← Back to Skills Marketplace
1413
Downloads
3
Stars
12
Active Installs
1
Versions
Install in OpenClaw
/install write
Description
Plan, draft, version, and refine written content with enforced versioning and quality audits.
Usage Guidance
This skill appears coherent and local-only, but do these before using: (1) Fix the path mismatch — either move the script files under a scripts/ directory or update SKILL.md commands to ./init-workspace.sh etc.; (2) Ensure jq is installed (scripts call jq) or update scripts to not require it; (3) Inspect the scripts yourself (they operate on files and delete versions with explicit confirmation) and run init-workspace.sh in a safe test directory first; (4) If you plan to let an autonomous agent run this skill, understand it will create and modify files under the workspace you provide — choose a workspace location you control. If you'd like, I can produce a patched SKILL.md or relocate the scripts so the paths match.
Capability Analysis
Type: OpenClaw Skill
Name: write
Version: 1.0.0
The skill bundle is classified as suspicious due to several shell injection and path traversal vulnerabilities in its scripts. Specifically, `restore.sh` is vulnerable to command injection via the `VERSION` argument, which is directly interpolated into a `grep` command, allowing arbitrary command execution. Additionally, multiple scripts (`audit.sh`, `cleanup.sh`, `edit.sh`, `init-workspace.sh`, `list.sh`, `new-piece.sh`, `restore.sh`) use user-controlled `WORKSPACE` and `PIECE_ID` arguments directly in file paths without sufficient sanitization, posing a path traversal risk. While the `SKILL.md` and other documentation files provide good operational guardrails for the AI agent, the underlying scripts contain exploitable flaws.
Capability Assessment
Purpose & Capability
Name/description (writing with versioning and audits) aligns with the provided scripts and docs: workspace init, new piece, edit (with backups), audits, listing, restore, and cleanup. All functionality is local and appropriate for a writing/versioning tool.
Instruction Scope
SKILL.md instructs calling scripts under ./scripts/ (e.g., ./scripts/init-workspace.sh), but the provided file manifest lists the shell scripts at repository root (init-workspace.sh, edit.sh, etc.). This path mismatch will break the recommended commands. Also the docs repeatedly require jq for JSON metadata manipulation, but the skill's requirements section lists no required binaries; the runtime instructions and scripts implicitly depend on jq and standard POSIX utilities. Otherwise, the scripts only read/write files under the specified workspace and do not attempt to access unrelated system files or network endpoints.
Install Mechanism
This is an instruction-only skill with bundled shell scripts (no installer downloads or external package installs). Nothing in the package fetches remote artifacts or writes to system-wide locations. Risk is low, but the user should inspect and run scripts in a sandboxed directory initially.
Credentials
The skill declares no environment variables, no credentials, and no protected config paths. The scripts operate solely on a user-specified workspace path. There are no requests for unrelated secrets or external service keys.
Persistence & Privilege
always is false and the skill does not request elevated or permanent platform privileges. Scripts manage only their own workspace files and do not modify other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install write - After installation, invoke the skill by name or use
/write - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - enforced versioning, quality audits, research workflow
Metadata
Frequently Asked Questions
What is Write?
Plan, draft, version, and refine written content with enforced versioning and quality audits. It is an AI Agent Skill for Claude Code / OpenClaw, with 1413 downloads so far.
How do I install Write?
Run "/install write" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Write free?
Yes, Write is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Write support?
Write is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin).
Who created Write?
It is built and maintained by Iván (@ivangdavila); the current version is v1.0.0.
More Skills