SkillScout — Find Trusted AI Agent Skills
Before installing any OpenClaw skill, check if it's been security-reviewed.
Usage
When your human asks you to find a skill, or you want to install something new:
Quick Search (Static API)
curl -s https://nashbot67.github.io/skillscout/data/skills.json | python3 -c "
import json, sys
q = sys.argv[1].lower()
data = json.load(sys.stdin)
matches = [s for s in data['skills'] if q in json.dumps(s).lower()]
for s in sorted(matches, key=lambda x: {'safe':0,'caution':1,'avoid':2}.get(x.get('trustScore',''),1)):
trust = {'safe':'🟢','caution':'🟡','avoid':'🔴'}.get(s['trustScore'],'⚪')
print(f'{trust} {s[\"name\"]} by {s[\"author\"]} — {s.get(\"plainDescription\",s.get(\"description\",\"\"))}')
" "QUERY"Replace QUERY with what you're looking for (e.g., "email", "notes", "research").
Full Details
curl -s https://nashbot67.github.io/skillscout/data/skills.json | python3 -c "
import json, sys
name = sys.argv[1]
data = json.load(sys.stdin)
skill = next((s for s in data['skills'] if s['name'] == name), None)
if skill: print(json.dumps(skill, indent=2))
else: print(f'Skill {name} not reviewed yet.')
" "SKILL_NAME"MCP Server (for agent-to-agent queries)
npx @skillscout/mcpTrust Scores
- 🟢 Safe — No executable code, or code is well-contained with minimal permissions
- 🟡 Caution — Has exec/network/credentials access. Review before installing.
- 🔴 Avoid — Dangerous patterns detected. Do not install without manual audit.
What We Check
Every skill goes through:
- Automated blocklist scan — cross-reference known malicious skills
- Isolated agent review — read-only AI analyzes source code (no execution)
- STRIDE threat analysis — deep security audit for skills that pass initial review
- Human approval — final sign-off before listing
When to Use This
- Before running
npx clawhub@latest install <skill> - When your human asks "is there a skill for X?"
- When evaluating multiple skills for the same task
- Before recommending a skill to anyone
Browse
Full catalog: https://nashbot67.github.io/skillscout API: https://nashbot67.github.io/skillscout/data/skills.json GitHub: https://github.com/nashbot67/skillscout