← 返回 Skills 市场
323
总下载
1
收藏
2
当前安装
20
版本数
在 OpenClaw 中安装
/install skill-downloader
功能描述
Discover, compare, review, install, or update OpenClaw skills from trusted sources with a review-first workflow. Use when the user wants to search for a skil...
安全使用建议
This skill appears coherent and low-risk because it is instruction-only and enforces a review-first workflow. Before using it, confirm which trusted sources (e.g., exact GitHub repos or ClawHub slugs) it will query, insist on explicit approval for any install/update, and manually review downloaded files before allowing writes or execution. Be cautious if a candidate requests additional credentials, elevated privileges, or runs opaque installers — those would be outside this skill's stated scope.
功能分析
Type: OpenClaw Skill
Name: skill-downloader
Version: 0.1.20
The skill-downloader bundle provides a structured, safety-oriented workflow for searching, inspecting, and installing OpenClaw skills. The instructions in SKILL.md and references/advanced-workflows.md emphasize a 'review-first' approach, requiring explicit user approval before any file writes and mandating the disclosure of missing metadata. No evidence of malicious intent, data exfiltration, or prompt-injection attacks was found; the skill's capabilities are aligned with its stated purpose of managing skill installations from trusted sources like ClawHub and GitHub.
能力评估
Purpose & Capability
Name/description match the instructions: discovery, inspection, comparison, and review-first installation of skills from trusted sources (ClawHub, GitHub, skills.sh). The declared requirements (none) are proportional to the stated purpose.
Instruction Scope
SKILL.md limits actions to searching trusted sources, inspecting candidate files/metadata, and asking for explicit user approval before writing files. It does not instruct reading unrelated system files or exfiltrating data, and it requires marking unknown fields rather than guessing.
Install Mechanism
No install spec and no code files are included (instruction-only), which minimizes on-disk risk. The references recommend using official registry tooling or a temporary review location before writing files.
Credentials
No environment variables, credentials, or special config paths are requested. Network access to registries is implied and appropriate for the skill's purpose.
Persistence & Privilege
always:false and user-invocable:true (normal). The skill does not request permanent presence or modification of other skills' configurations; installation actions are gated behind explicit user approval.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-downloader - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-downloader触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.20
Simplify README and SKILL guidance, move low-level workflow details into references, reduce high-risk wording, and tighten inspect behavior to reduce unsupported inference.
v0.1.19
Added mandatoryWorkflow, parallel multi-source search, information completeness levels, search degraded mode, file-based install for skills.sh
v0.1.17
Remove source metadata from docs and skill output guidance
v0.1.16
Align README with the skill workflow, clarify ClawHub CLI preference, and document comparison-based search results with ranking evidence and unknown markers.
v0.1.15
Clarify search-only output requirements, recommendation format, and ClawHub CLI preference for ClawHub-hosted skills.
v0.1.14
Improve audit-friendliness by emphasizing discovery, review, and user-approved installation wording.
v0.1.13
Keep original SKILL.md semantics and apply README-only safety clarification.
v0.1.12
Clarify review-first workflow, emphasize explicit approval and source inspection, and reduce automatic-installer framing.
v0.1.11
Version 0.1.11 of skill-downloader
- Added explicit version number, author, trust score, and category fields to SKILL.md.
- Introduced a permissions section specifying required capabilities: file read/write, network access, and shell execution.
- No changes to core logic, workflows, or source handling.
- Updated skill manifest for greater transparency and trustworthiness.
v0.1.10
Align display name and installation wording for cleaner metadata consistency
v0.1.9
Prefer official ClawHub install workflow, tighten metadata consistency, and replace fixed temp path with unique per-run temp handling
v0.1.8
Remove npx fallback and make manual source review the baseline security workflow
v0.1.7
Clarify trust model, source metadata, and fallback-only npx usage
v0.1.6
Prioritize ClawHub over skills.sh for skill downloads
v0.1.5
- Added support for both search-only queries ("find", "search for", "is there a skill") and explicit download/install requests—now handles Skill discovery and installation in two modes.
- Introduced a "triggers" field for user intent detection in multiple languages, supporting commands like "search", "find", "下载技能", etc.
- Updated documentation to clarify the two operation modes: Mode A (search/browse) and Mode B (download/install).
- No core functionality changes to skill discovery, security checks, or installation workflow.
- Improved clarity for user prompts and installation flow in the SKILL.md.
v0.1.4
- Removed mention of skill-scanner and skill-vetting from the compatibility requirements.
- No behavioral changes to the documented workflow, install logic, or examples.
- Compatibility section now only lists git, curl, and Node.js/npm.
v0.1.3
- Switched default security check from using external skills (skill-scanner and skill-vetting) to an automatic internal scan of code and documentation for sensitive or malicious content before installation.
- Installation now aborts and informs the user if any evidence of secret exfiltration, destructive commands, or obfuscated/malicious code is detected.
- Requests for additional third-party scanning via skill-scanner and skill-vetting are now only run if explicitly requested by the user.
- Updated documentation to clarify new security workflow and make internal review the default safety mechanism.
v0.1.2
- Added rules to preserve user-generated data and configuration when updating existing skills.
- Updated the installation/update workflow to only overwrite existing source files, leaving user/data files untouched.
- Clarified update messaging to inform users that their data has been preserved along with backup details.
v0.1.1
- Add detection for existing skill installations; prompt user to update if skill is already present.
- Introduce update workflow: backup current version, remove old files, install new version, and inform user of backup location.
- Add post-installation prompt offering to summarize the new skill’s functions and usage by reading its SKILL.md.
- Clarify installation/update distinction and user notifications in the workflow.
v0.1.0
Initial release of skill-downloader.
- Enables secure downloading and installation of OpenClaw skills from trusted sources (skills.sh, ClawHub, and GitHub).
- Integrates security checks using skill-scanner and skill-vetting before installation; aborts on detected risks.
- Supports both global and local (workspace) installation modes, following strict directory rules.
- Handles multiple search results with informative lists and recommendations.
- Provides clear user interaction flow: confirms download intent, suggests sources, and explains installation outcomes.
元数据
常见问题
Skill Downloader 是什么？
Discover, compare, review, install, or update OpenClaw skills from trusted sources with a review-first workflow. Use when the user wants to search for a skil... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 323 次。
如何安装 Skill Downloader？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-downloader」即可一键安装，无需额外配置。
Skill Downloader 是免费的吗？
是的，Skill Downloader 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skill Downloader 支持哪些平台？
Skill Downloader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Downloader？
由 Y@ng（@yyang100）开发并维护，当前版本 v0.1.20。
推荐 Skills