Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Find Skills for ClawHub

v1.0.0

Search for and discover OpenClaw skills from ClawHub (the official skill registry). Activate when user asks about finding skills, installing skills, or wants...

1· 857·4 current·4 all-time
byJordandu@mrjordandu
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, SKILL.md, and the helper script all focus on searching/installing skills via the ClawHub CLI or npx. There are no environment variables, unrelated binaries, or config paths requested that don't align with this purpose.
Instruction Scope
Runtime instructions only direct the agent to check for and run the ClawHub CLI (or npx clawhub) and to present/parse search results and run install commands when approved. The SKILL.md does not instruct the agent to read unrelated files, exfiltrate data, or call unexpected endpoints. (Development notes mention optional caching and writing to OpenClaw memory, but those are optional and not present in the shipped script.)
Install Mechanism
This is an instruction-only skill with a small helper script; there is no install spec. The guidance recommends installing the ClawHub CLI via 'npm i -g clawhub' or using 'npx', which will fetch code from the npm registry at runtime. This is expected for a CLI-based integration but does mean transient code is pulled from npm when using npx (normal but worth noting).
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The SKILL.md mentions 'clawhub login' only as optional for publishing—appropriate and proportionate to the described publishing workflow.
Persistence & Privilege
No special persistence is requested (always: false). The skill does not modify other skills' configs or system-wide settings. Development docs mention optional caching (~/.cache) and possible writes to OpenClaw memory as an advanced feature, but these are not enforced by the shipped script or SKILL.md instructions.
Assessment
This skill is internally consistent: it simply wraps the ClawHub CLI (or npx) to search and install OpenClaw skills. Before installing or using it, consider the following: (1) Installing the ClawHub CLI globally requires npm/node and may need elevated permissions—use care with global npm installs; (2) Using 'npx' will pull the CLI package from the npm registry at runtime—prefer 'npx' for one-off use or review the clawhub package source before installing globally; (3) Installing a discovered skill may run its own install scripts—review that skill's code/permissions before installing into your workspace; (4) The DEVELOPMENT.md mentions optional caching (~/.cache) and writing to OpenClaw memory as possible extensions—if you see those enabled, review what data is stored; (5) If you plan to publish via 'clawhub login', only log in with accounts you trust and understand the permissions. If you want extra assurance, run searches and installs in a sandbox or review the ClawHub CLI package source first.

Like a lobster shell, security has layers — review code before you run it.

clawhubvk97bdt5has66ksstzys3whx7wx8296zbdiscoveryvk97bdt5has66ksstzys3whx7wx8296zblatestvk97bdt5has66ksstzys3whx7wx8296zbopenclawvk97bdt5has66ksstzys3whx7wx8296zbsearchvk97bdt5has66ksstzys3whx7wx8296zbskillsvk97bdt5has66ksstzys3whx7wx8296zb
857downloads
1stars
1versions
Updated 3h ago
v1.0.0
MIT-0

Find Skills for ClawHub

This skill helps you discover and install OpenClaw skills from the ClawHub registry (https://clawhub.ai).

When to Use This Skill

Use this skill when the user:

  • Asks "how do I do X with OpenClaw" where X might have an existing skill
  • Says "find a skill for X on ClawHub" or "what skills are available for OpenClaw"
  • Asks "can OpenClaw do X" where X is a specialized capability
  • Expresses interest in extending OpenClaw capabilities
  • Wants to search for tools, templates, or workflows in the ClawHub ecosystem
  • Mentions they wish they had help with a specific domain (design, testing, deployment, etc.) in OpenClaw

Prerequisites

1. Install ClawHub CLI

The ClawHub CLI is required to search and install skills. Install it globally:

npm i -g clawhub

Or use it via npx (slower but no installation):

npx clawhub search "query"

2. Login (Optional for Publishing)

For searching and installing, login is not required. For publishing your own skills:

clawhub login

How to Search for Skills

Basic Search

clawhub search "query"

Examples:

  • clawhub search "calendar" - Find calendar-related skills
  • clawhub search "weather" - Find weather forecasting skills
  • clawhub search "devops" - Find DevOps and deployment skills

Search with Limit

clawhub search "query" --limit 10

How to Install Skills

Once you find a skill you want to install:

clawhub install <skill-slug>

Example:

clawhub install weather-forecast

Skills are installed into your OpenClaw workspace's skills directory. OpenClaw will automatically load them in the next session.

