OpenClaw Starter Kit
v1.0.1OpenClaw 초보자를 위한 풀패키지 온보딩 스킬. 첫 세팅부터 보안 강화까지 대화형으로 안내한다. "초기 세팅", "처음 설정", "starter kit", "온보딩", "setup guide", "시작하기", "세팅 도와줘" 키워드에 반응.
⭐ 0· 357·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (onboarding, setup, security guidance) matches the content: templates, guides, and instructions for creating SOUL.md, USER.md, MEMORY, HEARTBEAT and recommending/installing skills and APIs. Required permissions/credentials are not requested and all suggested integrations (Brave Search, calendar, channels) are reasonable for an onboarding kit.
Instruction Scope
SKILL.md instructs the agent to generate files under ~/.openclaw/workspace/, create templates, and run OpenClaw CLI commands (openclaw configure, openclaw health, etc.). This is expected for a setup skill, but the instructions imply the agent will read/write local files and enumerate installed skills/channels — users should be aware the setup process touches their workspace and agent configuration. Troubleshooting suggests 'sudo npm install -g openclaw', which is a common but higher-risk step (use nvm or avoid sudo when possible).
Install Mechanism
Instruction-only skill with no install spec and no code executed by the registry installer. No downloads or third-party packages are pulled by the skill itself, so on-install risk is minimal.
Credentials
The skill declares no required environment variables or credentials. It shows example env var usage (OPENAI_API_KEY, ANTHROPIC_API_KEY) only as advice for configuring OpenClaw; that is proportional to an onboarding guide. No unrelated secrets or broad credential access are requested.
Persistence & Privilege
always is false and autonomous invocation defaults are unchanged. The skill directs creation of its own workspace files and templates (normal for a starter kit) and does not request to modify other skills or system-wide configs beyond using the OpenClaw CLI.
Assessment
This skill appears to do exactly what it says: guide setup and create starter files. Before installing/use: (1) review the files it will create under ~/.openclaw/workspace and confirm you are comfortable with those locations; (2) never paste API keys into SOUL.md/USER.md as the guide warns — use openclaw configure or environment variables; (3) when following troubleshooting steps, avoid running global npm installs with sudo if possible (prefer nvm or your OS package manager); (4) be cautious when connecting external services (Telegram, Google Workspace, Brave API) and only provide tokens/keys via the OpenClaw configuration mechanisms you trust; (5) if the skill will be allowed to run autonomously, verify allowlists and gateway token protections so the agent cannot drive external actions without your approval.Like a lobster shell, security has layers — review code before you run it.
latestvk977vnsvdymqvd39ynekyndfvh81t1xf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.