← Back to Skills Marketplace
Skill Safe Install (L0 Strict)
by
1231qaz2wsx
· GitHub ↗
· v1.0.1
· MIT-0
265
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skill-safe-install-l0-strict
Description
Strict secure-install workflow for ClawHub/OpenClaw skills. Use when asked to install a skill safely, inspect skill permissions, review third-party skill ris...
Usage Guidance
This skill appears to do what it says: run clawhub commands, sandbox an install, rate risk, and require explicit consent before writing trust. Before using it: (1) ensure you trust the clawhub CLI on your system (the skill invokes it), (2) be aware it will read your OpenClaw config (~/.openclaw/openclaw.json) even though the registry metadata didn't declare a config path, (3) verify the skill will not perform writes without the explicit ‘yes/install’ consent at Step 4, and (4) if you rely on automated installs, expect this skill to pause for manual confirmation by design. If you want the skill to be fully auditable, test it in a safe environment first and confirm it adheres to the Step 0–6 outputs before using it in production.
Capability Analysis
Type: OpenClaw Skill
Name: skill-safe-install-l0-strict
Version: 1.0.1
The skill is a security-focused utility designed to enforce a strict, multi-step workflow for auditing and safely installing other OpenClaw skills. It mandates risk assessments, sandboxing in isolated directories, and explicit user consent gates before performing installations or modifying configuration files (SKILL.md, clawhub.yaml). No malicious intent, data exfiltration, or unauthorized execution patterns were found.
Capability Assessment
Purpose & Capability
Name, description, and instructions all focus on a secure install workflow. The suggested CLI commands (clawhub search/inspect/install) and sandbox steps are appropriate and proportional to the stated goal.
Instruction Scope
The SKILL.md directs the agent to read the platform config path (~/.openclaw/openclaw.json) to check installed skills and trust state; that behavior is reasonable for a safe-installer skill but the skill's declared metadata lists no required config paths. This is a minor mismatch worth documenting: the instructions do access a user config file even though no config path was declared in the registry metadata.
Install Mechanism
No install spec or code is provided — instruction-only skills have the lowest install risk. There are no download URLs, archives, or external packages being installed by the skill itself.
Credentials
The skill requests no environment variables or credentials. All actions described (inspecting, sandboxing, prompting) are consistent with that. It does not request unrelated secrets or broad access.
Persistence & Privilege
always is false and the workflow explicitly forbids writing persistent config without explicit consent. The skill's guidance includes backup/confirmation steps for any optional trust persistence, which is proportionate.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-safe-install-l0-strict - After installation, invoke the skill by name or use
/skill-safe-install-l0-strict - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Skill-safe-install-l0-strict v1.0.1
- Introduces a strict and auditable workflow for secure installation of ClawHub/OpenClaw skills.
- Enforces mandatory risk review, sandbox verification, and explicit user consent before any install or config modification.
- Blocks all author-based trust shortcuts and implicit config changes; requires step-by-step confirmation.
- Provides clear step-by-step output and refusal conditions to maximize install security and reduce risk.
Metadata
Frequently Asked Questions
What is Skill Safe Install (L0 Strict)?
Strict secure-install workflow for ClawHub/OpenClaw skills. Use when asked to install a skill safely, inspect skill permissions, review third-party skill ris... It is an AI Agent Skill for Claude Code / OpenClaw, with 265 downloads so far.
How do I install Skill Safe Install (L0 Strict)?
Run "/install skill-safe-install-l0-strict" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Safe Install (L0 Strict) free?
Yes, Skill Safe Install (L0 Strict) is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Safe Install (L0 Strict) support?
Skill Safe Install (L0 Strict) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Safe Install (L0 Strict)?
It is built and maintained by 1231qaz2wsx (@1231qaz2wsx); the current version is v1.0.1.
More Skills