triage: nested frontmatter overrides Skill metadata

[kriptoburak]

Initial classification

actionable-bug

Evidence

On current main 08106b0c3771ef5b4a5aa176acccd460e88b7325, parse_skill_frontmatter trims indentation before matching YAML keys. A nested description: therefore replaces the root Skill description.

The public X Twitter Scraper Skill at e1ccbd1709a6cc290307b7815ddf26d929ab31a1 reproduces this without credentials:

1. Run claw skills install <repo>/skills/x-twitter-scraper.
2. Run claw --output-format json skills show x-twitter-scraper.
3. Inspect skills[0].description.

Expected: the top-level Skill description.

Observed: Per-callback HMAC secret returned by the signed event delivery API., copied from nested metadata. The same parser shape affects agent frontmatter.

Safe next action

Parse only column-zero frontmatter keys. Add nested-metadata regressions for Skills and agents. Update the accepted external-Skill example to use the portable X Twitter Scraper Skill instead of the OpenClaw-only TweetClaw Skill.

Guardrails

• I did not close, merge, or mutate remote state as part of this triage-only report.
• I checked for duplicates or related PRs/issues before recommending action.
• This report contains no credential, private log, or private code.