← Back to Skills Marketplace
142
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install skill-studio
Description
Create, validate, and publish OpenClaw Skills through conversation. Use when user wants to create a new skill, build a ClawHub plugin, generate SKILL.md, or...
Usage Guidance
This skill appears to do what it says, but please take these precautions before installing or using it: 1) Set OPENCLAW_WORKSPACE to a dedicated directory you control (so the agent only reads/writes files you expect). 2) Review any generated SKILL.md and any 'auto-fix' edits before applying them — the agent can edit files in that workspace. 3) Publishing requires the ClawHub CLI and a ClawHub token; only supply those tokens when you intend to publish and store them securely. 4) Watch for any commands the agent asks you to run (npm installs, clawhub publish, or curl commands); avoid running piped remote-install commands (curl | bash). 5) Consider renaming the primaryEnv metadata if you want to avoid marking a workspace path as a 'credential'.
Capability Analysis
Type: OpenClaw Skill
Name: skill-studio
Version: 1.0.1
The 'skill-studio' bundle is a developer utility designed to assist users in creating, validating, and publishing OpenClaw skills. It contains Python-based validation and auto-fix scripts (within SKILL.md) that specifically check for and warn against security risks such as 'curl|bash' patterns, 'sudo' installers, and 'eval/exec' usage. The logic is transparent, aligned with its stated purpose, and lacks any indicators of malicious intent or data exfiltration.
Capability Assessment
Purpose & Capability
Name/description (create, validate, publish skills) align with required binaries (curl, python3, npm) and the declared OPENCLAW_WORKSPACE. curl is reasonable for API checks or examples, python3 for the validation script, and npm for the ClawHub CLI referenced in the publish guide. Only minor oddity: OPENCLAW_WORKSPACE is declared as the primaryEnv even though it is a workspace path (not a secret credential).
Instruction Scope
SKILL.md instructs the agent to read and validate SKILL.md files under the OPENCLAW_WORKSPACE and includes an auto-validation script and 'one-click fix' behavior. Reading and editing files in a user workspace is coherent for this tool, but it means the agent will access (and potentially modify) arbitrary files under the workspace path — users should review generated fixes before applying or publishing. The instructions do not embed hidden network endpoints or curl|bash install pipelines; the references explicitly warn against remote 'curl | bash' patterns.
Install Mechanism
This is an instruction-only skill with no install spec or remote downloads. The included references suggest installing the ClawHub CLI via npm (user-driven), which is expected. There are no obscure download URLs or archive extracts in the skill bundle.
Credentials
The only required env var is OPENCLAW_WORKSPACE, which is appropriate for a tool that reads/writes skill files. It does not request secrets by default. However, the skill's workflow can prompt users to declare API_KEY-type env vars for the skills they create, and the publish guide instructs using ClawHub tokens for publishing — so users may end up providing tokens when they actually publish. Also note the minor mismatch of marking a workspace path as the 'primaryEnv'.
Persistence & Privilege
The skill is not 'always' enabled and uses normal model invocation. It does not request system-wide configuration changes or privileges, and there is no evidence it modifies other skills' configs. Its ability to read/write files is expected for an authoring tool but is limited to the workspace the user points to.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-studio - After installation, invoke the skill by name or use
/skill-studio - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
修复安全扫描问题：添加npm依赖声明和OPENCLAW_WORKSPACE环境变量声明
v1.0.0
Initial release: Create, validate, and publish OpenClaw Skills through conversation with dual modes (guided/expert), auto validation, and auto fix
Metadata
Frequently Asked Questions
What is Skill Studio?
Create, validate, and publish OpenClaw Skills through conversation. Use when user wants to create a new skill, build a ClawHub plugin, generate SKILL.md, or... It is an AI Agent Skill for Claude Code / OpenClaw, with 142 downloads so far.
How do I install Skill Studio?
Run "/install skill-studio" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Studio free?
Yes, Skill Studio is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Studio support?
Skill Studio is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Studio?
It is built and maintained by ToBeWin (@tobewin); the current version is v1.0.1.
More Skills