{
  "schemaVersion": "1.0",
  "item": {
    "slug": "clawhub-skill-guide",
    "name": "ClawHub Skill Guide — Scanner Compliance",
    "source": "tencent",
    "type": "skill",
    "category": "安全合规",
    "sourceUrl": "https://clawhub.ai/tdavis009/clawhub-skill-guide",
    "canonicalUrl": "https://clawhub.ai/tdavis009/clawhub-skill-guide",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadMode": "redirect",
    "downloadUrl": "/downloads/clawhub-skill-guide",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=clawhub-skill-guide",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "installMethod": "Manual import",
    "extraction": "Extract archive",
    "prerequisites": [
      "OpenClaw"
    ],
    "packageFormat": "ZIP package",
    "includedAssets": [
      "SKILL.md",
      "assets/templates/basic-skill.md",
      "assets/templates/skill-with-config.md",
      "assets/templates/skill-with-scripts.md",
      "references/frontmatter-schema.md",
      "references/publish-workflow.md"
    ],
    "primaryDoc": "SKILL.md",
    "quickSetup": [
      "Download the package from Yavira.",
      "Extract the archive and review SKILL.md first.",
      "Import or place the package into your OpenClaw setup."
    ],
    "agentAssist": {
      "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.",
      "steps": [
        "Download the package from Yavira.",
        "Extract it into a folder your agent can access.",
        "Paste one of the prompts below and point your agent at the extracted folder."
      ],
      "prompts": [
        {
          "label": "New install",
          "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete."
        },
        {
          "label": "Upgrade existing",
          "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run."
        }
      ]
    },
    "sourceHealth": {
      "source": "tencent",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-04-23T16:43:11.935Z",
      "expiresAt": "2026-04-30T16:43:11.935Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard",
        "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"",
        "redirectLocation": null,
        "bodySnippet": null
      },
      "scope": "source",
      "summary": "Source download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this source.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/clawhub-skill-guide"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    },
    "downloadPageUrl": "https://openagent3.xyz/downloads/clawhub-skill-guide",
    "agentPageUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent",
    "manifestUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent.md"
  },
  "agentAssist": {
    "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.",
    "steps": [
      "Download the package from Yavira.",
      "Extract it into a folder your agent can access.",
      "Paste one of the prompts below and point your agent at the extracted folder."
    ],
    "prompts": [
      {
        "label": "New install",
        "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete."
      },
      {
        "label": "Upgrade existing",
        "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run."
      }
    ]
  },
  "documentation": {
    "source": "clawhub",
    "primaryDoc": "SKILL.md",
    "sections": [
      {
        "title": "ClawHub Skill Guide",
        "body": "Publish OpenClaw skills to ClawHub with clean security scanner ratings.\nThis guide supplements the built-in skill-creator skill with ClawHub-specific\npublishing knowledge — especially frontmatter schema and scanner compliance.\n\nNote: The built-in skill-creator says \"Do not include any other fields\nin YAML frontmatter.\" That guidance is outdated. ClawHub supports and the\nscanner requires additional fields like env, metadata, requires, etc.\nThis guide documents the complete frontmatter schema."
      },
      {
        "title": "Skill Anatomy",
        "body": "my-skill/\n├── SKILL.md              # Core instructions (required, under 500 lines)\n├── scripts/              # Executable code (optional)\n├── references/           # Docs loaded on demand (optional)\n└── assets/               # Templates, images, non-context files (optional)"
      },
      {
        "title": "Frontmatter Fields",
        "body": "FieldRequiredPurposename✅Lowercase, hyphens, under 64 charsdescription✅Trigger text with keywordsenvWhen credentials neededArray of env var declarationsmetadataAlternative env formatOpenClaw-specific metadatarequiresWhen dependencies existHuman-readable requirement listhomepageOptionalSource/docs URLcategoryOptionalSkill categoryemojiOptionalDisplay emojiversionOptionalSemver (can also set via CLI)\n\n→ Full schema: references/frontmatter-schema.md"
      },
      {
        "title": "Scanner Categories",
        "body": "#CategoryKey Requirement1PURPOSE & CAPABILITYDescription matches functionality; credentials declared2INSTRUCTION SCOPEInstructions on-topic; no auto-config language3INSTALL MECHANISMNo external downloads; scripts write within workspace4CREDENTIALSAll env vars declared in frontmatter; sensitive marked5PERSISTENCE & PRIVILEGENo always:true; config as templates for manual review\n\n→ Deep dive: references/scanner-compliance.md"
      },
      {
        "title": "Step 1: Plan Structure",
        "body": "Decide what goes where:\n\nContent TypeLocationCore workflow, key instructionsSKILL.md bodyDetailed reference materialreferences/Executable automationscripts/Templates, images, boilerplateassets/\n\nKeep SKILL.md under 500 lines. Move detailed docs to references."
