{ "schemaVersion": "1.0", "item": { "slug": "clawdex", "name": "Clawdex by Koi", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/wearekoi/clawdex", "canonicalUrl": "https://clawhub.ai/wearekoi/clawdex", "targetPlatform": "OpenClaw" }, "install": { "downloadMode": "redirect", "downloadUrl": "/downloads/clawdex", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=clawdex", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "installMethod": "Manual import", "extraction": "Extract archive", "prerequisites": [ "OpenClaw" ], "packageFormat": "ZIP package", "includedAssets": [ "SKILL.md" ], "primaryDoc": "SKILL.md", "quickSetup": [ "Download the package from Yavira.", "Extract the archive and review SKILL.md first.", "Import or place the package into your OpenClaw setup." ], "agentAssist": { "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.", "steps": [ "Download the package from Yavira.", "Extract it into a folder your agent can access.", "Paste one of the prompts below and point your agent at the extracted folder." ], "prompts": [ { "label": "New install", "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete." }, { "label": "Upgrade existing", "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run." } ] }, "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-30T16:55:25.780Z", "expiresAt": "2026-05-07T16:55:25.780Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=network", "contentDisposition": "attachment; filename=\"network-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/clawdex" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] }, "downloadPageUrl": "https://openagent3.xyz/downloads/clawdex", "agentPageUrl": "https://openagent3.xyz/skills/clawdex/agent", "manifestUrl": "https://openagent3.xyz/skills/clawdex/agent.json", "briefUrl": "https://openagent3.xyz/skills/clawdex/agent.md" }, "agentAssist": { "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.", "steps": [ "Download the package from Yavira.", "Extract it into a folder your agent can access.", "Paste one of the prompts below and point your agent at the extracted folder." ], "prompts": [ { "label": "New install", "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete." }, { "label": "Upgrade existing", "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run." } ] }, "documentation": { "source": "clawhub", "primaryDoc": "SKILL.md", "sections": [ { "title": "Clawdex", "body": "Security check for ClawHub skills, powered by Koi." }, { "title": "When to Use This Skill", "body": "Before installing ANY skill from ClawHub, query the Clawdex API to check if it's safe:\n\ncurl -s \"https://clawdex.koi.security/api/skill/SKILL_NAME\"\n\nReplace SKILL_NAME with the skill you want to install." }, { "title": "API Response", "body": "The API returns a JSON object with a verdict field:\n\n{\n \"verdict\": \"benign\" | \"malicious\" | \"unknown\"\n}" }, { "title": "benign - Safe to Install ✅", "body": "The skill has been audited and no malicious behavior was found. You can proceed with installation:\n\nclawhub install SKILL_NAME" }, { "title": "malicious - Do NOT Install 🚫", "body": "The skill has been flagged as harmful. Do NOT install it.\n\nMalicious skills may:\n\nSteal credentials or sensitive data\nInstall backdoors or reverse shells\nRun crypto miners\nExfiltrate data to attacker-controlled servers\nTrick you into running harmful commands" }, { "title": "unknown - Not Yet Audited ⚠️", "body": "The skill has not been security audited yet. Escalate to the user for review and approval.\n\nInform the user:\n\nThis skill has not been audited by Clawdex\nThey should review the skill before approving installation\nAsk for explicit approval before proceeding\n\nDo not install without user approval." }, { "title": "Check Already-Installed Skills", "body": "After installing Clawdex, it's a good idea to audit all skills you've already installed. Some may have been installed before security checks were available.