Undertow

Skill discovery engine for AI coding agents. Recommends and installs the right skill when you need it — code review, test generation, debugging, commit messa...

This skill appears to do what it says: it recommends and installs other developer-focused skills via the ClawHub CLI and uses a bundled index.json plus lightweight workspace fingerprinting (existence checks only). Before installing: 1) Ensure the clawhub CLI on your system is the official/trusted client, since Undertow delegates installs and searches to it. 2) Be prepared to inspect any discovered skill before consenting to install — some listed skills (e.g., ones advertising autonomous behavior) may request broader access once installed. 3) Note that user queries are embedded into shell commands for search; confirm the runtime properly escapes inputs if you accept automatic searching. 4) If you have high-sensitivity repos, consider whether allowing the agent to run workspace scans or install skills is appropriate. Overall the package is coherent and proportionate to its description.

Type: OpenClaw Skill Name: undertow Version: 0.2.2 The 'undertow' skill is a discovery and management tool for other OpenClaw skills, acting as a curated package manager. It uses the 'clawhub' CLI to search for and install skills, but includes significant safety guardrails: it requires explicit user confirmation for both installation and invocation, and it performs a post-install security check that blocks any skill containing executable files (.sh, .py, .bin, etc.). The 'Project Fingerprint' feature is limited to checking for the existence of configuration files to improve recommendation relevance without reading their contents, and the overall logic is transparent and aligned with its stated purpose.