skill-openqa-cn-codexqa-slot-scaffolder · by Install
$ agentstack add skill-openqa-cn-codexqa-slot-scaffolder Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Dangerous shell/eval execution.
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Slot scaffolder
Bundled sub-skill of codexqa-testdata-generator: turn an OpenAPI directory plus a domain name into a slot that matches [../slots/SLOTSPEC.md](../slots/SLOTSPEC.md), the single copy of that contract.
Inputs
domain and openapi are the prerequisite materials. If either is missing, or the OpenAPI directory has no .yaml / .yml / .json files, stop and ask. Do not invent operations or scaffold an empty slot. After the user provides them, generate the slot. Do not collect executor fields.
| Field | Meaning | Required | |---|---|---| | domain | Short English slug (payments, logistics) | yes | | openapi | Directory of OpenAPI YAML/JSON files (at least one spec) | yes | | output | Destination directory (default ../slots/) | no |
Run
node scripts/scaffold_slot.ts \
--domain \
--openapi \
--output The script writes slot.yaml (the one config), executor stubs, generated SKILL.md / tools-guide.md, and copies OpenAPI into assets/openapi/.
Slots under ./slots/ are discovered automatically. If the skill lives elsewhere, add one line:
workspace:
slot_roots:
- /path/to/company-slotsAfter generation
- Implement each stub
main(params)againstDATA_BUILD_API_BASE(timeouts; nevershell: true; missing required IDs must fail) - Add
scenes(and optionalaliases/invokeParams) inslot.yamlonly. List more specific entities before generic ones - Refresh generated docs:
node ../scripts/sync_slot.ts --dir
Hand-written SKILL.md is left alone unless it is generated-from: slot.yaml or you pass --force
- Smoke-test:
node ../scripts/search_data_build.ts --keywords --json
Do not add skill_marketplace.paths or api_catalog.paths. Search, OpenAPI index, and case-pipeline bind all read slots/ + workspace.slot_roots. If slot.yaml is omitted, entities are inferred from scripts/executors/* and assets/openapi operationIds.
Human operators: [../HOWITWORKS.md](../HOWITWORKS.md#appendix-add-a-new-scene). Agents stay on this file and [../slots/SLOTSPEC.md](../slots/SLOTSPEC.md).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: openqa-cn
- Source: openqa-cn/codexqa
- License: Apache-2.0
- Homepage: https://openqa.cn
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.