OpenClaw Hot Skills
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign ClawHub discovery helper that searches for popular skills and checks which ones are already installed.
This skill looks safe for browsing popular ClawHub skills. Before installing any recommended skill, review that skill separately and be aware that this helper may use the ClawHub CLI to check your local installed-skill list.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may query ClawHub and include whether skills are already installed locally.
The skill directs the agent to use the ClawHub CLI and inspect local installed-skill status. This is expected for the skill's discovery purpose, but users should know local skill state may be used in responses.
For ranking modes, run ClawHub explore... For topic mode, run `clawhub search`... Run `clawhub list` to see which skills are already installed locally.
Use it for discovery, and separately confirm before installing any recommended skill.
Installing or using the skill may require trusting the `clawhub` CLI package and its updates.
The skill requires an external npm-installed CLI package. This is central to the skill's purpose, but it adds normal dependency trust considerations.
node | package: clawhub | creates binaries: clawhub
Install the CLI only from a trusted source and review package provenance if supply-chain risk matters to you.