Skylv Skill Validator

PassAudited by VirusTotal on May 1, 2026.

Overview

Type: OpenClaw Skill Name: skylv-skill-validator Version: 1.0.0 The skill bundle is a utility designed to analyze and score the quality of OpenClaw skill documentation (SKILL.md). The core logic in engine.js uses standard Node.js file system modules to read local directories and perform heuristic analysis on markdown content (e.g., checking for headings, code blocks, and frontmatter). There is no evidence of data exfiltration, network activity, or malicious execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run on a broad or unintended folder, the script may read and summarize SKILL.md or README.md files from those subdirectories.

Why it was flagged

The CLI processes a user-supplied directory, or a default local skills directory, and generateReport reads subdirectories and documentation files. This is expected for the stated validator purpose, but it is still local file access.

Skill content
const targetDir = process.argv[2] || 'C:/Users/Administrator/workspace/skills';
  generateReport(targetDir);
Recommendation

Run it only against skill directories you intend to review, and check the generated report before sharing it.

What this means

A user following the auto-fix instructions may find the script missing or may be tempted to run a separately obtained script that was not part of this review.

Why it was flagged

SKILL.md documents an auto-fix companion script, but the supplied manifest includes only engine.js and SKILL.md. The absent script's behavior cannot be reviewed here, although the provided engine.js does not invoke it automatically.

Skill content
The companion script `fix_skill_md.cjs` automatically fixes:
- Missing `description` field
- Missing `keywords` field
- Missing `Install` section
- Missing `Usage` section

```bash
node fix_skill_md.cjs
```
Recommendation

Do not run any unprovided fix_skill_md.cjs unless you separately review its contents; the publisher should include the script or remove/update the documentation.