← Back to Skills Marketplace
Clawhub
by
sreejith77
· GitHub ↗
· v1.1.1
4545
Downloads
2
Stars
45
Active Installs
3
Versions
Install in OpenClaw
/install skill-installer
Description
Install, search, update, and manage skills from ClawHub (the public OpenClaw skill registry). Use when the user wants to install a skill by slug (e.g. "clawh...
Usage Guidance
Install only if you trust ClawHub and the npm `clawhub` CLI. Confirm any global CLI installation yourself, review third-party skills before enabling them, and be careful with `update --all` because installed skills persist and can affect future OpenClaw sessions.
Capability Analysis
Type: OpenClaw Skill
Name: skill-installer
Version: 1.1.1
The skill is designed to manage other OpenClaw skills using an external `clawhub` CLI tool. It instructs the agent to execute shell commands like `cd`, `which`, `npm i -g clawhub`, and various `clawhub` subcommands. While the `SKILL.md` explicitly states 'Do not auto-install without user confirmation' for `npm i -g clawhub`, the 'Workflow' section later instructs the agent to 'install if missing' without reiterating the need for user confirmation. This ambiguity presents a prompt-injection vulnerability, as a less robust agent might auto-install a global package without user consent. The reliance on an external CLI and the execution of powerful commands like `npm i -g` with user-provided input (e.g., `<slug>`) also introduce potential shell injection risks if the `clawhub` CLI itself is vulnerable or if the agent mishandles input, classifying it as suspicious rather than benign due to these risky capabilities and instruction ambiguities.
Capability Assessment
Purpose & Capability
The stated purpose is to search, install, update, and manage ClawHub skills, and the documented commands match that purpose.
Instruction Scope
The skill includes broad actions such as installing a skill and updating all installed skills, but they are presented as user-directed commands rather than hidden automation.
Install Mechanism
It depends on the external global `clawhub` npm CLI and shows `npm i -g clawhub`; the artifact also says to ask the user to install it manually and not auto-install without confirmation.
Credentials
Managing files under `~/.openclaw/workspace/skills` is proportionate to a skill manager, but it can change future agent behavior.
Persistence & Privilege
Installed workspace skills persist across sessions and take precedence over other skills; this persistence is disclosed in the artifact.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-installer - After installation, invoke the skill by name or use
/skill-installer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
Fix: removed undeclared env var, require user confirmation before npm install
v1.1.0
Added WhatsApp install instructions
v1.0.0
Initial release of the ClawHub Skill Manager.
- Enables searching, installing, updating, and managing OpenClaw skills via the public ClawHub registry using the `clawhub` CLI.
- Provides command examples for installing, searching, updating, and listing skills.
- Includes workflow guidance and important notes on security and skill precedence.
- Requires the `clawhub` CLI (installable via npm if not present).
Metadata
Frequently Asked Questions
What is Clawhub?
Install, search, update, and manage skills from ClawHub (the public OpenClaw skill registry). Use when the user wants to install a skill by slug (e.g. "clawh... It is an AI Agent Skill for Claude Code / OpenClaw, with 4545 downloads so far.
How do I install Clawhub?
Run "/install skill-installer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Clawhub free?
Yes, Clawhub is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Clawhub support?
Clawhub is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Clawhub?
It is built and maintained by sreejith77 (@sreejith77); the current version is v1.1.1.
More Skills