← Back to Skills Marketplace
134
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skill-rating-comparator
Description
自动搜索同类技能,按功能、代码、文档、评价、更新和安装六维度评分,生成对比报告和优化建议。
Usage Guidance
This skill appears to implement a legitimate feature (compare skills on ClawHub/GitHub), but there are several red flags you should consider before installing or running it:
- Inspect SKILL.md and README for hidden/unicode control characters. These can be used to manipulate prompts; if present, remove them or reject the package.
- Review the source locally. The implementation currently uses mock data and TODOs instead of real API calls; if you expect production behavior, ask the author for a complete implementation or inspect code paths that fetch external data.
- Check package.json and declared dependencies. SKILL.md lists node-fetch and cheerio but they are not in package.json; installing/building could fail or the author may expect the runtime to provide them. Add only trusted dependencies and run npm audit before installing.
- Because the skill interacts with external services (GitHub/ClawHub), consider running it in a sandboxed environment (container) first to observe network behavior and avoid exposing local files.
- If you want full functionality, confirm whether the skill will require API credentials (GitHub token, ClawHub token) and only provide least-privilege tokens with appropriate scope. The current package does not request credentials, but a future/complete implementation likely will.
If you are not comfortable reviewing code or handling hidden characters, prefer a skill from a known author or an official marketplace listing with clear provenance.
Capability Analysis
Type: OpenClaw Skill
Name: skill-rating-comparator
Version: 1.0.0
The skill is a legitimate tool designed to compare and rate OpenClaw skills across dimensions like code quality and documentation. The implementation in `src/index.ts` is currently a functional skeleton using mock data and stubs for its analysis logic, with no actual network requests or sensitive data access performed. There are no signs of malicious intent, data exfiltration, or prompt injection in the code or documentation (SKILL.md).
Capability Assessment
Purpose & Capability
Name/description, SKILL.md and source code are aligned: the package is intended to find skills on ClawHub/GitHub and produce multi‑dimension comparison reports. However there are inconsistencies: SKILL.md lists runtime dependencies (node-fetch, cheerio) that do not appear in package.json, the implementation uses mock data and TODO comments instead of real API calls, and the package is described as 'instruction-only' despite including runnable source and tests. These mismatches are not necessarily malicious but are unexpected and reduce confidence in the implementation.
Instruction Scope
SKILL.md instructs the agent to search ClawHub and GitHub and to analyze SKILL.md/README/code of target skills — which is appropriate for this tool. The instructions do not ask the agent to read unrelated system files or request unrelated credentials. However the SKILL.md contains a detected 'unicode-control-chars' injection signal (see scan findings) that could attempt to manipulate downstream prompt processing; this needs review.
Install Mechanism
There is no install spec (no downloads or extract steps) which is lower risk. The repository includes source and package.json, but no runtime dependencies are declared for node-fetch/cheerio even though SKILL.md mentions them. Installing/building the package in your environment would involve running npm install/build; that is standard but verify declared dependencies before running.
Credentials
The skill declares no required environment variables or credentials (primary credential: none), which is proportionate for a public web-scraping/analysis tool. In practice a production implementation that calls GitHub or ClawHub APIs may need tokens (not requested here). Absence of credential requests is safer, but also suggests the shipped code currently uses mock data / is incomplete.
Persistence & Privilege
always: false (normal). The skill does not request persistent system privileges or to modify other skills. No indication it will force-enable itself or alter agent/global configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-rating-comparator - After installation, invoke the skill by name or use
/skill-rating-comparator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
skill-rating-comparator v1.0.0
- 初始发布,支持自动对比同类 Skill 并生成多维度评分报告。
- 实现 6 大评分维度:功能、代码、文档、评价、更新、安装便捷性。
- 支持多平台(ClawHub/GitHub)Skill 搜索与对比。
- 可输出评分对比报告,含雷达图与优劣势分析及推荐建议。
- 提供配置方法、丰富命令用法示例和评分算法说明。
Metadata
Frequently Asked Questions
What is Skill Rating Comparator?
自动搜索同类技能,按功能、代码、文档、评价、更新和安装六维度评分,生成对比报告和优化建议。 It is an AI Agent Skill for Claude Code / OpenClaw, with 134 downloads so far.
How do I install Skill Rating Comparator?
Run "/install skill-rating-comparator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Rating Comparator free?
Yes, Skill Rating Comparator is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Rating Comparator support?
Skill Rating Comparator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Rating Comparator?
It is built and maintained by rfdiosuao (@rfdiosuao); the current version is v1.0.0.
More Skills