ExpertPack
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent and purpose-aligned, but users should review the packs they index and any optional companion tools before use.
This appears safe to install as an instruction-only ExpertPack guide. Before using it, review any ExpertPack contents you load, avoid putting secrets or raw private state in packs, keep RAG paths narrowly scoped, and separately vet any companion tools or MCP servers you choose to install.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sensitive or untrusted pack content could be reused in later agent responses or affect the agent’s behavior.
The skill intentionally makes ExpertPack files available through RAG and prompt context. This is central to the purpose, but pack contents can influence future answers and may include private knowledge if the user stores it there.
Add pack to `memorySearch.extraPaths` in `openclaw.json` ... Tier 1 (Always): Include in every prompt as system context
Use trusted packs, inspect Tier 1 files before loading them, keep secrets out of packs, and scope `memorySearch.extraPaths` only to the intended pack directory.
Installing companion tools could add capabilities not present in this reviewed package.
The installed skill is instruction-only, but it recommends optional companion packages and an MCP server outside the provided artifacts. Those are purpose-aligned, but they would introduce additional code and integration surface if installed.
For CLI tooling ... use `expertpack-cli` ... For exporting ... use `expertpack-export` ... For serving a pack as an MCP endpoint ... see EP MCP
Review each companion skill, GitHub repository, and Obsidian plugin separately before installing or granting it access to local packs.