← Back to Skills Marketplace
alirezarezvani

saas-scaffolder

by Alireza Rezvani · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
306
Downloads
0
Stars
3
Active Installs
2
Versions
Install in OpenClaw
/install saas-scaffolder
Description
Generates complete, production-ready SaaS project boilerplate including authentication, database schemas, billing integration, API routes, and a working dash...
Usage Guidance
This skill appears to do what it advertises: generate SaaS starter code and project templates. Before you use it: - Treat generated projects as a starting point, not production-ready — replace placeholder secrets (JWT_SECRET, DATABASE_URL credentials, etc.) and harden configs. - Inspect the generated docker-compose and .env files; the defaults expose DB ports and use weak passwords — change these before deploying or run in isolated networks. - Supply your own third-party keys (Stripe, Google OAuth, AWS) and enable 2FA/rotation in those services; do not copy placeholder credentials into production. - Review any third-party dependencies the scaffold adds before running npm/pip install (supply-chain risk). - Run scaffolding in a sandboxed directory or CI job and review output before committing or deploying. If you want extra assurance, share the full project output (or a sampling of generated files) and I can flag specific insecure defaults or hardening steps.
Capability Analysis
Type: OpenClaw Skill Name: saas-scaffolder Version: 1.0.0 The 'saas-scaffolder' bundle is a comprehensive tool for generating SaaS project boilerplates using Next.js, Stripe, and Drizzle ORM. It includes a Python utility script (project_bootstrapper.py) for automated file and directory generation and detailed markdown instructions (SKILL.md) that guide an AI agent through a standard development and validation workflow. The provided code snippets for authentication, database schemas, and payment processing follow industry standards, and the documentation provides helpful architectural context. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; all components align strictly with the stated purpose of project bootstrapping.
Capability Assessment
Purpose & Capability
The name/description (SaaS scaffolder) align with the included SKILL.md, references, and a local Python bootstrapper that generates project files. The skill does not request unrelated credentials or system access. However, the description promises "production-ready" code while templates and .env.example include insecure defaults (e.g., sample DB credentials, JWT_SECRET=change-me) and development-friendly docker-compose settings — so the marketing claim is stronger than what the generated output actually provides.
Instruction Scope
SKILL.md contains scaffolding instructions and many example code snippets (NextAuth, Drizzle schema, Stripe checkout route). The instructions do not tell the agent to read unrelated host files, exfiltrate data, or call external endpoints on its own; they are limited to generating project structure and example code. Example code references environment variables (GOOGLE_CLIENT_ID, STRIPE keys, NEXT_PUBLIC_APP_URL) but that is appropriate for a scaffold and those envs are not required by the skill at install/runtime.
Install Mechanism
There is no install spec — this is instruction-only with a bundled Python script for local generation. No downloads or external install URLs are present, and nothing in the manifest writes or executes remote code during install.
Credentials
The skill declares no required environment variables and does not request credentials from the platform. The templates and .env.example include many common sensitive variable names (DB credentials, AWS keys, JWT_SECRET, Stripe keys). This is expected for a scaffolder, but users should be aware the generated defaults are placeholders and sometimes weak (e.g., 'change-me', default DB passwords, docker-compose exposing DB ports).
Persistence & Privilege
The skill is not always-enabled and does not request persistent elevated privileges. It does not modify other skills or global agent settings. Running the included bootstrapper will create files in a user-specified output directory only.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install saas-scaffolder
  3. After installation, invoke the skill by name or use /saas-scaffolder
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial publish
v2.1.1
v2.1.1: optimization, reference splits
Metadata
Slug saas-scaffolder
Version 1.0.0
License MIT-0
All-time Installs 3
Active Installs 3
Total Versions 2
Frequently Asked Questions

What is saas-scaffolder?

Generates complete, production-ready SaaS project boilerplate including authentication, database schemas, billing integration, API routes, and a working dash... It is an AI Agent Skill for Claude Code / OpenClaw, with 306 downloads so far.

How do I install saas-scaffolder?

Run "/install saas-scaffolder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is saas-scaffolder free?

Yes, saas-scaffolder is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does saas-scaffolder support?

saas-scaffolder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created saas-scaffolder?

It is built and maintained by Alireza Rezvani (@alirezarezvani); the current version is v1.0.0.

💬 Comments