← 返回 Skills 市场
yuchangxu1989-openclaw

Skill Distill

作者 yuchangxu · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ✓ 安全检测通过
105
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install openclaw-skill-distill
功能描述
Strip any local project into a clean, publishable agent skill. Scan for hardcoded paths and secrets, scaffold standard structure, validate before publish. Us...
安全使用建议
This skill appears to do what it claims: scan a project for local traces, scaffold a skill, and run validation. Before using it, review the scripts and run them locally in an isolated environment (or on a copy of the project). Pay special attention to scan.sh: it prints matching lines (including .env assignments and other secret-like strings) to stdout, so do not run it in contexts where the agent will forward that output to remote services or public logs. If you plan to use it in an automated agent that can send outputs externally, modify scan.sh to redact secret values (or log only filenames/line numbers), and test scaffold.sh on non-production copies to ensure no unintended removals. If you want higher assurance, run the scripts manually on a copied repo before giving the skill any automated privileges.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
Name/description match the included assets: scan.sh, scaffold.sh, and validate.sh implement scanning for hardcoded paths/secrets, scaffolding a skill directory, and pre-publish validation. There are no unexpected binaries, credentials, or network calls requested in metadata. The files present are proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run local scripts on a given project directory — this is appropriate for the task. However, scan.sh prints the full matching lines from files (including .env entries and secret patterns) to stdout; validate.sh runs scan.sh but redirects its output to /dev/null in its check, so it will suppress details and only report failure. Because scan.sh emits secret-containing lines, running these scripts in contexts where the agent forwards output externally (or logs are collected remotely) could leak secrets. The scripts also read file contents and search the filesystem of the target directory as required by purpose; no other system-wide paths or unrelated credentials are accessed.
Install Mechanism
Instruction-only skill with shell scripts; no install spec and no downloads. All code is local shell scripts (no archive downloads or package installs), so install risk is low.
Credentials
The skill declares no environment variables or credentials, which is appropriate. The scripts do reference the shell USER variable to detect local-username occurrences — this is reasonable for a local-scan tool. Still, the scan script will echo matched lines (including secrets) to stdout, which is a data-exposure risk relative to its intended role of detecting secrets.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges. The scaffold script creates a new destination directory and removes a .git directory in the generated destination only; it does not alter other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install openclaw-skill-distill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /openclaw-skill-distill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.0
Added CJK character detection in validate.sh - frontmatter must be English-only for ClawHub publishing
v0.1.1
English-only description for international users
v0.1.0
- Initial release of skill-distill. - Provides tools to convert any local project or codebase into a clean, publishable ClawHub skill. - Adds automated scripts for scanning projects, generating standardized skill scaffolding, and validating skills before publishing. - Supports the workflow: scan for issues → fix → scaffold → validate → publish. - Requires only bash and grep; final publish step needs the clawhub CLI.
元数据
Slug openclaw-skill-distill
版本 0.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Skill Distill 是什么?

Strip any local project into a clean, publishable agent skill. Scan for hardcoded paths and secrets, scaffold standard structure, validate before publish. Us... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 105 次。

如何安装 Skill Distill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-skill-distill」即可一键安装,无需额外配置。

Skill Distill 是免费的吗?

是的,Skill Distill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Skill Distill 支持哪些平台?

Skill Distill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Skill Distill?

由 yuchangxu(@yuchangxu1989-openclaw)开发并维护,当前版本 v0.2.0。

💬 留言讨论