Spec Miner

Use when understanding legacy or undocumented systems, creating documentation for existing code, or extracting specifications from implementations. Invoke for legacy analysis, code archaeology, undocumented features.

This skill is a coherent, instruction-only guide for extracting specifications from codebases. Before running it, be aware that it instructs the agent to search for and read code and configuration files (including .env and other config), which may contain secrets or credentials. Recommended precautions: run the skill only on codebases you control or in a sandboxed environment; restrict network egress for the agent if possible; review outputs for sensitive values and redact before sharing; and if you don't want configuration secrets inspected, explicitly exclude .env/config paths or instruct the agent to skip them.

Type: OpenClaw Skill Name: spec-miner Version: 0.1.0 The skill bundle is classified as suspicious primarily due to the explicit allowance of the `Bash` tool in `SKILL.md`. While the stated purpose of reverse-engineering and documentation is benign, and no direct malicious `Bash` commands are present in the provided files, granting `Bash` access provides broad capabilities for arbitrary command execution. This represents a significant security risk, even if not immediately exploited for malicious intent within the current instructions.