Skill Doc Formatter

Formats SKILL.md (OpenClaw/Cursor skill docs) for optimal display on ClawHub. Produces a consistent structure—Description, Installation, Usage with benefit-f...

This package appears to do exactly what it says: format SKILL.md files and run a local static security checklist. It's safe to run locally with these caveats: 1) Prefer running without --inplace first (use stdout or -o) so you can review changes before overwriting; 2) The security checker is heuristic (regex-based) and may report false positives/negatives — treat its output as guidance, not authoritative proof; 3) The source/owner is unknown (no homepage), so if you plan to run this on sensitive repositories, review the scripts yourself (they're bundled and small) before use. If you want stronger assurance, inspect scripts/security_review.py and scripts/format_skill_doc.py in full (they are included) or run them in an isolated environment.

Type: OpenClaw Skill Name: skill-doc-formatter Version: 1.0.0 This skill bundle is designed for documentation formatting and security review of *other* OpenClaw skills. The `SKILL.md` clearly outlines its purpose, including a detailed 'Security Review' section that describes various checks for common vulnerabilities (e.g., secret logging, undeclared dependencies, unsafe command execution patterns). The Python scripts (`format_skill_doc.py` and `security_review.py`) implement these features. `format_skill_doc.py` performs text processing and calls `security_review.py` via `subprocess.run`, which is a legitimate internal invocation. `security_review.py` scans other skill files for security issues but does not perform any malicious actions itself. There is no evidence of data exfiltration, unauthorized execution, persistence, or prompt injection against the agent. The entire package is geared towards improving skill quality and security, not compromising it.