← 返回 Skills 市场
alexfilatov

OpenClaw Cofounder Skill

作者 Alex Filatov · GitHub ↗ · v1.2.1
cross-platform ⚠ suspicious
484
总下载
0
收藏
2
当前安装
6
版本数
在 OpenClaw 中安装
/install cofounder-im
功能描述
Pull startup project data and AI-generated build specifications from CoFounder.im. Use when a user wants to build a project that was validated and planned on...
使用说明 (SKILL.md)

CoFounder.im Skill

Overview

Connect OpenClaw to CoFounder.im to pull AI-validated startup projects and autonomously build them. CoFounder.im runs 20+ AI agents that validate ideas, research markets, plan MVPs, design UI/UX, and generate implementation plans. This skill lets you fetch those results and use them as the foundation for building the project.

When to use this skill

Use this skill when the user says anything like:

  • "Build my CoFounder project"
  • "Pull my project from cofounder.im"
  • "Use my CoFounder build spec"
  • "Start building from CoFounder"
  • "Fetch my startup plan from CoFounder"
  • "Build [project name] from cofounder"
  • "What projects do I have on CoFounder?"
  • "Get the build plan for [project name]"
  • "I planned a project on cofounder.im, now build it"

Do not use this skill for general coding tasks, project scaffolding from scratch, or anything unrelated to CoFounder.im projects.

Safety policy

This skill fetches build specifications from a remote API (cofounder.im). To ensure safe execution:

  1. User approval required — Always show the user a summary of the build plan and get explicit confirmation before spawning any sub-agents or running any commands.
  2. Preview before execution — Before each phase, display the sub-agent's goal, requirements, and verification command. Ask the user to approve.
  3. No blind execution — Do not execute the build spec verbatim. Review each phase for reasonableness before presenting it to the user.
  4. Sandboxed environment recommended — Run builds in a dedicated directory or container. Do not build in directories containing existing projects or sensitive files.
  5. Credential scope — This skill only requires COFOUNDER_API_TOKEN for the CoFounder.im API. Build plans may reference additional tools (databases, cloud CLIs, etc.) depending on the project's tech stack — the user should review and install these as needed.
  6. No network access by default — Sub-agents should only access local files and the project repository. Any external network calls (package installs, API integrations) should be reviewed by the user.

Core rules

  • Always authenticate with the bearer token from COFOUNDER_API_TOKEN.
  • Use list-projects first to show available projects and let the user choose.
  • Use get-build-spec to pull the full build specification for the chosen project.
  • The build spec contains agent outputs keyed by type (e.g., tech_stack, mvp_planner, ui_ux_assistant, implementation_plan_generator, openclaw_builder).
  • The openclaw_builder output is the most important — it contains a structured multi-agent build plan designed specifically for OpenClaw.
  • Parse the openclaw_builder output to identify sub-agent tasks, then present them to the user for approval before spawning.
  • Always get user confirmation before spawning sub-agents or running verification commands.

Quick start

# Set your API token (generate at https://cofounder.im/users/settings)
export COFOUNDER_API_TOKEN="cfr_your_token_here"

# List your projects
curl -s https://cofounder.im/api/v1/projects \
  -H "Authorization: Bearer $COFOUNDER_API_TOKEN" | jq '.projects[] | {id, name, status}'

# Get build spec for a project
curl -s https://cofounder.im/api/v1/projects/PROJECT_ID/build-spec \
  -H "Authorization: Bearer $COFOUNDER_API_TOKEN" | jq .

Workflow

Step 1: List projects

Fetch the user's projects and present them for selection:

curl -s https://cofounder.im/api/v1/projects \
  -H "Authorization: Bearer $COFOUNDER_API_TOKEN" | jq .

Example response:

{
  "projects": [
    {
      "id": "d25165d2-26c5-43dc-b4a1-ef053bf8277d",
      "name": "FitTrack",
      "description": "AI-powered fitness tracking app with personalized workout plans and progress analytics",
      "status": "completed",
      "package_type": "basic",
      "inserted_at": "2026-02-15T14:22:00Z"
    },
    {
      "id": "a4cdfd3f-2747-4d0e-afe2-8978d8911646",
      "name": "MealPlan Pro",
      "description": "Smart meal planning platform with grocery list generation and nutritional tracking",
      "status": "active",
      "package_type": "pro",
      "inserted_at": "2026-02-20T10:30:00Z"
    }
  ]
}

Show the user a numbered list of projects with name, status, and description. Ask which one to build. Only projects with status "completed" have full build specs. Projects with status "active" are still being processed by CoFounder.im agents.

Step 2: Fetch build specification

curl -s https://cofounder.im/api/v1/projects/PROJECT_ID/build-spec \
  -H "Authorization: Bearer $COFOUNDER_API_TOKEN" | jq .

