← Back to Skills Marketplace
359
Downloads
0
Stars
6
Active Installs
1
Versions
Install in OpenClaw
/install skill-generator
Description
Tạo AI Skill mới từ ý tưởng hoặc quy trình công việc. Kết hợp phỏng vấn thông minh, pattern detection, và quantitative evaluation để tạo skill chất lượng pro...
Usage Guidance
This package appears to be a full-featured 'skill generator' toolkit (templates, scripts, eval agents). That said, take these precautions before installing or running anything: 1) Do not run the one‑line curl|bash or PowerShell | iex installer without first downloading and auditing install.sh/install.ps1 — piping remote scripts to a shell is risky. 2) Inspect install.sh and scripts (package_skill.py, simulate_skill.py, generate_review.py, ci_eval.py, any 'publish' or 'upload' code) to see whether they make network calls, call external services, or prompt for/stash credentials. 3) Be cautious about copying files into agent config directories (e.g., ~/.gemini, ~/.claude). That makes the skill persistent and grants it effective reach into your agent environment. 4) The eval viewer starts a local HTTP server that embeds workspace files — only run it in a controlled environment and ensure it is bound to localhost and not exposed to untrusted networks; inspect generate_review.py behavior before use. 5) Expect to need API keys or marketplace credentials for publishing/export features — provide those only when you understand where they are used and are confident scripts won't exfiltrate them. 6) Prefer running the toolkit inside an isolated environment (VM or container) or after manual code review. If you want higher confidence, share install.sh and any publishing scripts for review or run static grep for 'curl', 'requests', 'git push', 'ssh', 'os.environ', and for use of remote domains to see where network traffic may be sent.
Capability Analysis
Type: OpenClaw Skill
Name: skill-generator
Version: 1.0.0
The 'skill-generator' bundle is a comprehensive and well-documented toolkit designed to help users create, evaluate, and deploy AI skills across various platforms (Antigravity, Claude, Cursor, etc.). The bundle consists of a core logic file (SKILL.md), several utility Python scripts for auditing and validating markdown files (e.g., validate_skill.py, skill_audit.py), and an installer (install.sh). The scripts and instructions are strictly aligned with the stated purpose of skill orchestration and quality assurance. No indicators of data exfiltration, malicious prompt injection, or unauthorized system access were detected; in fact, the documentation explicitly includes security constraints against hardcoding secrets and executing destructive commands.
Capability Assessment
Purpose & Capability
Name/description (generate AI Skills) match the repository contents: pipelines, templates, agents, tests, and packaging scripts are present. However README/SKILL.md claim features like 'Package & Publish' and multi‑platform exports that require external accounts/credentials (Anthropic, marketplaces, platform-specific skill dirs) but the registry metadata lists no required environment variables or primary credential — a functional mismatch. The included files (scripts/, phases/, resources/) are appropriate for a skill-creation toolkit, so purpose is plausible, but publishing/integration steps will need user credentials not declared.
Instruction Scope
SKILL.md describes an 8‑phase pipeline and instructs the agent to read resources and use scripts. That scope is expected. Concerning items in the instructions and repo: (1) an explicit recommendation to copy the package into platform config directories (e.g., ~/.gemini/antigravity/skills, .claude/commands) — this writes into user agent configs and grants persistence; (2) an explicit guideline 'Black Box Scripts: AI uses --help to self-learn, DO NOT read source code' — that discourages code inspection and is a weak safety stance; (3) several tools (e.g., eval viewer, HTTP server) read workspace directories and serve embedded outputs, which could expose sensitive files if run without care. The SKILL.md does not explicitly instruct reading unrelated system files, but some agents (analyzer/grader) expect to read transcripts, skill files, and outputs under the workspace — normal for an eval system but worth caution.
Install Mechanism
The registry lists no install spec, but README advertises a 'one‑click' install that pipes a raw.githubusercontent.com script into bash (and a PowerShell iex command for Windows). While raw.githubusercontent.com is a common host, piping remote shell scripts to the shell is high‑risk. There is also guidance to copy the repo into various platform config directories (writing files into user agent folders). The package itself contains many scripts that will be written to disk and can be executed; the absence of an official, reviewed release and the suggested curl|bash install are risk factors.
Credentials
The registry metadata declares no required environment variables or primary credential. Yet the README and SKILL.md describe integration with external AI platforms (Anthropic/Claude, Antigravity, others) and 'Package & Publish' to marketplaces — actions that typically require API keys or tokens. The mismatch (advertised network/publishing features vs. no declared creds) means users may be prompted later to provide sensitive credentials or scripts may attempt network interactions without explicit declared requirements. Additionally, the included tooling can read workspace outputs and could inadvertently leak secrets if those outputs contain credentials.
Persistence & Privilege
always:false and user-invocable:true (normal). The README's installation instructions encourage copying the skill into global agent skill/config directories (persistent installation) and the toolkit includes a local HTTP server (eval viewer) that serves workspace files and auto-saves feedback.json — that increases the chance of exposing local files. There is no evidence the skill modifies other skills' configs, but it does instruct writing into agent-specific config paths which is a meaningful persistence/privilege decision and worth reviewing before use.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-generator - After installation, invoke the skill by name or use
/skill-generator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the skill under new name: **skill-creator-ultra**.
- Enables users to create new AI Skills from ideas or workflows via structured interview, pattern detection, and quantitative evaluation.
- Supports use cases for both automating new workflows and improving existing skills.
- Introduces an 8-phase creation and refinement pipeline, with Fast Track for simple cases and System Mode for multi-step workflows.
- Emphasizes a rigorous, engineering-minded approach to skill architecture, including examples, constraints, and automated testing.
Metadata
Frequently Asked Questions
What is Skill Generator?
Tạo AI Skill mới từ ý tưởng hoặc quy trình công việc. Kết hợp phỏng vấn thông minh, pattern detection, và quantitative evaluation để tạo skill chất lượng pro... It is an AI Agent Skill for Claude Code / OpenClaw, with 359 downloads so far.
How do I install Skill Generator?
Run "/install skill-generator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Generator free?
Yes, Skill Generator is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Skill Generator support?
Skill Generator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Generator?
It is built and maintained by Wi (@wipal); the current version is v1.0.0.
More Skills