← 返回 Skills 市场
754
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install glitch-skillstore
功能描述
Search, install, and create OpenClaw skills with intelligent matching across known, local, and GitHub repositories.
使用说明 (SKILL.md)
SkillStore - OpenClaw Skill Manager
Search, install, and create OpenClaw skills with intelligent matching.
Skill Metadata
- Name: skillstore
- Type: OpenClaw Skill
- Purpose: Search existing skills, install from GitHub, or create new ones
Setup Commands
No setup required. Works out of the box.
Usage Commands
Search & Install
# Search for a skill (applies 30% threshold)
skillstore \x3Cquery>
# Examples:
skillstore home assistant
skillstore weather
skillstore smart home
skillstore email gmail
skillstore github
List & Show
# List installed skills
skillstore list
# Show all known skills (20 built-in)
skillstore known
Create New
# Create new skill with templates
skillstore create \x3Cname>
skillstore new \x3Cname>
# Examples:
skillstore create my-awesome-skill
skillstore new weather-widget
How Search Works
Matching Algorithm
- Tokenize - Split query into keywords
- Calculate - Jaccard similarity + keyword boost
- Filter - Remove results below 30% threshold
- Rank - Sort by relevance score
- Display - Show with visual score bar
Match Score
Score >= 50% = Strong match (green bar)
Score >= 30% = Weak match (yellow bar)
Score \x3C 30% = Not shown (filtered)
Search Sources (in order)
- Known Skills - Built-in database of 20 skills
- Local Skills - Skills in ~/.openclaw/workspace/skills/
- GitHub - Search openclaw repositories
Interaction Flow
1. User runs: skillstore home assistant
2. System searches all 3 sources
3. System filters by threshold
4. Results shown with scores:
1. [KNOWN] homeassistant ████████░░ 85%
Control smart home devices...
2. [LOCAL] homeassistant ███████░░░ 78%
3. [GIT] openclaw-homeassistant ██████░░░░ 62%
5. User chooses:
- Enter number → Install from GitHub
- n → Create new skill
- q → Quit
Known Skills Database
Built-in skills (searchable):
| Skill | Description |
|---|---|
| homeassistant | Smart home control (HA API) |
| gog | Google Workspace (Gmail, Calendar, Drive) |
| weather | Weather forecasts |
| github | GitHub CLI integration |
| himalaya | Email via IMAP/SMTP |
| obsidian | Obsidian vault integration |
| sonoscli | Sonos speaker control |
| blucli | BluOS speaker control |
| eightctl | Eight Sleep pod control |
| ordercli | Food delivery orders |
| blogwatcher | RSS feed monitoring |
| gifgrep | GIF search/download |
| video-frames | Video frame extraction |
| youtube-summarizer | YouTube transcript summary |
| ga4 | Google Analytics 4 |
| gsc | Google Search Console |
| wacli | WhatsApp messaging |
| browser | Browser automation |
| healthcheck | Security hardening |
Error Handling
- No results above threshold: Offer to create new skill
- GitHub search fails: Fall back to local/known
- Install fails: Show error with reason
Related Skills
- homeassistant
- openclaw-migrate
- skill-templates (legacy, use skillstore)
Files
skillstore/
├── SKILL.md # This file
├── README.md # User docs
├── main.js # CLI with intelligent search
└── config.json # Install history
安全使用建议
This skill appears to do what it says: search known and local skills and query GitHub. Before installing or running it, quickly review the remaining parts of main.js (the truncated portion) to confirm what child_process.exec calls do when installing a repo (e.g., git clone, npm install, running remote scripts). Also note the docs and code disagree about the local-skill path (~/.openclaw/workspace/skills/ vs __dirname/..); make sure the tool will search the directories you expect. If you plan to run installs, run them in a sandbox or inspect any cloned repositories before executing their code.
功能分析
Type: OpenClaw Skill
Name: glitch-skillstore
Version: 2026.2.17
The `main.js` file uses `child_process.exec` to perform `git clone` operations for installing skills from GitHub. While the input variables (`repo` and `name`) are sourced from the GitHub API and GitHub repository naming conventions generally mitigate simple shell injection, the use of `exec` with external input is a high-risk capability that represents a potential Remote Code Execution (RCE) vulnerability. This is classified as suspicious due to the presence of a powerful primitive that could be exploited if input sanitization or source constraints were to change, rather than clear evidence of intentional malicious behavior like data exfiltration or backdoors.
能力评估
Purpose & Capability
Name/description (search/install/create OpenClaw skills) matches the code: it searches a built-in DB, local skills, and GitHub. No unrelated credentials or binaries are requested. One minor mismatch: SKILL.md says local skills live under ~/.openclaw/workspace/skills/, but the code searches the parent directory of the skill (path.join(__dirname, '..')).
Instruction Scope
Runtime instructions and code remain scoped to searching known skills, local SKILL.md/README.md files, and GitHub repo metadata. The code reads local skill files and calls the GitHub search API; both are expected. The SKILL.md examples describe interactive install flows but do not document exact install commands — the main.js includes child_process.exec (truncated in the listing), so you should inspect what install/exec steps perform before executing.
Install Mechanism
No install spec is provided (instruction-only install), and the repo includes the CLI source (main.js). There are no external download URLs or extract operations in the provided files. This is low-risk, but review any runtime exec invocations that may invoke git or external installers.
Credentials
The skill declares no required environment variables or credentials. The code performs unauthenticated calls to the public GitHub search API and local filesystem reads; this aligns with the described functionality.
Persistence & Privilege
always is false and the skill writes/reads a local config.json in its own directory (CONFIG_FILE = __dirname/config.json). It does not request system-wide or other-skill configs. No elevated persistence privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install glitch-skillstore - 安装完成后，直接呼叫该 Skill 的名称或使用
/glitch-skillstore触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2026.2.17
- Added detailed documentation in SKILL.md covering usage, search algorithm, interaction flow, error handling, and skill database.
- Explained setup-free operation and provided clear CLI usage examples for searching, installing, and creating skills.
- Described the intelligent skill matching process, including matching algorithm steps, score thresholds, and data sources.
- Listed and described 20 built-in, searchable OpenClaw skills.
- Documented error handling behavior and fallback strategies.
- Included file structure overview and related skills for easier discovery.
元数据
常见问题
Skillstore 是什么？
Search, install, and create OpenClaw skills with intelligent matching across known, local, and GitHub repositories. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 754 次。
如何安装 Skillstore？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install glitch-skillstore」即可一键安装，无需额外配置。
Skillstore 是免费的吗？
是的，Skillstore 完全免费（开源免费），可自由下载、安装和使用。
Skillstore 支持哪些平台？
Skillstore 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skillstore？
由 Glitch（@chris6970barbarian-hue）开发并维护，当前版本 v2026.2.17。
推荐 Skills