Skill Dependency Resolver

Automatically detects and resolves conflicting Python package versions across multiple skill requirements.txt files, generating a merged, conflict-free requi...

This skill is not obviously malicious, but its documentation overpromises relative to what the code actually does. Before installing or running: 1) Review/verify behavior in a sandbox: run the CLI against a controlled test skills_dir and inspect the generated requirements-merged.txt before using it. 2) Be aware the resolver only detects conflicts for exact '==' versions and will likely miss or mishandle ranges and complex specifiers; do not rely on it to find all incompatibilities. 3) Manual mode uses interactive input(), which will hang in non-interactive automation; avoid using it in CI without modification. 4) install.sh creates a symlink in ~/.local/bin and may back up an existing file to .bak — confirm you allow that file operation. 5) If you need full operator/range handling or recursive scanning, ask the author for code updates or run the tests and extend resolver.py; otherwise treat outputs as advisory and always inspect the merged file before applying pip installs.

Type: OpenClaw Skill Name: skill-dependency-resolver Version: 0.1.0 The skill-dependency-resolver is a utility designed to merge Python requirements.txt files and resolve version conflicts. Analysis of the source code (resolver.py, cli.py) and installation script (install.sh) shows no signs of data exfiltration, malicious execution, or prompt injection. It operates entirely using the Python standard library and performs standard filesystem operations consistent with its stated purpose of managing workspace dependencies.