New Openclaw Docs

Navigate and use OpenClaw documentation efficiently with cached doc fetch/search tooling, sitemap/category routing, and config snippet lookup. Use when answe...

Security Scan

The skill's scripts and workflow match a docs-fetch/search tool, but the package metadata omits environment requirements and a crucial sourced file (.openclawdocs-env.sh) is missing — this mismatch and the presence of secret placeholders in snippets are inconsistent and worth caution.

Purpose & Capability

The skill claims to provide cached doc fetch/search and routing, and the included scripts implement those features. However, the scripts rely on environment variables (OPENCLAW_DOCS_CACHE_DIR, OPENCLAW_DOCS_TTL, OPENCLAW_DOCS_BASE_URL) and helper functions (openclawdocs_download, openclawdocs_cache_path, openclawdocs_list_cache, openclawdocs_cache_cleanup) defined in a sourced file (.openclawdocs-env.sh) which is not included in the bundle. The registry metadata declares no required env vars or credentials, which is inconsistent with the scripts' runtime needs.

Instruction Scope

SKILL.md directs the agent to run workspace scripts that will read/write a local cache and download pages from the docs base URL. The scripts only call expected local tools (curl/wget, grep, find, stat) and fetch from docs.openclaw.ai, not arbitrary external endpoints. However, because they source an external env file (missing here) the actual runtime behavior depends on that file; that creates uncertainty about what additional commands or endpoints might be invoked.

Install Mechanism

No install spec is provided and the package is instruction/scripts-only. Nothing in the manifest attempts to download or run third-party installers. The only external dependency called out is an optional 'qmd' package for advanced indexing (not installed by the skill).

Credentials

The skill metadata declares no required environment variables or credentials, yet scripts clearly depend on OPENCLAW_DOCS_CACHE_DIR, OPENCLAW_DOCS_TTL, and OPENCLAW_DOCS_BASE_URL. Additionally, snippets/common-configs.md contains placeholders like ${DISCORD_TOKEN} and ${TELEGRAM_TOKEN}; while these are likely example placeholders, their presence means users might be prompted to provide secrets in configs. The mismatch between declared and actual environment needs is disproportionate and should be clarified.

Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide configuration. Its scripts only manage a local cache directory and snapshot files under that cache. The operations (rm -rf on cache refresh, creating snapshot dir) are limited to the skill's own cache area.

What to consider before installing

This skill appears to implement a docs fetch/search tool, but before installing or running it you should: (1) Inspect the missing .openclawdocs-env.sh (or ask the author for it). That file likely defines defaults and helper functions — it must be reviewed for any unexpected network calls or commands. (2) Ensure the skill's required environment variables (OPENCLAW_DOCS_CACHE_DIR, OPENCLAW_DOCS_TTL, OPENCLAW_DOCS_BASE_URL) are set to safe values and that the cache directory is confined to a workspace area you control. (3) Do not paste real service tokens into example snippets; the snippets contain placeholders like ${DISCORD_TOKEN}/${TELEGRAM_TOKEN}. (4) Run scripts initially in a restricted environment (no sensitive mounts, limited network) and run scripts/check_env.sh to confirm behavior. If the package author can provide the missing .openclawdocs-env.sh and update the registry metadata to declare the env vars the skill actually needs, this assessment could move toward benign.

OpenClaw Docs

Use this skill to answer OpenClaw documentation questions with reproducible script-assisted evidence.

Quick workflow

1. Route by intent (setup, config, troubleshooting, automation, platform).
2. Search or fetch docs via scripts.
3. Pull exact config patterns from snippets/docs.
4. Cite source URL/path in the final answer.

Use bundled resources

• Intent routing and category map: references/routing.md
• Script usage and operational notes: references/operations.md
• Config patterns: snippets/common-configs.md
• Script preflight checks: scripts/check_env.sh

Rules

• Prefer search.sh and fetch-doc.sh before freeform guessing.
• Keep answers anchored to specific doc paths.
• For uncertain or stale cache cases, refresh or state cache limitations.
• Provide concrete configuration examples when available.

Commands

# Validate local script requirements
bash workspace/skills/new-openclaw-docs/scripts/check_env.sh

# Discover likely paths
bash workspace/skills/new-openclaw-docs/scripts/sitemap.sh
bash workspace/skills/new-openclaw-docs/scripts/search.sh discord mention

# Fetch a document
bash workspace/skills/new-openclaw-docs/scripts/fetch-doc.sh providers/discord

# Cache and update checks
bash workspace/skills/new-openclaw-docs/scripts/cache.sh status
bash workspace/skills/new-openclaw-docs/scripts/recent.sh 7
bash workspace/skills/new-openclaw-docs/scripts/track-changes.sh since 2026-02-01