Openclaw Skill Marketplace

OpenClaw 技能市场 - 从 ClawHub 同步 100+ 技能，智能推荐最适合你的技能组合。 支持场景推荐（开发/创作/办公）、行业推荐（互联网/金融/教育）、身份推荐（开发者/设计师/学生）。 增强搜索：精确搜索、模糊搜索、中文关键词映射（如"备份"搜到"backup"）。 浏览、搜索、一键安装、评分...

This skill is internally coherent for a local marketplace: it lists/searches/recommends and relies on the ClawHub CLI to fetch and install skills. Before using it: 1) Understand that install/sync commands call 'npx clawhub' which will fetch and run code from the npm/ClawHub ecosystem — only run if you trust ClawHub and the npm package. 2) Review the bundled scripts (they are included) and verify ~/.openclaw/workspace/skills permissions. 3) Note the documentation is slightly inconsistent about external downloads; assume network activity when running sync/install. 4) If you want stronger assurance, inspect the @openclaw/clawhub package source (or pin a specific verified version) before running npx, and run the install/sync commands in a restricted/testing environment first.

Type: OpenClaw Skill Name: openclaw-skill-marketplace Version: 0.1.0 The skill bundle provides a functional marketplace interface for the OpenClaw ecosystem, allowing users to browse, search, and install skills. The core logic involves syncing data from the ClawHub registry and managing local skill files. While the scripts (specifically install.py and sync-from-clawhub.py) utilize subprocess calls to execute 'npx clawhub' commands, this behavior is entirely consistent with the stated purpose of the skill. No evidence of data exfiltration, malicious prompt injection, or unauthorized system access was found.