← Back to Skills Marketplace
1477
Downloads
2
Stars
9
Active Installs
2
Versions
Install in OpenClaw
/install topclawhubskills
Description
Discover the most popular, newest, and security-certified ClawHub skills via live API data.
Usage Guidance
This skill mostly does what it says: it fetches lists of skills from an external API and formats them. Key things to consider before installing: 1) The API is hosted at topclawhubskills.com (no homepage or owner identity provided). Verify the operator/trustworthiness before sending any sensitive queries. 2) Avoid using the skill with private or confidential prompts because search queries and other context may be sent to the third party in plain GET parameters. 3) The SKILL.md makes unverified claims about its 'certified' label — treat that as the provider's assertion, not a platform guarantee. 4) If you need to minimize risk, test with innocuous queries first, request the skill source or operator contact, or prefer an official ClawHub endpoint or a skill with a published maintainer and code. 5) If you allow autonomous agents, be aware they could call this skill without prompting and thereby transmit data; require explicit user confirmation for network-using skills if possible.
Capability Analysis
Type: OpenClaw Skill
Name: topclawhubskills
Version: 1.1.0
The skill bundle defines an agent skill to query an external API (`https://topclawhubskills.com/api`) for information about ClawHub skills (downloads, stars, new, certified, deleted, search, stats, health). The `SKILL.md` instructions are clear, well-defined, and solely focus on fetching and formatting this public data. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The external API call is a standard and expected function for such a skill, and the instructions do not encourage any harmful interaction with it beyond retrieving data.
Capability Assessment
Purpose & Capability
Name/description (discover popular/new/security-certified ClawHub skills) match the instructions: the SKILL.md describes endpoints that return skill listings. However the API is hosted at topclawhubskills.com (not an official clawhub.ai domain). Using an external aggregator is reasonable, but the domain and lack of publisher/homepage mean the data source/operator are not verified.
Instruction Scope
The runtime instructions tell the agent to issue HTTP GETs (including free-text search queries) to the external API and to always include returned ClawHub links. There is no warning about what user-provided search terms may contain, or any limit/rate/privacy guidance. If the agent sends sensitive information (search q parameter or other user context) it will be transmitted to an unvetted third party. The instructions do not ask to read local files or environment variables, which is good, but they do permit sending arbitrary text externally.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is low-risk from a disk/execution perspective — nothing is written to disk by an installer.
Credentials
The skill requests no environment variables or credentials (proportionate). However, the skill's operation depends on network calls to an external API; those calls may include user queries or other context and therefore can leak secrets or private data even without requesting credentials. Also the SKILL.md asserts that 'certified' skills have been through advanced screening — this is an unverifiable trust claim from the external provider.
Persistence & Privilege
The skill does not request always:true and does not persist configuration. Autonomous invocation is enabled (platform default). That by itself is normal, but autonomous use combined with an untrusted external API increases risk of unintended data exfiltration if the agent calls the skill without user oversight.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install topclawhubskills - After installation, invoke the skill by name or use
/topclawhubskills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
**Support for deleted ClawHub skills and related statistics.**
- Added `/api/deleted` endpoint to list previously removed skills, including deletion info.
- All skill responses now include `is_deleted` and `deleted_at` fields.
- Aggregate stats now report deleted skill count.
- Example queries and documentation updated to cover deleted skills.
v1.0.0
Initial release of Top ClawHub Skills.
- Discover the most popular, newest, and security-certified ClawHub skills via a live API.
- Supports endpoints for top downloads, top stars, new skills, certified skills, search, and aggregate platform statistics.
- Real-time data presentation with formatted Markdown tables and direct install links.
- Security-certified skills highlighted with clear messaging about ClawHub's verification process.
- Designed for macOS, Linux, and Windows platforms.
Metadata
Frequently Asked Questions
What is Top ClawHub Skills?
Discover the most popular, newest, and security-certified ClawHub skills via live API data. It is an AI Agent Skill for Claude Code / OpenClaw, with 1477 downloads so far.
How do I install Top ClawHub Skills?
Run "/install topclawhubskills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Top ClawHub Skills free?
Yes, Top ClawHub Skills is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Top ClawHub Skills support?
Top ClawHub Skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Top ClawHub Skills?
It is built and maintained by sdrabent (@sdrabent); the current version is v1.1.0.
More Skills