Example response (agent output values are truncated — actual values are full markdown documents):

{
  "project": {
    "id": "d25165d2-26c5-43dc-b4a1-ef053bf8277d",
    "name": "FitTrack",
    "description": "AI-powered fitness tracking app with personalized workout plans and progress analytics",
    "status": "completed"
  },
  "agent_outputs": {
    "tech_stack": "## Tech Stack\
\
- Framework: Next.js 14\
- Language: TypeScript 5.3\
- Database: PostgreSQL 16\
- ORM: Prisma\
- CSS: Tailwind CSS 3.4\
...",
    "mvp_planner": "## Core Features\
\
### 1. Workout Tracker\
- Log exercises with sets, reps, and weight\
- Rest timer between sets\
- Progress charts and personal records\
...",
    "ui_ux_assistant": "## Design System\
\
### Colors\
- Primary: #6366f1 (Indigo)\
- Background: #f8fafc\
- Text: #1e293b\
...",
    "implementation_plan_generator": "## Phase 1: Project Setup\
\
1. Initialize Next.js with TypeScript\
2. Configure PostgreSQL with Prisma ORM\
3. Set up authentication with NextAuth\
...",
    "openclaw_builder": "# OpenClaw Build Plan: FitTrack\
\
## Project Overview\
An AI-powered fitness tracking app...\
\
## Tech Stack Summary\
- Framework: Next.js 14\
...\
\
## Orchestration Plan\
Total sub-agents: 5\
Execution order: project-setup -> database -> auth -> frontend -> testing\
...",
    "idea_validator": "## Validation Summary\
\
Viability Score: 7.5/10\
...",
    "market_research": "## Market Analysis\
\
Target audience: fitness enthusiasts, personal trainers, gym-goers\
...",
    "competitor_analysis": "## Competitors\
\
1. Strong - workout tracking app\
..."
  }
}

The openclaw_builder output is the primary input for building. Other outputs provide supporting context (tech decisions, design tokens, feature specs) that sub-agents may need.

Step 3: Review and approve the build plan

Parse the openclaw_builder agent output and present the user with a summary:

  1. Show the overall plan — project name, tech stack, number of phases, dependency graph
  2. List each sub-agent phase — name, goal, dependencies, verification command
  3. Highlight any additional tools required — databases, CLIs, package managers beyond curl/jq
  4. Ask the user to confirm before proceeding to execution

Example summary to show the user:

Build Plan: ProjectName (6 phases)
Tech: Next.js, TypeScript, PostgreSQL

Phase 1: project-setup (no deps) — Initialize repo and install dependencies
Phase 2: database (depends: project-setup) — Create schema and migrations
Phase 3: auth (depends: project-setup) — User registration and login
Phase 4: core-features (depends: database, auth) — Main business logic
Phase 5: frontend (depends: core-features) — UI components and pages
Phase 6: testing (depends: frontend) — Test suite and verification

Additional tools needed: node, npm, psql

Proceed with this build plan? (yes/no)

Step 4: Execute the build (after user approval)

For each sub-agent defined in the build plan:

  1. Show the user what will be spawned — the sub-agent's goal, requirements, and context
  2. Get user approval for each phase (or batch-approve all phases upfront)
  3. Create the sub-agent using sessions_spawn with the requirements from its section
  4. Include relevant context from other agent outputs (tech_stack, ui_ux_assistant, etc.)
  5. Monitor sub-agent completion
  6. Show verification results before proceeding to the next phase

Constraints:

  • Maximum 5 concurrent sub-agents (OpenClaw limit)
  • Sub-agents run at depth 1 (they cannot spawn their own sub-agents)
  • Each sub-agent session is isolated — pass all needed context in the spawn instruction
  • Follow the phasing in the build plan — complete Phase 1 before starting Phase 2

Step 5: Verify and report

After all sub-agents complete:

  1. Verify the project structure matches the implementation plan
  2. Run any test commands specified in the build plan
  3. Report completion status to the user

API reference

Endpoint Method Description
/api/v1/projects GET List all projects for the authenticated user
/api/v1/projects/:id/build-spec GET Get project details and all completed agent outputs

Authentication: Bearer token in the Authorization header.

Authorization: Bearer cfr_your_token_here

Error responses:

  • 401 — Missing or invalid token
  • 404 — Project not found or does not belong to user
  • 429 — Rate limit exceeded (20 requests/minute)

Agent output keys

Key Description
tech_stack Technology stack recommendation
mvp_planner MVP feature plan and roadmap
ui_ux_assistant UI/UX design system and guidelines
implementation_plan_generator Step-by-step implementation plan
openclaw_builder Multi-agent build specification for OpenClaw
idea_validator Idea validation analysis
market_research Market size and trends
competitor_analysis Competitive landscape
customer_persona Target customer profiles
business_model Business model canvas
monetization_strategy Revenue and pricing strategy
go_to_market Go-to-market strategy

Additional runtime dependencies

Build plans generated by CoFounder.im may require tools beyond curl and jq, depending on the project's tech stack. Common examples:

Tech Stack Additional Tools
Node.js / Next.js / React node, npm or yarn
Elixir / Phoenix elixir, mix, postgres
Python / Django / FastAPI python, pip, postgres
Ruby / Rails ruby, bundler, postgres
Go go

The skill will identify required tools during the build plan review (Step 3) so you can install them before execution begins.

