Scaffolds new skills safely in the workspace by creating skill folders, generating SKILL.md and minimal files, and verifying skill registration.

This skill is mostly coherent for local scaffolding, but take these precautions before installing: 1) Confirm the hard-coded workspace path (/Users/clawdbot/.openclaw/workspace/skills/) matches where you want files created — if not, request or edit the SKILL.md to accept a configurable path. 2) Ask the author to clarify what they mean by 'Never print tool JSON; call exec.' and to narrow which commands may be executed (avoid broad 'exec' instructions). 3) Note SKILL.md references /usr/bin/tee and /bin/cat — ensure those binaries are present and the skill metadata is updated to list them. 4) Run first-time use in a sandbox or with backups of the workspace to confirm generated files are safe. 5) If you need stronger guarantees, request the author include explicit checks (e.g., validate filenames, avoid interpolation of untrusted input) or require a preview step so you can inspect generated SKILL.md and files before the skill writes them.

Type: OpenClaw Skill Name: henry-skill-installer Version: 1.0.0 The skill bundle 'henry-skill-installer' is designed to safely scaffold new OpenClaw skills within a designated workspace. Both SKILL.md and INSTALL_PROMPT.md contain explicit guardrails, such as 'Never delete files unless explicitly told', 'Only write within /Users/clawdbot/.openclaw/workspace/skills/', 'No network calls unless explicitly requested', and 'Do NOT instruct destructive commands (rm, sudo, etc.)'. These instructions actively mitigate potential risks and demonstrate an intent for secure operation, with no evidence of malicious prompt injection, data exfiltration, or unauthorized execution.