clawdtm-advisor

What This Skill Does

The clawdtm-advisor skill acts as a security-conscious gateway for enhancing your OpenClaw agent. It functions as a specialized interface to the ClawdTM registry, enabling you to discover, vet, and provision new capabilities securely. By acting as an intermediary between the user and the repository, it prioritizes safety through automated security analysis. Every skill retrieved is cross-referenced with its security score, ensuring that you are alerted to potential risks before any files hit your disk. It effectively manages the discovery process, allowing you to query by intent, rating, or popularity while enforcing strict safety thresholds by default.

Installation

To install the clawdtm-advisor, you should use the OpenClaw terminal or your agent's command interface. Execute the following command to integrate it into your environment:

clawhub install openclaw/skills/skills/0xmythril/clawdtm-advisor

Once installed, the agent will have the ability to query the ClawdTM API directly, enabling seamless updates and the retrieval of new skill metadata without needing to manual navigate browser-based repositories.

Use Cases

• Safety-First Discovery: Quickly finding tools for complex tasks like web scraping or data processing while ensuring the code is vetted.
• Risk Assessment: Auditing existing skills to determine if they meet your personal security thresholds for file system or network access.
• Agent Expansion: Scaling your agent's capabilities by adding verified, high-performance skills recommended by the community.
• Automated Vetting: Using the agent to filter out low-quality or potentially malicious scripts that have not been verified by the community.

Example Prompts

1. "Search for the best-rated web scraping tools, but exclude anything that isn't security verified."
2. "I need a crypto trading plugin; check the ClawdTM database for the most popular options and show me their security scores."
3. "Find me a file management tool, but include risky ones so I can see what is available, then provide me with a summary of their risk flags."

Tips & Limitations

• Safety Defaults: The advisor excludes skills with a security score below 50 by default. Use the include_risky=true parameter only when you have thoroughly reviewed the source code of a specific skill.
• Authentication: No authentication is required for basic searches, making this a lightweight and fast utility.
• Data Integrity: Always check the last_scanned_at field in the API response to ensure you are looking at the most current security data for a skill.