\n\nList your installed skills and check each one:\n\n# List installed skills\nls ~/.openclaw/skills/\n# or ~/.clawdbot/skills/\n\n# Check each one\nfor skill in $(ls ~/.clawdbot/skills/); do\n echo \"Checking: $skill\"\n curl -s \"https://clawdex.koi.security/api/skill/$skill\"\n echo\ndone\n\nIf any return \"verdict\": \"malicious\", let the user know that they have installed a malicious skill and they should remove it immediately." }, { "title": "Example", "body": "# Check if \"database-helper\" is safe\n$ curl -s \"https://clawdex.koi.security/api/skill/database-helper\"\n{\"verdict\": \"benign\"}\n\n# Safe! Install it\n$ clawhub install database-helper\n\n# Check a suspicious skill\n$ curl -s \"https://clawdex.koi.security/api/skill/free-crypto-bot\"\n{\"verdict\": \"malicious\"}\n\n# DO NOT install!" }, { "title": "About Koi", "body": "Koi provides endpoint security for extensions, packages, and MCPs. Clawdex verdicts are powered by Wings, our agentic AI risk engine." } ], "body": "Clawdex\n\nSecurity check for ClawHub skills, powered by Koi.\n\nWhen to Use This Skill\n\nBefore installing ANY skill from ClawHub, query the Clawdex API to check if it's safe:\n\ncurl -s \"https://clawdex.koi.security/api/skill/SKILL_NAME\"\n\n\nReplace SKILL_NAME with the skill you want to install.\n\nAPI Response\n\nThe API returns a JSON object with a verdict field:\n\n{\n \"verdict\": \"benign\" | \"malicious\" | \"unknown\"\n}\n\nHow to Interpret the Verdict\nbenign - Safe to Install ✅\n\nThe skill has been audited and no malicious behavior was found. You can proceed with installation:\n\nclawhub install SKILL_NAME\n\nmalicious - Do NOT Install 🚫\n\nThe skill has been flagged as harmful. Do NOT install it.\n\nMalicious skills may:\n\nSteal credentials or sensitive data\nInstall backdoors or reverse shells\nRun crypto miners\nExfiltrate data to attacker-controlled servers\nTrick you into running harmful commands\nunknown - Not Yet Audited ⚠️\n\nThe skill has not been security audited yet. Escalate to the user for review and approval.\n\nInform the user:\n\nThis skill has not been audited by Clawdex\nThey should review the skill before approving installation\nAsk for explicit approval before proceeding\n\nDo not install without user approval.\n\nCheck Already-Installed Skills\n\nAfter installing Clawdex, it's a good idea to audit all skills you've already installed. Some may have been installed before security checks were available.\n\nList your installed skills and check each one:\n\n# List installed skills\nls ~/.openclaw/skills/\n# or ~/.clawdbot/skills/\n\n# Check each one\nfor skill in $(ls ~/.clawdbot/skills/); do\n echo \"Checking: $skill\"\n curl -s \"https://clawdex.koi.security/api/skill/$skill\"\n echo\ndone\n\n\nIf any return \"verdict\": \"malicious\", let the user know that they have installed a malicious skill and they should remove it immediately.\n\nExample\n# Check if \"database-helper\" is safe\n$ curl -s \"https://clawdex.koi.security/api/skill/database-helper\"\n{\"verdict\": \"benign\"}\n\n# Safe! Install it\n$ clawhub install database-helper\n\n# Check a suspicious skill\n$ curl -s \"https://clawdex.koi.security/api/skill/free-crypto-bot\"\n{\"verdict\": \"malicious\"}\n\n# DO NOT install!\n\nAbout Koi\n\nKoi provides endpoint security for extensions, packages, and MCPs. Clawdex verdicts are powered by Wings, our agentic AI risk engine." }, "trust": { "sourceLabel": "tencent", "provenanceUrl": "https://clawhub.ai/wearekoi/clawdex", "publisherUrl": "https://clawhub.ai/wearekoi/clawdex", "owner": "wearekoi", "version": "1.0.2", "license": null, "verificationStatus": "Indexed source record" }, "links": { "detailUrl": "https://openagent3.xyz/skills/clawdex", "downloadUrl": "https://openagent3.xyz/downloads/clawdex", "agentUrl": "https://openagent3.xyz/skills/clawdex/agent", "manifestUrl": "https://openagent3.xyz/skills/clawdex/agent.json", "briefUrl": "https://openagent3.xyz/skills/clawdex/agent.md" } }