Skill Safe Install (L0 Strict)

Strict secure-install workflow for ClawHub/OpenClaw skills. Use when asked to install a skill safely, inspect skill permissions, review third-party skill ris...

This skill appears to do what it says: run clawhub commands, sandbox an install, rate risk, and require explicit consent before writing trust. Before using it: (1) ensure you trust the clawhub CLI on your system (the skill invokes it), (2) be aware it will read your OpenClaw config (~/.openclaw/openclaw.json) even though the registry metadata didn't declare a config path, (3) verify the skill will not perform writes without the explicit ‘yes/install’ consent at Step 4, and (4) if you rely on automated installs, expect this skill to pause for manual confirmation by design. If you want the skill to be fully auditable, test it in a safe environment first and confirm it adheres to the Step 0–6 outputs before using it in production.

Type: OpenClaw Skill Name: skill-safe-install-l0-strict Version: 1.0.1 The skill is a security-focused utility designed to enforce a strict, multi-step workflow for auditing and safely installing other OpenClaw skills. It mandates risk assessments, sandboxing in isolated directories, and explicit user consent gates before performing installations or modifying configuration files (SKILL.md, clawhub.yaml). No malicious intent, data exfiltration, or unauthorized execution patterns were found.