Skill Manage

Manage OpenClaw Skills by listing, checking updates, installing, updating, or uninstalling from GitHub, SkillHub, Config, or local sources.

This skill implements the advertised management features, but before installing or running it you should: (1) inspect scripts/skill_manage.py, especially the uninstall/remove code; (2) note the script currently uses hard-coded Windows paths (C:\Users\andy8\...) — update it to use os.path.expanduser('~') or your actual OpenClaw paths so it operates on your environment; (3) run 'check' and 'list' / use the uninstall --dry-run option before allowing deletions; (4) verify network calls (ClawHub only) and confirm you trust the author; (5) if you plan to run automated updates/uninstalls, run inside a sandbox or with backups until you confirm behavior. If you want, I can point out the exact lines to change to make paths portable and show where deletion happens.

Type: OpenClaw Skill Name: skill-manage Version: 1.0.0 The skill contains hardcoded absolute file paths to a specific user's directory (C:\Users\andy8) in scripts/skill_manage.py, which is highly irregular and suggests either targeted development or significant oversight. The script possesses broad filesystem permissions to scan for and delete configuration files, environment variables (.env), and cache directories across the system during its 'uninstall' process. While these capabilities are functionally related to its stated purpose of skill management, the hardcoded paths and the potential for broad file deletion without proper path generalization pose a risk to system integrity.