📦 Build

v1.0.1

Builds and configures a complete AI software development team inside OpenClaw. Use this skill whenever someone says "build a software development team", "set...

0· 17·0 当前·0 累计

by @encryptshawn (EncryptShawn)

下载技能包

最后更新

2026/4/26

安全扫描

VirusTotal

Pending

查看报告

OpenClaw

安全

medium confidence

The skill is an instruction-only orchestration that is internally consistent with its stated purpose, but it delegates privileged operations to other admin/dependency skills — those should be reviewed before use.

评估建议

This skill is primarily an orchestration script that delegates privileged actions to other skills rather than handling secrets itself. Before installing/using it: 1) Inspect and trust the openclaw-administrator and any recommended dependency skills (Asana, Git, Email, openclaw-recovery-manager) because they will hold and use your actual credentials and have elevated privileges. 2) Confirm you are comfortable with workspace files (USER.md, TOOLS.md, HEARTBEAT.md) containing project metadata and e...

详细分析 ▾

✓ 用途与能力

Name/description align with the actual behavior in SKILL.md: it collects project metadata, env-var NAMES (not values), and instructs the openclaw-administrator and other dependency skills to create agents, wire repos, and configure Asana. Requiring a privileged administrator skill for agent creation/configuration is expected for this purpose.

ℹ 指令范围

Instructions stay within setup/orchestration scope and explicitly state they do not read/store secret VALUES. The skill asks for repo SSH URLs and the NAMES of env vars that hold credentials and creates plain-text workspace files (USER.md, TOOLS.md, HEARTBEAT.md) containing non-secret metadata. Passing env-var NAMES to dependency skills is reasonable but leaks naming/operational metadata that some organizations consider sensitive; the skill also relies on other installed skills to perform API calls and credential handling.

✓ 安装机制

Instruction-only skill with no install spec, no downloads, and no code files — minimal install risk (nothing written to disk by this skill itself).

ℹ 凭证需求

This skill does not request credential values or list required env vars itself; it requests only env-var NAMES for Asana PAT, GitHub PAT, and an email label. That is proportional to its orchestration role. However, it delegates secrets and API activity to other dependency skills (openclaw-administrator, Asana/Git/email skills) — you should vet those skills because they will hold/use the actual secrets. One minor inconsistency: the SKILL asks for GitHub PAT name while also recommending SSH repo URLs; both are plausible (PAT for API operations, SSH for repo clone), but verify you understand which credential is used for which operation.

ℹ 持久化与权限

The skill is not marked always:true and does not self-persist. It instructs the openclaw-administrator to change agent configurations (e.g., heartbeat interval) and to write workspace files — appropriate for a setup orchestrator. Because those actions are performed via a privileged admin skill, review that admin skill's permissions. Also note that the platform-default autonomous invocation is allowed; combined with powerful dependency skills, a compromised dependency could have greater impact — review dependency trust before running autonomously.

安全有层次，运行前请审查代码。

运行时依赖

无特殊依赖

版本

latestv1.0.12026/4/26

- Clarified credential and security handling: this skill never reads or stores any token or secret value; it only references env var names, and all credential use is delegated to dependency skills. - Added explicit documentation about OpenClaw’s heartbeat scheduling and workspace files created during setup. - Updated required skills section for stricter dependency requirements and clearer installation instructions. - Clarified that all Asana and GitHub API operations are performed by separately installed dependency skills, not by this skill itself. - Enhanced documentation and user prompts throughout for greater transparency regarding what is accessed/configured at each step.

● Pending

安装命令

点击复制

官方npx clawhub@latest install build-dev-team

镜像加速npx clawhub@latest install build-dev-team --registry https://cn.longxiaskill.com

数据来源：ClawHub ↗ · 中文优化：龙虾技能库