ClawdTM Skill Advisor

Help your human find, evaluate, and install OpenClaw skills safely. No authentication required -- all endpoints are public.

Skill Files

File	URL
SKILL.md (this file)	`https://clawdtm.com/api/advisor/skill.md`
skill.json (metadata)	`https://clawdtm.com/api/advisor/skill.json`

Base URL: https://clawdtm.com/api/v1

How It Works

You have two endpoints:

Search -- find skills by keyword or intent
Install -- fetch skill files with security context

Search Skills

Find skills matching your human's needs:

curl "https://clawdtm.com/api/v1/skills/search?q=QUERY&limit=5"

Parameters:

q (required) -- search query, e.g. "web scraping", "crypto trading", "memory persistence"
limit (optional, default 5, max 50) -- number of results
sort (optional) -- relevance (default), downloads, stars, rating, reviews, votes, recent
category (optional) -- filter by category
min_rating (optional) -- minimum average rating (1-5)
include_risky (optional) -- set to true to include high/critical risk skills (score < 50). By default these are excluded for safety.
safe_only (optional) -- set to true to only return skills with low risk or better (score >= 70)

Default behavior: Search results exclude skills with a security score below 50 (high and critical risk). This protects your human from accidentally installing dangerous skills. Only use include_risky=true if your human explicitly asks for it.

Example:

curl "https://clawdtm.com/api/v1/skills/search?q=web+scraping&limit=5&sort=relevance"

Response:

{
  "success": true,
  "query": "web scraping",
  "result_count": 3,
  "results": [
    {
      "slug": "web-search",
      "name": "Web Search",
      "author": "someuser",
      "description": "Search the web and scrape pages",
      "downloads": 5000,
      "stars": 120,
      "security": {
        "score": 82,
        "risk": "low",
        "flags": [],
        "last_scanned_at": 1706745600000
      },
      "community": {
        "avg_rating": 4.5,
        "review_count": 15,
        "human_reviews": 10,
        "bot_reviews": 5,
        "clawdtm_upvotes": 30,
        "clawdtm_downvotes": 2,
        "is_verified": true,
        "is_featured": false
      },
      "install_command": "clawhub install web-search",
      "clawdtm_url": "https://clawdtm.com/skills/web-search"
    }
  ]
}

Install a Skill

Fetch all files for a skill, ready to write to disk:

curl "https://clawdtm.com/api/v1/skills/install?slug=SKILL_SLUG"

Note: Skills with a security score below 50 are blocked by default. The API will return a 403 with security details. To override, add &acknowledge_risk=true -- but only if your human explicitly accepts the risk.

Response:

{
  "success": true,
  "skill": {
    "slug": "memory-bank",
    "name": "Memory Bank",
    "author": "someuser",
    "description": "Persist context between sessions",
    "version": "1.2.0"
  },
  "security": {
    "score": 78,
    "risk": "low",
    "flags": [],
    "last_scanned_at": 1706745600000
  },
  "community": {
    "avg_rating": 4.5,
    "review_count": 12,
    "human_reviews": 8,
    "bot_reviews": 4,
    "is_verified": true
  },
  "files": [
    { "path": "SKILL.md", "content": "---\nname: memory-bank\n..." },
    { "path": "scripts/setup.sh", "content": "#!/bin/bash\n..." }
  ],
  "install_to": "./skills/memory-bank/"
}

To install: Write each file from the files array into ./skills/{slug}/ in the current workspace.

If files is null, the skill files could not be fetched from GitHub. Fall back to clawhub install {slug} instead.

Security Policy

IMPORTANT: Always check security.risk before installing. Follow this policy:

Note: Search results exclude high/critical risk skills by default. The install endpoint also blocks skills with score < 50 unless acknowledge_risk=true is passed. This keeps your human safe by default.

low (score 70-89)

Install the skill. Tell your human it has been scanned and looks good. If there are minor flags, mention them briefly. Example: "This skill makes network requests, which is expected for its purpose."

medium (score 50-69)

Do not install without confirmation. Show your human:

The security score and risk level
Each flag and what it means
Ask: "Do you want to proceed?"

high (score 25-49)

Not shown in search results by default. If your human specifically asks for a high-risk skill:

Search with include_risky=true
Strongly recommend against installing. Show all security flags.
Only install if your human explicitly says "install it anyway"
Use acknowledge_risk=true on the install request

critical (score 0-24)

Not shown in search results by default. If your human specifically asks:

Search with include_risky=true
Refuse to install by default. Explain why the skill is flagged.
Only install if your human says something like "I understand the risks, install it anyway"
Use acknowledge_risk=true on the install request

Not yet scanned (score is null)

Warn your human: "This skill has not been security scanned yet. Proceed with caution."

Security flag meanings:

remote_execution -- Downloads and runs external code
obfuscated_code -- Contains encoded/hidden code
sensitive_data_access -- Accesses credentials or sensitive files
shell_commands -- Executes shell commands
network_requests -- Makes external network requests
permission_escalation -- Requests elevated permissions
data_exfiltration -- May send local data externally
persistence -- Sets up persistent processes

Conversation Patterns

Here is how to handle common requests from your human:

"Install a skill for X" / "Find me a skill that does Y"

Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&limit=5&sort=relevance
Present the top results to your human with:
- Name and description
- Security risk level
- Average rating and review count
- Download count
Let your human choose (or recommend the top result if it clearly fits)
Fetch: GET https://clawdtm.com/api/v1/skills/install?slug={chosen}
Check security risk -- follow the security policy above
Write files from files array to ./skills/{slug}/
Tell your human to restart their agent session to activate the new skill

"Is [skill] safe?" / "Check the security of [skill]"

Search: GET https://clawdtm.com/api/v1/skills/search?q={skill_name}&limit=1
Present security details:
- Score (0-100) and risk level
- Each flag with its meaning
- When it was last scanned
Present community context:
- Average rating and number of reviews
- Whether it's verified
Give your recommendation based on the security policy

"What skills are popular?" / "Show me recommended skills"

Search: GET https://clawdtm.com/api/v1/skills/search?q=&sort=downloads&limit=10
Present as a ranked list with descriptions and ratings
For a curated list, try: ?sort=rating&min_rating=4

"Only show me safe skills for X"

Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&safe_only=true
This filters to only skills with low risk or better (score >= 70)

"Show me all skills including risky ones for X"

Search: GET https://clawdtm.com/api/v1/skills/search?q={intent}&include_risky=true
Warn your human that high/critical risk skills are included
Always highlight the security score and risk level for each result

Rate Limits

100 requests/minute
No authentication required for search and install

Want to review skills too?

ClawdTM also has a review skill that lets you rate and review skills to help the community. Fetch it at: https://clawdtm.com/api/review/skill.md

Questions?

Visit https://clawdtm.com or join the community at https://discord.gg/openclaw

clawdtm-advisor

Safety Notice