← Back to Skills Marketplace
Supernal Interface CLI
by
ianderrington
· GitHub ↗
· v1.0.0
460
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install si
Description
CLI tool for generating tests, scanning contracts, managing story-based tests, and setting up MCP integration in web projects.
Usage Guidance
This SKILL.md describes a legitimate-seeming CLI, but before installing or running anything: (1) locate and inspect the npm package (@supernal/interface) source (GitHub/homepage, package.json, published tarball) — do not install from npm without reviewing it; (2) run any initial tests inside an isolated environment (container or disposable VM) rather than your main workstation or production repo; (3) back up your repository and avoid using auto-commit/--force flags until you’ve reviewed the changes the tool will make; (4) be cautious with commands that 'configure IDE', 'create server', or 'install agents' and verify what credentials or network connections they require; (5) if you allow an autonomous agent to run these commands, restrict its permissions and monitor its actions. If you can, ask the publisher for a homepage or source repository link and audit the package contents before trusting it.
Capability Analysis
Type: OpenClaw Skill
Name: si
Version: 1.0.0
The `SKILL.md` describes a CLI tool with extensive, high-privilege capabilities that, while plausible for a development tool, introduce significant risk. Key indicators include `npm install -g @supernal/interface` for global package installation, `si setup-mcp` which configures IDEs and creates servers, and `si setup-claude` which installs other skills and agents. These commands grant broad system access, file system modification, and the ability to introduce further executable components, elevating the risk profile beyond benign, despite no explicit malicious intent or prompt injection attempts found within the `SKILL.md` itself.
Capability Assessment
Purpose & Capability
The name, description, and listed commands are consistent: scanning routes/components, generating tests, story-based tests, and MCP/Claude setup are coherent with a developer CLI. However the skill metadata has no source/homepage and this SKILL.md tells the agent/user to install an external npm package (@supernal/interface) with unknown provenance — that gap in origin information is noteworthy.
Instruction Scope
The runtime instructions include commands that modify project files (init --inject, --migrate, --revert), auto-commit changes (--git-commit), create servers and configure IDEs (si setup-mcp), and install other skills/agents (si setup-claude). These are high-impact actions that go beyond read-only scanning; they can change local code, commit to git, and install software. The SKILL.md gives broad authority (e.g., 'fully automated', '--force', auto-commit flags) without describing safeguards or required confirmations.
Install Mechanism
There is no install spec in the skill bundle (instruction-only), but the documentation instructs users/agents to run 'npm install -g @supernal/interface'. Installing an unpublished/unknown npm package can execute arbitrary code. Because the package's source/homepage is missing, there's no way to inspect the package before installing from the instructions alone.
Credentials
The skill declares no required env vars or credentials, which superficially looks least-privileged. In practice many commands (git auto-commit, server setup, IDE configuration, Claude integration) will require filesystem access, network access and possibly credentials/APIs (e.g., for Claude or remote servers). The lack of declared environment requirements means those accesses are implicit and not documented.
Persistence & Privilege
The skill is not marked always:true and has no install footprint in this bundle. However the documented commands include installing software, creating servers, and installing other skills/agents (si setup-claude). If an agent executes these commands autonomously, they can create persistent software and modify system state. This combination increases blast radius if the agent is permitted to act without restrictions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install si - After installation, invoke the skill by name or use
/si - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - test generation, contract scanning, story system, MCP setup
Metadata
Frequently Asked Questions
What is Supernal Interface CLI?
CLI tool for generating tests, scanning contracts, managing story-based tests, and setting up MCP integration in web projects. It is an AI Agent Skill for Claude Code / OpenClaw, with 460 downloads so far.
How do I install Supernal Interface CLI?
Run "/install si" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Supernal Interface CLI free?
Yes, Supernal Interface CLI is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Supernal Interface CLI support?
Supernal Interface CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Supernal Interface CLI?
It is built and maintained by ianderrington (@ianderrington); the current version is v1.0.0.
More Skills