xfg-ddd-skills

DDD 六边形架构设计与部署技能包。提供 Domain/Case/Infrastructure 层设计模式与代码模板，以及 Docker 环境部署脚本。当用户询问 DDD 架构、设计模式或需要部署项目时调用。

This skill appears to do what it says: generate DDD project skeletons and provide DDD/deploy guidance. Before running it: 1) Confirm and explicitly choose the target directory when prompted (the skill requires this). 2) Inspect the bundled scripts (scripts/create-ddd-project.sh) and generated code before building or running — the archetype will be fetched from https://maven.xiaofuge.cn/, a third‑party Maven repository; review that repository or consider switching to a trusted archetype source. 3) When following Docker instructions, be cautious of example passwords (README uses an example root password) and use secure credentials in production. 4) If you cannot or do not want to fetch artifacts from the skill's archetype repo, run the scaffolding steps manually or host a trusted archetype. If you want lower risk, run generation in an isolated environment (VM/container) and review all generated dependencies before executing mvn or docker-compose.

Type: OpenClaw Skill Name: xfg-ddd-skills Version: 2.2.3 The skill bundle is a comprehensive toolkit for developing and deploying Java applications using Domain-Driven Design (DDD) and Hexagonal Architecture. It includes a well-structured project scaffolding script (scripts/create-ddd-project.sh) that uses a Maven archetype to generate code, and extensive documentation (SKILL.md, README.md, and various reference files) to guide the AI agent in assisting the user. While the skill utilizes external resources such as a custom Maven repository (maven.xiaofuge.cn) and Docker images hosted on Aliyun (registry.cn-hangzhou.aliyuncs.com), these are clearly aligned with the author's stated purpose of providing a specific architectural framework. The instructions for the AI agent include proactive safety measures, such as explicitly requiring the agent to ask the user for a target directory before performing any file system operations, and the scaffolding script includes input validation to prevent shell injection.