Skills/ClawHub/yotta-skill-creator

yotta-skill-creator@0.1.7

VERIFIED

Publisher claims: "元造 —— 从内嵌模板一键生成合规技能目录并做结构自检：命名校验（yotta- 前缀 / 小写连字符 / 元X 规范 / 目标不重复）+ 完整发布件脚手架（SKILL.md / README 中英四方式安装 / package.json / CHANGELOG / LICENSE / NOTICE / install.sh + bin/install.js / .gitignore / .npmignore / publish.yml / references / assets）+ 占位符替换 + 结构自检；--self-use 自用模式只生成技能本体（SKILL.md / references / 可选 CLI），不生成任何发布件。触发：新建一个 yotta- 技能、从零搭技能脚手架、想把发布规范里的坑固化成模板时；或用户说 元造 / 造技能 / 脚手架 / scaffold / 新建技能 等。边界（Do NOT trigger）：不替用户写技能正文与脚本逻辑（SKILL.md 正文 / scripts 需人工开发）；不做发布前校验与三源发布（那是元守 yotta-publish-guard）；不做既有技能目录的批量改造。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher yottameta · joined 11 days agoInstalls 781Last detonated 2 h ago
$clawhub install yotta-skill-creator
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-06 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessexec /usr/bin/dirname
0.0sprocessexec /usr/bin/uname
0.0sprocessexited 4: 目标错误: 未检测到项目级智能体目录。可用 --agent <name> 装到用户级，或用 --dir <路径> 指定目录。
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexec /usr/bin/faketime
0.1sprocessexec /usr/bin/dirname
0.1sprocessexec /usr/bin/uname
0.1sprocessexited 4: 目标错误: 未检测到项目级智能体目录。可用 --agent <name> 装到用户级，或用 --dir <路径> 指定目录。

Static findings

MEDIUM
npx invocation of non-well-known packagebin/install.js:7 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:94 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:10 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/yotta_skill_creator.py:46 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Python subprocess execution detectedtemplate/scripts/test_{{cli_module}}.py:15 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
npx invocation of non-well-known packagebin/install.js:8 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/yotta_skill_creator.py:52 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:6 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/yotta_skill_creator.py:338 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagebin/install.js:9 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈1,086 tok
1 file · 27 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.