Getting your API token

  1. Sign up at cofounder.im
  2. Create a project and run the AI agents
  3. Go to Settings and generate an API token
  4. Configure it: openclaw config set skills.entries.cofounder-im.env.COFOUNDER_API_TOKEN "cfr_..."
  5. Restart: openclaw gateway restart
安全使用建议
This skill appears to do what it says, but before installing: 1) Only provide a COFOUNDER_API_TOKEN you trust—treat it like any API secret; don't paste it into chat or public places. 2) Verify the npx/clawhub package source if you follow the README install instructions. 3) When fetching a build spec, carefully review all included files and generated commands (the build spec may contain shell commands, package installs, or endpoints). 4) Always run builds in an isolated directory or container and follow the skill's own requirement to confirm each sub-agent/phase — do not allow blind execution. 5) Be cautious about approving actions that request additional credentials (cloud, DB, or third‑party API keys) and rotate or revoke the COFOUNDER_API_TOKEN if you suspect misuse.
功能分析
Type: OpenClaw Skill Name: cofounder-im Version: 1.2.1 The skill is classified as suspicious due to its core functionality involving the execution of remote build specifications fetched from `cofounder.im` via `curl`. While the `SKILL.md` includes strong defensive instructions for the AI agent, emphasizing user approval and review of build plans and sub-agent phases, the inherent capability to execute arbitrary code from a remote source (the `openclaw_builder` output) represents a significant risk. Additionally, the `curl` commands used to fetch project data and build specifications, which involve inserting a `PROJECT_ID`, present a potential shell injection vulnerability if the OpenClaw agent does not rigorously sanitize user-controlled input before command execution. No evidence of intentional malicious behavior, such as unauthorized data exfiltration or backdoor installation, was found within the provided files.
能力评估
Purpose & Capability
The name/description (fetch CoFounder.im projects and build specs) match the declared requirements: curl and jq for HTTP/JSON work and a single COFOUNDER_API_TOKEN env var for API access. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md limits behavior to listing projects and fetching build specs from CoFounder.im endpoints and explicitly requires user approval before spawning sub-agents or running verification commands. It does not instruct the agent to read unrelated files or pull other environment variables. Note: build-specs themselves may contain commands that reference external services or request additional credentials — the skill documents this and requires user review.
Install Mechanism
This is an instruction-only skill with no install spec or code files, which is the lowest-risk model. README suggests installing via npx/clawhub (external tools) but the skill package itself does not download or execute third-party archives.
Credentials
Only COFOUNDER_API_TOKEN is required and declared as the primary credential, which is appropriate for the stated API integration. The documentation warns that fetched build plans may reference other tools or credentials and instructs users to review those before use.
Persistence & Privilege
The skill is not marked always:true and does not request elevated platform privileges. Autonomous invocation is allowed (platform default), but SKILL.md mandates explicit user confirmation before spawning sub-agents, reducing autonomous risk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install cofounder-im
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /cofounder-im 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.1
Automated publish from commit 42161fdd24e76ba13704d11873738a667ea8a21d
v1.2.0
Automated publish from commit a3d52fc6a6283322d071e4ad1c19c76194dcc7a6
v1.1.2
Automated publish from commit a960a8ffd4cd3cd85969459b40f66b65c08a033f
v1.1.1
- Added _meta.json file for improved metadata and integration support. - No changes to core logic or user-facing functionality.
v1.1.0
Add safety guardrails: user approval before spawning sub-agents, build plan preview, sandboxing guidance, additional runtime dependency docs
v1.0.0
Initial release of the cofounder-im skill: - Connects to CoFounder.im to list, select, and build validated startup projects using an API token. - Fetches full AI-generated build specifications, including tech stack, MVP plan, UI/UX, implementation plan, and OpenClaw-specific build plans. - Orchestrates sub-agent sessions according to the OpenClaw build specification for autonomous project construction. - Enforces concurrent agent, phasing, and context-passing constraints as defined by OpenClaw. - Includes quick start instructions and API reference for user onboarding.
元数据
Slug cofounder-im
版本 1.2.1
许可证
累计安装 2
当前安装数 2
历史版本数 6
常见问题

OpenClaw Cofounder Skill 是什么?

Pull startup project data and AI-generated build specifications from CoFounder.im. Use when a user wants to build a project that was validated and planned on... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 484 次。

如何安装 OpenClaw Cofounder Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cofounder-im」即可一键安装,无需额外配置。

OpenClaw Cofounder Skill 是免费的吗?

是的,OpenClaw Cofounder Skill 完全免费(开源免费),可自由下载、安装和使用。

OpenClaw Cofounder Skill 支持哪些平台?

OpenClaw Cofounder Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 OpenClaw Cofounder Skill?

由 Alex Filatov(@alexfilatov)开发并维护,当前版本 v1.2.1。

💬 留言讨论