      },
      {
        "title": "Step 2: Write Frontmatter",
        "body": "This is where most scanner issues originate. Get frontmatter right first.\n\nImportant: The local packager (package_skill.py) only allows these top-level\nfrontmatter keys: name, description, license, metadata, allowed-tools.\nThe env: key works on ClawHub's registry but fails local validation. Use the\nmetadata.openclaw format for compatibility with both.\n\nMinimal frontmatter (no credentials needed):\n\n---\nname: my-skill\ndescription: >\n  What this skill does. Include trigger keywords so the agent\n  knows when to activate it. Use when: scenario1, scenario2.\n---\n\nWith credentials (packager-compatible format):\n\n---\nname: my-api-skill\ndescription: >\n  Integrates with Example API for data retrieval and analysis.\n  Use when: querying example data, generating reports from Example API.\nmetadata:\n  openclaw:\n    requires:\n      env:\n        - EXAMPLE_API_KEY\n      bins:\n        - curl\n    primaryEnv: EXAMPLE_API_KEY\n    env:\n      - name: EXAMPLE_API_KEY\n        description: \"API key for Example service\"\n        required: true\n      - name: EXAMPLE_BASE_URL\n        description: \"Base URL for Example API (default: https://api.example.com)\"\n        required: false\n---\n\nNote: If you skip the local packager and publish directly with npx clawhub publish,\nthe direct env: top-level array also works (some published skills use this). But\nthe metadata.openclaw format works everywhere.\n\n→ All supported fields and formats: references/frontmatter-schema.md"
      },
      {
        "title": "Step 3: Write Body",
        "body": "Structure the body for progressive disclosure:\n\nQuick Start — Minimal steps to use the skill\nPrerequisites — Table of requirements (if any)\nSecurity Notes — Script safety, credential handling (if applicable)\nHow It Works — Core instructions\nFile Reference — List bundled resources with descriptions\n\nKeep instructions imperative. Challenge every paragraph: \"Does the agent\nreally need this?\""
      },
      {
        "title": "Step 4: Add Scripts (If Needed)",
        "body": "Follow safe patterns to pass the scanner:\n\nOnly write within the skill workspace\nNo network calls unless explicitly declared and justified\nNo obfuscated code\nDocument line count and purpose in SKILL.md\nInclude \"inspect before running\" warning\n\n→ Full patterns: references/script-safety.md"
      },
      {
        "title": "Step 5: Validate and Package",
        "body": "# Validate structure\npython3 ~/.npm-global/lib/node_modules/openclaw/skills/skill-creator/scripts/package_skill.py ./my-skill\n\n# Check manually:\n# - Frontmatter has name + description\n# - env declarations match actual credential usage\n# - No personal data or test artifacts\n# - SKILL.md under 500 lines"
      },
      {
        "title": "Step 6: Publish and Check Scanner",
        "body": "# Verify auth\nnpx clawhub whoami\n\n# Publish\nnpx clawhub publish ./my-skill \\\n  --slug my-skill \\\n  --name \"My Skill\" \\\n  --version 1.0.0 \\\n  --changelog \"Initial release\" \\\n  --tags latest\n\n# Check scanner results\nnpx clawhub inspect my-skill\n\n→ Full workflow: references/publish-workflow.md"
      },
      {
        "title": "The Three Env Declaration Formats",
        "body": "ClawHub supports three ways to declare environment variables. All are valid;\nthe metadata.openclaw format is recommended for compatibility with both\nthe local packager and the ClawHub scanner.\n\nFormat 1 — Direct env: array (richest data, but fails local packager):\n\nenv:\n  - name: MY_API_KEY\n    description: \"API key for the service\"\n    required: true\n    sensitive: true\n\nWorks with npx clawhub publish but NOT with package_skill.py validation.\n\nFormat 2 — metadata.openclaw.env (recommended — works everywhere):\n\nmetadata:\n  openclaw:\n    env:\n      - name: MY_API_KEY\n        description: \"API key for the service\"\n        required: false\n\nFormat 3 — metadata.openclaw.requires:\n\nmetadata:\n  openclaw:\n    requires:\n      env:\n        - MY_API_KEY\n      bins:\n        - curl\n    primaryEnv: MY_API_KEY\n\nFormat 1 gives the scanner the most information (including sensitive flag)\nand produces the cleanest scan results."
