Clawhub Search

搜索 ClawHub Skills 技能市场。使用此技能查找和发现 OpenClaw 社区贡献的各种技能。 激活条件：用户提到搜索技能、查找 skill、找某个功能的 skill、ClawHub、clawhub。

Security Scan

The skill's instructions match its stated purpose (search ClawHub) but the runtime requirements (CLAWHUB_TOKEN, use of curl/python3/npx) are not declared in the registry metadata, creating an inconsistency you should be aware of before installing.

Purpose & Capability

Name/description and SKILL.md consistently describe a marketplace search helper that calls https://clawhub.ai/api/v1/skills and formats results. The capability requested fits the stated purpose.

Instruction Scope

SKILL.md instructs the agent/user to call the ClawHub API with a Bearer token, use curl and python3 for formatting, and shows how to install skills with npx. All actions stay within the search/install scope and do not ask the agent to read unrelated files or secrets beyond the API token. However, the instructions rely on external tools (curl, python3, npx) and an env var that are not declared in the registry metadata.

Install Mechanism

There is no install spec (instruction-only), which is low risk. But the docs recommend using `npx clawhub@latest install` (runtime network fetch of npm package) and manual downloads — these implicitly pull code from the network. That is expected for installing marketplace skills but worth noting because it performs on-demand fetches.

Credentials

SKILL.md requires an API token via environment variable CLAWHUB_TOKEN, but the registry's declared required env vars is empty. Requiring a single service token is proportionate to the purpose, but the omission from metadata is an inconsistency that affects automated security checks and user expectations.

Persistence & Privilege

The skill is user-invocable, not always-on, requests no config paths, and does not demand elevated persistence or modify other skills. No privilege concerns found.

What to consider before installing

This skill appears to do what it says (search ClawHub), but the SKILL.md expects you to provide a CLAWHUB_TOKEN and to have curl, python3, and (optionally) npm/npx available — none of which are declared in the registry metadata. Before installing or running: (1) verify the official domain (https://clawhub.ai) and that you obtained the token from the official site; (2) only supply CLAWHUB_TOKEN to trusted code and avoid pasting it into public repos; (3) be aware that `npx clawhub@latest install` will fetch code from npm at runtime — confirm the package is the official clawhub client; (4) consider asking the publisher to add CLAWHUB_TOKEN and required binaries to the skill metadata so automated checks can validate them. If you need higher assurance, request the skill's source/homepage or a signed package before using your token.

ClawHub Skill 搜索工具

概述

此技能用于在 ClawHub 技能市场上搜索 OpenClaw Skills。通过调用 ClawHub API 获取技能列表，支持按关键词搜索和下载量排序。

API 信息

• API 地址: https://clawhub.ai/api/v1/skills
• 认证方式: Bearer Token
• 参数:
  • q: 搜索关键词
  • sort: 排序方式 (downloads, stars, newest)
  • limit: 返回数量 (可选)

使用方法

API Token

使用环境变量 CLAWHUB_TOKEN 存储 API Token。

获取方式：在 ClawHub 官网申请 API Token。

重要：不要将 Token 明文写入代码或文档中！

1. 获取 API Token

需要用户的 ClawHub API Token。可以在 ClawHub 官网申请。

2. 搜索 Skills

使用 curl 命令搜索：

# 基础搜索（按下载量排序）
curl -s "https://clawhub.ai/api/v1/skills?sort=downloads&q=关键词" \
  -H "Authorization: Bearer $CLAWHUB_TOKEN"

# 精确搜索
curl -s "https://clawhub.ai/api/v1/skills?q=agent+team" \
  -H "Authorization: Bearer $CLAWHUB_TOKEN"

# 搜索并格式化输出
curl -s "https://clawhub.ai/api/v1/skills?sort=downloads&q=关键词" \
  -H "Authorization: Bearer $CLAWHUB_TOKEN" | python3 -c "
import sys,json
d=json.load(sys.stdin)
for i in d.get('items',[])[:10]:
    print(f\"{i['slug']}: {i['summary'][:60]}... ({i['stats']['downloads']} downloads)\")
"

3. 安装 Skills

找到想用的 skill 后，使用以下命令安装：

# 通过 ClawHub 安装
npx clawhub@latest install <skill-slug>

# 或手动安装（下载并解压到 skills 目录）

常用搜索示例

搜索需求	命令
代码开发相关	?q=code+developer&sort=downloads
多 Agent 相关	?q=agent&sort=downloads
记忆/内存相关	?q=memory&sort=downloads
自动化相关	?q=automation&sort=downloads
搜索/查找相关	?q=search&sort=downloads
团队协作相关	?q=team+delegation&sort=downloads

示例：搜索 "agent" 相关的 Skills

curl -s "https://clawhub.ai/api/v1/skills?sort=downloads&q=agent" \
  -H "Authorization: Bearer YOUR_TOKEN" | python3 -c "
import sys,json
d=json.load(sys.stdin)
items = d.get('items', [])
print(f'找到 {len(items)} 个结果:\n')
for i in items[:15]:
    stats = i.get('stats', {})
    print(f\"- {i['slug']}\")
    print(f\"  描述: {i.get('summary', '')[:80]}\")
    print(f\"  下载: {stats.get('downloads', 0)} | 星标: {stats.get('stars', 0)}\")
    print()
"

输出格式解析

API 返回的 JSON 包含以下字段：

字段	说明
slug	Skill 的唯一标识符
displayName	显示名称
summary	简短描述
stats.downloads	下载次数
stats.stars	星标数量
createdAt	创建时间 (Unix时间戳)
updatedAt	更新时间 (Unix时间戳)

注意事项

1. Token 管理: API Token 需要妥善保管，不要泄露
2. 速率限制: 注意 API 调用频率限制
3. 动态页面: ClawHub 前端页面是动态加载的，无法通过普通网页抓取获取内容，必须使用 API
4. 搜索策略: 如果搜索结果少于 5 个，尝试用更通用的关键词

常用技巧

1. 组合搜索: 使用多个关键词组合，如 agent+memory、code+automation
2. 过滤筛选: 可以先搜索再根据描述人工筛选
3. 关注下载量: 高下载量通常意味着更稳定、更受欢迎的技能

相关链接

• ClawHub 官网: https://clawhub.ai/
• 技能市场: https://clawhub.ai/skills
• 发布技能: https://clawhub.ai/upload