Automatically generate OpenAPI/Swagger API documentation by analyzing function signatures and extracting parameter and return types from Python, JavaScript,...

This skill is plausible but under-specified. The embedded implementation is a tiny JavaScript snippet that uses a crude regex and references undefined helpers (so it cannot actually handle the multi-language, type-aware extraction the description promises). Before installing or using it: (1) don't assume accuracy — test the skill on non-sensitive sample code and manually review generated OpenAPI output; (2) ask the publisher for the full implementation or source code and for details on how it handles complex types, annotations, and language-specific idioms; (3) avoid submitting confidential code to the skill until you confirm where parsing/execution happens (locally vs. external); and (4) prefer a skill that documents its parsing strategy, limitations, and test coverage. If you want a ready-to-use tool, consider well-known, open-source generators with visible implementations rather than this minimal, overpromising instruction-only skill.

Type: OpenClaw Skill Name: api-doc-generator Version: 1.0.0 The skill is designed to analyze user-provided code, but its implementation in `skill.yaml` directly applies a regular expression (`code.match()`) to the input `code` string. While the regex itself is simple, this pattern of directly processing arbitrary user input with regex without robust parsing or sanitization can introduce a Regular Expression Denial of Service (ReDoS) vulnerability, classifying it as suspicious due to a potential flaw that allows an attack.