OpenClaw Master Skills
v0.7.0A curated collection of 560+ best OpenClaw skills — AI tools, productivity, marketing, frontend, mobile, backend, DevOps and more. Weekly updated by MyClaw.a...
⭐ 1· 1.7k·16 current·17 all-time
byLeo Ye@leoyeai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description claim a large curated collection of skills; the SKILL.md and README are consistent with being an index/catalog and request no binaries, env vars, or installs themselves. Minor incoherence: SKILL.md claims "560+" skills while the README shows badges and an index describing ~387+ skills, and the source is listed but the package metadata lists no homepage. These are small metadata mismatches but do not change the core purpose (a skill collection index).
Instruction Scope
Runtime instructions are minimal (an install hint: `clawhub install openclaw-master-skills` and links to the GitHub repo). The SKILL.md does not instruct the agent to read unrelated files, exfiltrate data, or access environment variables. However, the collection indexes many third-party skills (e.g., 'computer-use', 'master-skills', headless browser automation) that themselves may require broad permissions — the collection’s instructions do not install those children automatically here, but installing the collection later will bring them in, so review child skill instructions before use.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute, so there is no direct install mechanism risk from this package. The README suggests using clawhub or git clone; risk depends on what clawhub does or what child skills contain, not on this index itself.
Credentials
This package declares no required environment variables, binaries, or config paths. That is proportionate for a catalog. Note: many listed child skills (in the README) likely require credentials or system access — those are not requested here but will be requested when you install or enable individual child skills.
Persistence & Privilege
Flags show no elevated persistence (always:false) and this skill does not modify other skills or agent-wide config in its own instructions. Installing the collection may add many skills; evaluate each child skill's privileges separately.
Assessment
This package is an index/catalog of many third‑party skills rather than an executable component, so it is internally coherent. Before installing or enabling it: (1) verify the upstream GitHub repository and the publisher (the metadata shows an owner id but no homepage), (2) note the metadata mismatch (SKILL.md claims 560+ while README shows ~387+) — ask the author if counts/contents are up to date, (3) do NOT mass-install or enable all included skills blindly: many individual skills listed (e.g., 'computer-use', 'master-skills', browser automation skills) can request system control or sensitive credentials, so inspect each child skill's SKILL.md for required env vars, binaries, and instructions before installing, (4) prefer cloning the repo and manually installing only specific trusted skills, and (5) if you plan to run clawhub install, confirm what clawhub will fetch and where it will write files. If you want, provide the link to the GitHub repo and I can flag any child skills that look high-risk.Like a lobster shell, security has layers — review code before you run it.
latestvk9727zx2m14q0nhdtrctazk99983zq30
License
MIT-0
Free to use, modify, and redistribute. No attribution required.