OpenClaw 插件安装常见问题排查

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only troubleshooting skill matches its stated purpose, but it includes user-directed npm/GitHub installation guidance that users should verify before running.

This skill appears safe as an instruction-only troubleshooting reference. Before running its npm or GitHub installation commands, confirm the exact package or repository from official documentation, and be cautious with global installs and --force because they can change your system-wide Node/npm setup.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run, this command can alter the user's global npm environment and replace existing package files.

Why it was flagged

The skill recommends a global npm install with --force to address Windows permission/overwrite issues. This is relevant to the troubleshooting purpose, but it can overwrite or change globally installed files.

Skill content
npm i -g clawhub --force
Recommendation

Verify the package name and source first, use --force only when necessary, and prefer normal install or documented recovery steps when possible.

What this means

Installing the wrong package or an unofficial repository could add unwanted code to the user's environment.

Why it was flagged

The troubleshooting guidance suggests that some plugins may need to be installed from GitHub and also gives npm package installation examples. External package installation is expected for this topic, but users should confirm provenance.

Skill content
可能需要从 GitHub 仓库安装
Recommendation

Use official OpenClaw or package documentation, check the publisher/repository, and avoid installing unverified similarly named packages.