      },
      {
        "title": "Description Best Practices",
        "body": "The description is the primary trigger mechanism. Include:\n\nWhat the skill does (concrete actions)\nKeywords matching user queries\n\"Use when:\" clause listing activation scenarios\n\nBad: \"Helps with APIs.\"\n\nGood:\n\ndescription: >\n  Query and manage Example API resources including users, projects,\n  and billing data. Generates reports, monitors usage, and handles\n  authentication. Use when: querying Example API, generating usage\n  reports, managing API resources, checking billing status."
      },
      {
        "title": "1. PURPOSE & CAPABILITY ✓",
        "body": "Description accurately reflects what the skill does\nAll credentials declared in frontmatter env or metadata\nNo undeclared external service dependencies"
      },
      {
        "title": "2. INSTRUCTION SCOPE ✓",
        "body": "Instructions stay on-topic for the skill's stated purpose\nNo language about automatically applying config changes\nPrivileged operations marked as \"requires manual review\"\nIf using requireMention:false, document data exposure implications"
      },
      {
        "title": "3. INSTALL MECHANISM ✓",
        "body": "No curl, wget, or network downloads in scripts\nScripts only write within the skill workspace directory\nInclude \"inspect before running\" notes for all scripts\nNo obfuscated or minified executable code"
      },
      {
        "title": "4. CREDENTIALS ✓",
        "body": "Every env var the skill uses is declared in frontmatter\nSensitive credentials marked sensitive: true\nNo requests for credentials unrelated to the skill's purpose\nPrerequisites table lists all required accounts/keys"
      },
      {
        "title": "5. PERSISTENCE & PRIVILEGE ✓",
        "body": "No always:true in config recommendations\nConfig changes presented as templates for manual review\nMulti-user skills recommend agent isolation (separate OpenClaw agent)\nNo persistent background processes or daemons\n\n→ Deep dive with case study: references/scanner-compliance.md"
      },
      {
        "title": "Command Reference",
        "body": "# Publish a skill\nnpx clawhub publish ./skill-dir \\\n  --slug my-skill \\\n  --name \"Display Name\" \\\n  --version 1.0.0 \\\n  --changelog \"What changed\" \\\n  --tags latest\n\n# Inspect published skill\nnpx clawhub inspect my-skill\nnpx clawhub inspect my-skill --files\nnpx clawhub inspect my-skill --file SKILL.md\n\n# Browse and search\nnpx clawhub explore\nnpx clawhub search \"keyword\"\n\n# Auth\nnpx clawhub whoami"
      },
      {
        "title": "Version Bumping",
        "body": "When fixing scanner warnings, bump the version and republish:\n\nnpx clawhub publish ./skill-dir \\\n  --slug my-skill \\\n  --version 1.1.0 \\\n  --changelog \"Fix: declared env vars in frontmatter for clean scan\" \\\n  --tags latest"
      },
      {
        "title": "Common Pitfalls",
        "body": "MistakeScanner ImpactFixNo env declarations when skill uses credentials! CREDENTIALSAdd env vars via metadata.openclaw.env in frontmatter\"Agent automatically applies config\" language! INSTRUCTION SCOPEChange to \"manual review required\"Scripts without inspection warningℹ INSTALL MECHANISMAdd \"inspect before running\" noteNo agent isolation for multi-user skillsℹ PERSISTENCEAdd security model sectionrequireMention:false without data exposure docsℹ INSTRUCTION SCOPEDocument what data the skill seesDescription too short / missing keywordsPoor discoverabilityExpand with trigger scenariosShipping test DBs or generated filesBloatClean before publishingPersonal data in examplesPrivacy riskUse generic examples"
      },
      {
        "title": "Templates",
        "body": "Ready-to-use SKILL.md templates:\n\nBasic skill — Minimal SKILL.md\nSkill with scripts — Scripts + env vars\nSkill with config — Gateway config changes\n\nCopy, fill in the placeholders, publish."
