skill-creater

Generate complete AgentSkills from user requirements. Creates SKILL.md, scripts, references, assets folders, and packages them into a ready-to-upload archive...

This package appears to be a developer utility but has several red flags that point to sloppy or incomplete implementation rather than clear malicious intent. Things to do before trusting or using it: - Inspect and run the Python scripts locally in a safe environment (sandbox/VM) and review output ZIP contents before uploading anywhere. - Note naming/path inconsistencies: SKILL.md and manifest mention 'skill-creater' but build.sh and some human-facing text say 'skill-craftsmen'/'skill-craftsmen' and build.sh calls scripts/package_skill.py while package_skill.py is at repository root. This likely indicates broken scripts or copy-paste errors you should fix before use. - Expect the 'interview' capability to be manual: init_skill_template.py currently only accepts a single CLI argument (no interactive Q&A). If you need interactive prompting, add or review that logic yourself. - Validate generated SKILL.md and manifest.json contents before uploading to Clawhub; the packager's validation is minimal. - Because the package writes files and zips directories, do not run it on directories containing sensitive files (or run it with a dedicated temp folder) to avoid accidental inclusion. - If you plan to let an autonomous agent invoke this skill, consider restricting autonomous invocation until you've verified the generated outputs are safe and correct. If you want, I can: (1) point out exact lines to change to fix build.sh path/name mismatches, (2) show a short test plan to validate the packager locally, or (3) produce a hardened checklist for reviewing generated skills before upload.

Package: skill-creater (xpi) Version: 1.0.0 Description: Generate complete AgentSkills from user requirements with proper structure, scripts, and packaging for Clawhub distribution The provided code is a developer utility for generating and packaging 'AgentSkills' for the Clawhub platform. It consists of Python scripts for template generation (init_skill_template.py) and ZIP archiving (package_skill.py). The logic is restricted to local file system operations within specified directories, performing basic string manipulation and standard file I/O. There is no evidence of shell execution, network activity, credential exfiltration, or hidden payload delivery.