← Back to Skills Marketplace
94
Downloads
2
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install tuhucar-knowledge-assistant
Description
Use when answering car maintenance, service interval, oil, brake fluid, tire pressure, or ownership questions through the TuhuCar CLI knowledge gateway.
Usage Guidance
This skill is coherent and only delegates work to a local 'tuhucar' CLI which will make network requests to its configured endpoint. Before installing or using it: 1) verify you trust the tuhucar CLI package (inspect the GitHub repo and npm/brew package history); 2) confirm the binary you run is the official one (check checksums or installed path); 3) be cautious about TUHUCAR_ENDPOINT — do not set it to an untrusted server, since that would send your queries there; 4) review ~/.tuhucar/config.toml before initializing the config; and 5) when in doubt run commands with --dry-run and prefer the here-doc pattern shown to avoid shell-injection risks.
Capability Analysis
Type: OpenClaw Skill
Name: tuhucar-knowledge-assistant
Version: 0.0.3
The skill is a legitimate wrapper for the TuhuCar CLI, designed to provide car maintenance information. It demonstrates security awareness by explicitly instructing the AI agent to use quoted heredocs (EOF) to prevent shell injection when handling user-provided text in SKILL.md and command-reference.md. No evidence of data exfiltration, malicious execution, or persistence was found.
Capability Assessment
Purpose & Capability
The skill's name and description match the required binary ('tuhucar') and the SKILL.md instructs calling that CLI to answer car-maintenance questions. Required artifacts (CLI, optional config) are appropriate for the stated purpose.
Instruction Scope
SKILL.md stays on-topic: it instructs building a question, calling the CLI with --format json, parsing data.reply, reusing session_id only per conversation, and not persisting session state. It explicitly warns against interpolating raw user input into shell commands and against modifying ~/.tuhucar/config.toml without approval.
Install Mechanism
This is an instruction-only skill with no install spec or bundled code. It suggests installing the CLI via npm or brew if missing; those recommendations are normal and the skill itself does not download or execute code.
Credentials
The skill does not require credentials or config paths. It does reference the TUHUCAR_ENDPOINT env var (and suggests setting it if config is missing) which is reasonable for an HTTP gateway override — be aware that pointing that env var to an untrusted endpoint would route queries elsewhere.
Persistence & Privilege
The skill does not request always:true and does not ask to change other skills' configs. It recommends not persisting session_id across conversations and not modifying config without user approval.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tuhucar-knowledge-assistant - After installation, invoke the skill by name or use
/tuhucar-knowledge-assistant - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.3
Address ClawHub security scan findings
v0.0.2
Initial ClawHub release
Metadata
Frequently Asked Questions
What is TuhuCar Knowledge Assistant?
Use when answering car maintenance, service interval, oil, brake fluid, tire pressure, or ownership questions through the TuhuCar CLI knowledge gateway. It is an AI Agent Skill for Claude Code / OpenClaw, with 94 downloads so far.
How do I install TuhuCar Knowledge Assistant?
Run "/install tuhucar-knowledge-assistant" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TuhuCar Knowledge Assistant free?
Yes, TuhuCar Knowledge Assistant is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does TuhuCar Knowledge Assistant support?
TuhuCar Knowledge Assistant is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TuhuCar Knowledge Assistant?
It is built and maintained by Fini (@finiking); the current version is v0.0.3.
More Skills