Skills Auto Manager

自动管理 OpenClaw skills 的智能助手：定期检查更新、浏览 ClawHub 市场、智能推荐并安全安装有用的 skills

This skill appears to do what it says: discover, score, and (optionally) install skills. Key things to consider before installing: 1) Review and edit config.json: set auto_install_low_risk to false if you want all installs to require manual confirmation. 2) Inspect and approve any cron job it creates (schedule and session target). 3) Check reports and install logs (memory/ and logs/) after runs to verify actions. 4) Because it can install other skills, always review recommended skills (and their requested permissions) before allowing automated installs. 5) Although the skill itself has no requested secrets or downloads, the manager will interact with other skills that may require API keys — treat those on a per-skill basis. If you want lower risk, keep the skill manual (disable cron) and require confirmations for all installs.

Type: OpenClaw Skill Name: skills-auto-manager Version: 1.0.0 The skills-auto-manager bundle is a legitimate automation tool designed to manage the OpenClaw skill ecosystem. It provides logic for the agent to check for updates, browse the ClawHub marketplace, and recommend or install skills based on a user's profile (e.g., quantitative trading). Key safety features include a risk-assessment framework in 'implementation.md' that distinguishes between low-risk (auto-installable) and high-risk (manual confirmation required) skills, as well as automated backups before installation. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.