← Back to Skills Marketplace
drumrobot

Skill Kit

by es6kr · GitHub ↗ · v0.1.2 · MIT-0
cross-platform ⚠ suspicious
148
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install skill-kit
Description
Claude Code skill management. writer - create new skills [writer.md], lint - validate and fix frontmatter [lint.md], merge - combine related skills [merge.md...
Usage Guidance
This skill is designed to manage other skills and therefore reads and modifies many Claude runtime files (~/.claude/skills, ~/.claude/agents, ~/.claude/settings.json, ~/.claude/hooks, ~/.claude/data). Before running it: 1) Inspect scripts/trigger-compile.sh and any triggers declared in this SKILL.md to see exactly what hook scripts would be generated. 2) Run trigger compile with the provided dry-run flag first to preview changes. 3) Backup ~/.claude/settings.json and any skill directories you care about (cp or git) so you can restore if hooks or SKILL.md are changed. 4) Expect operations that move files to ~/.claude/.bak and that may edit SKILL.md frontmatter (the upgrade/dedup flows describe auto-editing in places). 5) Treat this skill as high-privilege: do not run compile/upgrade actions without confirming each proposed change, and avoid enabling it for automatic/always-on execution unless you trust the source and have reviewed its scripts.
Capability Analysis
Type: OpenClaw Skill Name: skill-kit Version: 0.1.2 The `skill-kit` bundle provides a suite of tools for managing AI agent skills, most notably the `trigger-compile.sh` script which generates executable bash hooks and modifies the global `settings.json` configuration. This mechanism creates a significant attack surface by turning markdown frontmatter into executable code. Additionally, the 'Ralph Mode' described in `SKILL.md` and the automated dependency detection in `upgrade.md` involve broad file system access and the potential to bypass user confirmation for certain actions. While these features are aligned with the stated purpose of skill management, the high-privilege operations and automated code generation are inherently risky.
Capability Assessment
Purpose & Capability
The name/description (skill creation, linting, merging, trigger compilation) match the behavior in SKILL.md and the included scripts: scanning ~/.claude/skills, creating SKILL.md, moving skill/agent files, and compiling triggers. Requests and actions are broadly proportional to a skill-management toolkit.
Instruction Scope
Runtime instructions and the included script read and write many user-global paths (~/.claude/skills, ~/.claude/plugins, ~/.claude/agents, ~/.claude/settings.json, ~/.claude/hooks, ~/.claude/data) and perform moves (mv), backups, and edits to SKILL.md and settings.json. The workflow includes automatic 'depends-on' edits, backups, and moving agent files — these are expected for a manager tool but are high-impact operations and some steps are described as 'required' (auto-modify frontmatter) while other places mandate user confirmation, creating ambiguity about what will run without explicit approval.
Install Mechanism
No installer — instruction-only with one included shell script (scripts/trigger-compile.sh). There is no remote download, which lowers supply-chain risk; however the shipped shell script writes auto-generated hook scripts to ~/.claude/hooks and overwrites settings.json entries via jq, so running the script performs filesystem and config mutations.
Credentials
The skill requests no environment variables or external credentials (good). It nonetheless requires broad filesystem access to user-specific Claude runtime directories — appropriate for a skill manager but sensitive because it touches user agents, plugin areas, and global settings.
Persistence & Privilege
The trigger compilation flow writes persistent hook scripts (~/.claude/hooks/trigger-*.sh), sets flag files (~/.claude/data/trigger-stop-*) and updates ~/.claude/settings.json to register hooks that can run on PreToolUse/PostToolUse/Stop. Registered hooks can 'suggest', 'block' (exit 1) or 'inject' systemMessage JSON, giving lasting control over agent execution flow. While this is aligned with the 'trigger' feature, it is a powerful privilege and could be abused if a skill registers malicious triggers or auto-modifies other skills without clear user consent.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skill-kit
  3. After installation, invoke the skill by name or use /skill-kit
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Enhance upgrade and route topics, add version bump procedure documentation
v0.1.1
Add route topic for topic placement recommendations, improve upgrade procedure
v0.1.0
Initial release: renamed from skill-toolkit for shorter slug
Metadata
Slug skill-kit
Version 0.1.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Skill Kit?

Claude Code skill management. writer - create new skills [writer.md], lint - validate and fix frontmatter [lint.md], merge - combine related skills [merge.md... It is an AI Agent Skill for Claude Code / OpenClaw, with 148 downloads so far.

How do I install Skill Kit?

Run "/install skill-kit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Skill Kit free?

Yes, Skill Kit is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Skill Kit support?

Skill Kit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Skill Kit?

It is built and maintained by es6kr (@drumrobot); the current version is v0.1.2.

💬 Comments