proj-builder
v1.0.0Generate structured project scaffolds and template files for Node.js, Python, and Go using predefined templates via bash commands.
⭐ 0· 54·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (project scaffolding for Node/Python/Go) aligns with the included script and templates. SKILL.md documents dependencies on bash >=4.0 and python3 >=3.7, but the registry metadata lists no required binaries — this is an inconsistency in metadata (not in behavior). All actions in the script are consistent with generating files for project templates.
Instruction Scope
SKILL.md instructs the agent to run the provided script.sh with list|init|generate. The script creates files and directories under the chosen project name and prints next steps. It does not read unrelated system files, access environment variables, or send data to external endpoints.
Install Mechanism
There is no install spec (instruction-only plus an included script), so nothing is downloaded or installed by the platform. The included script writes files to disk when invoked, which is expected for a scaffolding tool.
Credentials
The skill requests no environment variables or credentials. The script does not access secret-like env vars or config paths. It does execute python3 subprocesses (heredoc Python) — consistent with the stated requirements and not excessive for the task.
Persistence & Privilege
The skill is user-invocable, not always-on, and does not request persistent privileges or modify other skills/system-wide configurations. It only writes files into the target project directory as expected.
Assessment
This skill appears to do what it says: generate project scaffolds by running the included script which in turn uses Python heredocs to write files. Before running: (1) ensure you have bash and python3 installed (SKILL.md requires them — the registry metadata omitted these), (2) run the script in an empty or disposable directory because it will create files and directories named after your project, (3) inspect the generated package manifests (package.json, pyproject.toml, go.mod) before running package install commands, and (4) if you need higher assurance, review the full scripts/script.sh file (the provided manifest is large; confirm the tail contains no unexpected behavior). There are no declared credentials or network calls in the visible code.Like a lobster shell, security has layers — review code before you run it.
latestvk971yxr98k3hnvd9j9hf5n2wwd83vj46
License
MIT-0
Free to use, modify, and redistribute. No attribution required.