← 返回 Skills 市场
tobewin

Skill Studio

作者 ToBeWin · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ 安全检测通过
142
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-studio
功能描述
Create, validate, and publish OpenClaw Skills through conversation. Use when user wants to create a new skill, build a ClawHub plugin, generate SKILL.md, or...
安全使用建议
This skill appears to do what it says, but please take these precautions before installing or using it: 1) Set OPENCLAW_WORKSPACE to a dedicated directory you control (so the agent only reads/writes files you expect). 2) Review any generated SKILL.md and any 'auto-fix' edits before applying them — the agent can edit files in that workspace. 3) Publishing requires the ClawHub CLI and a ClawHub token; only supply those tokens when you intend to publish and store them securely. 4) Watch for any commands the agent asks you to run (npm installs, clawhub publish, or curl commands); avoid running piped remote-install commands (curl | bash). 5) Consider renaming the primaryEnv metadata if you want to avoid marking a workspace path as a 'credential'.
功能分析
Type: OpenClaw Skill Name: skill-studio Version: 1.0.1 The 'skill-studio' bundle is a developer utility designed to assist users in creating, validating, and publishing OpenClaw skills. It contains Python-based validation and auto-fix scripts (within SKILL.md) that specifically check for and warn against security risks such as 'curl|bash' patterns, 'sudo' installers, and 'eval/exec' usage. The logic is transparent, aligned with its stated purpose, and lacks any indicators of malicious intent or data exfiltration.
能力评估
Purpose & Capability
Name/description (create, validate, publish skills) align with required binaries (curl, python3, npm) and the declared OPENCLAW_WORKSPACE. curl is reasonable for API checks or examples, python3 for the validation script, and npm for the ClawHub CLI referenced in the publish guide. Only minor oddity: OPENCLAW_WORKSPACE is declared as the primaryEnv even though it is a workspace path (not a secret credential).
Instruction Scope
SKILL.md instructs the agent to read and validate SKILL.md files under the OPENCLAW_WORKSPACE and includes an auto-validation script and 'one-click fix' behavior. Reading and editing files in a user workspace is coherent for this tool, but it means the agent will access (and potentially modify) arbitrary files under the workspace path — users should review generated fixes before applying or publishing. The instructions do not embed hidden network endpoints or curl|bash install pipelines; the references explicitly warn against remote 'curl | bash' patterns.
Install Mechanism
This is an instruction-only skill with no install spec or remote downloads. The included references suggest installing the ClawHub CLI via npm (user-driven), which is expected. There are no obscure download URLs or archive extracts in the skill bundle.
Credentials
The only required env var is OPENCLAW_WORKSPACE, which is appropriate for a tool that reads/writes skill files. It does not request secrets by default. However, the skill's workflow can prompt users to declare API_KEY-type env vars for the skills they create, and the publish guide instructs using ClawHub tokens for publishing — so users may end up providing tokens when they actually publish. Also note the minor mismatch of marking a workspace path as the 'primaryEnv'.
Persistence & Privilege
The skill is not 'always' enabled and uses normal model invocation. It does not request system-wide configuration changes or privileges, and there is no evidence it modifies other skills' configs. Its ability to read/write files is expected for an authoring tool but is limited to the workspace the user points to.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install skill-studio
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /skill-studio 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
修复安全扫描问题:添加npm依赖声明和OPENCLAW_WORKSPACE环境变量声明
v1.0.0
Initial release: Create, validate, and publish OpenClaw Skills through conversation with dual modes (guided/expert), auto validation, and auto fix
元数据
Slug skill-studio
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Skill Studio 是什么?

Create, validate, and publish OpenClaw Skills through conversation. Use when user wants to create a new skill, build a ClawHub plugin, generate SKILL.md, or... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 142 次。

如何安装 Skill Studio?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-studio」即可一键安装,无需额外配置。

Skill Studio 是免费的吗?

是的,Skill Studio 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Skill Studio 支持哪些平台?

Skill Studio 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Skill Studio?

由 ToBeWin(@tobewin)开发并维护,当前版本 v1.0.1。

💬 留言讨论