← Back to Skills Marketplace
rfdiosuao

Skill Combo - 技能组合器

by rfdiosuao · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
105
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skill-combo
Description
支持同时启用多个技能协同工作,分工执行并整合结果,实现复杂任务的高效完成与管理。
Usage Guidance
This skill's goal (combining installed skills) is reasonable, but two red flags need attention: (1) package metadata references a code entrypoint (src/index.ts) while the package contains only SKILL.md/README and no source files — ask the author whether code was omitted or if this is intentionally instruction-only. (2) The runtime instructions tell the agent to locate, read, import and execute other skills' files — that will run third-party code and can cause side effects or data flows you might not expect. Before installing: verify the upstream repository, prefer installing in a sandboxed/test agent, avoid sending sensitive data to combos until you confirm which skills will run, and request clarification from the author about the missing source files and exact permissions required.
Capability Analysis
Type: OpenClaw Skill Name: skill-combo Version: 1.0.0 The 'Skill Combo' bundle acts as a meta-orchestrator, providing instructions in SKILL.md for the agent to dynamically load, read, and execute multiple other skills based on user-supplied triggers. It describes a workflow involving high-risk operations such as file system access (readFile) and dynamic code execution (import) to facilitate skill synergy. While these capabilities are aligned with the stated purpose of coordinating skills, the logic lacks explicit security boundaries or path sanitization, which could be exploited to access or execute unauthorized files if the agent is manipulated via prompt injection.
Capability Assessment
Purpose & Capability
The declared purpose (multi-skill orchestrator) matches the instructions which load and orchestrate other skills, so the capability requested is plausible — however the package metadata (package.json.skill.json) claims a code entrypoint (main: src/index.ts) but no source files are present in the bundle. That mismatch (metadata implying an implemented module vs. instruction-only SKILL.md) is inconsistent and unexplained.
Instruction Scope
SKILL.md explicitly instructs the agent to locate other skills on disk (findSkillPath), read their source (readFile), extract capabilities, and import/execute them. Those operations involve reading arbitrary skill files and executing their modules at runtime. While that is expected for a combo/orchestrator, it expands the trust boundary: it can execute third-party code and cause side effects beyond the skill's own declared surface.
Install Mechanism
No install spec is provided (instruction-only), which is low risk in itself. However package.json and skill.json indicate a normal code-based skill (main: src/index.ts, build scripts) but no src files are included — this disconnect may be a packaging oversight or indicate incomplete/misleading metadata.
Credentials
The skill declares no required environment variables or config paths, which is appropriate for an instruction-only orchestrator. But the runtime plan to import and execute other skills means that those other skills (not this skill) may access credentials or external endpoints; the aggregator does not declare or control those flows, so install-time lack of requested secrets does not eliminate risk of downstream credential use.
Persistence & Privilege
The skill does not request always:true and is user-invocable only; it does not ask to modify other skills or system config. Autonomous invocation is allowed by platform default — combined with the ability to import/execute other skills this increases the blast radius, but the skill itself does not request persistent or elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skill-combo
  3. After installation, invoke the skill by name or use /skill-combo
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Skill-combo v1.0.0 - Initial release of Skill Combo, a multi-skill coordination engine for combining and orchestrating multiple skills to handle complex tasks. - Supports combination via add (+), comma, and space syntax, as well as multi-language triggers. - Introduces clear multi-step workflows: skill parsing, capability mapping, execution orchestration, and result integration. - Provides layered or fused result templates, detailed division of labor, and execution sequencing or parallelization. - Technical reference and code samples included for skill loading, mapping, orchestration, and integration. - Multiple usage examples and best practices documented.
Metadata
Slug skill-combo
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Skill Combo - 技能组合器?

支持同时启用多个技能协同工作,分工执行并整合结果,实现复杂任务的高效完成与管理。 It is an AI Agent Skill for Claude Code / OpenClaw, with 105 downloads so far.

How do I install Skill Combo - 技能组合器?

Run "/install skill-combo" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Skill Combo - 技能组合器 free?

Yes, Skill Combo - 技能组合器 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Skill Combo - 技能组合器 support?

Skill Combo - 技能组合器 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Skill Combo - 技能组合器?

It is built and maintained by rfdiosuao (@rfdiosuao); the current version is v1.0.0.

💬 Comments