← 返回 Skills 市场
7203
总下载
6
收藏
60
当前安装
3
版本数
在 OpenClaw 中安装
/install clawdex
功能描述
Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe.
安全使用建议
Before installing, be comfortable with the skill checking your installed skill names and querying an external Clawdex/Koi security service for verdicts. Treat its results as advisory and review unknown or risky skills before approving any follow-up action.
功能分析
Type: OpenClaw Skill
Name: clawdex
Version: 1.0.2
The OpenClaw AgentSkills skill bundle 'clawdex' is designed to perform security checks on other ClawHub skills. Its primary function involves making `curl` requests to `https://clawdex.koi.security/api/skill/SKILL_NAME` to retrieve a security verdict, which is consistent with its stated purpose. It also uses `ls` to list installed skills in `~/.openclaw/skills/` or `~/.clawdbot/skills/` for auditing. While the `SKILL.md` contains instructions for the AI agent (e.g., to inform the user or seek approval for 'unknown' skills), these are security-positive directives that align with the skill's function and do not constitute malicious prompt injection. There is no evidence of data exfiltration, malicious execution, persistence, or other harmful behaviors.
能力评估
Purpose & Capability
The described behavior, querying a Clawdex security endpoint for a skill verdict and listing installed skills for audit, fits the stated purpose of checking other skills.
Instruction Scope
The runtime instructions are limited to security review behavior such as informing the user and seeking approval for unknown skills; no hidden override, role-change, or unrelated agent control behavior was identified.
Install Mechanism
Available metadata and scanner evidence do not show post-install hooks, package execution, dependency abuse, or installation-time mutation beyond normal skill installation.
Credentials
The skill may inspect local installed-skill directories under ~/.openclaw/skills/ or ~/.clawdbot/skills/ and send requested skill names to an external verdict API; this is proportionate for auditing but should be understood by users.
Persistence & Privilege
No evidence was provided of persistence, privilege escalation, credential access, destructive file changes, or background execution.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install clawdex - 安装完成后，直接呼叫该 Skill 的名称或使用
/clawdex触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Updated skill name and description to reference "Koi" instead of "Koi Security."
- Changed "About Koi Security" section title to "About Koi" and updated the description, mentioning that Clawdex verdicts are powered by Wings, the agentic AI risk engine.
- Minor rewording throughout documentation for consistency and clarity.
v1.0.1
- No changes detected in this version.
- Version number updated to 1.0.1.
v1.0.0
Initial release of the Clawdex skill.
- Provides a security check for ClawHub skills using the Clawdex API.
- Returns a verdict ("benign", "malicious", or "unknown") to help users decide if a skill is safe to install.
- Guides users on interpreting verdicts and next steps for each case.
- Includes instructions for auditing already-installed skills for potential threats.
- Developed by Koi Security.
元数据
常见问题
Clawdex by Koi 是什么？
Security check for ClawHub skills powered by Koi. Query the Clawdex API before installing any skill to verify it's safe. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 7203 次。
如何安装 Clawdex by Koi？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawdex」即可一键安装，无需额外配置。
Clawdex by Koi 是免费的吗？
是的，Clawdex by Koi 完全免费（开源免费），可自由下载、安装和使用。
Clawdex by Koi 支持哪些平台？
Clawdex by Koi 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Clawdex by Koi？
由 wearekoi（@wearekoi）开发并维护，当前版本 v1.0.2。
推荐 Skills