by 安全扫描
OpenClaw
安全
medium confidenceThe skill's code and runtime instructions match its stated purpose (generating project scaffolds) and do not request credentials or perform network/exfiltration actions; the main inconsistency is a minor metadata omission about required binaries.
评估建议
This skill appears to do what it says: generate project scaffolds by running the included script which in turn uses Python heredocs to write files. Before running: (1) ensure you have bash and python3 installed (SKILL.md requires them — the registry metadata omitted these), (2) run the script in an empty or disposable directory because it will create files and directories named after your project, (3) inspect the generated package manifests (package.json, pyproject.toml, go.mod) before running p...详细分析 ▾
ℹ 用途与能力
Name/description (project scaffolding for Node/Python/Go) aligns with the included script and templates. SKILL.md documents dependencies on bash >=4.0 and python3 >=3.7, but the registry metadata lists no required binaries — this is an inconsistency in metadata (not in behavior). All actions in the script are consistent with generating files for project templates.
✓ 指令范围
SKILL.md instructs the agent to run the provided script.sh with list|init|generate. The script creates files and directories under the chosen project name and prints next steps. It does not read unrelated system files, access environment variables, or send data to external endpoints.
✓ 安装机制
There is no install spec (instruction-only plus an included script), so nothing is downloaded or installed by the platform. The included script writes files to disk when invoked, which is expected for a scaffolding tool.
✓ 凭证需求
The skill requests no environment variables or credentials. The script does not access secret-like env vars or config paths. It does execute python3 subprocesses (heredoc Python) — consistent with the stated requirements and not excessive for the task.
✓ 持久化与权限
The skill is user-invocable, not always-on, and does not request persistent privileges or modify other skills/system-wide configurations. It only writes files into the target project directory as expected.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/29
Initial release
● 无害
安装命令
点击复制官方npx clawhub@latest install proj-builder
镜像加速npx clawhub@latest install proj-builder --registry https://cn.longxiaskill.com镜像同步中
技能文档
Project Scaffold Generator — Instantly generate well-structured project skeletons 对于 节点.js, Python, 和 Go. 获取 就绪-到-code directory 布局 带有 sensible defaults 在...中 seconds.
Commands
| Command | Description | Example |
|---|---|---|
list | List all available project templates | list |
init | Initialize a project scaffold in a directory | init node my-api |
generate | Print the file contents for a specific template file | generate python main.py |
Usage
bash script.sh list
bash script.sh init