Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
OpenClaw skill discovery, security vetting & install. Searches 3000+ curated skills from ClawHub registry and awesome-openclaw-skills catalog. Scores credibility, detects prompt injection & malicious patterns, manages installations. Quick-checks GitHub for new skills.
OpenClaw skill discovery, security vetting & install. Searches 3000+ curated skills from ClawHub registry and awesome-openclaw-skills catalog. Scores credibility, detects prompt injection & malicious patterns, manages installations. Quick-checks GitHub for new skills.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Unified skill discovery, security vetting, and installation for OpenClaw.
Find skills by keyword, category, or credibility score. python3 scripts/skill-hub-search.py --query "spreadsheet" python3 scripts/skill-hub-search.py --category "DevOps" --min-score 60 python3 scripts/skill-hub-search.py --query "auth" --live # include live ClawHub results python3 scripts/skill-hub-search.py --installed # show only installed python3 scripts/skill-hub-search.py --not-installed --limit 20 # discovery mode
After finding a skill, install via ClawHub: npx clawhub@latest install <skill-slug>
Scan a skill for malicious patterns, prompt injection, and logic weaknesses. python3 scripts/skill-hub-vet.py --slug google-sheets # vet single skill python3 scripts/skill-hub-vet.py --all-installed # vet all installed python3 scripts/skill-hub-vet.py --category "DevOps" # vet category python3 scripts/skill-hub-vet.py --top 10 # vet top N unvetted
See installed vs catalog coverage, unvetted warnings, recommendations. python3 scripts/skill-hub-status.py
Fast check if new skills were added since last sync. Uses gh CLI โ no full download needed. python3 scripts/skill-hub-quick-check.py # check for updates python3 scripts/skill-hub-quick-check.py --sync # auto-sync if updates found python3 scripts/skill-hub-quick-check.py --query "ai" # check + search new skills
Export catalog as formatted table (terminal or markdown), grouped by category. python3 scripts/skill-hub-table-export.py # terminal table python3 scripts/skill-hub-table-export.py --format markdown # markdown table python3 scripts/skill-hub-table-export.py --category "AI" # filter category
Full re-fetch from GitHub awesome-list. Computes credibility, preserves vet results, shows diff. python3 scripts/skill-hub-sync.py
TierScoreMeaningTrusted85-100Curated + vetted + matureGood60-84Curated or vetted, some signalsUnvetted30-59Exists in registry, not scannedCaution0-29Missing signals or security warnings
Code-level: eval/exec, shell injection, obfuscation, network access, env harvesting, destructive ops. NLP/Prompt-level: hidden instructions, role hijacking, invisible unicode, exfiltration prompts, authority escalation, social engineering.
User asks "find a skill for X" or "is there a skill that can..." User wants to extend capabilities with new tools User wants to check if installed skills are safe Before installing unknown skills from registry
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.