Repo Onboarding Guide

扫描仓库目录与说明文件，生成新成员上手路径、推荐阅读顺序与踩坑提醒。；use for repo, onboarding, developer-experience workflows；do not use for 泄漏私有源码内容到外部, 执行构建命令.

This skill appears to do what it says (produce onboarding reports) and only needs python3, but there is a notable mismatch: docs claim it only inspects directory/file names while the script actually reads file contents (Markdown, code, CSV) and pattern-scans for secrets. Before installing or running: 1) review scripts/run.py yourself (it's bundled) and confirm you are comfortable with it reading repository files; 2) do not run it against repositories containing secrets or private data unless you are prepared to review/strip outputs first; 3) run in a sandbox or with --dry-run and inspect generated output before sharing externally; 4) if you require stricter guarantees (e.g., only filenames), request or implement a version that limits reads to file metadata only; 5) if you plan to allow autonomous invocation, be aware that an agent could run the script on any repository it has access to — restrict skill usage or add explicit checks to avoid accidental data leakage.

Type: OpenClaw Skill Name: repo-onboarding-guide Version: 1.0.0 The skill bundle is a repository analysis tool designed to generate onboarding guides by scanning local file structures and documentation. The core logic in `scripts/run.py` performs read-only operations, including a security-focused feature that uses regex to detect (but not execute) risky patterns like hardcoded secrets or 'curl|bash' commands in the target repository. The instructions in `SKILL.md` and `README.md` are well-defined, explicitly prohibiting data exfiltration and unauthorized command execution, and the code contains no network activity, obfuscation, or persistence mechanisms.