功能描述

Self-hosted RAG engine with hybrid semantic and keyword search, document ingestion, local privacy, and seamless OpenClaw integration via Docker.

使用说明 (SKILL.md)

ClawRAG Connector

Name: ClawRAG - Self-hosted RAG & Memory
Author: 2dogsandanerd

The Brain for OpenClaw - Self-hosted RAG engine with hybrid search.

⚠️ This skill requires Docker. It connects OpenClaw to your local ClawRAG instance.

What is ClawRAG?

Production-ready RAG infrastructure that keeps your data local:

🔒 Privacy-first: Vector DB runs on your machine
🔍 Hybrid Search: Semantic + Keyword (BM25) + RRF ranking
📄 Smart Ingestion: PDFs, Office docs, Markdown via Docling
🧠 MCP-native: Seamless OpenClaw integration

Installation

Step 1: Start ClawRAG (Docker)

git clone https://github.com/2dogsandanerd/ClawRag.git
cd ClawRag
cp .env.example .env
docker compose up -d

Wait for http://localhost:8080/health to return OK.

Step 2: Connect OpenClaw

openclaw mcp add --transport stdio clawrag npx -y @clawrag/mcp-server

Verification

Test your setup:

curl http://localhost:8080/api/v1/rag/collections

Features

Capability	Description
Document Upload	PDF, DOCX, TXT, MD via API or folder
Hybrid Query	Vector similarity + keyword matching
Citations	Source tracking for all answers
Multi-Collection	Organize knowledge by project

Requirements

Docker + Docker Compose
4GB+ RAM (8GB recommended for local LLM)
Or: OpenAI/Anthropic API key for cloud LLM

Architecture

OpenClaw ◄──MCP──► @clawrag/mcp-server ◄──HTTP──► ClawRAG API (localhost:8080)
                                           │
                                           ▼
                                    ┌─────────────┐
                                    │  ChromaDB   │
                                    │  (vectors)  │
                                    └─────────────┘

Links

📚 Full Docs: https://github.com/2dogsandanerd/ClawRag#readme
🔧 API Reference: http://localhost:8080/docs (when running)
🐛 Issues: https://github.com/2dogsandanerd/ClawRag/issues
📦 MCP Package: https://www.npmjs.com/package/@clawrag/mcp-server

Metadata für ClawHub-Upload:

Feld	Wert
Slug	`clawrag`
Display name	`ClawRAG - Self-hosted RAG & Memory`
Version	`1.2.0`
Tags	`rag`, `vector`, `memory`, `search`, `documents`, `self-hosted`, `privacy`, `mcp`, `local-ai`

Changelog für Version 1.2.0

1.2.0 - Initial ClawHub Release

Connector skill for OpenClaw integration
MCP server support (@clawrag/mcp-server v1.1.0)
Docker-first deployment
Hybrid search (Vector + BM25)

安全使用建议

This connector is plausible for a self‑hosted RAG setup, but take these precautions before installing: - Expect to run Docker and docker‑compose; the skill metadata failed to list Docker as a requirement. Don't run it on a critical host without isolation. - The instructions clone a personal GitHub repo and call npx to fetch a package — review the repository and the npm package code, or inspect the package contents locally, before executing. npx will run code fetched from npm. - Check the .env.example file (do not blindly copy secrets). The skill mentions OpenAI/Anthropic API keys which are sensitive; only provide keys if you understand why they're needed and consider using limited/rotated keys. - Inspect which Docker images the compose file pulls; untrusted images can execute arbitrary code on your machine. Prefer running in a sandboxed VM or dedicated host. - Verify the project’s maintainer reputation, GitHub commit history, and npm package versions (avoid unpublished or unverified packages if possible). If you want a lower‑risk path: deploy to an isolated environment, audit the repo and docker compose YAML, and supply only the minimal credentials required.

功能分析

Type: OpenClaw Skill Name: clawrag Version: 1.2.0 The skill bundle is classified as suspicious due to its reliance on fetching and executing external code from various sources. The `SKILL.md` instructs the AI agent/user to perform `git clone` from a GitHub repository (github.com/2dogsandanerd/ClawRag.git), execute `docker compose up -d` which pulls and runs Docker images, and run `npx @clawrag/mcp-server` to install and execute an npm package. While these actions are plausibly needed for the stated purpose of setting up a local RAG service, they introduce a significant supply chain risk as the integrity of these external dependencies (GitHub repo, Docker images, npm package) cannot be guaranteed by the skill bundle itself. There is no clear evidence of intentional malicious behavior within the provided files, nor any prompt injection attempts to subvert the agent's core function.

能力评估

ℹ Purpose & Capability

The SKILL.md describes a ClawRAG connector (self‑hosted RAG via Docker, an MCP server) which aligns with the skill name. However the registry metadata provides no description and omits expected requirements (Docker, docker-compose). This mismatch is an authoring/metadata gap rather than an obvious functional mismatch.

✓ Instruction Scope

Instructions are narrowly scoped to: clone a GitHub repo, copy .env.example -> .env, run docker compose, add an MCP via npx, and verify the local HTTP health endpoint. They do not instruct reading unrelated host files or exfiltrating data, but they do require executing network‑fetched code and running containers on the host.

⚠ Install Mechanism

There is no formal install spec, but runtime steps fetch code from a personal GitHub repo (https://github.com/2dogsandanerd/ClawRag.git), run docker compose (images unspecified), and invoke npx to fetch @clawrag/mcp-server from npm. Those are legitimate for this purpose but involve running unreviewed third‑party code and container images — higher risk than an instruction‑only skill that uses only built‑in tooling.

⚠ Credentials

Registry metadata declares no required environment variables, but SKILL.md states you may need OpenAI/Anthropic API keys (and creates a .env from .env.example). This is an inconsistency: the skill may require sensitive API keys and environment configuration that are not declared in metadata, so users might be surprised to need to provide secrets.

✓ Persistence & Privilege

The skill does not request always:true and does not claim to modify other skills or system settings. It does ask you to register an MCP connector via openclaw mcp add (expected for its purpose). Autonomous invocation is allowed (platform default) but not a new privilege here.

版本历史

v1.2.0

ClawRAG Connector 1.2.0 – Initial ClawHub release. - Adds OpenClaw connector skill for local, privacy-first RAG infrastructure. - Integrates MCP server support via @clawrag/mcp-server. - Supports Docker-based deployment. - Enables hybrid search (semantic + BM25) and smart ingestion of common document formats.

元数据

Slug clawrag

版本 1.2.0

许可证 —

累计安装 8

当前安装数 8

历史版本数 1

常见问题

ClawRAG - Self-hosted RAG & Memory 是什么？

Self-hosted RAG engine with hybrid semantic and keyword search, document ingestion, local privacy, and seamless OpenClaw integration via Docker. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1549 次。

如何安装 ClawRAG - Self-hosted RAG & Memory？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawrag」即可一键安装，无需额外配置。

ClawRAG - Self-hosted RAG & Memory 是免费的吗？

是的，ClawRAG - Self-hosted RAG & Memory 完全免费（开源免费），可自由下载、安装和使用。

ClawRAG - Self-hosted RAG & Memory 支持哪些平台？

ClawRAG - Self-hosted RAG & Memory 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 ClawRAG - Self-hosted RAG & Memory？

由 2dogsandanerd（@2dogsandanerd）开发并维护，当前版本 v1.2.0。

ClawRAG - Self-hosted RAG & Memory