openclaw skill creator

Teach your OpenClaw agent new tricks by creating custom skills. Use when you want your agent to do something it can't do yet — like "read my Google Calendar"...

This generator appears to be what it claims: a local tool that writes new SKILL.md files and example code. However, the skills it creates (e.g., Google Calendar reader or Slack messenger) will legitimately require API credentials or service-account files. Before using any generated skill, review the generated SKILL.md and code: 1) only provide API keys or JSON credential files if you trust the integration and understand its scope; 2) store credentials securely (avoid world-readable files and prefer least-privilege tokens); 3) check the generated code for any endpoints or behaviors you do not expect; and 4) test new skills in a limited or non-production environment first. If you want higher assurance, ask the author for provenance or signed releases, or run the generated code through your organization's code review process before enabling it in agents that have access to sensitive data.

Type: OpenClaw Skill Name: openclaw-skill-creator-pro Version: 1.0.2 The skill bundle is a legitimate utility designed to help users generate boilerplate code and instructions for creating custom OpenClaw skills, such as Google Calendar integrations, Slack bots, and CSV analyzers. The logic in `handler.ts` uses predefined templates to generate markdown and TypeScript code based on user descriptions, and it provides helpful setup guides for obtaining API keys. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the tool operates locally and follows standard development practices for handling credentials via environment variables.