← Back to Skills Marketplace
105
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install openclaw-skill-distill
Description
Strip any local project into a clean, publishable agent skill. Scan for hardcoded paths and secrets, scaffold standard structure, validate before publish. Us...
Usage Guidance
This skill appears to do what it claims: scan a project for local traces, scaffold a skill, and run validation. Before using it, review the scripts and run them locally in an isolated environment (or on a copy of the project). Pay special attention to scan.sh: it prints matching lines (including .env assignments and other secret-like strings) to stdout, so do not run it in contexts where the agent will forward that output to remote services or public logs. If you plan to use it in an automated agent that can send outputs externally, modify scan.sh to redact secret values (or log only filenames/line numbers), and test scaffold.sh on non-production copies to ensure no unintended removals. If you want higher assurance, run the scripts manually on a copied repo before giving the skill any automated privileges.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description match the included assets: scan.sh, scaffold.sh, and validate.sh implement scanning for hardcoded paths/secrets, scaffolding a skill directory, and pre-publish validation. There are no unexpected binaries, credentials, or network calls requested in metadata. The files present are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run local scripts on a given project directory — this is appropriate for the task. However, scan.sh prints the full matching lines from files (including .env entries and secret patterns) to stdout; validate.sh runs scan.sh but redirects its output to /dev/null in its check, so it will suppress details and only report failure. Because scan.sh emits secret-containing lines, running these scripts in contexts where the agent forwards output externally (or logs are collected remotely) could leak secrets. The scripts also read file contents and search the filesystem of the target directory as required by purpose; no other system-wide paths or unrelated credentials are accessed.
Install Mechanism
Instruction-only skill with shell scripts; no install spec and no downloads. All code is local shell scripts (no archive downloads or package installs), so install risk is low.
Credentials
The skill declares no environment variables or credentials, which is appropriate. The scripts do reference the shell USER variable to detect local-username occurrences — this is reasonable for a local-scan tool. Still, the scan script will echo matched lines (including secrets) to stdout, which is a data-exposure risk relative to its intended role of detecting secrets.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges. The scaffold script creates a new destination directory and removes a .git directory in the generated destination only; it does not alter other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-skill-distill - After installation, invoke the skill by name or use
/openclaw-skill-distill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Added CJK character detection in validate.sh - frontmatter must be English-only for ClawHub publishing
v0.1.1
English-only description for international users
v0.1.0
- Initial release of skill-distill.
- Provides tools to convert any local project or codebase into a clean, publishable ClawHub skill.
- Adds automated scripts for scanning projects, generating standardized skill scaffolding, and validating skills before publishing.
- Supports the workflow: scan for issues → fix → scaffold → validate → publish.
- Requires only bash and grep; final publish step needs the clawhub CLI.
Metadata
Frequently Asked Questions
What is Skill Distill?
Strip any local project into a clean, publishable agent skill. Scan for hardcoded paths and secrets, scaffold standard structure, validate before publish. Us... It is an AI Agent Skill for Claude Code / OpenClaw, with 105 downloads so far.
How do I install Skill Distill?
Run "/install openclaw-skill-distill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Distill free?
Yes, Skill Distill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Distill support?
Skill Distill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Distill?
It is built and maintained by yuchangxu (@yuchangxu1989-openclaw); the current version is v0.2.0.
More Skills