← Back to Skills Marketplace
Trusted ClawHub Install Gate
by
Zakhar Pashkin
· GitHub ↗
· v0.2.0
· MIT-0
34
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install trusted-clawhub-install-gate
Description
Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, and optionally run the clawhub-install-gate CLI...
README (SKILL.md)
Trusted ClawHub Install Gate
Use this skill when a user wants to inspect a local skill artifact before install.
Workflow:
- Run
clawhub-install-gate inspect \x3Cpath>first. - Explain the findings.
- Do not install on
BLOCK. - Only install on
REVIEWafter explicit user approval. - Use
clawhub-install-gate verify \x3Cinstalled-path>after install when requested. - Use
clawhub-install-gate usagewhen the user asks to track install or REVIEW override usage on this machine.
Review policy:
- Treat the verdict as an Auto-review-style boundary decision, not a permission grant.
BLOCKcovers private-data transmission, secret-store probing, broad security weakening, denial circumvention, and destructive actions.- If a risky action is denied, do not route around it; choose a materially safer path or stop for user decision.
Usage Guidance
This appears safe to use as a review helper if you trust the local clawhub-install-gate CLI. Before installing any reviewed skill, read the PASS/REVIEW/BLOCK explanation and only approve REVIEW installs when you understand the risk.
Capability Analysis
Type: OpenClaw Skill
Name: trusted-clawhub-install-gate
Version: 0.2.0
The skill bundle describes a security auditing tool designed to inspect and verify local OpenClaw skills before installation. The instructions in SKILL.md and agents/openai.yaml focus on defensive workflows, such as blocking artifacts flagged as high-risk and requiring user approval for reviewed items. No malicious code, exfiltration logic, or harmful prompt injections are present in the provided files.
Capability Assessment
Purpose & Capability
The stated purpose is to inspect local skill directories and optionally install them after review; that is coherent with the commands described, but installation is a high-impact action users should approve deliberately.
Instruction Scope
The workflow is bounded: inspect first, explain findings, do not install BLOCK results, and require explicit approval for REVIEW installs.
Install Mechanism
The skill is instruction-only and requires a pre-existing local binary, clawhub-install-gate. The binary itself is not included in the artifacts, so its provenance is outside this review.
Credentials
The documented actions are limited to user-provided local skill paths, installed paths for verification, and local usage tracking on request.
Persistence & Privilege
No background persistence or autonomous long-running behavior is shown. Optional receipts and usage tracking are disclosed and user-requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install trusted-clawhub-install-gate - After installation, invoke the skill by name or use
/trusted-clawhub-install-gate - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Add Auto-review-aligned blocks and local receipt usage tracking.
Metadata
Frequently Asked Questions
What is Trusted ClawHub Install Gate?
Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, and optionally run the clawhub-install-gate CLI... It is an AI Agent Skill for Claude Code / OpenClaw, with 34 downloads so far.
How do I install Trusted ClawHub Install Gate?
Run "/install trusted-clawhub-install-gate" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Trusted ClawHub Install Gate free?
Yes, Trusted ClawHub Install Gate is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Trusted ClawHub Install Gate support?
Trusted ClawHub Install Gate is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Trusted ClawHub Install Gate?
It is built and maintained by Zakhar Pashkin (@zack-dev-cm); the current version is v0.2.0.
More Skills