Skill Analyst Zh

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherently focused on comparing and reviewing OpenClaw skills, with only low-risk, purpose-aligned CLI and local metadata access to notice.

This skill appears safe to install for its stated purpose. Before using it, make sure the clawhub CLI on your system is trusted, and remember it may inspect installed skill metadata and query ClawHub to prepare its recommendation.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may query ClawHub and read installed skill descriptions to build its analysis report.

Why it was flagged

The skill directs use of the ClawHub CLI and local skill metadata. This is central to its comparison/review purpose and not destructive, but it is still tool and local-file access the user should understand.

Skill content
用 `clawhub search <关键词>` 搜索 ClawHub 上的同类 skill ... 扫描 `~/.openclaw/skills/` 目录下的 SKILL.md 文件,或用 `clawhub list` 查看。
Recommendation

Use a trusted clawhub CLI, provide clear target skill names or search terms, and review the report before deciding to install or publish a skill.

What this means

The skill may fail or may rely on whichever clawhub executable is available in the user's environment.

Why it was flagged

The skill documentation says the clawhub CLI is needed, but the registry metadata does not declare it as a required binary. This is a dependency declaration gap rather than evidence of unsafe behavior.

Skill content
Description: ... 需要 `clawhub` CLI 可用 ... Required binaries (all must exist): none
Recommendation

Install or verify a trusted clawhub CLI before use, and the publisher should declare the binary requirement in metadata.