360 Secure SkillHub
360 安全技能中心

Skill Hub

面向 OpenClaw 的技能发现与安全审查工具：用 Python 脚本从 ClawHub 与 awesome-openclaw-skills 目录检索 3000+ 技能，按可信度评分排序，静态扫描恶意代码与提示注入模式，并支持 gh CLI 增量检查、目录同步、状态面板、表格导出与安装指引。

PhenixStar
PhenixStar
热度 86.06
最近更新 2026-05-11 09:34:35
分类：搜索依赖：代码执行 / 读写文件 / 第三方 API应用场景：研究 / 推荐 / 代码审查

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add skill-hub
Metadata
name
skill-hub
description
OpenClaw skill discovery, security vetting & install. Searches 3000+ curated skills from ClawHub registry and awesome-openclaw-skills catalog. Scores credibility, detects prompt injection & malicious patterns, manages installations. Quick-checks GitHub for new skills.
license
MIT
version
1.0.0
homepage
https://github.com/PhenixStar/openclaw-skills-collection
user-invocable
true
disable-model-invocation
false
auto_activate
["find skill","install skill","search skills","what skills exist","skill for","discover skill","vet skill","scan skill","skill security","new skills","skill updates","browse skills"]
allowed-tools
["Bash","Read","Write"]

Skill Hub

Unified skill discovery, security vetting, and installation for OpenClaw.

Commands

Search Skills

Find skills by keyword, category, or credibility score.

python3 scripts/skill-hub-search.py --query "spreadsheet"
python3 scripts/skill-hub-search.py --category "DevOps" --min-score 60
python3 scripts/skill-hub-search.py --query "auth" --live        # include live ClawHub results
python3 scripts/skill-hub-search.py --installed                  # show only installed
python3 scripts/skill-hub-search.py --not-installed --limit 20   # discovery mode

Install Skills

After finding a skill, install via ClawHub:

npx clawhub@latest install <skill-slug>

Vet Skills (Security Scan)

Scan a skill for malicious patterns, prompt injection, and logic weaknesses.

python3 scripts/skill-hub-vet.py --slug google-sheets     # vet single skill
python3 scripts/skill-hub-vet.py --all-installed           # vet all installed
python3 scripts/skill-hub-vet.py --category "DevOps"       # vet category
python3 scripts/skill-hub-vet.py --top 10                  # vet top N unvetted

Status Dashboard

See installed vs catalog coverage, unvetted warnings, recommendations.

python3 scripts/skill-hub-status.py

Quick Check (GitHub API)

Fast check if new skills were added since last sync. Uses gh CLI — no full download needed.

python3 scripts/skill-hub-quick-check.py              # check for updates
python3 scripts/skill-hub-quick-check.py --sync        # auto-sync if updates found
python3 scripts/skill-hub-quick-check.py --query "ai"  # check + search new skills

Browse Full Catalog

Export catalog as formatted table (terminal or markdown), grouped by category.

python3 scripts/skill-hub-table-export.py                          # terminal table
python3 scripts/skill-hub-table-export.py --format markdown        # markdown table
python3 scripts/skill-hub-table-export.py --category "AI"          # filter category

Sync Catalog

Full re-fetch from GitHub awesome-list. Computes credibility, preserves vet results, shows diff.

python3 scripts/skill-hub-sync.py

Credibility Scores (0-100)

Tier Score Meaning
Trusted 85-100 Curated + vetted + mature
Good 60-84 Curated or vetted, some signals
Unvetted 30-59 Exists in registry, not scanned
Caution 0-29 Missing signals or security warnings

Security Checks

Code-level: eval/exec, shell injection, obfuscation, network access, env harvesting, destructive ops.

NLP/Prompt-level: hidden instructions, role hijacking, invisible unicode, exfiltration prompts, authority escalation, social engineering.

When to Use

  • User asks "find a skill for X" or "is there a skill that can..."
  • User wants to extend capabilities with new tools
  • User wants to check if installed skills are safe
  • Before installing unknown skills from registry