OpenClaw Master Skills

A curated collection of 339+ best OpenClaw skills — AI tools, productivity, marketing, frontend, mobile, backend, DevOps and more. Weekly updated by MyClaw.a...

Security Scan

This is a coherent skill-collection installer that fetches many third-party skills from a GitHub repo, but it omits expected dependency declarations and will install arbitrary skills you should vet first.

Purpose & Capability

The skill's stated purpose (a curated collection of 339+ skills) matches the included README and install script. However, the SKILL metadata declares no required binaries while the provided scripts/install.sh clearly uses git, curl, mktemp, cp and other standard utilities — these required tools are not declared. That omission is an incoherence (likely sloppy engineering) that can trip users or automation that expects declared dependencies.

Instruction Scope

SKILL.md instructs users to run scripts/install.sh to list, install a single skill, or install all skills. The script itself only clones or sparse-checkouts content from the linked GitHub repo and copies skill folders into the target directory. The instructions do not attempt to read unrelated local files or exfiltrate data, but they will download and place many third-party skill packages onto the system — each of which may request more permissions/credentials or run code. This broad scope (installing many external skills) is expected but worth explicit user review.

Install Mechanism

No packaged installer; install.sh uses git clone / sparse-checkout and curl to fetch content from a GitHub repository (https://github.com/LeoYeAI/openclaw-master-skills). Using GitHub releases/repo is a standard approach and preferable to arbitrary shorteners/unknown servers. The script clones the repo (or individual skill path) and copies files into the target. Note: the script contains a minor bug ('cd ->/dev/null') which may cause failures but not a security flag by itself.

Credentials

The collection-skill declares no environment variables or credentials, and the installer script itself does not require secrets. However, many individual skills within the collection (per README examples) may request API keys, tokens, or local system access (e.g., browser automation, desktop control). Those are not requested by this meta-skill but will be introduced if you install specific contained skills.

Persistence & Privilege

The skill does not request always:true and does not modify other skills' configurations; it simply copies skill directories into the chosen target location (default ~/.openclaw/workspace/skills/). Installing all skills can increase attack surface because many third-party skill files will reside on disk, but the skill itself does not try to persist beyond typical installation behavior.

What to consider before installing

This package is essentially an installer that fetches a large collection of third-party OpenClaw skills from GitHub. Before running it: (1) ensure git and curl (and standard POSIX tools) are available — the SKILL metadata fails to list them; (2) prefer installing single named skills (sparse checkout) rather than --all; (3) run bash scripts/install.sh --list first to review available skill names; (4) manually inspect the repository or individual skill folders (SKILL.md of each skill) for any requests for credentials, system control (e.g., full desktop automation), or external endpoints before enabling them; (5) run installs in an isolated environment or with least-privilege file targets if you are unsure; (6) be cautious about skills that advertise bypassing detection, anti-bot bypass, or full desktop control — they increase risk and may require extra review.

A curated, weekly-updated collection of 339+ best skills for OpenClaw agents.

Quick Install

# Install a specific skill
bash scripts/install.sh github ~/.openclaw/workspace/skills/

# Install all 339+ skills
bash scripts/install.sh --all ~/.openclaw/workspace/skills/

# List available skills
bash scripts/install.sh --list

Categories

• 🤖 AI & LLM Tools (33) — Gemini, OpenAI, Whisper, image generation, browser automation
• 🔍 Search & Web (20) — Brave, Tavily, Baidu, DuckDuckGo, Firecrawl, scraping
• 📋 Productivity & Office (33) — Notion, Obsidian, Trello, Calendar, PDF, Excel
• 💻 Development & DevOps (85) — GitHub, Docker, React, Vue, Next.js, Python
• 📈 Marketing & Growth (31) — SEO, copywriting, CRO, email sequences, analytics
• 🎨 Media & Creative (10) — YouTube, video, audio, art generation
• 💰 Finance & Trading (6) — Stock analysis, Yahoo Finance, crypto
• 💬 Communication (13) — Slack, Discord, Telegram, Gmail, Feishu
• 🏠 Smart Home & IoT (8) — Sonos, Hue, Home Assistant, desktop control
• 🧠 Memory & Agent (31) — Self-improving, proactive agents, memory management
• 🔒 Security (3) — Auditing, healthcheck, skill vetting
• 📊 Data & Analytics (2) — Data analysis, web performance
• 📱 Social & Content (10) — Twitter/X, Reddit, Xiaohongshu, LinkedIn
• 📦 Other (54) — Automation workflows, weather, food ordering, and more

Source

• GitHub: https://github.com/LeoYeAI/openclaw-master-skills
• ClawHub: https://clawhub.com/skills/openclaw-master-skills
• Powered by: https://myclaw.ai