hmbown/mage-hand
generated/openclaw/mage-hand/SKILL.md
Use this skill for small, careful remote manipulations where dexterity matters more than force.
$ install --global
skillsauthnpx skillsauth add hmbown/wizards-of-the-ghosts mage-handInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:37 PM1.7s1 file scanned
SKILL.md
- name:
- mage-hand
- description:
- Use this skill for small, careful remote manipulations where dexterity matters more than force.
- user-invocable:
- true
Mage Hand
Manipulate files, records, and lightweight system state with precision and minimal blast radius.
Overview
Mage Hand is interpreted here as a hybrid spell with a shipping-now execution model.
Canonical source: Mage Hand (spell)
Provider target: OpenClaw
When To Use
- Trigger this spell when the request asks for surgical, narrow edits to existing objects with explicit boundaries on what NOT to touch. Look for:
- Specific identifiers: file paths, ticket IDs, record keys, field names, audience names
- Constraint language: "only", "but don't touch", "leave X alone", "if X then stop"
- Single-field or single-value changes: "change max_attempts from 3 to 4", "patch reply_to_email"
- Conditional execution with early-exit: "only if each has approval, otherwise stop and return the exception list"
- Audit expectations: "show the diff", "tell me the exact line", "report skipped IDs"
- Small batch operations with per-item validation: "move tickets A, B, C but skip any missing X"
Workflow
- Restate boundaries before acting: Name the exact target, the success condition, and what must NOT be touched.
- Scope to the smallest edit surface: Change one field, one line, one ticket state. Do not rewrite surrounding content.
- Apply with diff or state proof: Show what changed. Confirm adjacent values are untouched.
- Report exceptions, not just successes: If any item in a batch fails validation or lacks a prerequisite, stop and return the failure list. Do not silently skip.
Deliverables
- A minimal, well-scoped change.
- A short audit trail of touched surfaces.
- A note on adjacent objects that were intentionally left alone.
Guardrails
- Do NOT route here when the request involves:
- Do not use for: Building new interfaces or features ("give this script a chat front end", "create a dashboard")
- Do not use for: Setting up recurring automation ("every Friday", "whenever X happens, do Y automatically")
- Do not use for: Debugging, forensics, or tracing ("find what changed", "trace which integration sent this")
- Do not use for: System recovery or access restoration ("token expired, find the recovery path")
- Do not use for: Performance tuning or capacity changes ("slow down the queue", "scale up workers")
- Do not use for: Broad refactors or rewrites ("rewrite this module", "restructure the config")
- Do not use for: The key differentiator: Mage Hand moves or edits existing specific objects with known targets. It does not build, automate recurring tasks, investigate, or recover.
Default Invocation
Use $mage-hand to make the smallest safe change needed here and show exactly what you touched.
Related Skills
hmbown/zone-of-truth
testing
VerifiedTrustedCommunity
Enter a mode where every assertion is backed by evidence, confidence is calibrated, speculation is flagged, and hallucination is actively resisted.
55SKILL.mdUpdated Apr 5, 2026
hmbown/vicious-mockery
development
VerifiedTrustedCommunity
The bard's cantrip that deals psychic damage through insults. In practice this is adversarial review — the art of finding and articulating exactly what is wrong with something in a way that is impossible to ignore. Unlike polite feedback that gets filed and forgotten, vicious mockery lands. It is the red-team report that makes the PM cancel the launch, the code review that makes the author delete the PR, the roast that makes the founder pivot. The damage is the point.
55SKILL.mdUpdated Apr 5, 2026
hmbown/unseen-servant
tools
VerifiedTrustedCommunity
Use this spell when you need a tireless helper that organizes, tidies, triages, and maintains without requiring your constant attention.
55SKILL.mdUpdated Apr 5, 2026
hmbown/true-strike
testing
VerifiedTrustedCommunity
Use this spell for preflight certainty: dry runs, validation checks, dependency verification, and rehearsals that make the next deploy, query, or command much more likely to succeed. It trades a little time up front for fewer blind swings and fewer expensive misses.
55SKILL.mdUpdated Apr 5, 2026