Skill Factory

Skill工厂，AI作为规划层循环迭代生产新Skill（需求对齐→选档→设计→生成→测试→对比→迭代→交付），支持手动/半自动/全自动三档模式

Before installing or enabling this skill, consider the following: - It will ask you to configure third‑party AI endpoints and API keys (the tech-library.md template). Do NOT paste secrets into public repos; prefer platform secret storage or environment variables where possible. - In full-automatic mode the skill will autonomously call external AI services and may send user or generated data to those endpoints. If that data is sensitive, use manual or semi-automatic mode instead. - The skill metadata declares no required credentials, but the runtime explicitly expects API keys in config files — this mismatch means the skill might access secrets that are not declared in metadata. Confirm where and how you must provide keys and review those files before enabling. - Review and sanitize any test inputs used during the skill's automated testing phase; limit iteration counts and monitor logs for unexpected network activity. - If you plan to use external AIs, verify the endpoints and owners (do not use unknown personal servers or shorteners), and consider restricting the skill to a sandboxed account with minimal privileges. If you want, provide the locations where you would store API credentials (env vars / secret manager) or ask for recommended configuration edits to avoid storing secrets in repo files — I can suggest safer configuration patterns.

Type: OpenClaw Skill Name: wx-skill-factory Version: 1.0.0 The bundle implements a 'Skill Factory' designed to recursively generate, test, and execute new AI skills, which is a high-risk architectural pattern. Specifically, SKILL.md instructs the agent to execute generated content during a 'Test Run' phase (Step 6), creating a potential vector for arbitrary command execution if the generation process is subverted by malicious input. Furthermore, call-guide.md and tech-library.md provide templates for managing and using sensitive API keys via shell-based curl commands, which increases the potential impact of a prompt injection attack, despite the author's inclusion of security warnings.