Skill Dependencies

Track and manage dependencies between OpenClaw skills. Scan skills for dependencies, visualize skill trees, detect circular dependencies, and manage skill versioning. Use when analyzing skill relationships, checking which skills depend on others, or managing skill installations.

This skill appears to do what it says (scan skill directories, show dependency trees, and help install from ClawHub). Before installing or running the scripts: 1) Inspect the scripts locally (they are plain shell) and ensure you are comfortable running them. 2) Ensure required tools are available (curl and jq are used; openclaw or clawhub CLIs are optional but referenced). The metadata did not declare these dependencies — that mismatch can cause failures. 3) Be aware skill-install.sh makes network requests to https://clawhub.com/api to fetch metadata; verify that endpoint is trusted in your environment. 4) Run in a sandbox or non-critical environment first (these scripts will call system-installed CLIs and may prompt you to run install commands). If you need higher assurance, ask the author for source/origin and a declared list of required binaries (curl, jq, any CLI tool) before use.

Type: OpenClaw Skill Name: skill-deps Version: 1.0.0 The skill bundle is designed for dependency management, including installing skills from a remote registry. The `scripts/skill-install.sh` file makes network calls to `clawhub.com` to fetch skill metadata and then invokes `openclaw skill install` or `clawhub install` to download and install skills. While these actions are aligned with the stated purpose of a dependency management skill, installing remote code from an external registry (clawhub.com) is a high-risk operation, classifying it as 'suspicious' due to risky capabilities without clear malicious intent. No evidence of intentional harmful behavior like data exfiltration or persistence was found.