← Back to Skills Marketplace
323
Downloads
1
Stars
2
Active Installs
20
Versions
Install in OpenClaw
/install skill-downloader
Description
Discover, compare, review, install, or update OpenClaw skills from trusted sources with a review-first workflow. Use when the user wants to search for a skil...
Usage Guidance
This skill appears coherent and low-risk because it is instruction-only and enforces a review-first workflow. Before using it, confirm which trusted sources (e.g., exact GitHub repos or ClawHub slugs) it will query, insist on explicit approval for any install/update, and manually review downloaded files before allowing writes or execution. Be cautious if a candidate requests additional credentials, elevated privileges, or runs opaque installers — those would be outside this skill's stated scope.
Capability Analysis
Type: OpenClaw Skill
Name: skill-downloader
Version: 0.1.20
The skill-downloader bundle provides a structured, safety-oriented workflow for searching, inspecting, and installing OpenClaw skills. The instructions in SKILL.md and references/advanced-workflows.md emphasize a 'review-first' approach, requiring explicit user approval before any file writes and mandating the disclosure of missing metadata. No evidence of malicious intent, data exfiltration, or prompt-injection attacks was found; the skill's capabilities are aligned with its stated purpose of managing skill installations from trusted sources like ClawHub and GitHub.
Capability Assessment
Purpose & Capability
Name/description match the instructions: discovery, inspection, comparison, and review-first installation of skills from trusted sources (ClawHub, GitHub, skills.sh). The declared requirements (none) are proportional to the stated purpose.
Instruction Scope
SKILL.md limits actions to searching trusted sources, inspecting candidate files/metadata, and asking for explicit user approval before writing files. It does not instruct reading unrelated system files or exfiltrating data, and it requires marking unknown fields rather than guessing.
Install Mechanism
No install spec and no code files are included (instruction-only), which minimizes on-disk risk. The references recommend using official registry tooling or a temporary review location before writing files.
Credentials
No environment variables, credentials, or special config paths are requested. Network access to registries is implied and appropriate for the skill's purpose.
Persistence & Privilege
always:false and user-invocable:true (normal). The skill does not request permanent presence or modification of other skills' configurations; installation actions are gated behind explicit user approval.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-downloader - After installation, invoke the skill by name or use
/skill-downloader - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.20
Simplify README and SKILL guidance, move low-level workflow details into references, reduce high-risk wording, and tighten inspect behavior to reduce unsupported inference.
v0.1.19
Added mandatoryWorkflow, parallel multi-source search, information completeness levels, search degraded mode, file-based install for skills.sh
v0.1.17
Remove source metadata from docs and skill output guidance
v0.1.16
Align README with the skill workflow, clarify ClawHub CLI preference, and document comparison-based search results with ranking evidence and unknown markers.
v0.1.15
Clarify search-only output requirements, recommendation format, and ClawHub CLI preference for ClawHub-hosted skills.
v0.1.14
Improve audit-friendliness by emphasizing discovery, review, and user-approved installation wording.
v0.1.13
Keep original SKILL.md semantics and apply README-only safety clarification.
v0.1.12
Clarify review-first workflow, emphasize explicit approval and source inspection, and reduce automatic-installer framing.
v0.1.11
Version 0.1.11 of skill-downloader
- Added explicit version number, author, trust score, and category fields to SKILL.md.
- Introduced a permissions section specifying required capabilities: file read/write, network access, and shell execution.
- No changes to core logic, workflows, or source handling.
- Updated skill manifest for greater transparency and trustworthiness.
v0.1.10
Align display name and installation wording for cleaner metadata consistency
v0.1.9
Prefer official ClawHub install workflow, tighten metadata consistency, and replace fixed temp path with unique per-run temp handling
v0.1.8
Remove npx fallback and make manual source review the baseline security workflow
v0.1.7
Clarify trust model, source metadata, and fallback-only npx usage
v0.1.6
Prioritize ClawHub over skills.sh for skill downloads
v0.1.5
- Added support for both search-only queries ("find", "search for", "is there a skill") and explicit download/install requests—now handles Skill discovery and installation in two modes.
- Introduced a "triggers" field for user intent detection in multiple languages, supporting commands like "search", "find", "下载技能", etc.
- Updated documentation to clarify the two operation modes: Mode A (search/browse) and Mode B (download/install).
- No core functionality changes to skill discovery, security checks, or installation workflow.
- Improved clarity for user prompts and installation flow in the SKILL.md.
v0.1.4
- Removed mention of skill-scanner and skill-vetting from the compatibility requirements.
- No behavioral changes to the documented workflow, install logic, or examples.
- Compatibility section now only lists git, curl, and Node.js/npm.
v0.1.3
- Switched default security check from using external skills (skill-scanner and skill-vetting) to an automatic internal scan of code and documentation for sensitive or malicious content before installation.
- Installation now aborts and informs the user if any evidence of secret exfiltration, destructive commands, or obfuscated/malicious code is detected.
- Requests for additional third-party scanning via skill-scanner and skill-vetting are now only run if explicitly requested by the user.
- Updated documentation to clarify new security workflow and make internal review the default safety mechanism.
v0.1.2
- Added rules to preserve user-generated data and configuration when updating existing skills.
- Updated the installation/update workflow to only overwrite existing source files, leaving user/data files untouched.
- Clarified update messaging to inform users that their data has been preserved along with backup details.
v0.1.1
- Add detection for existing skill installations; prompt user to update if skill is already present.
- Introduce update workflow: backup current version, remove old files, install new version, and inform user of backup location.
- Add post-installation prompt offering to summarize the new skill’s functions and usage by reading its SKILL.md.
- Clarify installation/update distinction and user notifications in the workflow.
v0.1.0
Initial release of skill-downloader.
- Enables secure downloading and installation of OpenClaw skills from trusted sources (skills.sh, ClawHub, and GitHub).
- Integrates security checks using skill-scanner and skill-vetting before installation; aborts on detected risks.
- Supports both global and local (workspace) installation modes, following strict directory rules.
- Handles multiple search results with informative lists and recommendations.
- Provides clear user interaction flow: confirms download intent, suggests sources, and explains installation outcomes.
Metadata
Frequently Asked Questions
What is Skill Downloader?
Discover, compare, review, install, or update OpenClaw skills from trusted sources with a review-first workflow. Use when the user wants to search for a skil... It is an AI Agent Skill for Claude Code / OpenClaw, with 323 downloads so far.
How do I install Skill Downloader?
Run "/install skill-downloader" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Downloader free?
Yes, Skill Downloader is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Downloader support?
Skill Downloader is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Downloader?
It is built and maintained by Y@ng (@yyang100); the current version is v0.1.20.
More Skills