← 返回 Skills 市场
sdrabent

Top ClawHub Skills

作者 sdrabent · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
1477
总下载
2
收藏
9
当前安装
2
版本数
在 OpenClaw 中安装
/install topclawhubskills
功能描述
Discover the most popular, newest, and security-certified ClawHub skills via live API data.
安全使用建议
This skill mostly does what it says: it fetches lists of skills from an external API and formats them. Key things to consider before installing: 1) The API is hosted at topclawhubskills.com (no homepage or owner identity provided). Verify the operator/trustworthiness before sending any sensitive queries. 2) Avoid using the skill with private or confidential prompts because search queries and other context may be sent to the third party in plain GET parameters. 3) The SKILL.md makes unverified claims about its 'certified' label — treat that as the provider's assertion, not a platform guarantee. 4) If you need to minimize risk, test with innocuous queries first, request the skill source or operator contact, or prefer an official ClawHub endpoint or a skill with a published maintainer and code. 5) If you allow autonomous agents, be aware they could call this skill without prompting and thereby transmit data; require explicit user confirmation for network-using skills if possible.
功能分析
Type: OpenClaw Skill Name: topclawhubskills Version: 1.1.0 The skill bundle defines an agent skill to query an external API (`https://topclawhubskills.com/api`) for information about ClawHub skills (downloads, stars, new, certified, deleted, search, stats, health). The `SKILL.md` instructions are clear, well-defined, and solely focus on fetching and formatting this public data. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The external API call is a standard and expected function for such a skill, and the instructions do not encourage any harmful interaction with it beyond retrieving data.
能力评估
Purpose & Capability
Name/description (discover popular/new/security-certified ClawHub skills) match the instructions: the SKILL.md describes endpoints that return skill listings. However the API is hosted at topclawhubskills.com (not an official clawhub.ai domain). Using an external aggregator is reasonable, but the domain and lack of publisher/homepage mean the data source/operator are not verified.
Instruction Scope
The runtime instructions tell the agent to issue HTTP GETs (including free-text search queries) to the external API and to always include returned ClawHub links. There is no warning about what user-provided search terms may contain, or any limit/rate/privacy guidance. If the agent sends sensitive information (search q parameter or other user context) it will be transmitted to an unvetted third party. The instructions do not ask to read local files or environment variables, which is good, but they do permit sending arbitrary text externally.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is low-risk from a disk/execution perspective — nothing is written to disk by an installer.
Credentials
The skill requests no environment variables or credentials (proportionate). However, the skill's operation depends on network calls to an external API; those calls may include user queries or other context and therefore can leak secrets or private data even without requesting credentials. Also the SKILL.md asserts that 'certified' skills have been through advanced screening — this is an unverifiable trust claim from the external provider.
Persistence & Privilege
The skill does not request always:true and does not persist configuration. Autonomous invocation is enabled (platform default). That by itself is normal, but autonomous use combined with an untrusted external API increases risk of unintended data exfiltration if the agent calls the skill without user oversight.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install topclawhubskills
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /topclawhubskills 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.0
**Support for deleted ClawHub skills and related statistics.** - Added `/api/deleted` endpoint to list previously removed skills, including deletion info. - All skill responses now include `is_deleted` and `deleted_at` fields. - Aggregate stats now report deleted skill count. - Example queries and documentation updated to cover deleted skills.
v1.0.0
Initial release of Top ClawHub Skills. - Discover the most popular, newest, and security-certified ClawHub skills via a live API. - Supports endpoints for top downloads, top stars, new skills, certified skills, search, and aggregate platform statistics. - Real-time data presentation with formatted Markdown tables and direct install links. - Security-certified skills highlighted with clear messaging about ClawHub's verification process. - Designed for macOS, Linux, and Windows platforms.
元数据
Slug topclawhubskills
版本 1.1.0
许可证
累计安装 9
当前安装数 9
历史版本数 2
常见问题

Top ClawHub Skills 是什么?

Discover the most popular, newest, and security-certified ClawHub skills via live API data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1477 次。

如何安装 Top ClawHub Skills?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install topclawhubskills」即可一键安装,无需额外配置。

Top ClawHub Skills 是免费的吗?

是的,Top ClawHub Skills 完全免费(开源免费),可自由下载、安装和使用。

Top ClawHub Skills 支持哪些平台?

Top ClawHub Skills 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Top ClawHub Skills?

由 sdrabent(@sdrabent)开发并维护,当前版本 v1.1.0。

💬 留言讨论