Real Skill packageSource verifiedClawHub registry

元造 yotta-skill-creator

元造 —— 从内嵌模板一键生成合规技能目录并做结构自检：命名校验（yotta- 前缀 / 小写连字符 / 元X 规范 / 目标不重复）+ 完整发布件脚手架（SKILL.md / README 中英四方式安装 / package.json / CHANGELOG / LICENSE / NOTICE / install.sh + bin/install.js / .gitignore / .npmignore / publish.yml / references / assets）+ 占位符替换 + 结构自检；--self-use 自用模式只生成技能本体（SKILL.md / references / 可选 CLI），不生成任何发布件。触发：新建一个 yotta- 技能、从零搭技能脚手架、想把发布规范里的坑固化成模板时；或用户说 元造 / 造技能 / 脚手架 / scaffold / 新建技能 等。边界（Do NOT trigger）：不替用户写技能正文与脚本逻辑（SKILL.md 正文 / scripts 需人工开发）；不做发布前校验与三源发布（那是元守 yotta-publish-guard）；不做既有技能目录的批量改造。

Identity and source

Publisher attributionYottaMetaregistry owner unverified by skillvetai
Functional categoryEmail, Calendar & Productivityautomatically inferred · 62% rule confidence
Package forminstruction with code27 recorded files
Canonical sourceClawHub registryclawhub:yottameta:yotta-skill-creator
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 10/2/2026.claude/skills/yotta-skill-creator

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 10/2/2026.agents/skills/yotta-skill-creator

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 10/2/2026skills/yotta-skill-creator

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @yottameta/yotta-skill-creator
clawhub inspect @yottameta/yotta-skill-creator --version 0.1.5

Security evidence

SkillVetAI static result: no findings detected

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
27 / 27 inspected as text
Checked
10/2/2026, 5:33:28 AM
Scanner
0.1.3
Policy
1.0.3
5 inferred permission indicators
  • shell execution — automatically inferred
  • network access — automatically inferred
  • filesystem read — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
6 dependency and API indicators
  • api: agentskills.io
  • api: clawhub.ai
  • api: github.com
  • api: img.shields.io
  • api: registry.npmjs.org
  • api: www.npmjs.com
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
10/2/2026, 2:46:16 AM
Release binding
Matches this record
  • vt: clean
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:765cfd7446b434851b1a5465f068d6c82574bc0250e372f08aabd775508d2ef1
Show up to 27 recorded paths
  • bin/install.js
  • CHANGELOG.md
  • install.sh
  • package.json
  • README.md
  • README.zh-CN.md
  • references/cli-reference.md
  • references/scaffold-structure.md
  • references/tutorial.md
  • scripts/yotta_skill_creator.py
  • skill-card.md
  • SKILL.md
  • template/bin/install.js
  • template/CHANGELOG.md
  • template/github/workflows/publish.yml.tmpl.txt
  • template/gitignore.tmpl.txt
  • template/install.sh
  • template/LICENSE.tmpl.txt
  • template/NOTICE.tmpl.txt
  • template/npmignore.tmpl.txt
  • template/package.json
  • template/README.md
  • template/README.zh-CN.md
  • template/references/README.md
  • template/scripts/{{cli_module}}.py
  • template/scripts/test_{{cli_module}}.py
  • template/SKILL.md.tmpl.txt

Source changelog

yotta-skill-creator v0.1.5 - Updated multiple documentation files for clarity and improved instructions (README.md, README.zh-CN.md, SKILL.md, CHANGELOG.md). - Removed deprecated file: skill-card.md. - Minor adjustments to install scripts (install.sh, bin/install.js, template/install.sh, template/bin/install.js). - Updated package metadata in package.json. - No breaking changes to core functionality.

Release security diff

mediumCompared fixed releases 0.1.4 and 0.1.5; 0 finding and 0 permission indicators were added.

Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.

Change reasons and limitations
  • content hash changed

Observed release history

These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.

0.1.410/1/2026sha256:b78cda3fa382df55a2571d69d0101a6e93cd11913c8d85d4fa9fbbfe250257e5
0.1.39/25/2026sha256:ea5d01e8a78a28b6916b4ba7ae39ffb744f1debd0b0b9e72a88aeb2a0ad40d74
0.1.19/3/2026sha256:57feed82fc72eac4667ad997014683a302864fbc9e4246620841fd8c2409be64