← 返回 Skills 市场
scotteverduim

Scaffold Project

作者 ScottEverduim · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
388
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install scaffold-project
功能描述
Creates a new project structure with frontend, backend, database, integrations, marketing folders, and a README.md inside mission-control workspace.
安全使用建议
This skill intends to scaffold a project, but the shipped code is buggy and user-specific. Before installing or running: (1) review and modify index.js to use a portable home directory (e.g., require('os').homedir() or process.env.HOME) instead of '/Users/ton'; (2) remove 'README.md' from the directory-creation loop and create files separately so you don't try to mkdir a filename; (3) add checks to avoid clobbering existing files and return the list of created files as documented; (4) test in a safe/sandbox directory first to confirm behavior; and (5) if you don't want writes on your machine, do not enable autonomous invocation or run the code locally without inspection. The issues look like sloppy/unfinished code rather than intentional malice, but treat it as untrusted until corrected.
功能分析
Type: OpenClaw Skill Name: scaffold-project Version: 1.0.0 The skill scaffolds a project structure but is flagged as suspicious due to the use of a hardcoded absolute path ('/Users/ton/...') in index.js, which targets a specific user's home directory and deviates from the portable path (~/.openclaw-workspace) described in SKILL.md. Additionally, the script contains a logic error where it attempts to create a directory named 'README.md' before trying to write a file with the same name, which would cause a runtime failure.
能力评估
Purpose & Capability
Name/description say 'create scaffold in mission-control workspace' and no credentials/install are requested, which is appropriate — but the code hardcodes the target directory as '/Users/ton/.openclaw-workspace/projects/mission-control' instead of using the documented allowed path (~/.openclaw-workspace/...). The hardcoded '/Users/ton' makes the skill user-specific and non-portable; that mismatch is not justified by the description.
Instruction Scope
SKILL.md describes checks (existence), creating folders and a README, and returning a list of created files. The shipped index.js does not perform an existence check/conditional behavior, does not return a list, and instead always mkdirs. Worse, the 'structure' array includes 'README.md' which the code treats as a directory (mkdirSync) and then later attempts to write a README.md file to the same path — this will cause errors (EISDIR or write failures) and contradicts the documented behavior.
Install Mechanism
No install spec or external downloads; the skill is instruction/code-only and relies only on Node.js fs/path. There are no network fetches or remote installers to review.
Credentials
No env vars or credentials are requested (appropriate). The code touches the filesystem under a hardcoded absolute home path, but does not attempt to read environment variables or secrets. The hardcoded user path is unusual but not evidence of secret exfiltration.
Persistence & Privilege
The skill does not request elevated platform privileges and always:false. It writes files under a user directory (expected for a scaffolding tool) and does not modify other skills or global config.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install scaffold-project
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /scaffold-project 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of scaffold-project - Creates a standard project structure within the mission-control workspace. - Automatically generates base folders: frontend, backend, database, integrations, marketing. - Creates a README.md file describing the project. - Checks for existing folders before creating new ones. - Returns a list of all created files.
元数据
Slug scaffold-project
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Scaffold Project 是什么?

Creates a new project structure with frontend, backend, database, integrations, marketing folders, and a README.md inside mission-control workspace. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 388 次。

如何安装 Scaffold Project?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install scaffold-project」即可一键安装,无需额外配置。

Scaffold Project 是免费的吗?

是的,Scaffold Project 完全免费(开源免费),可自由下载、安装和使用。

Scaffold Project 支持哪些平台?

Scaffold Project 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Scaffold Project?

由 ScottEverduim(@scotteverduim)开发并维护,当前版本 v1.0.0。

💬 留言讨论