      },
      {
        "title": "File Reference",
        "body": "FilePurposereferences/frontmatter-schema.mdComplete YAML frontmatter field documentationreferences/scanner-compliance.mdScanner categories deep dive with case studyreferences/script-safety.mdSafe script patterns for publicationreferences/publish-workflow.mdStep-by-step publish and iterate workflowassets/templates/basic-skill.mdMinimal SKILL.md templateassets/templates/skill-with-scripts.mdTemplate with scripts and env varsassets/templates/skill-with-config.mdTemplate for config-changing skills"
      }
    ],
    "body": "ClawHub Skill Guide\n\nPublish OpenClaw skills to ClawHub with clean security scanner ratings. This guide supplements the built-in skill-creator skill with ClawHub-specific publishing knowledge — especially frontmatter schema and scanner compliance.\n\nNote: The built-in skill-creator says \"Do not include any other fields in YAML frontmatter.\" That guidance is outdated. ClawHub supports and the scanner requires additional fields like env, metadata, requires, etc. This guide documents the complete frontmatter schema.\n\nQuick Reference\nSkill Anatomy\nmy-skill/\n├── SKILL.md              # Core instructions (required, under 500 lines)\n├── scripts/              # Executable code (optional)\n├── references/           # Docs loaded on demand (optional)\n└── assets/               # Templates, images, non-context files (optional)\n\nFrontmatter Fields\nField\tRequired\tPurpose\nname\t✅\tLowercase, hyphens, under 64 chars\ndescription\t✅\tTrigger text with keywords\nenv\tWhen credentials needed\tArray of env var declarations\nmetadata\tAlternative env format\tOpenClaw-specific metadata\nrequires\tWhen dependencies exist\tHuman-readable requirement list\nhomepage\tOptional\tSource/docs URL\ncategory\tOptional\tSkill category\nemoji\tOptional\tDisplay emoji\nversion\tOptional\tSemver (can also set via CLI)\n\n→ Full schema: references/frontmatter-schema.md\n\nScanner Categories\n#\tCategory\tKey Requirement\n1\tPURPOSE & CAPABILITY\tDescription matches functionality; credentials declared\n2\tINSTRUCTION SCOPE\tInstructions on-topic; no auto-config language\n3\tINSTALL MECHANISM\tNo external downloads; scripts write within workspace\n4\tCREDENTIALS\tAll env vars declared in frontmatter; sensitive marked\n5\tPERSISTENCE & PRIVILEGE\tNo always:true; config as templates for manual review\n\n→ Deep dive: references/scanner-compliance.md\n\nCreating a Skill\nStep 1: Plan Structure\n\nDecide what goes where:\n\nContent Type\tLocation\nCore workflow, key instructions\tSKILL.md body\nDetailed reference material\treferences/\nExecutable automation\tscripts/\nTemplates, images, boilerplate\tassets/\n\nKeep SKILL.md under 500 lines. Move detailed docs to references.\n\nStep 2: Write Frontmatter\n\nThis is where most scanner issues originate. Get frontmatter right first.\n\nImportant: The local packager (package_skill.py) only allows these top-level frontmatter keys: name, description, license, metadata, allowed-tools. The env: key works on ClawHub's registry but fails local validation. Use the metadata.openclaw format for compatibility with both.\n\nMinimal frontmatter (no credentials needed):\n\n---\nname: my-skill\ndescription: >\n  What this skill does. Include trigger keywords so the agent\n  knows when to activate it. Use when: scenario1, scenario2.\n---\n\n\nWith credentials (packager-compatible format):\n\n---\nname: my-api-skill\ndescription: >\n  Integrates with Example API for data retrieval and analysis.\n  Use when: querying example data, generating reports from Example API.