CHIS/CHISF
ReviewAudited by ClawScan on May 10, 2026.
Overview
This skill is a Review item because it helps an agent force-install or overwrite other skills, including packages flagged as suspicious, and references an unreviewed local fallback installer.
Install this only if you intentionally want the agent to manage OpenClaw skill installation. Before using `chisf` or any `--force` path, manually inspect the target skill, confirm the workdir is yours, and verify or avoid the external fallback installer.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent or user could install or overwrite a skill that ClawHub has flagged for review, changing the agent's behavior in future sessions.
The skill explicitly frames force-install as appropriate for suspicious or overwrite-required packages, which can bypass normal safety friction for high-impact changes to the agent's installed skills.
Use this when: - package is flagged as suspicious - overwrite behavior is required
Require explicit user approval before any install or force-install, run and review `clawhub inspect` first, and avoid using force for suspicious packages unless the user has deliberately accepted the risk.
Users cannot verify from these artifacts what the fallback installer does before it installs or force-installs another skill.
The skill recommends an external local installer that is not included in the manifest, not declared as a required binary, and may be used with `--force` to install skills.
use the local fallback installer: `/Users/zququ/.local/bin/clawhub-install-safe --force <slug> <workdir>`
Remove the fallback installer instruction or include its source, checksum/provenance, and clear approval requirements; prefer the reviewed `clawhub inspect` and `clawhub install` workflow.