Web Builder

Build full-stack applications after collecting project requirements. Use when user says Neo App Mode, asks to build/create/scaffold a new app, or wants React...

This skill appears to do what it says: it scaffolds a local React + Node + Mongo app. Before running: 1) confirm the correct script path in your environment (SKILL.md path differs from the package path), 2) run the script from a safe working directory to avoid overwriting important files (it creates apps/<project-name> by default), 3) review and replace insecure defaults in the generated .env (especially JWT_SECRET and DB URI) before running the app in production, and 4) inspect the generated package.json and code if you need custom dependencies or stricter security (input validation, rate-limiting, CORS policies). If you want extra assurance, open the script and a few generated files locally and run them in an isolated environment or container first.

Type: OpenClaw Skill Name: webappbuilder Version: 1.0.0 The skill bundle is a legitimate application scaffolder for a React/Vite/Tailwind frontend and a Node/Express/MongoDB backend. The primary component is a bash script (scripts/scaffold_neo_app.sh) that generates standard boilerplate code for a full-stack application, including JWT authentication and basic CRUD operations. No evidence of data exfiltration, backdoors, or malicious intent was found in the code or the agent instructions (SKILL.md).