, tests, fixtures, and optional security workflow.

Security Scan

This is a scaffolding CLI for creating OpenClaw skill projects; its code, runtime instructions, and requirements are consistent with that purpose and do not request unexpected credentials or network installs.

Purpose & Capability

Name/description (skill scaffolder) match the included CLI and library code. The only required runtime is node, which is appropriate for a Node.js generator.

Instruction Scope

SKILL.md and the CLI instruct the agent/user to run the local generator and reference only local paths in the generated project. The generator writes files to the specified output directory and does not attempt to read or exfiltrate unrelated system files or environment variables.

Install Mechanism

No install spec is present (instruction-only at registry level). The package includes small, readable JS source files that write local templates; there are no downloads from remote URLs or extracted archives during generation.

Credentials

The skill declares no required environment variables. The generator writes a .env.example containing OPENCLAW_API_KEY as a placeholder (reasonable for a project template) but does not require or read secrets itself.

Persistence & Privilege

always is false and model invocation is normal. The generator only creates files under the user-specified output path; it will remove the target directory when run with --force (expected behavior for a CLI scaffolder). It does not modify other skills or global agent settings.

Assessment

This appears to be a straightforward, local scaffolding tool. Before using it: (1) review the small source files if you want to confirm behavior (they are included and readable), (2) be cautious with the CLI --force flag since the generator will recursively delete the target directory if present, (3) review any generated CI workflow (.github/workflows/security-scan.yml) before enabling it in your repository — it runs 'npx clawshield' which will install/run that tool in CI, and (4) treat the generated .env.example as a template only (the generator does not read your environment or keys). If you need additional assurance, run the included tests (test.js) in an isolated temp directory first.

Skill Starter

Generate a reviewable starting point for a new OpenClaw skill.

When to use

• You want a repeatable folder layout instead of assembling a skill by hand.
• You need a starter SKILL.md, smoke test, fixtures, and optional CI workflow.
• You want a stricter template with Safe Install policy scaffolding.

Command

node {baseDir}/bin/create-openclaw-skill.js my-skill
node {baseDir}/bin/create-openclaw-skill.js my-skill --no-prompts --out ./skills
node {baseDir}/bin/create-openclaw-skill.js my-skill --template strict-security --ci
node {baseDir}/bin/create-openclaw-skill.js my-skill --force

Templates

Template	Focus
standard	baseline docs, fixtures, and tests
strict-security	adds policy scaffolding, security docs, and ClawShield CI

Generated files

• SKILL.md: skill instructions with OpenClaw-compatible frontmatter
• package.json: project manifest
• docs/: architecture and security notes
• scripts/: local script directory
• tests/: smoke test stub
• .env.example: environment variable template
• CHANGELOG.md: release notes starter
• scripts/profile-target.js: profiling helper
• fixtures/: sample input data
• .github/workflows/security-scan.yml: optional CI workflow

Interactive prompts

Option	Prompt	Default
name	skill name	CLI argument
description	skill description	{name} skill generated by Skill Starter
category	skill category	AI Skills
ci	include CI workflow	y/N

strict-security extras

• .openclaw-tools/safe-install.policy.json: Safe Install policy scaffold
• docs/security.md: security integration guide
• .github/workflows/security-scan.yml: ClawShield scan workflow

Boundaries

• The scaffold is intentionally lightweight. You still need to replace placeholders and add real business logic.
• Generated SKILL.md files are now aligned to OpenClaw-style frontmatter and use {baseDir} for local command examples.