skill-README-writer

为本地项目或 GitHub 项目生成专业的 README.md 文档。**触发词："写 README"、"生成 README"、"README.md"、"项目文档"、"GitHub 文档"、"readme"、"项目介绍"、"文档生成"**。支持自动收集项目信息、交互式确认、中英双语。根据项目类型（Python/前...

This skill appears to do what it says: it reads project files (package.json, pyproject.toml, Cargo.toml, source files, existing README) and interactively builds a README. Before installing/using it, consider: 1) It will read files under any local path you give it — avoid pointing it at directories containing secrets or unrelated private data. 2) If you supply a GitHub URL the agent may fetch repository content; ensure network fetches are acceptable in your environment. 3) The SKILL.md contains embedded Base64 image data; while likely benign for badges, base64 can conceal unexpected content — inspect any embedded blobs if you are concerned. 4) Always review the generated README and backups before committing or publishing. If the skill later requests credentials, network endpoints beyond standard badge/image URLs, or includes executable code, re-evaluate (these would raise suspicion).

Type: OpenClaw Skill Name: skill-readme-writer Version: 0.0.1 The skill is a utility designed to automate the creation of professional README.md files for local or GitHub projects. It follows a structured 11-step interactive workflow that includes gathering project metadata from standard configuration files (like package.json, pyproject.toml, and Cargo.toml), generating dynamic badges via shields.io, and ensuring bilingual (Chinese/English) consistency. The code and instructions in SKILL.md and README.md are well-documented, align perfectly with the stated purpose, and contain no evidence of data exfiltration, malicious execution, or prompt injection attacks. A Base64-encoded string found in the badge generation section was analyzed and confirmed to be a benign SVG logo for Windows.