skill-advisor

Evaluate OpenClaw skills before installation. Use when user wants to check a skill's safety, dependencies, popularity, or get an installation recommendation....

This skill appears to do exactly what it says (fetch ClawHub metadata and produce a report) but it has important inconsistencies you should resolve before installing or using it: - Verify you have the 'clawhub' CLI available and trust its origin. The SKILL.md requires running 'clawhub inspect', but the skill metadata does not declare that binary dependency. - Check whether ClawHub access requires credentials (API key or login). If so, ask the author to declare required env vars (primaryEnv) so you know what secrets will be read. - Because the skill's source/homepage are unknown, prefer contacting the skill author or using a skill from a known publisher. Confirm the registry entry matches the upstream repository. - If you want to test safely: run the recommended 'clawhub inspect' command yourself in a controlled environment (or sandbox) for a sample skill and review the output before letting an agent run it autonomously. If you control no ClawHub credentials and do not have the CLI, the skill will either fail or implicitly rely on existing local ClawHub configuration—both are reasons to treat it cautiously. Ask the publisher to explicitly list required binaries and any auth needs; that would convert this from 'suspicious' to 'benign' if resolved.

Type: OpenClaw Skill Name: skill-advisor Version: 1.2.0 The skill-advisor is a utility designed to help users evaluate the safety, popularity, and dependencies of other OpenClaw skills. It uses the official 'clawhub' CLI to inspect skill metadata and generates a structured report for the user. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection; all operations are transparent and aligned with the stated purpose in SKILL.md.