← Back to Skills Marketplace
Presale Service Bootstrap
by
Dima Tsiomo
· GitHub ↗
· v0.1.0
571
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install presale-service-bootstrap
Description
Scaffold a new presale service foundation (docs/config/plans/readiness) before coding. Use when starting a new presale automation service, rebuilding project...
Usage Guidance
This skill is instruction-only and appears coherent for bootstrapping documentation, configs, and readiness artifacts. Before running any recommended scripts: (1) confirm whether tools/new-presale-service.ps1 exists — the package you provided does not include it; (2) if the script is present, open and review its contents to ensure it does not perform network calls, credential access, or modify system-wide files; (3) run any untrusted script in an isolated environment (container or disposable VM) and ensure PowerShell is the intended runner; (4) if you plan to allow autonomous invocation, remember the agent could run the scaffold steps without per-run approval, so only enable that after you trust the script and instructions.
Capability Analysis
Type: OpenClaw Skill
Name: presale-service-bootstrap
Version: 0.1.0
The skill bundle is classified as suspicious due to a direct instruction in `SKILL.md` to execute an external PowerShell script, `tools/new-presale-service.ps1`. The content of this script is not provided for review, making its execution opaque and a significant security risk. This constitutes a prompt injection vulnerability, as the AI agent is instructed to run an arbitrary command, which could lead to Remote Code Execution (RCE) if the PowerShell script were malicious. While the stated purpose is scaffolding, the lack of transparency for an executable component raises a critical security concern.
Capability Assessment
Purpose & Capability
The skill's name and description describe scaffolding a presale service; the SKILL.md and the two reference docs strictly instruct creating docs, configs, plans, readiness checks, and repo structure. There are no unrelated environment variables, binaries, or install steps requested, so the declared purpose aligns with the actual requirements.
Instruction Scope
The runtime instructions stay within scaffolding/documentation generation scope (creating docs/, config/, plans, readiness checklist, etc.). They do, however, recommend running tools/new-presale-service.ps1 'from this skill pack' — but that file is not present in the package listing. If a scaffold script is later provided, inspect it before running because instruction-only skills rely on the agent executing commands you might not expect.
Install Mechanism
No install spec is present (lowest-risk form). Minor inconsistency: the SKILL.md recommends running a PowerShell script, but the skill does not declare any required binaries (e.g., PowerShell) nor include that script in the manifest. This is an implementation gap rather than an active install risk in the current package.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That matches its stated purpose of local repo scaffolding and documentation creation; nothing appears disproportionate.
Persistence & Privilege
always is false, and the skill is user-invocable only. There is no install or code that would persist or elevate privileges. Autonomous invocation is allowed by platform default but is not combined here with broad permissions or credentials.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install presale-service-bootstrap - After installation, invoke the skill by name or use
/presale-service-bootstrap - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial reusable release
Metadata
Frequently Asked Questions
What is Presale Service Bootstrap?
Scaffold a new presale service foundation (docs/config/plans/readiness) before coding. Use when starting a new presale automation service, rebuilding project... It is an AI Agent Skill for Claude Code / OpenClaw, with 571 downloads so far.
How do I install Presale Service Bootstrap?
Run "/install presale-service-bootstrap" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Presale Service Bootstrap free?
Yes, Presale Service Bootstrap is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Presale Service Bootstrap support?
Presale Service Bootstrap is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Presale Service Bootstrap?
It is built and maintained by Dima Tsiomo (@dtsiomo); the current version is v0.1.0.
More Skills