← Back to Skills Marketplace
veeramanikandanr48

Spec Miner

by Veera · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
1812
Downloads
0
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install spec-miner
Description
Use when understanding legacy or undocumented systems, creating documentation for existing code, or extracting specifications from implementations. Invoke for legacy analysis, code archaeology, undocumented features.
Usage Guidance
This skill is a coherent, instruction-only guide for extracting specifications from codebases. Before running it, be aware that it instructs the agent to search for and read code and configuration files (including .env and other config), which may contain secrets or credentials. Recommended precautions: run the skill only on codebases you control or in a sandboxed environment; restrict network egress for the agent if possible; review outputs for sensitive values and redact before sharing; and if you don't want configuration secrets inspected, explicitly exclude .env/config paths or instruct the agent to skip them.
Capability Analysis
Type: OpenClaw Skill Name: spec-miner Version: 0.1.0 The skill bundle is classified as suspicious primarily due to the explicit allowance of the `Bash` tool in `SKILL.md`. While the stated purpose of reverse-engineering and documentation is benign, and no direct malicious `Bash` commands are present in the provided files, granting `Bash` access provides broad capabilities for arbitrary command execution. This represents a significant security risk, even if not immediately exploited for malicious intent within the current instructions.
Capability Assessment
Purpose & Capability
Name/description (reverse-engineering, spec extraction) match the required capabilities: the instructions explicitly require file discovery and grep/reading of code, which is appropriate for this purpose. No unrelated credentials, binaries, or external services are requested.
Instruction Scope
Instructions correctly direct exploration of source files (Glob/Grep/Read) and include searching for config/.env and external-call patterns. This is coherent for code archaeology, but it means the agent will look for and may read potentially sensitive files (e.g., .env, config files). The SKILL.md does not instruct any exfiltration, but outputs may include secrets found in code/config if not redacted.
Install Mechanism
No install spec and no code files with executable install steps — instruction-only skill with no downloads, which minimizes risk of writing or executing new code on disk.
Credentials
The skill declares no required environment variables, credentials, or config paths. The analysis templates do recommend discovering .env and config files, which is proportional to the stated task but should be treated as sensitive when present.
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request persistent system changes or modify other skills. Autonomous invocation is allowed by platform default but not requested specially by this skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install spec-miner
  3. After installation, invoke the skill by name or use /spec-miner
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of spec-miner skill. - Enables reverse-engineering and documentation of legacy or undocumented systems. - Utilizes Read, Grep, and Glob tools for in-depth code analysis. - Provides a structured workflow for scoping, exploring, tracing, documenting, and flagging uncertainties. - Outputs specifications in EARS format, including technology stack, architecture, and key observations. - Includes reference guides and output templates for consistent, thorough documentation.
Metadata
Slug spec-miner
Version 0.1.0
License
All-time Installs 4
Active Installs 4
Total Versions 1
Frequently Asked Questions

What is Spec Miner?

Use when understanding legacy or undocumented systems, creating documentation for existing code, or extracting specifications from implementations. Invoke for legacy analysis, code archaeology, undocumented features. It is an AI Agent Skill for Claude Code / OpenClaw, with 1812 downloads so far.

How do I install Spec Miner?

Run "/install spec-miner" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Spec Miner free?

Yes, Spec Miner is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Spec Miner support?

Spec Miner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Spec Miner?

It is built and maintained by Veera (@veeramanikandanr48); the current version is v0.1.0.

💬 Comments