skills.rest
shanggqm
shanggqmCOMMUNITY
Explore all skills by this author →
GitHub

guomeiqing-safe-install

Audit third-party OpenClaw Skills with a 7-point checklist before installation.

52|5|Updated Mar 22, 2026
Search Tags:#security-review#openclaw#prompt-only#installation-workflow#safe-install#third-party-skill
One-click install
npx skills add https://github.com/shanggqm/openclaw-security-hardening --skill guomeiqing-safe-install
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: guomeiqing-safe-install
Source: https://github.com/shanggqm/openclaw-security-hardening/tree/main/skills/guomeiqing-safe-install
Command: npx skills add https://github.com/shanggqm/openclaw-security-hardening --skill guomeiqing-safe-install

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables safe installation of third-party OpenClaw Skills by downloading to a temporary workspace, auditing with a rigorous 7-point security checklist, generating a human-readable report, and installing only when approved.

Core Features & Use Cases

  • Seven-point security review before installing any third-party Skill.
  • Automated, structured review reports shared with the user.
  • Automatic installation into ~/.openclaw/skills/ after user-approved safety review.
  • Isolation of downloads in a temporary directory to protect the workspace and assets.

Quick Start

Say 'safe install <skill>' to initiate the secure review and installation workflow.

Frequently Asked Questions about guomeiqing-safe-install

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely install third-party OpenClaw Skills from a GitHub URL?▼

Safe installation of third-party OpenClaw Skills uses a 7-point security checklist to audit code in an isolated temporary workspace, generating a human-readable report that requires your explicit confirmation before proceeding with installation.

What does the security review process check before installing a Skill?▼

The security review process applies a rigorous 7-point checklist to audit the downloaded Skill contents within an isolated temporary directory, preventing direct installs until a detailed review report is generated and approved by the user.

Can I install an OpenClaw Skill directly from an npm package without manual confirmation?▼

No, you cannot directly install an npm package without manual confirmation. The safe install workflow enforces safety controls by preventing direct installs and requiring explicit user approval after presenting a detailed security review report.

Where are approved OpenClaw Skills installed after passing the security audit?▼

After passing the security audit and receiving user confirmation, approved OpenClaw Skills are automatically installed into the ~/.openclaw/skills/ directory to ensure proper workspace integration.

Why does the safe install workflow isolate downloads in a temporary directory?▼

The safe install workflow isolates downloads in a temporary directory to protect your main workspace and assets from unverified code, ensuring the 7-point security review occurs safely before any files are moved for installation.

Related Skills

Explore More Software Engineering Skills→
cncodercncoder
2

skill-vetting

Scan ClawHub skill packages for security and utility risks.

Community
Intermediate
yipng05-maxyipng05-max
265

skill-installer

Install Claude Code skills from GitHub, URLs, or local files after security scanning.

Community
Intermediate
NY1024NY1024
25

auditor-skill

Audit OpenClaw agent skills for security vulnerabilities and malicious behavior.

Community
Advanced
skytiger6724skytiger6724
2

skill-vetter

Detect credential access, unauthorized network calls, and code obfuscation in AI skills.

Community
Advanced