Common Skill Categories

When searching, consider these common categories:

CategoryExample Queries
Web Developmentreact, nextjs, typescript, css, tailwind
Testingtesting, jest, playwright, e2e
DevOpsdeploy, docker, kubernetes, ci-cd
Documentationdocs, readme, changelog, api-docs
Code Qualityreview, lint, refactor, best-practices
Designui, ux, design-system, accessibility
Productivityworkflow, automation, git, todo
APIs & Servicesapi, rest, graphql, database
AI & MLmachine-learning, openai, embeddings
Hardwareraspberry-pi, iot, sensors, camera

Integration with OpenClaw (AI Assistant Guide)

As an AI assistant using this skill, follow these steps when a user asks about OpenClaw capabilities:

Step 1: Check if ClawHub CLI is available

First, check if clawhub is installed by running:

clawhub --version

If not installed, inform the user and offer to install it:

npm i -g clawhub

Alternatively, you can use npx clawhub (slower but works without installation).

Step 2: Search for relevant skills

Run the search command with the user's query:

clawhub search "query" --limit 5

Or using npx:

npx clawhub search "query" --limit 5

Step 3: Parse and present results

Typical output format:

Search results for "weather":

1. weather-forecast v1.2.0 (1,234 installs)
   - Provides weather forecasts using Open-Meteo API
   - Tags: weather, api, forecast
   
2. weather-alerts v0.5.1 (845 installs)
   - Sends weather alerts and notifications
   - Tags: weather, alerts, notifications
   
Install with: clawhub install <skill-slug>

Present results to the user with:

  1. Skill name and version
  2. Install count (popularity indicator)
  3. Brief description
  4. Relevant tags
  5. Installation command

Step 4: Offer to install

If the user wants to install a skill:

clawhub install <skill-slug>

Or using npx:

npx clawhub install <skill-slug>

Step 5: Handle no results

If no skills are found:

  1. Acknowledge that no existing skill was found
  2. Offer to help with the task directly using your general capabilities
  3. Suggest the user could create their own skill with clawhub init

Example Workflow

User: "How can OpenClaw help me with weather forecasts?"

  1. Search for skills:

    clawhub search "weather forecast"
    
  2. Present results:

    Found 3 weather-related skills on ClawHub:
    
    1. weather-forecast (1.2K installs)
       - Provides weather forecasts using Open-Meteo API
       - Install: `clawhub install weather-forecast`
    
    2. weather-alerts (845 installs)
       - Sends weather alerts and notifications
       - Install: `clawhub install weather-alerts`
    
    3. travel-weather (312 installs)
       - Weather planning for travel itineraries
       - Install: `clawhub install travel-weather`
    
  3. Offer installation:

    Would you like me to install any of these skills for you?
    

Advanced Usage

Update Installed Skills

Check for updates to all installed skills:

clawhub update --all

List Installed Skills

See what skills you have installed:

clawhub list

Publish Your Own Skills

If you create a skill you want to share:

clawhub publish ./my-skill-folder --slug my-skill --name "My Skill" --version 1.0.0

Sync Local Skills

Back up your local skills to ClawHub:

clawhub sync --all

Tips for Effective Searches

  1. Use specific keywords: "react testing" is better than just "testing"
  2. Try alternative terms: If "deploy" doesn't work, try "deployment" or "ci-cd"
  3. Browse categories: Visit https://clawhub.ai to browse skills by category
  4. Check popularity: More installs usually indicates a more mature skill

Troubleshooting

"clawhub command not found"

  • Install with npm i -g clawhub
  • Or use npx clawhub instead

"No skills found"

  • Try broader search terms
  • Check https://clawhub.ai to see if skills exist in that category
  • Consider creating your own skill with clawhub init

"Permission denied" when installing

  • Make sure you have write permissions to the OpenClaw workspace
  • Skills install to <workspace>/skills by default

Related Skills

  • skill-creator: Create and package your own OpenClaw skills
  • find-skills: Search for skills in the broader AI skills ecosystem (skills.sh)

Learn More


This skill helps bridge the gap between users' needs and the growing ecosystem of OpenClaw skills on ClawHub.

Comments

Loading comments...