← 返回 Skills 市场

Lowcode Platform Development

Name: Lowcode Platform Development
Author: mmyg11

作者 mmyg11 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

314

总下载

当前安装

版本数

在 OpenClaw 中安装

/install lowcode-platform-development

功能描述

Automates the creation of required development roles, scaffolds the project structure, and generates code for a low‑code development platform with Vue2 + Ele...

使用说明 (SKILL.md)

Low‑Code Platform Development Skill

When to use

User asks to build a low‑code development platform using Vue2 + ElementUI for UI and Java (Spring Boot) for the back‑end.
User wants the assistant to create development roles (frontend, backend, devops, QA) and set up the repository structure automatically.
User expects the platform to include page editor, component library, data model manager, workflow engine as described in the architecture overview.

Overview

This skill automates the end‑to‑end setup of the platform:

Create project roles (frontend engineer, backend engineer, devops, QA) and write brief role descriptions to docs/roles.md.
Scaffold repository with a standard Maven + npm layout (frontend/, backend/).
Generate base code:
- Vue2 project using ElementUI, with a drag‑and‑drop editor skeleton.
- Spring Boot project with JPA entities for data models, Camunda workflow engine integration, and REST API boilerplate.
Add essential configuration files (docker‑compose.yml, CI pipeline, security settings).
Commit initial version to a local Git repository.
Provide next‑step guidance for extending the platform.

Resources

references/architecture.md – Detailed architecture diagram and component responsibilities.
scripts/generate_project.ps1 – PowerShell script that runs the scaffold commands.
assets/vue‑template/ – Minimal Vue2+ElementUI starter template.
assets/spring‑boot‑template/ – Minimal Spring Boot Maven project template.

Steps to execute

Call scripts/generate_project.ps1 with the target directory.
The script creates the folder layout, writes docs/roles.md, copies template assets, and runs npm install and mvn package.
After the script finishes, the skill returns a summary of what was generated and any manual actions required.

Manual post‑setup actions

Push the repository to a remote if desired.
customise the generated UI components in frontend/src/components/.
Add domain‑specific data models to backend/src/main/java/com/app/lowcode/model/.
Configure authentication/authorization in backend/src/main/java/com/app/lowcode/security/.

安全使用建议

This skill's purpose is reasonable for scaffolding a low‑code project, but the runtime artifacts you would need to trust are missing or only placeholders. Before installing or running it: 1) Ask for the actual scripts (scripts/generate_project.ps1) and full template contents so you can review them line-by-line. 2) Confirm and install required tools locally (PowerShell, npm, Maven, git, Docker) and ensure the SKILL.md lists them. 3) Do not run builds or scaffold commands on a sensitive machine — run them in an isolated VM or sandbox because 'npm install' and 'mvn package' will fetch and execute third‑party code. 4) Require the skill to declare any network operations, repository pushes, or credentials it will use; do not provide repository or registry credentials until you have inspected the scripts. 5) If you intend to accept this skill, request that the author include the missing files or change the SKILL.md to only operate on user-supplied verified templates. These steps will reduce the risk of accidentally executing unknown code or leaking credentials.

功能分析

Type: OpenClaw Skill Name: lowcode-platform-development Version: 1.0.0 The skill bundle instructs the AI agent to perform high-risk operations, including executing a PowerShell script (`scripts/generate_project.ps1`) and running build commands (`npm install`, `mvn package`). However, the actual content of the PowerShell script and the project templates are missing from the provided files, preventing a full security audit of the execution logic. While these actions are aligned with the stated purpose of scaffolding a project, the lack of transparency regarding the script's contents and the mention of a GraalVM JavaScript sandbox in `references/architecture.md` present significant security risks.

能力评估

ℹ Purpose & Capability

The goal (scaffold frontend/backend, create roles, run npm/mvn, produce docker-compose and CI) aligns with the skill name and description. However the SKILL.md expects a PowerShell script and asset templates to perform that work, yet those runtime artifacts are not actually present or are placeholders. The skill also does not declare the actual required tools (PowerShell, npm, maven, git, docker), which is disproportionate to the claimed purpose.

⚠ Instruction Scope

Instructions tell the agent to run scripts/generate_project.ps1, run 'npm install' and 'mvn package', copy templates, and commit to a git repo. The referenced script file is not included in the manifest and the templates under assets are placeholders, so the instructions cannot be executed safely as-is. Running the described commands will perform network downloads (npm/maven), filesystem writes, and build-time script execution — none of which are spelled out or constrained in the SKILL.md. The instructions also implicitly require git/docker access but do not mention them.

ℹ Install Mechanism

There is no install spec (instruction-only), which minimizes written-on-disk installs from the registry, but increases runtime risk because the skill expects to execute build tooling (npm/maven) that will fetch and execute remote packages. Because the actual scaffolding script is missing, it's unclear what code would be run when this skill is invoked in a real agent environment.

⚠ Credentials

The skill declares no required environment variables or credentials, yet its docker-compose includes SPRING_PROFILES_ACTIVE and the workflow mentions pushing images/CI pipelines and 'push the repository to a remote' (which would need credentials). The absence of declared required binaries (PowerShell, npm, mvn, git, docker) and missing mention of network activity is a proportionality gap. While no explicit secret-exfiltration step appears, build commands will download third‑party code, which can be an attack vector if run blindly.

✓ Persistence & Privilege

The skill does not request always:true and is user-invocable with normal autonomous invocation allowed. It does not request to modify other skills or system-wide agent settings. No elevated persistence is requested.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install lowcode-platform-development
安装完成后，直接呼叫该 Skill 的名称或使用 /lowcode-platform-development 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of the Low-Code Platform Development skill. - Automates setup of a full low-code platform with Vue2 + ElementUI frontend and Spring Boot backend. - Creates standard project structure, including roles, documentation, and base code for both front-end and back-end. - Adds essential configuration files for Docker, CI pipelines, and security. - Provides starter templates for UI and backend logic, including workflow and data models. - Includes guidance on extending and customizing the platform after initial generation.

元数据

Slug lowcode-platform-development

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题