\nmetadata:\n  openclaw:\n    requires:\n      env:\n        - EXAMPLE_API_KEY\n      bins:\n        - curl\n    primaryEnv: EXAMPLE_API_KEY\n    env:\n      - name: EXAMPLE_API_KEY\n        description: \"API key for Example service\"\n        required: true\n      - name: EXAMPLE_BASE_URL\n        description: \"Base URL for Example API (default: https://api.example.com)\"\n        required: false\n---\n\n\nNote: If you skip the local packager and publish directly with npx clawhub publish, the direct env: top-level array also works (some published skills use this). But the metadata.openclaw format works everywhere.\n\n→ All supported fields and formats: references/frontmatter-schema.md\n\nStep 3: Write Body\n\nStructure the body for progressive disclosure:\n\nQuick Start — Minimal steps to use the skill\nPrerequisites — Table of requirements (if any)\nSecurity Notes — Script safety, credential handling (if applicable)\nHow It Works — Core instructions\nFile Reference — List bundled resources with descriptions\n\nKeep instructions imperative. Challenge every paragraph: \"Does the agent really need this?\"\n\nStep 4: Add Scripts (If Needed)\n\nFollow safe patterns to pass the scanner:\n\nOnly write within the skill workspace\nNo network calls unless explicitly declared and justified\nNo obfuscated code\nDocument line count and purpose in SKILL.md\nInclude \"inspect before running\" warning\n\n→ Full patterns: references/script-safety.md\n\nStep 5: Validate and Package\n# Validate structure\npython3 ~/.npm-global/lib/node_modules/openclaw/skills/skill-creator/scripts/package_skill.py ./my-skill\n\n# Check manually:\n# - Frontmatter has name + description\n# - env declarations match actual credential usage\n# - No personal data or test artifacts\n# - SKILL.md under 500 lines\n\nStep 6: Publish and Check Scanner\n# Verify auth\nnpx clawhub whoami\n\n# Publish\nnpx clawhub publish ./my-skill \\\n  --slug my-skill \\\n  --name \"My Skill\" \\\n  --version 1.0.0 \\\n  --changelog \"Initial release\" \\\n  --tags latest\n\n# Check scanner results\nnpx clawhub inspect my-skill\n\n\n→ Full workflow: references/publish-workflow.md\n\nFrontmatter Quick Guide\nThe Three Env Declaration Formats\n\nClawHub supports three ways to declare environment variables. All are valid; the metadata.openclaw format is recommended for compatibility with both the local packager and the ClawHub scanner.\n\nFormat 1 — Direct env: array (richest data, but fails local packager):\n\nenv:\n  - name: MY_API_KEY\n    description: \"API key for the service\"\n    required: true\n    sensitive: true\n\n\nWorks with npx clawhub publish but NOT with package_skill.py validation.\n\nFormat 2 — metadata.openclaw.env (recommended — works everywhere):\n\nmetadata:\n  openclaw:\n    env:\n      - name: MY_API_KEY\n        description: \"API key for the service\"\n        required: false\n\n\nFormat 3 — metadata.openclaw.requires:\n\nmetadata:\n  openclaw:\n    requires:\n      env:\n        - MY_API_KEY\n      bins:\n        - curl\n    primaryEnv: MY_API_KEY\n\n\nFormat 1 gives the scanner the most information (including sensitive flag) and produces the cleanest scan results.\n\nDescription Best Practices\n\nThe description is the primary trigger mechanism. Include:\n\nWhat the skill does (concrete actions)\nKeywords matching user queries\n\"Use when:\" clause listing activation scenarios\n\nBad: \"Helps with APIs.\"\n\nGood:\n\ndescription: >\n  Query and manage Example API resources including users, projects,\n  and billing data. Generates reports, monitors usage, and handles\n  authentication. Use when: querying Example API, generating usage\n  reports, managing API resources, checking billing status.