← Back to Skills Marketplace
mahingbun-dev

SDD Archive

by mahingbun-dev · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
215
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install sdd-archive
Description
将已完成的 feature spec 归档到全局知识库。提取关键决策,更新约束和领域索引,然后将 feature 目录移到 spec/archive/。
Usage Guidance
这个技能在功能上合理,但有两点主要风险:一是它会扫描实现代码和项目目录,可能读取意外的敏感文件;二是它会把从文档/代码提取的文本用于图像生成(/gen-image),这会将仓库内容发送到另一个处理端。建议在决定安装或运行前:1) 在隔离的测试分支或代码副本上先运行,备份受影响的 spec/global 文件;2) 审核并(如有必要)限制可扫描的路径或文件类型,避免包含配置、密钥或凭证;3) 确认 /gen-image 的实现与隐私策略(谁能访问生成请求、是否会持久化 prompt);4) 要求技能在做任何批量写入或移动操作前始终进行明确的用户确认;5) 如果不希望将实现细节外发,请修改技能指令以禁止把代码内容包含进外部请求。若作者能增加明确的文件筛选规则、敏感词/路径排除和对外发数据的最小化说明,能够大幅降低风险并可能把评估改为“benign”。
Capability Analysis
Type: OpenClaw Skill Name: sdd-archive Version: 1.0.0 The sdd-archive skill is designed to automate the archiving of feature specifications into a global knowledge base. It performs legitimate tasks such as reading design documents and code files for summarization, updating project-wide markdown files (index, constraints, domains), and moving directories to an archive folder. All high-risk actions, such as updating global constraints or moving files, require explicit user confirmation via interactive prompts, and no evidence of data exfiltration or unauthorized execution was found.
Capability Assessment
Purpose & Capability
名称/描述与 SKILL.md 中的目标一致:归档 feature spec、提取决策、更新全局文档并移动目录。需要读写仓库中文档并生成/更新领域文件,这与声明目的相符。
Instruction Scope
指令明确要求读取 feature 的 spec-design.md 并“扫描与 feature 相关的实际代码文件”以提取实现细节;随后会修改多处全局文档、创建/删除领域文件并移动 feature 目录。扫描代码库以提取实现细节是合理的,但未对要扫描的文件类型、路径或敏感文件(例如配置/密钥/凭证文件)作任何限制或排除,存在范围外数据访问风险;另外指令会把生成配图的描述发送给 /gen-image 子技能,这会把从文档/代码提取的文本发送到外部处理链(可能造成信息泄露)。
Install Mechanism
Instruction-only 技能且无 install spec、无二进制下载,静态风险低。没有写入磁盘的外部安装步骤。
Credentials
技能声明不需要任何环境变量或凭据,这在表面上是良性的。但因指令要求扫描源码和仓库文档,技能运行时可能读取敏感配置或凭证文件(虽然未声明需要),且会把提取到的文本作为图像生成 prompt 发送给 /gen-image,这等同于将仓库内容外发。没有对敏感信息的识别/过滤或明确的数据最小化策略。
Persistence & Privilege
技能不会设置 always:true,也不修改其他技能配置,但其正常功能包括写入/更新多个全局 spec 文件、创建/删除领域文档和移动 feature 目录(有显著破坏性/持久性影响于仓库结构)。这是功能所需的权限,但属于高影响操作,用户应在受控环境中运行。
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install sdd-archive
  3. After installation, invoke the skill by name or use /sdd-archive
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
初始版本
Metadata
Slug sdd-archive
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is SDD Archive?

将已完成的 feature spec 归档到全局知识库。提取关键决策,更新约束和领域索引,然后将 feature 目录移到 spec/archive/。 It is an AI Agent Skill for Claude Code / OpenClaw, with 215 downloads so far.

How do I install SDD Archive?

Run "/install sdd-archive" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SDD Archive free?

Yes, SDD Archive is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SDD Archive support?

SDD Archive is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SDD Archive?

It is built and maintained by mahingbun-dev (@mahingbun-dev); the current version is v1.0.0.

💬 Comments