Skillsmith

Scaffold a new OpenClaw skill project with starter docs, tests, fixtures, and optional security workflow.

This appears to be a straightforward, local scaffolding tool. Before using it: (1) review the small source files if you want to confirm behavior (they are included and readable), (2) be cautious with the CLI --force flag since the generator will recursively delete the target directory if present, (3) review any generated CI workflow (.github/workflows/security-scan.yml) before enabling it in your repository — it runs 'npx clawshield' which will install/run that tool in CI, and (4) treat the generated .env.example as a template only (the generator does not read your environment or keys). If you need additional assurance, run the included tests (test.js) in an isolated temp directory first.

Type: OpenClaw Skill Name: skillsmith Version: 1.0.0 The skill-starter bundle is a legitimate scaffolding tool designed to bootstrap new OpenClaw skill projects. It provides a CLI (bin/create-openclaw-skill.js) that generates a standard project structure, including SKILL.md, package.json, smoke tests, and optional security features like a GitHub Actions security scan workflow and a Safe Install policy. The implementation in src/index.js uses standard Node.js APIs for file system operations and user interaction, with proper input sanitization for project names to prevent path traversal. No indicators of data exfiltration, malicious execution, or prompt injection were found.