360 Secure SkillHub
360 安全技能中心

SkillForge

SkillForge是CLI工具,核心功能为生成OpenClaw Agent技能及审计技能质量:支持从自然语言描述生成技能,分免费模板脚手架与Pro AI智能生成(需API密钥),覆盖TS/JS/Python多语言;审计覆盖结构、完整度等维度,Pro模式提供AI分析。典型场景包括创建新技能、排查现有技能问题、发布技能到ClawHub。需先安装CLI,操作通过命令行完成,审计时需避免提交敏感内容。

shadoprizm
shadoprizm
热度 45.09
最近更新 2026-05-11 17:38:47
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:代码生成 / 代码审查 / 工作流 / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skillforge-cli
Metadata
name
skillforge
description
Generate and audit OpenClaw agent skills from natural language. Use when the operator asks to create a skill, build a skill, generate a skill, audit a skill, or check skill quality. Provides both free template-based generation and Pro AI-powered generation with quality assessment. Triggers on phrases like "create a skill", "generate a skill", "build a skill", "audit a skill", "check this skill", "make a skill for", "skillforge".

SkillForge — Skill Generator & Auditor

Generate complete, publish-ready OpenClaw agent skills from natural language descriptions. Audit existing skills for quality, safety, and completeness.

Prerequisites

SkillForge CLI must be installed globally:

npm install -g @shadoprizm/skillforge@latest

Check version: skillforge --version (requires 0.3.2+)

Commands

Generate a Skill

Free tier (template scaffold, no API key):

skillforge "<description>" --output <path> --lang <typescript|javascript|python>

Pro tier (AI-powered, requires API key):

skillforge "<description>" --pro --output <path> --lang <typescript|javascript|python>

Audit a Skill

skillforge audit <path> --format <table|json|markdown>

Pro audit with AI analysis:

skillforge audit <path> --pro --format markdown

Publish to ClawHub

First-time auth:

clawhub login

Then publish:

skillforge "<description>" --output <path> --publish

Or publish an existing skill:

clawhub publish <path> --slug <slug> --name "<name>" --version <semver>

Workflow

When asked to create/generate a skill:

  1. Clarify the skill purpose if the description is vague
  2. Run skillforge "<description>" --pro --output /tmp/skillforge-gen --lang typescript
  3. Read the generated files to verify quality
  4. Run skillforge audit /tmp/skillforge-gen --pro to score it
  5. If score is B+ or above, offer to publish to ClawHub
  6. If score is below B+, improve the SKILL.md and scripts manually, then re-audit
  7. On operator approval, publish: clawhub publish /tmp/skillforge-gen --slug <slug> --name "<name>" --version 1.0.0

When asked to audit a skill:

  1. Run skillforge audit <path> --pro --format markdown
  2. Present the report to the operator
  3. Offer specific fixes for any issues found
  4. Re-audit after fixes

API Key Configuration

SkillForge Pro uses the operator's own API key (BYOK model). Supported providers:

Env Variable Provider
ZAI_API_KEY Z.AI (GLM-5)
OPENAI_API_KEY OpenAI
OPENROUTER_API_KEY OpenRouter
QWEN_API_KEY Qwen

Keys can also be stored via: skillforge config:set-api-key <key>

Audit Categories

Category Weight What It Checks
Structure 20% SKILL.md, skill.json, file organization
Completeness 25% Required sections, fields, tags
Quality 25% Description depth, workflow detail, examples
Safety 20% Dangerous patterns, hardcoded secrets
Compatibility 10% Category validity, tool references

Constraints

  • Always use --pro when an API key is available for best quality
  • WARNING: Pro mode sends skill contents to your chosen AI provider. Do not audit directories containing secrets, .env files, private keys, or credentials. Point audits only at skill directories.
  • Verify generated skills actually work before publishing
  • Never publish without operator approval
  • Use --format json for CI/CD contexts, --format table for chat
  • Slug must be unique on ClawHub — if taken, try variations
  • Never pass production API keys to untrusted skill content for auditing