Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Skilled OpenClaw Advisor

Query the local OpenClaw docs index for accurate answers about configuration, features, CLI commands, channels, providers, plugins, cron, sessions, agents, p...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 257 · 1 current installs · 1 all-time installs
bySean Ford@seanford
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the code and runtime needs: the scripts scan local OpenClaw docs, build a local FTS5 index, and query it. Declared required binaries (python3, openclaw) are appropriate for the stated purpose. A minor omission: the index-builder optionally calls 'npm' and 'which' to detect docs (and uses the npm global path fallback), but 'npm' is not listed in the declared required binaries. This is an operational/packaging omission rather than a malicious mismatch.
Instruction Scope
SKILL.md and the scripts confine activity to the local machine: they read the OpenClaw docs directory, read optional openclaw.json config, and write runtime data under ~/.openclaw/skills-data/skilled-openclaw-advisor/. The update script may call the OpenClaw CLI (openclaw message) to post a local notification; no direct network calls are made by the code. The scripts will index whatever markdown files exist in the docs path (including private/local docs) — expected for this skill but worth noting.
Install Mechanism
This is instruction-only with included scripts (no external downloads). The metadata includes an exec install step that runs the local build_index.py script. The code uses only the Python stdlib and spawns local binaries; there are no network-based installers, remote archives, or third-party package pulls performed by the skill itself.
Credentials
The skill declares no required environment variables or credentials and does not attempt to access secrets. It reads ~/.openclaw/openclaw.json (documented optional config) and the local docs directory. No unrelated credentials or external service keys are requested. The only notable point: it invokes system tools (npm, which, openclaw) via subprocess; these are normal for locating local installs but were not all listed in the declared binaries.
Persistence & Privilege
The skill stores its data under ~/.openclaw/skills-data/skilled-openclaw-advisor/ (state.json, index.db, diffs, versions) consistent with the documented convention. It does not request always:true or attempt to modify other skills' configs. Autonomous invocation is allowed by default (platform standard) but does not combine with broad credential access here.
Assessment
This skill appears to be internally consistent and does what it claims: build and query a local index of your OpenClaw docs. Before installing, consider: (1) the build script may call 'npm' and 'which' to locate the docs — ensure those binaries are present and trustworthy on your PATH (this is an operational omission, not malicious); (2) the indexer will read all markdown files under the detected docs path, so if your OpenClaw docs directory contains private information you do not want indexed, do not run the build; (3) the skill writes files under ~/.openclaw/skills-data/skilled-openclaw-advisor/, so review or relocate that directory if you have storage/policy concerns; (4) the update script can call 'openclaw message' to send local notifications — no network calls are made by the skill, but you may prefer to run updates manually or inspect the diff output first. If you want higher assurance, inspect the three included Python scripts on your machine before running build_index.py.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.4.2
Download zip
latestvk97205jt2ywrsp3twyv1jjks6582pjt9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📚 Clawdis
Binspython3, openclaw

SKILL.md

OpenClaw Docs Intelligence

Local FTS5 index of all OpenClaw documentation. No external API calls. Sub-10ms queries.

What This Skill Does

This skill bundles three Python scripts and queries a local SQLite FTS5 index built from the OpenClaw docs installed on this machine (~/.npm-global/lib/node_modules/openclaw/docs or equivalent). It reads only the local docs directory and writes only to ~/.openclaw/skills-data/skilled-openclaw-advisor/. The query and build scripts make no network requests. The update script optionally sends a local notification via the openclaw message CLI when doc changes are detected (no direct network calls). The scripts do not access credentials or config secrets, and does not read openclaw.json at runtime (config keys listed below are optional overrides that the user may set — they are not required).

First-Time Setup

Build the index after installing the skill:

python3 $SKILL_DIR/scripts/build_index.py

This scans the local OpenClaw docs and creates a SQLite index at ~/.openclaw/skills-data/skilled-openclaw-advisor/index.db.

Query

# Compact output for agent use
python3 $SKILL_DIR/scripts/query_index.py --query "YOUR QUESTION" --mode agent

# Human-readable
python3 $SKILL_DIR/scripts/query_index.py --query "YOUR QUESTION"

# Full detail with online link
python3 $SKILL_DIR/scripts/query_index.py --query "YOUR QUESTION" --verbosity detailed

# Chinese results
python3 $SKILL_DIR/scripts/query_index.py --query "YOUR QUESTION" --lang zh-CN

# Index status
python3 $SKILL_DIR/scripts/query_index.py --status

Index Updates

# Incremental update (checks for doc changes)
python3 $SKILL_DIR/scripts/update_index.py

# Force full re-index
python3 $SKILL_DIR/scripts/build_index.py --force

When to Use

  • OpenClaw configuration questions
  • CLI commands and options
  • Channel, provider, cron, session, agent setup
  • Troubleshooting OpenClaw errors

When Not to Use

  • General coding questions unrelated to OpenClaw
  • Questions about third-party services
  • If index is not built yet (run build_index.py first)

Response Modes

ModeUse CaseDescription
agentDefault agent queriesUltra-compact, minimal tokens
human + standardHuman questionsClear explanation + key points
human + detailedDeep divesFull excerpt + examples

Optional Config

Settings in skills.entries.openclaw-docs.config in openclaw.json (all optional):

KeyDefaultDescription
defaultLang"en"Language: en or zh-CN
defaultVerbosity"standard"Output: concise, standard, detailed
maxResults5Max results returned
fallbackToEnglishtrueFall back to English if no results in requested language
includeOnlineUrltrueInclude https://docs.openclaw.ai/... links in detailed output

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…