← Back to Skills Marketplace
645
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install skills-ttt
Description
Guide for creating effective skills that extend agent capabilities with specialized knowledge, workflows, or tool integrations. Use this skill when the user...
Usage Guidance
This skill appears to be what it claims: a template and validator for authoring skills. Before using: (1) review the two Python scripts to confirm the target path you pass to init_skill.py is correct (they will create directories and files), (2) ensure you have Python available and install PyYAML if you intend to run quick_validate.py, (3) avoid running init_skill.py against system or sensitive directories to prevent accidental file creation, and (4) consider inspecting created files before executing any bundled scripts. No network access or secret exfiltration is apparent, but exercise usual caution when running downloaded scripts.
Capability Analysis
Type: OpenClaw Skill
Name: skills-ttt
Version: 1.0.1
The skill bundle provides tools for creating and validating other skills, instructing the AI agent to execute local Python scripts (`init_skill.py` and `quick_validate.py`). While the overall intent appears benign, the `scripts/init_skill.py` script is vulnerable to path traversal via the `skill-name` argument. This lack of input sanitization allows an agent (potentially via prompt injection) to create skill directories and files in arbitrary locations outside the intended skill storage path, which is a significant vulnerability.
Capability Assessment
Purpose & Capability
The SKILL.md describes how to create and structure skills and the included scripts (init_skill.py and quick_validate.py) implement exactly that functionality (scaffold a skill directory and validate SKILL.md). The referenced storage path (~/.deepagents/<agent>/skills/) matches the stated purpose.
Instruction Scope
Instructions are limited to skill authoring guidance and resource organization. They do not instruct the agent to read unrelated system files, contact external endpoints, or access unrelated credentials. The scripts operate on user-specified filesystem paths and SKILL.md contents only.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. The bundled Python scripts will be written to disk when the skill is present. Note: quick_validate.py imports 'yaml' (PyYAML) and the scripts assume a Python runtime — these dependencies are not declared in the metadata.
Credentials
The skill declares no required environment variables or credentials and the code does not access secrets or external services. The only environment / system requirements are a Python interpreter and (for the validator) PyYAML, which are proportional to the scripts' purposes.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not modify other skills or global agent configuration beyond creating files in the target skill directory. It sets executable permission on created example script files, which is expected for a scaffold tool.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skills-ttt - After installation, invoke the skill by name or use
/skills-ttt - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
skills-ttt v1.0.1
- No file changes detected in this version.
- No functional or documentation updates; package remains unchanged.
v1.0.0
Initial release of the Skill Creator guide
- Introduces a comprehensive guide for designing effective skills to extend agent capabilities in Deepagents.
- Explains key principles: concise context usage and setting appropriate degrees of freedom for instructions.
- Details skill structure, including required SKILL.md metadata and optional bundled resources (scripts, references, assets).
- Establishes best practices for progressive disclosure and efficient skill authoring.
- Clarifies what information and files should/should not be included in a skill package.
Metadata
Frequently Asked Questions
What is first skill?
Guide for creating effective skills that extend agent capabilities with specialized knowledge, workflows, or tool integrations. Use this skill when the user... It is an AI Agent Skill for Claude Code / OpenClaw, with 645 downloads so far.
How do I install first skill?
Run "/install skills-ttt" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is first skill free?
Yes, first skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does first skill support?
first skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created first skill?
It is built and maintained by Colin_DL (@chengxindl); the current version is v1.0.1.
More Skills