← Back to Skills Marketplace
7203
Downloads
6
Stars
60
Active Installs
3
Versions
Install in OpenClaw
/install clawdex
Description
Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe.
Usage Guidance
Before installing, be comfortable with the skill checking your installed skill names and querying an external Clawdex/Koi security service for verdicts. Treat its results as advisory and review unknown or risky skills before approving any follow-up action.
Capability Analysis
Type: OpenClaw Skill
Name: clawdex
Version: 1.0.2
The OpenClaw AgentSkills skill bundle 'clawdex' is designed to perform security checks on other ClawHub skills. Its primary function involves making `curl` requests to `https://clawdex.koi.security/api/skill/SKILL_NAME` to retrieve a security verdict, which is consistent with its stated purpose. It also uses `ls` to list installed skills in `~/.openclaw/skills/` or `~/.clawdbot/skills/` for auditing. While the `SKILL.md` contains instructions for the AI agent (e.g., to inform the user or seek approval for 'unknown' skills), these are security-positive directives that align with the skill's function and do not constitute malicious prompt injection. There is no evidence of data exfiltration, malicious execution, persistence, or other harmful behaviors.
Capability Assessment
Purpose & Capability
The described behavior, querying a Clawdex security endpoint for a skill verdict and listing installed skills for audit, fits the stated purpose of checking other skills.
Instruction Scope
The runtime instructions are limited to security review behavior such as informing the user and seeking approval for unknown skills; no hidden override, role-change, or unrelated agent control behavior was identified.
Install Mechanism
Available metadata and scanner evidence do not show post-install hooks, package execution, dependency abuse, or installation-time mutation beyond normal skill installation.
Credentials
The skill may inspect local installed-skill directories under ~/.openclaw/skills/ or ~/.clawdbot/skills/ and send requested skill names to an external verdict API; this is proportionate for auditing but should be understood by users.
Persistence & Privilege
No evidence was provided of persistence, privilege escalation, credential access, destructive file changes, or background execution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install clawdex - After installation, invoke the skill by name or use
/clawdex - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Updated skill name and description to reference "Koi" instead of "Koi Security."
- Changed "About Koi Security" section title to "About Koi" and updated the description, mentioning that Clawdex verdicts are powered by Wings, the agentic AI risk engine.
- Minor rewording throughout documentation for consistency and clarity.
v1.0.1
- No changes detected in this version.
- Version number updated to 1.0.1.
v1.0.0
Initial release of the Clawdex skill.
- Provides a security check for ClawHub skills using the Clawdex API.
- Returns a verdict ("benign", "malicious", or "unknown") to help users decide if a skill is safe to install.
- Guides users on interpreting verdicts and next steps for each case.
- Includes instructions for auditing already-installed skills for potential threats.
- Developed by Koi Security.
Metadata
Frequently Asked Questions
What is Clawdex by Koi?
Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe. It is an AI Agent Skill for Claude Code / OpenClaw, with 7203 downloads so far.
How do I install Clawdex by Koi?
Run "/install clawdex" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Clawdex by Koi free?
Yes, Clawdex by Koi is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Clawdex by Koi support?
Clawdex by Koi is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Clawdex by Koi?
It is built and maintained by wearekoi (@wearekoi); the current version is v1.0.2.
More Skills