\n\nScanner Compliance Quick Guide\n1. PURPOSE & CAPABILITY ✓\nDescription accurately reflects what the skill does\nAll credentials declared in frontmatter env or metadata\nNo undeclared external service dependencies\n2. INSTRUCTION SCOPE ✓\nInstructions stay on-topic for the skill's stated purpose\nNo language about automatically applying config changes\nPrivileged operations marked as \"requires manual review\"\nIf using requireMention:false, document data exposure implications\n3. INSTALL MECHANISM ✓\nNo curl, wget, or network downloads in scripts\nScripts only write within the skill workspace directory\nInclude \"inspect before running\" notes for all scripts\nNo obfuscated or minified executable code\n4. CREDENTIALS ✓\nEvery env var the skill uses is declared in frontmatter\nSensitive credentials marked sensitive: true\nNo requests for credentials unrelated to the skill's purpose\nPrerequisites table lists all required accounts/keys\n5. PERSISTENCE & PRIVILEGE ✓\nNo always:true in config recommendations\nConfig changes presented as templates for manual review\nMulti-user skills recommend agent isolation (separate OpenClaw agent)\nNo persistent background processes or daemons\n\n→ Deep dive with case study: references/scanner-compliance.md\n\nPublishing\nCommand Reference\n# Publish a skill\nnpx clawhub publish ./skill-dir \\\n  --slug my-skill \\\n  --name \"Display Name\" \\\n  --version 1.0.0 \\\n  --changelog \"What changed\" \\\n  --tags latest\n\n# Inspect published skill\nnpx clawhub inspect my-skill\nnpx clawhub inspect my-skill --files\nnpx clawhub inspect my-skill --file SKILL.md\n\n# Browse and search\nnpx clawhub explore\nnpx clawhub search \"keyword\"\n\n# Auth\nnpx clawhub whoami\n\nVersion Bumping\n\nWhen fixing scanner warnings, bump the version and republish:\n\nnpx clawhub publish ./skill-dir \\\n  --slug my-skill \\\n  --version 1.1.0 \\\n  --changelog \"Fix: declared env vars in frontmatter for clean scan\" \\\n  --tags latest\n\nCommon Pitfalls\nMistake\tScanner Impact\tFix\nNo env declarations when skill uses credentials\t! CREDENTIALS\tAdd env vars via metadata.openclaw.env in frontmatter\n\"Agent automatically applies config\" language\t! INSTRUCTION SCOPE\tChange to \"manual review required\"\nScripts without inspection warning\tℹ INSTALL MECHANISM\tAdd \"inspect before running\" note\nNo agent isolation for multi-user skills\tℹ PERSISTENCE\tAdd security model section\nrequireMention:false without data exposure docs\tℹ INSTRUCTION SCOPE\tDocument what data the skill sees\nDescription too short / missing keywords\tPoor discoverability\tExpand with trigger scenarios\nShipping test DBs or generated files\tBloat\tClean before publishing\nPersonal data in examples\tPrivacy risk\tUse generic examples\nTemplates\n\nReady-to-use SKILL.md templates:\n\nBasic skill — Minimal SKILL.md\nSkill with scripts — Scripts + env vars\nSkill with config — Gateway config changes\n\nCopy, fill in the placeholders, publish.\n\nFile Reference\nFile\tPurpose\nreferences/frontmatter-schema.md\tComplete YAML frontmatter field documentation\nreferences/scanner-compliance.md\tScanner categories deep dive with case study\nreferences/script-safety.md\tSafe script patterns for publication\nreferences/publish-workflow.md\tStep-by-step publish and iterate workflow\nassets/templates/basic-skill.md\tMinimal SKILL.md template\nassets/templates/skill-with-scripts.md\tTemplate with scripts and env vars\nassets/templates/skill-with-config.md\tTemplate for config-changing skills"
  },
  "trust": {
    "sourceLabel": "tencent",
    "provenanceUrl": "https://clawhub.ai/tdavis009/clawhub-skill-guide",
    "publisherUrl": "https://clawhub.ai/tdavis009/clawhub-skill-guide",
    "owner": "tdavis009",
    "version": "1.0.0",
    "license": null,
    "verificationStatus": "Indexed source record"
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/clawhub-skill-guide",
    "downloadUrl": "https://openagent3.xyz/downloads/clawhub-skill-guide",
    "agentUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent",
    "manifestUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/clawhub-skill-guide/agent.md"
  }
}