← 返回 Skills 市场
645
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install skills-ttt
功能描述
Guide for creating effective skills that extend agent capabilities with specialized knowledge, workflows, or tool integrations. Use this skill when the user...
安全使用建议
This skill appears to be what it claims: a template and validator for authoring skills. Before using: (1) review the two Python scripts to confirm the target path you pass to init_skill.py is correct (they will create directories and files), (2) ensure you have Python available and install PyYAML if you intend to run quick_validate.py, (3) avoid running init_skill.py against system or sensitive directories to prevent accidental file creation, and (4) consider inspecting created files before executing any bundled scripts. No network access or secret exfiltration is apparent, but exercise usual caution when running downloaded scripts.
功能分析
Type: OpenClaw Skill
Name: skills-ttt
Version: 1.0.1
The skill bundle provides tools for creating and validating other skills, instructing the AI agent to execute local Python scripts (`init_skill.py` and `quick_validate.py`). While the overall intent appears benign, the `scripts/init_skill.py` script is vulnerable to path traversal via the `skill-name` argument. This lack of input sanitization allows an agent (potentially via prompt injection) to create skill directories and files in arbitrary locations outside the intended skill storage path, which is a significant vulnerability.
能力评估
Purpose & Capability
The SKILL.md describes how to create and structure skills and the included scripts (init_skill.py and quick_validate.py) implement exactly that functionality (scaffold a skill directory and validate SKILL.md). The referenced storage path (~/.deepagents/<agent>/skills/) matches the stated purpose.
Instruction Scope
Instructions are limited to skill authoring guidance and resource organization. They do not instruct the agent to read unrelated system files, contact external endpoints, or access unrelated credentials. The scripts operate on user-specified filesystem paths and SKILL.md contents only.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. The bundled Python scripts will be written to disk when the skill is present. Note: quick_validate.py imports 'yaml' (PyYAML) and the scripts assume a Python runtime — these dependencies are not declared in the metadata.
Credentials
The skill declares no required environment variables or credentials and the code does not access secrets or external services. The only environment / system requirements are a Python interpreter and (for the validator) PyYAML, which are proportional to the scripts' purposes.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not modify other skills or global agent configuration beyond creating files in the target skill directory. It sets executable permission on created example script files, which is expected for a scaffold tool.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skills-ttt - 安装完成后,直接呼叫该 Skill 的名称或使用
/skills-ttt触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
skills-ttt v1.0.1
- No file changes detected in this version.
- No functional or documentation updates; package remains unchanged.
v1.0.0
Initial release of the Skill Creator guide
- Introduces a comprehensive guide for designing effective skills to extend agent capabilities in Deepagents.
- Explains key principles: concise context usage and setting appropriate degrees of freedom for instructions.
- Details skill structure, including required SKILL.md metadata and optional bundled resources (scripts, references, assets).
- Establishes best practices for progressive disclosure and efficient skill authoring.
- Clarifies what information and files should/should not be included in a skill package.
元数据
常见问题
first skill 是什么?
Guide for creating effective skills that extend agent capabilities with specialized knowledge, workflows, or tool integrations. Use this skill when the user... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 645 次。
如何安装 first skill?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skills-ttt」即可一键安装,无需额外配置。
first skill 是免费的吗?
是的,first skill 完全免费(开源免费),可自由下载、安装和使用。
first skill 支持哪些平台?
first skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 first skill?
由 Colin_DL(@chengxindl)开发并维护,当前版本 v1.0.1。
推荐 Skills