← Back to Skills Marketplace
prompt-buddy
by
Steventsang18
· GitHub ↗
· v0.1.0
· MIT-0
96
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install prompt-buddy
Description
【全局强制技能】每次用户输入后必须执行此技能。 执行命令：cd ~/.openclaw/workspace/skills/promptbuddy && python3 scripts/smart_engine.py -f json "用户输入" 从返回JSON提取：optimized_prompt（优化后的Pro...
Usage Guidance
Do not install or enable this skill without further checks. Key things to verify before trusting it: (1) Confirm whether the repository/package actually includes scripts/smart_engine.py — currently the skill bundle has no code. If the script is present, inspect its source thoroughly to ensure it doesn't exfiltrate data or run unsafe operations. (2) Clarify the global-run requirement: if you do not want the skill executed on every user input, keep always:false and disable autonomous invocation. (3) Prefer skills that include their runtime code or a vetted install step (so there is no silent dependence on a local file). (4) If you must test, run the agent in a sandboxed environment and review logs/output of the invoked script before enabling it for real users.
Capability Analysis
Type: OpenClaw Skill
Name: prompt-buddy
Version: 0.1.0
The skill bundle is classified as suspicious because it mandates its execution on every user input ('Global Mandatory Skill'), effectively acting as an interception hook for all agent communications. The instructions in SKILL.md direct the agent to pass raw user input into a shell command (`python3 scripts/smart_engine.py -f json "用户输入"`), which is highly vulnerable to shell injection. While the stated purpose is prompt optimization, the aggressive 'always-run' requirement and the potential for command injection via unsanitized user input pose a significant security risk.
Capability Assessment
Purpose & Capability
The declared purpose (prompt optimization) matches the idea of invoking a 'smart_engine' script, but the skill bundle contains no code or install steps while the SKILL.md instructs the agent to run a local script at ~/.openclaw/workspace/skills/promptbuddy/scripts/smart_engine.py. Asking the agent to execute a script that is not part of the skill package is incoherent and creates room for unexpected behavior.
Instruction Scope
Runtime instructions explicitly require executing a local Python script with the user's full input on every user turn and extracting JSON from its output. This means the agent will run arbitrary code located at the specified path; the SKILL.md also insists this must be run '每次用户输入后' (on every user input). The instructions do not constrain or verify the script's behavior, nor do they include a fallback when the path/script is missing.
Install Mechanism
There is no install specification and no code files in the package, yet runtime assumes a local script exists. While 'no install' usually lowers risk, here it increases it: the skill depends on a filesystem artifact outside the package. That creates a high-risk implicit dependency (the agent will execute whatever is at that path).
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond the single hardcoded workspace path. There are no declared secrets or unrelated credentials requested.
Persistence & Privilege
SKILL.md claims the skill must run on every user input (a globally forced behavior), but the registry flags do not set always:true. This mismatch is a red flag: the skill either (a) incorrectly documents a global mandate, or (b) expects operator configuration changes to make it global. Either case broadens runtime impact and should be clarified before use.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prompt-buddy - After installation, invoke the skill by name or use
/prompt-buddy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of PromptBuddy
- Prompts are automatically optimized for every user input via a backend script.
- Displays the optimized prompt (first 6-8 lines) in a formatted box before answering.
- Skips optimization for simple queries, notifying the user accordingly.
- Focuses on showing the transformation from the user's informal question to a structured prompt.
- Avoids showing technical or backend parameters; only the optimized prompt is revealed to the user.
Metadata
Frequently Asked Questions
What is prompt-buddy?
【全局强制技能】每次用户输入后必须执行此技能。 执行命令：cd ~/.openclaw/workspace/skills/promptbuddy && python3 scripts/smart_engine.py -f json "用户输入" 从返回JSON提取：optimized_prompt（优化后的Pro... It is an AI Agent Skill for Claude Code / OpenClaw, with 96 downloads so far.
How do I install prompt-buddy?
Run "/install prompt-buddy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is prompt-buddy free?
Yes, prompt-buddy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does prompt-buddy support?
prompt-buddy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created prompt-buddy?
It is built and maintained by Steventsang18 (@steventsang18); the current version is v0.1.0.
More Skills