Skill Lifecycle

Skill 全生命周期管理工具 - 标准化开发、测试、发布流程 核心流程：版本管理 + 测试 + 质量扫描 + Git 提交 扩展流程：ClawHub 发布（可选）+ 知识提炼（可选） 效率提升：本地开发 35 分钟→3 分钟，完整发布 50 分钟→5 分钟

This tool appears to do what it says: bump versions, run tests, scan code, commit, and optionally publish. Before using it: (1) only run it on skill directories you trust or have reviewed because the tool executes test files and external commands (tests run as Python processes and the publish step calls the 'clawhub' CLI), (2) ensure your environment has git and, if you plan to publish, the clawhub CLI installed, and (3) be aware it will modify files in the target skill (SKILL.md, _meta.json, .clawhub/origin.json, .publish_record.json) and may create commits — back up or run in dry-run mode first. Note: there's a minor bug in config.edit (uses subprocess._optim_args_from_interpreter_flags()) that may fail when attempting to open the editor; this seems like a coding error rather than malicious behavior.

Type: OpenClaw Skill Name: skill-lifecycle Version: 0.2.0 The skill bundle is a legitimate developer tool designed for managing the lifecycle of OpenClaw skills, including versioning, automated testing, static code analysis, and Git integration. It uses standard libraries (click, rich, yaml) and subprocess calls to perform its stated functions, such as running local tests and invoking the 'clawhub' CLI for publishing. While it contains a minor implementation flaw in commands/config.py regarding default editor detection, there is no evidence of malicious intent, data exfiltration, or harmful prompt injection.