← 返回 Skills 市场
359
总下载
0
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-generator
功能描述
Tạo AI Skill mới từ ý tưởng hoặc quy trình công việc. Kết hợp phỏng vấn thông minh, pattern detection, và quantitative evaluation để tạo skill chất lượng pro...
安全使用建议
This package appears to be a full-featured 'skill generator' toolkit (templates, scripts, eval agents). That said, take these precautions before installing or running anything: 1) Do not run the one‑line curl|bash or PowerShell | iex installer without first downloading and auditing install.sh/install.ps1 — piping remote scripts to a shell is risky. 2) Inspect install.sh and scripts (package_skill.py, simulate_skill.py, generate_review.py, ci_eval.py, any 'publish' or 'upload' code) to see whether they make network calls, call external services, or prompt for/stash credentials. 3) Be cautious about copying files into agent config directories (e.g., ~/.gemini, ~/.claude). That makes the skill persistent and grants it effective reach into your agent environment. 4) The eval viewer starts a local HTTP server that embeds workspace files — only run it in a controlled environment and ensure it is bound to localhost and not exposed to untrusted networks; inspect generate_review.py behavior before use. 5) Expect to need API keys or marketplace credentials for publishing/export features — provide those only when you understand where they are used and are confident scripts won't exfiltrate them. 6) Prefer running the toolkit inside an isolated environment (VM or container) or after manual code review. If you want higher confidence, share install.sh and any publishing scripts for review or run static grep for 'curl', 'requests', 'git push', 'ssh', 'os.environ', and for use of remote domains to see where network traffic may be sent.
功能分析
Type: OpenClaw Skill
Name: skill-generator
Version: 1.0.0
The 'skill-generator' bundle is a comprehensive and well-documented toolkit designed to help users create, evaluate, and deploy AI skills across various platforms (Antigravity, Claude, Cursor, etc.). The bundle consists of a core logic file (SKILL.md), several utility Python scripts for auditing and validating markdown files (e.g., validate_skill.py, skill_audit.py), and an installer (install.sh). The scripts and instructions are strictly aligned with the stated purpose of skill orchestration and quality assurance. No indicators of data exfiltration, malicious prompt injection, or unauthorized system access were detected; in fact, the documentation explicitly includes security constraints against hardcoding secrets and executing destructive commands.
能力评估
Purpose & Capability
Name/description (generate AI Skills) match the repository contents: pipelines, templates, agents, tests, and packaging scripts are present. However README/SKILL.md claim features like 'Package & Publish' and multi‑platform exports that require external accounts/credentials (Anthropic, marketplaces, platform-specific skill dirs) but the registry metadata lists no required environment variables or primary credential — a functional mismatch. The included files (scripts/, phases/, resources/) are appropriate for a skill-creation toolkit, so purpose is plausible, but publishing/integration steps will need user credentials not declared.
Instruction Scope
SKILL.md describes an 8‑phase pipeline and instructs the agent to read resources and use scripts. That scope is expected. Concerning items in the instructions and repo: (1) an explicit recommendation to copy the package into platform config directories (e.g., ~/.gemini/antigravity/skills, .claude/commands) — this writes into user agent configs and grants persistence; (2) an explicit guideline 'Black Box Scripts: AI uses --help to self-learn, DO NOT read source code' — that discourages code inspection and is a weak safety stance; (3) several tools (e.g., eval viewer, HTTP server) read workspace directories and serve embedded outputs, which could expose sensitive files if run without care. The SKILL.md does not explicitly instruct reading unrelated system files, but some agents (analyzer/grader) expect to read transcripts, skill files, and outputs under the workspace — normal for an eval system but worth caution.
Install Mechanism
The registry lists no install spec, but README advertises a 'one‑click' install that pipes a raw.githubusercontent.com script into bash (and a PowerShell iex command for Windows). While raw.githubusercontent.com is a common host, piping remote shell scripts to the shell is high‑risk. There is also guidance to copy the repo into various platform config directories (writing files into user agent folders). The package itself contains many scripts that will be written to disk and can be executed; the absence of an official, reviewed release and the suggested curl|bash install are risk factors.
Credentials
The registry metadata declares no required environment variables or primary credential. Yet the README and SKILL.md describe integration with external AI platforms (Anthropic/Claude, Antigravity, others) and 'Package & Publish' to marketplaces — actions that typically require API keys or tokens. The mismatch (advertised network/publishing features vs. no declared creds) means users may be prompted later to provide sensitive credentials or scripts may attempt network interactions without explicit declared requirements. Additionally, the included tooling can read workspace outputs and could inadvertently leak secrets if those outputs contain credentials.
Persistence & Privilege
always:false and user-invocable:true (normal). The README's installation instructions encourage copying the skill into global agent skill/config directories (persistent installation) and the toolkit includes a local HTTP server (eval viewer) that serves workspace files and auto-saves feedback.json — that increases the chance of exposing local files. There is no evidence the skill modifies other skills' configs, but it does instruct writing into agent-specific config paths which is a meaningful persistence/privilege decision and worth reviewing before use.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-generator - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-generator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the skill under new name: **skill-creator-ultra**.
- Enables users to create new AI Skills from ideas or workflows via structured interview, pattern detection, and quantitative evaluation.
- Supports use cases for both automating new workflows and improving existing skills.
- Introduces an 8-phase creation and refinement pipeline, with Fast Track for simple cases and System Mode for multi-step workflows.
- Emphasizes a rigorous, engineering-minded approach to skill architecture, including examples, constraints, and automated testing.
元数据
常见问题
Skill Generator 是什么？
Tạo AI Skill mới từ ý tưởng hoặc quy trình công việc. Kết hợp phỏng vấn thông minh, pattern detection, và quantitative evaluation để tạo skill chất lượng pro... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 359 次。
如何安装 Skill Generator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-generator」即可一键安装，无需额外配置。
Skill Generator 是免费的吗？
是的，Skill Generator 完全免费（开源免费），可自由下载、安装和使用。
Skill Generator 支持哪些平台？
Skill Generator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Generator？
由 Wi（@wipal）开发并维护，当前版本 v1.0.0。
推荐 Skills