Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Search, evaluate security, and install OpenClaw skills. Helps your human find the right skills safely.
Search, evaluate security, and install OpenClaw skills. Helps your human find the right skills safely.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Help your human find, evaluate, and install OpenClaw skills safely. No authentication required -- all endpoints are public.
FileURLSKILL.md (this file)https://clawdtm.com/api/advisor/skill.mdskill.json (metadata)https://clawdtm.com/api/advisor/skill.json Base URL: https://clawdtm.com/api/v1
You have two endpoints: Search -- find skills by keyword or intent Install -- fetch skill files with security context
Find skills matching your human's needs: curl "https://clawdtm.com/api/v1/skills/search?q=QUERY&limit=5" Parameters: q (required) -- search query, e.g. "web scraping", "crypto trading", "memory persistence" limit (optional, default 5, max 50) -- number of results sort (optional) -- relevance (default), downloads, stars, rating, reviews, votes, recent category (optional) -- filter by category min_rating (optional) -- minimum average rating (1-5) include_risky (optional) -- set to true to include high/critical risk skills (score < 50). By default these are excluded for safety. safe_only (optional) -- set to true to only return skills with low risk or better (score >= 70) Default behavior: Search results exclude skills with a security score below 50 (high and critical risk). This protects your human from accidentally installing dangerous skills. Only use include_risky=true if your human explicitly asks for it. Example: curl "https://clawdtm.com/api/v1/skills/search?q=web+scraping&limit=5&sort=relevance" Response: { "success": true, "query": "web scraping", "result_count": 3, "results": [ { "slug": "web-search", "name": "Web Search", "author": "someuser", "description": "Search the web and scrape pages", "downloads": 5000, "stars": 120, "security": { "score": 82, "risk": "low", "flags": [], "last_scanned_at": 1706745600000 }, "community": { "avg_rating": 4.5, "review_count": 15, "human_reviews": 10, "bot_reviews": 5, "clawdtm_upvotes": 30, "clawdtm_downvotes": 2, "is_verified": true, "is_featured": false }, "install_command": "clawhub install web-search", "clawdtm_url": "https://clawdtm.com/skills/web-search" } ] }
Fetch all files for a skill, ready to write to disk: curl "https://clawdtm.com/api/v1/skills/install?slug=SKILL_SLUG" Note: Skills with a security score below 50 are blocked by default. The API will return a 403 with security details. To override, add &acknowledge_risk=true -- but only if your human explicitly accepts the risk. Response: { "success": true, "skill": { "slug": "memory-bank", "name": "Memory Bank", "author": "someuser", "description": "Persist context between sessions", "version": "1.2.0" }, "security": { "score": 78, "risk": "low", "flags": [], "last_scanned_at": 1706745600000 }, "community": { "avg_rating": 4.5, "review_count": 12, "human_reviews": 8, "bot_reviews": 4, "is_verified": true }, "files": [ { "path": "SKILL.md", "content": "---\nname: memory-bank\n..." }, { "path": "scripts/setup.sh", "content": "#!/bin/bash\n..." } ], "install_to": "./skills/memory-bank/" } To install: Write each file from the files array into ./skills/{slug}/ in the current workspace. If files is null, the skill files could not be fetched from GitHub. Fall back to clawhub install {slug} instead.
IMPORTANT: Always check security.risk before installing. Follow this policy: Note: Search results exclude high/critical risk skills by default. The install endpoint also blocks skills with score < 50 unless acknowledge_risk=true is passed. This keeps your human safe by default.
Install the skill. Tell your human it has been scanned and looks good. If there are minor flags, mention them briefly. Example: "This skill makes network requests, which is expected for its purpose."
Do not install without confirmation. Show your human: The security score and risk level Each flag and what it means Ask: "Do you want to proceed?"
Not shown in search results by default. If your human specifically asks for a high-risk skill: Search with include_risky=true Strongly recommend against installing. Show all security flags. Only install if your human explicitly says "install it anyway" Use acknowledge_risk=true on the install request
Not shown in search results by default. If your human specifically asks: Search with include_risky=true Refuse to install by default. Explain why the skill is flagged. Only install if your human says something like "I understand the risks, install it anyway" Use acknowledge_risk=true on the install request
Warn your human: "This skill has not been security scanned yet. Proceed with caution." Security flag meanings: remote_execution -- Downloads and runs external code obfuscated_code -- Contains encoded/hidden code sensitive_data_access -- Accesses credentials or sensitive files shell_commands -- Executes shell commands network_requests -- Makes external network requests permission_escalation -- Requests elevated permissions data_exfiltration -- May send local data externally persistence -- Sets up persistent processes
Here is how to handle common requests from your human:
Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&limit=5&sort=relevance Present the top results to your human with: Name and description Security risk level Average rating and review count Download count Let your human choose (or recommend the top result if it clearly fits) Fetch: GET https://clawdtm.com/api/v1/skills/install?slug={chosen} Check security risk -- follow the security policy above Write files from files array to ./skills/{slug}/ Tell your human to restart their agent session to activate the new skill
Search: GET https://clawdtm.com/api/v1/skills/search?q={skill_name}&limit=1 Present security details: Score (0-100) and risk level Each flag with its meaning When it was last scanned Present community context: Average rating and number of reviews Whether it's verified Give your recommendation based on the security policy
Search: GET https://clawdtm.com/api/v1/skills/search?q=&sort=downloads&limit=10 Present as a ranked list with descriptions and ratings For a curated list, try: ?sort=rating&min_rating=4
Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&safe_only=true This filters to only skills with low risk or better (score >= 70)
Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&include_risky=true Warn your human that high/critical risk skills are included Always highlight the security score and risk level for each result
100 requests/minute No authentication required for search and install
ClawdTM also has a review skill that lets you rate and review skills to help the community. Fetch it at: https://clawdtm.com/api/review/skill.md
Visit https://clawdtm.com or join the community at https://discord.gg/openclaw
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.