Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Peiiii/nextclaw --skill nextclaw-app-creatorgit clone --depth 1 https://github.com/Peiiii/nextclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-app-creator)<a href="https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-app-creator"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/nextclaw-app-creator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/peiiii/nextclaw/nextclaw-app-creator"><img src="https://agentmods.dev/badge/skills/peiiii/nextclaw/nextclaw-app-creator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.02308 |
| Opus 5 | $0.00039 | $0.01154 |
| Sonnet 5 | $0.00016 | $0.00462 |
| Haiku 4.5 | $0.00008 | $0.00231 |
Grade A, and why
nextclaw-app-creator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 154 lines — stays where its author put it; the contents beside it link to each section on GitHub.
NextClaw App Creator
当用户说“做一个应用、小工具、dashboard、管理器、可视化、本地文件工具或 AI 辅助工具”时，先使用这个总入口。目标是按用户工作流确定应用边界和运行形态，再把字段细节交给单一专项 owner。
本 skill 只负责：
- Panel-only / Service-only / Panel + Service 的组件组成判断；
- 仅在存在 Service 时判断 Portable WASI / native-process runtime；
- loose 本机应用 / schema v2 完整包边界；
- 前端工程形态和最终验收编排。
确定形态后必须继续读取对应专项 skill。不能只读本入口就猜 panel-app.json、service-app.json、WIT、MCP server 或 bridge API。
组件组成和 Service runtime 是两条正交维度，不是三个并列 App 类型。Panel-only 表示这个 Mini App 没有 Service；Portable WASI 与 native-process 只用于比较 Service 组件如何运行，也都可以出现在 Service-only 或 Panel + Service 包中。
先判断用户要交付什么
1. Panel-only
适用于交互 UI、表单、列表、看板、图表、计算器或轻量 dashboard，且不需要稳定持久化、本地文件、外部 API、系统命令或权限动作。
- 下一步读取
panel-app-creator； - 页面状态只放内存，或显式导入/导出；
- 不依赖
localStorage、sessionStorage、cookie 或 IndexedDB； - 纯 Panel 不需要 Rust。
2. Service-only
用户只需要可授权 actions、Resident 事件处理或 Provider 能力，不需要新建 UI。
- 下一步读取
service-app-creator； - 由它继续选择 Portable WASI 或 native-process；
- 不在本入口编写 action、risk、WIT、command 或 MCP 细节。
3. Panel + Service
用户需要完整小应用，且 UI 需要持久化、文件、网络、命令、Provider、AI slot 或其它宿主能力。
- 先读取
service-app-creator，冻结 runtime、action、risk 和能力边界； - 再读取
panel-app-creator，实现 UI、action allowlist 和统一 bridge 调用； - Panel 不根据 Service runtime 分叉：Portable 与 native-process 都通过
window.nextclaw.serviceActions.*调用。
再判断 Service runtime
涉及 Service 时，不再默认生成 Node MCP stdio。
Portable WASI 优先条件
- 自包含、面向分发或希望跨支持平台运行；
- KV、SQLite、授权文件、允许域名、密钥、Provider、model slot 或 agent slot 足以覆盖需求；
- 希望 Guest 只获得声明并绑定的能力，而不是完整宿主用户权限；
- 需要 Action、Resident 或 Provider 生命周期。
native-process 条件
- 必须直接运行 Node、Python、系统程序、平台 SDK、驱动、socket 或外部守护进程；
- 当前 Portable Runtime 没有真实能力承接；
- 用户明确只要一个快速、本机、无需 Rust 的 Service helper，并接受宿主权限边界；
- 维护已有 workspace MCP Service。
开发机缺少 Rust 不是把安全边界静默降级为 native-process 的充分理由。若两种路径都会满足用户目标，可选择 native-process 快速本机闭环，但必须说明它不具备 Portable Runtime 的隔离与通用分发合同。
Rust 只属于 Portable 的开发期
- 本机创建并构建 Rust/WASI Guest 前运行
nextclaw app doctor --profile wasi；开发机器需要cargo、rustc和wasm32-wasip2。 - 最终用户安装、启用和运行已经构建好的 Portable
.napp不需要 Rust、Cargo、Wasmtime 或系统 Node；runner 随 NextClaw 提供。 - Panel-only 和 native-process Service 不因本机制而强制安装 Rust。
- 未经用户授权不要自动安装 Rust 工具链；工具链缺失时保留源码并准确报告未完成的 build/test 门。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +30 lines · -15 tokens per session 6d5678f2178c
- 9d ago First seen · 124 lines · 94 tokens per session scan A 71b9b7ca28d8
nextclaw-app-creator is a skill published in the GitHub repository Peiiii/nextclaw (256 stars, last pushed today), licensed MIT. It adds 79 tokens to every session and 2,308 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
openclaw-github-dedupe
Investigate a cluster of GitHub issues and PRs, determine canonical candidates, post duplicate/related status, preserve contributor credit, and execute cleanup actions. Supports autonomous mode for provided-link-only closeout, merge/fix follow-through, changelog, and post-merge issue/PR cleanup.
tmux-lane-orchestrator
Manage one tmux agent lane from its matching ops pane, inspect live pane state and Codex logs on cold start, and produce concise manager summaries for OpenClaw and adjacent project work.
ghcrawl-cluster-operator
Use when inspecting a ghcrawl SQLite store, pulling GitHub issue/PR data, refreshing summaries, embeddings, and clusters, or extracting one cluster and its evidence through the ghcrawl CLI.
opik-optimizer
Optimize LLM prompts, tools, and agents in Opik using standardized optimizer workflows (prompt optimization, tool optimization, and parameter tuning), dataset/metric wiring, and result interpretation.
org-branch-cleanup
Audit and safely prune stale branches across a GitHub organization with immutable snapshots, conservative merged-PR classification, live SHA/protection/open-PR revalidation, resumable deletion ledgers, and post-delete verification. Use when a maintainer asks to clean up old, dead, merged, bot-created, or abandoned…
crabpot-perf-metrics
Interpret Crabpot and OpenClaw performance dashboard metrics, import-loop profiles, runtime profiles, and branch-to-branch perf deltas without over-reading noisy samples.