ClawHub

Skill Downloader

v0.1.20

Discover, compare, review, install, or update OpenClaw skills from trusted sources with a review-first workflow. Use when the user wants to search for a skil...

⭐ 1· 238·1 current·1 all-time
byY@ng@yyang100
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: discovery, inspection, comparison, and review-first installation of skills from trusted sources (ClawHub, GitHub, skills.sh). The declared requirements (none) are proportional to the stated purpose.
✓
Instruction Scope
SKILL.md limits actions to searching trusted sources, inspecting candidate files/metadata, and asking for explicit user approval before writing files. It does not instruct reading unrelated system files or exfiltrating data, and it requires marking unknown fields rather than guessing.
✓
Install Mechanism
No install spec and no code files are included (instruction-only), which minimizes on-disk risk. The references recommend using official registry tooling or a temporary review location before writing files.
✓
Credentials
No environment variables, credentials, or special config paths are requested. Network access to registries is implied and appropriate for the skill's purpose.
✓
Persistence & Privilege
always:false and user-invocable:true (normal). The skill does not request permanent presence or modification of other skills' configurations; installation actions are gated behind explicit user approval.
Assessment
This skill appears coherent and low-risk because it is instruction-only and enforces a review-first workflow. Before using it, confirm which trusted sources (e.g., exact GitHub repos or ClawHub slugs) it will query, insist on explicit approval for any install/update, and manually review downloaded files before allowing writes or execution. Be cautious if a candidate requests additional credentials, elevated privileges, or runs opaque installers — those would be outside this skill's stated scope.

Like a lobster shell, security has layers — review code before you run it.

latestvk971exbgwjbw0xj9xbb3y0nm8n844tnh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments