โ† Browse

@internscience/clawhub

B

Search and install agent skills from ClawHub, the public skill registry.

skillclaude

Install

agr install @internscience/clawhub --target claude

Writes 1 file into .claude/skills/, pinned to git-46fe0e85.

  • .claude/skills/clawhub/SKILL.md

Document


name: clawhub description: Search and install agent skills from ClawHub, the public skill registry. homepage: https://clawhub.ai metadata: {"openclaw":{"emoji":"๐Ÿฆž","requires":{"bins":["npx"]},"install":["brew install node (macOS) or see https://nodejs.org"]}}

ClawHub

Public skill registry for AI agents. Search by natural language (vector search).

When to use

Use this skill when the user asks any of:

  • "find a skill for ..."
  • "search for skills"
  • "install a skill"
  • "what skills are available?"
  • "update my skills"

Search

npx --yes clawhub@latest search "web scraping" --limit 5

Install

npx --yes clawhub@latest install <slug> --workdir ~/.drclaw

Replace <slug> with the skill name from search results. This places the skill into ~/.drclaw/skills/, where drclaw loads global skills from. Always include --workdir.

Update

npx --yes clawhub@latest update --all --workdir ~/.drclaw

List installed

npx --yes clawhub@latest list --workdir ~/.drclaw

Notes

  • Requires Node.js (npx comes with it).
  • No API key needed for search and install.
  • Login (npx --yes clawhub@latest login) is only required for publishing.
  • --workdir ~/.drclaw is critical โ€” without it, skills install to the current directory instead of the drclaw data directory.
  • After install, remind the user to start a new session to load the skill.

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • passType matchnot applicable to this artifact type

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged โ€” not that the artifact is safe.

Versions

  • git-46fe0e859a062026-07-31