← Back to Skills Marketplace
932
Downloads
0
Stars
8
Active Installs
1
Versions
Install in OpenClaw
/install programming-assistant
Description
Assist with programming tasks using Claude CLI. Use when OpenClaw needs to perform coding tasks, create new programs, modify existing code, or get programmin...
Usage Guidance
This skill appears to be a straightforward Claude-CLI-based programming helper, but check a few things before installing or running it:
- Ensure you have (and trust) the Claude CLI: SKILL.md expects the 'claude' command and authentication, but the skill metadata doesn't declare that dependency. Install and authenticate Claude CLI separately and verify how it stores credentials.
- Review scripts/init_project.sh before running: it will create directories/files in whatever target path you pass and will run 'git init' if git is available. Run it in a sandbox or on a safe path first.
- Confirm that you will not inadvertently provide sensitive credentials to the skill or to the Claude CLI session. The skill mentions authentication but does not define an auth mechanism; do not paste secrets into an automated session unless you understand where they go.
- Because the skill can read/write repository files, consider running it with limited filesystem permissions or in a disposable environment if you are unsure.
If you want higher assurance, ask the publisher to update the skill metadata to declare the 'claude' binary as a required dependency and to document exactly how authentication is expected to be provided.
Capability Analysis
Type: OpenClaw Skill
Name: programming-assistant
Version: 1.0.0
The skill is classified as suspicious due to the explicit declaration in `SKILL.md` that the agent has access to 'Bash: For running commands, tests, and system operations'. This capability, while potentially necessary for a programming assistant, introduces a significant risk of Remote Code Execution (RCE) via prompt injection if the AI agent's inputs are not rigorously sanitized. Furthermore, the `scripts/init_project.sh` script takes user-controlled directory paths, which, when combined with Bash access, could allow an attacker to create or modify files in arbitrary locations, leading to file system manipulation or further RCE opportunities. There is no clear evidence of intentional malicious design, but the broad, powerful capabilities present a high vulnerability risk.
Capability Assessment
Purpose & Capability
The SKILL.md explicitly requires Claude CLI (the 'claude' command) and references IDE integration, authentication, and using bash/Edit/Read tools, but the skill metadata lists no required binaries or primary credential. This omission is a coherence gap: a skill that depends on an external CLI should declare that dependency so callers and sandboxing can enforce it. Other than that omission, the provided scripts and docs align with the stated programming-assistant purpose.
Instruction Scope
The instructions direct the agent to read and write files in the target project directory, use the Claude CLI, run shell commands, and review/test generated code. These actions are within the stated purpose (project setup, code generation, editing, review). The SKILL.md does not instruct the agent to access unrelated system areas, exfiltrate data, or contact unknown external endpoints.
Install Mechanism
There is no install spec (instruction-only) and only one small helper script is included. No downloads, package installs, or extraction steps are present. This is the lower-risk model for skills.
Credentials
The skill declares no required environment variables or credentials, which is consistent with the included files. However, the runtime instructions mention that Claude CLI must be 'available and authenticated' — the skill does not declare how authentication should be supplied (env vars, config files, or interactive auth). Confirm how the Claude CLI will be authenticated before use; do not store credentials inside this skill.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration changes. The included script will create project directories and (if git is installed) run 'git init' and create a .gitignore — these are expected behaviors for a project-initialization helper but do perform filesystem changes in the target directory. The skill does not attempt to modify other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install programming-assistant - After installation, invoke the skill by name or use
/programming-assistant - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the Programming Assistant skill.
- Provides structured workflows for project setup, code generation, modification, debugging, and code review using Claude CLI.
- Supports seamless integration with Claude CLI tools for coding, file editing, and project management.
- Includes step-by-step usage patterns for common programming tasks.
- Offers guidance on prerequisites, error handling, and best practices for secure, maintainable code.
Metadata
Frequently Asked Questions
What is Programming Assistant?
Assist with programming tasks using Claude CLI. Use when OpenClaw needs to perform coding tasks, create new programs, modify existing code, or get programmin... It is an AI Agent Skill for Claude Code / OpenClaw, with 932 downloads so far.
How do I install Programming Assistant?
Run "/install programming-assistant" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Programming Assistant free?
Yes, Programming Assistant is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Programming Assistant support?
Programming Assistant is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Programming Assistant?
It is built and maintained by Leo Wing (@leowing); the current version is v1.0.0.
More Skills