← 返回
安全合规 中文

skill-refiner

Audit and fix all skills in the workspace for compliance with skill-creator requirements. Use when asked to "refine skills", "audit skills", "check skill qua...
审核并修复工作区中的所有技能,使其符合技能创建者要求。用于当被要求“优化技能”、“审核技能”、“检查技能质量”等场景。
1va7
安全合规 clawhub v1.0.0 1 版本 99843.5 Key: 无需
★ 0
Stars
📥 1,276
下载
💾 28
安装
1
版本
#latest

概述

Skill Refiner

Finds every skill in the workspace, audits each against skill-creator requirements, and fixes non-compliant ones.

Workflow

Step 1 — Discover all skills

bash scripts/find_skills.sh [workspace_dir]

This searches the entire workspace for SKILL.md files (not just skills/). Skills created without following skill-creator conventions may end up anywhere.

Step 2 — Audit each skill

python3 scripts/audit_skill.py <skill-dir>

Returns JSON with:

  • issues — blocking problems that must be fixed
  • warnings — advisory improvements
  • compliant — true only when issues is empty

Run this on every path returned by Step 1. Batch example:

bash scripts/find_skills.sh | while read dir; do
  python3 scripts/audit_skill.py "$dir"
done

Step 3 — Report findings

Summarize results in a table:

SkillLocationIssuesWarningsStatus
-------------------------------------------
my-skillskills/my-skill01⚠️
bad-skilltemp/bad-skill20

Step 4 — Fix non-compliant skills

For each skill with issues, fix in this order:

  1. Missing/malformed frontmatter — Add or correct the --- block with name and description only
  2. Extra frontmatter fields — Remove any fields other than name and description
  3. Weak description — Rewrite to include: what the skill does + trigger conditions ("Use when...")
  4. Extraneous files — Delete README.md, INSTALLATION_GUIDE.md, CHANGELOG.md, etc.
  5. Wrong location — If a skill is outside skills/, move it to ~/.openclaw/workspace/skills//
  6. Naming violations — Rename directory to lowercase-hyphen-case

For warnings (advisory):

  • Long SKILL.md (>500 lines): extract detailed content into references/ files and link from SKILL.md
  • Unlinked references: add links in SKILL.md body
  • Weak description: improve trigger language

Step 5 — Validate fixes

Re-run audit_skill.py on each fixed skill to confirm "compliant": true.

Optionally package with:

python3 /opt/homebrew/lib/node_modules/openclaw/skills/skill-creator/scripts/package_skill.py <skill-dir>

Compliance Checklist

A compliant skill must have:

  • [ ] SKILL.md at the root of a named directory
  • [ ] YAML frontmatter with exactly name and description (no other fields)
  • [ ] description includes what the skill does AND when to trigger it
  • [ ] Directory name: lowercase letters, digits, hyphens only; ≤64 chars
  • [ ] No extraneous files (README.md, CHANGELOG.md, etc.)
  • [ ] Resources only in scripts/, references/, or assets/
  • [ ] All references/ files linked from SKILL.md body
  • [ ] SKILL.md body ≤500 lines (split into references/ if longer)

版本历史

共 1 个版本

  • v1.0.0 当前
    2026-03-29 09:11 安全 安全

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

MoltGuard - Security & Antivirus & Guardrails

thomaslwang
MoltGuard — OpenClaw 安全守卫,由 OpenGuardrails 提供。安装 MoltGuard,保护您和您的用户免受提示注入、数据泄露和恶意攻击。
★ 116 📥 30,713
security-compliance

1password

steipete
设置和使用 1Password CLI (op)。适用于:安装 CLI、启用桌面应用集成、登录(单/多账户)、通过 op 读取/注入/运行密钥。
★ 53 📥 31,164
security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,214 📥 266,396