R Package Development — From Zero to CRAN & Bioconductor

Build, check, and submit R packages to CRAN or Bioconductor. Use when creating a new R package from scratch, fixing R CMD check errors/warnings, preparing fo...

This skill is a comprehensive, instruction-only guide for R package development and CI, and most content is consistent with that purpose. However: - Do not upload package tarballs to unfamiliar URLs. The SKILL.md repeatedly references https://xmpalantir.wu.ac.at/cransubmit/ for CRAN submission — this is not an official CRAN endpoint. Confirm CRAN submission URLs with the official CRAN documentation (cran.r-project.org) before uploading anything or entering credentials. - Treat links in the skill as untrusted until verified. If the process requires clicking a confirmation email or visiting an external site, confirm that the host is official. - Be careful with git filter-branch and git push --force: these rewrite history and can break collaboration if used incorrectly. Back up repositories before running those commands. - The CI examples refer to using GitHub Actions secrets (GITHUB_PAT / secrets.GITHUB_TOKEN) — that is normal, but never paste personal tokens into unverified web forms or third-party upload pages. Use GitHub Actions secrets to keep tokens safe. - If you plan to follow Bioconductor procedures, cross-check the steps with Bioconductor's official contribution docs (contributions.bioconductor.org) and the support site. Given the unexpected submission endpoint and the potentially destructive git advice, proceed only after verifying the external URLs and backing up your repository. If you can, ask the skill author (or source) to confirm the CRAN submission endpoint and the rationale for any nonstandard steps.

Type: OpenClaw Skill Name: r-package-dev Version: 2.0.0 The skill bundle provides legitimate and high-quality instructions for R package development, specifically targeting CRAN and Bioconductor standards. It covers package structure, S4 class design, documentation requirements, and CI/CD setup using standard GitHub Actions (r-lib/actions). No indicators of data exfiltration, malicious execution, or harmful prompt injection were found; all provided code snippets and external links (e.g., to Bioconductor and CRAN submission portals) are consistent with the stated purpose of professional R software engineering.