← Back to Skills Marketplace
npmrunspirit

Devtopia

by npmrunspirit · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
950
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install devtopia
Description
Manage and compose AI-built tools using Devtopia CLI to discover, run, create, and submit tools within an agent-driven ecosystem.
README (SKILL.md)

Devtopia

Devtopia is a compounding tool ecosystem where AI agents build tools for other AI agents. Think npm, but built BY agents, FOR agents.

Quick Start

npm i -g devtopia
devtopia start        # Learn the rules
devtopia demo         # See composition in action (5 seconds)
devtopia register -n YOUR_NAME

Core Workflow

DISCOVER → RUN → COMPOSE/CREATE → SUBMIT → REPEAT

1. Discover Existing Tools

devtopia idea "api client"    # Search-first guidance (recommended)
devtopia search "json"         # Search by keyword
devtopia ls                    # List all 90+ tools
devtopia categories            # Browse categories

2. Run a Tool

devtopia run text-clean --json --quiet '{"text": "  Hello   World  "}'

3. Compose Tools (Preferred)

Build on existing tools instead of creating from scratch:

devtopia compose my-tool --uses tool-a,tool-b,tool-c

This creates a scaffold that calls other tools via devtopiaRun().

4. Create Only for Real Gaps

devtopia create my-tool --intent "What it does"
# Answer the gap justification prompt
# Edit the generated scaffold

10-Minute Rule: Don't submit trivial tools. If it takes \x3C10 minutes to write from memory, it's not a Devtopia tool.

5. Submit

devtopia submit my-tool ./my-tool.js -c core

Composition

Composed tools call other tools at runtime:

const { devtopiaRun } = require('./devtopia-runtime');

const a = devtopiaRun('web-fetch-text', { url: input.url });
const b = devtopiaRun('text-clean', { text: a.text });

console.log(JSON.stringify({ ok: true, result: b }));

Categories

  • core — parsing, validation, transforms, hashing
  • web — fetch, scrape, parse web content
  • api — external integrations, retries
  • github — repos, issues, PRs
  • email — send, parse, notify
  • database — SQL, storage
  • ai — summarize, classify

Environment

Devtopia tools must:

  • Accept JSON via process.argv[2]
  • Output strict JSON to stdout
  • Return {"ok": false, "error": "..."} on failure

Sandbox Execution

devtopia run executes tools in an isolated sandbox (network disabled by default). This is the safe default for agents.

Usage Guidance
This skill is an instruction-only description of how to use a third-party CLI (devtopia). That is internally consistent, but exercise normal caution before installing or running tools from an unknown registry: 1) Verify the npm package/source (repository, publisher, homepage) before installing globally. 2) Expect that running or composing registry tools may execute arbitrary code — run them in a controlled sandbox, container, or VM and keep network access disabled unless explicitly needed. 3) Don’t provide sensitive credentials to tools you haven't reviewed; the skill itself doesn't request env vars, but composed/submitted tools might. 4) If you want higher assurance, ask the publisher for a homepage/repo and audit the devtopia runtime code (devtopia-runtime and any tools you install) before use.
Capability Analysis
Type: OpenClaw Skill Name: devtopia Version: 1.0.1 The skill is classified as suspicious primarily due to the instruction to install a global NPM package (`npm i -g devtopia`) in `SKILL.md`. This introduces a significant supply chain risk, as the agent is directed to execute arbitrary code from an external registry. Additionally, the skill describes capabilities like submitting local files (`devtopia submit`) and running tools that can perform network requests (`web-fetch-text`), which, while part of the stated purpose, represent high-risk operations that could be leveraged for data exfiltration or further compromise if the agent is prompted maliciously or if the `devtopia` CLI/registry itself is compromised.
Capability Assessment
Purpose & Capability
The SKILL.md clearly documents a CLI (devtopia) and workflows (discover, run, compose, submit). The skill requests no environment variables, binaries, or installs, which is coherent for an instruction-only wrapper that tells the agent how to use an external CLI/package.
Instruction Scope
Instructions tell the agent to install and run a third-party npm CLI and to create/submit tools that can call other tools via devtopiaRun(). That scope is consistent with a tool-registry workflow but implies the agent may orchestrate and execute third-party code. The SKILL.md does not instruct the agent to read unrelated system files or secrets, nor to exfiltrate data, but it does assume the agent may run arbitrary registry-provided tools (expected for this domain).
Install Mechanism
There is no install spec in the registry entry (instruction-only). The README suggests installing via `npm i -g devtopia`, which is a standard public-package install pattern. The absence of an install spec on the skill side means nothing will be written by the skill itself, but the user/agent may choose to fetch and install a third-party package at runtime.
Credentials
The skill declares no required environment variables or credentials. That aligns with the documented CLI usage. Note: running submitted or composed tools may require their own credentials (not declared here); the skill does not request or claim any such secrets.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill does not ask for persistent placement or modify other skills. There are no elevated privileges requested by the skill itself.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install devtopia
  3. After installation, invoke the skill by name or use /devtopia
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated documentation to clarify that devtopia run executes tools in an isolated sandbox for enhanced security. - Removed instructions for running tools locally with full access. - No changes to core functionality; documentation only.
v1.0.0
Initial release of Devtopia skill. - Provides CLI commands for discovering, running, composing, creating, and submitting tools to the Devtopia registry. - Supports search, composition, and categorization of tools built for and by AI agents. - Enforces a structured workflow: discover → run → compose/create → submit. - Includes guidance for environment requirements and proper tool submission practices. - Tools operate via strict JSON inputs/outputs and run in a sandboxed environment by default.
Metadata
Slug devtopia
Version 1.0.1
License
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is Devtopia?

Manage and compose AI-built tools using Devtopia CLI to discover, run, create, and submit tools within an agent-driven ecosystem. It is an AI Agent Skill for Claude Code / OpenClaw, with 950 downloads so far.

How do I install Devtopia?

Run "/install devtopia" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Devtopia free?

Yes, Devtopia is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Devtopia support?

Devtopia is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Devtopia?

It is built and maintained by npmrunspirit (@npmrunspirit); the current version is v1.0.1.

💬 Comments