Skill Review

Review an OpenClaw skill for token efficiency, scriptability, and clean action boundaries; back up first, then improve the skill.

This skill is a plausible meta-review tool and includes only a safe read-only helper script, but its SKILL.md asks the agent to back up and modify other local skills without providing an explicit, auditable backup/modify script. Before installing or enabling autonomous invocation: 1) Require explicit confirmation before any file write — prefer the agent to produce patch suggestions rather than applying changes automatically. 2) Add/verify a dedicated backup script that writes backups to a clearly named, access-controlled location and prints the backup path. 3) Limit which agent identities can run this skill with write permission (prefer read-only for general users). 4) Audit any future scripts that actually perform writes before granting run privileges. If you want minimal risk, use the included review_skill.sh for read-only analysis only and do manual backups and edits yourself.

Type: OpenClaw Skill Name: master-skill-review Version: 1.0.1 The skill is a meta-utility designed to audit and modify other OpenClaw skills for token efficiency and scriptability. While its stated purpose is benign and it includes safety-conscious instructions (e.g., mandatory backups and evidence reporting in SKILL.md), it possesses high-risk capabilities, specifically the authority to modify SKILL.md, scripts, and references across the local environment. The accompanying script, scripts/review_skill.sh, is a safe, read-only diagnostic tool that checks file sizes and heuristics without any evidence of malicious intent or vulnerabilities.