← 返回 Skills 市场
saba-ch

Clawstore

作者 Saba Tchikhinashvili · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
100
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install clawstore
功能描述
Search, install, and publish OpenClaw agent packages from the Clawstore registry. Use when the user wants to find agents, install them, or publish their own.
使用说明 (SKILL.md)

Clawstore is the package manager for OpenClaw agents. Use the clawstore CLI to search, install, and publish agent packages from the registry at useclawstore.com.

Prerequisites

The CLI must be installed globally:

npm install -g clawstore

Verify with clawstore --version.

When to use this skill

  • User asks to find, discover, or browse AI agents → use search
  • User asks to install or add an agent → use install
  • User asks to publish or share their agent → use publish flow
  • User asks what agents they have → use list
  • User asks to update agents → use update
  • User asks to create a new agent package → use init

Commands

Search for agents

clawstore search "productivity"
clawstore search "code review"

Returns a list of matching agents with scope, name, and description.

Get agent details

clawstore info @scope/agent-name

Shows the full description, version, download count, rating, and category.

Install an agent

# Latest version
clawstore install @scope/agent-name

# Specific version
clawstore install @scope/[email protected]

Downloads the agent package and sets it up in the local OpenClaw workspace.

List installed agents

clawstore list

Shows all locally installed agents with their versions and update policies.

Check for updates

clawstore update

Checks the registry for newer versions of installed agents.

Authenticate

clawstore login

Opens a browser-based GitHub OAuth flow. Required before publishing.

Create a new agent package

clawstore init

Scaffolds agent.json and the recommended directory structure:

my-agent/
├── agent.json          # Package manifest
├── app/
│   ├── IDENTITY.md     # Agent persona
│   ├── AGENTS.md       # Capabilities
│   ├── SOUL.md         # Personality
│   └── knowledge/      # Reference files
└── store/
    ├── icon.png        # Store icon (256x256 PNG)
    └── screenshots/    # Store listing images

Validate a package

clawstore validate

Checks that agent.json is valid and the package structure is correct. Always run before publishing.

Preview a tarball

clawstore pack

Builds the tarball without publishing. Useful for inspecting what will be uploaded.

Publish

clawstore publish
# or from a specific directory
clawstore publish ./path/to/agent

Uploads the agent package to the Clawstore registry. Requires clawstore login first.

Yank a version

clawstore yank @scope/[email protected] --reason "critical bug"

Marks a published version as yanked. It won't be installed by default but remains downloadable for existing users.

Guidance

  • Search first: Before recommending an agent, search to see what's available.
  • Check info: Use clawstore info to verify an agent's quality (downloads, rating) before installing.
  • Validate before publish: Always run clawstore validate before clawstore publish to catch issues early.
  • Use init for new packages: Don't hand-write agent.json — use clawstore init to get the correct structure.
  • Login once: Authentication persists across sessions. Only run clawstore login if the user hasn't authenticated yet.
安全使用建议
This skill's functionality is coherent, but exercise caution before running the recommended npm install or logging in: 1) Verify the provenance of the 'clawstore' npm package (npmjs.org page, maintainer, repository link) and confirm the registry URL (useclawstore.com) is legitimate. 2) Prefer inspecting the package repository and its code before a global install; consider installing in a sandbox or using a container. 3) Avoid granting publish/login rights to services you don't trust—check what OAuth scopes are requested during 'clawstore login'. 4) If you plan to publish agents, inspect what the CLI will upload (use 'clawstore pack' and validate) so you don't accidentally publish secrets. 5) Note the SKILL metadata omitted required tooling (npm/cli) — make sure your environment and security policies permit installing and running third-party CLIs.
功能分析
Type: OpenClaw Skill Name: clawstore Version: 0.1.1 The skill bundle provides documentation and instructions for an AI agent to use 'clawstore', a package manager for OpenClaw agents. The SKILL.md file outlines standard package management operations such as searching, installing, and publishing agents via a CLI tool and the useclawstore.com registry. No malicious code, data exfiltration logic, or harmful prompt injection instructions were identified.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
The skill name and description (search, install, publish OpenClaw agents) align with the runtime instructions (clawstore CLI commands: search, install, publish, login, etc.). The flows described (init, validate, pack, publish) are coherent with a package registry manager.
Instruction Scope
Instructions stay within the package-manager domain (scaffolding agent packages, inspecting tarballs, uploading to a registry, and using OAuth login). They reference local package files and the local OpenClaw workspace, which is expected. The instructions do assume the ability to run npm and a browser-based OAuth flow, but do not ask the agent to read unrelated system files or exfiltrate data.
Install Mechanism
Although the skill is instruction-only, SKILL.md tells the user to run 'npm install -g clawstore' (a global npm install). The skill metadata declared no required binaries, which is inconsistent — npm (and the installed CLI) are implicit requirements but not declared. Installing arbitrary third-party packages globally is a moderately high-risk operation if the package or its maintainer are untrusted; the SKILL.md provides no verified source link or guidance for vetting the npm package or its publisher.
Credentials
The skill declares no required env vars or primary credential. The SKILL.md relies on a browser-based GitHub OAuth login for publishing, which is a proportional and typical requirement for a publish flow and does not request hidden environment secrets. It does note that authentication persists across sessions — expected but users should be aware.
Persistence & Privilege
The skill is user-invocable, not always-on, and does not request system-wide configuration changes in its instructions. The only persistence mentioned is the CLI's authentication persistence across sessions (normal for a publish workflow).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawstore
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawstore 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.1
- No changes were made in this version. - The skill, documentation, and all files remain identical to the previous release.
v0.1.0
Initial release of clawstore skill for managing OpenClaw agent packages. - Supports searching, installing, and publishing OpenClaw agents via the Clawstore registry. - Provides commands for listing, updating, validating, and yanking agents. - Includes flows for authenticating, initializing new agent packages, and previewing tarballs. - Offers detailed usage guidance and best practices.
元数据
Slug clawstore
版本 0.1.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Clawstore 是什么?

Search, install, and publish OpenClaw agent packages from the Clawstore registry. Use when the user wants to find agents, install them, or publish their own. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 100 次。

如何安装 Clawstore?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawstore」即可一键安装,无需额外配置。

Clawstore 是免费的吗?

是的,Clawstore 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clawstore 支持哪些平台?

Clawstore 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawstore?

由 Saba Tchikhinashvili(@saba-ch)开发并维护,当前版本 v0.1.1。

💬 留言讨论