skillnet
SkillNet enables users to search, create, and evaluate reusable agent skills, enhancing efficiency in task management.
Install this skill
Security score
The skillnet skill was audited on May 12, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 89 | skillnet download "<skill-url>" -d ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 96 | ls -la ~/.openclaw/workspace/skills/<skill-name>/ |
Access to hidden dotfiles in home directory
| 99 | head -20 ~/.openclaw/workspace/skills/<skill-name>/SKILL.md |
Access to hidden dotfiles in home directory
| 102 | cat ~/.openclaw/workspace/skills/<skill-name>/SKILL.md |
Access to hidden dotfiles in home directory
| 105 | ls ~/.openclaw/workspace/skills/<skill-name>/scripts/ 2>/dev/null |
Access to hidden dotfiles in home directory
| 124 | ls ~/.openclaw/workspace/skills/ |
Access to hidden dotfiles in home directory
| 125 | grep -rl "<keyword>" ~/.openclaw/workspace/skills/*/SKILL.md 2>/dev/null |
Access to hidden dotfiles in home directory
| 157 | --output-dir ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 160 | skillnet create --office report.pdf --output-dir ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 163 | skillnet create trajectory.txt --output-dir ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 167 | --output-dir ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 173 | skillnet evaluate ~/.openclaw/workspace/skills/<new-skill> |
Access to hidden dotfiles in home directory
| 190 | skillnet evaluate ~/.openclaw/workspace/skills/my-skill |
Access to hidden dotfiles in home directory
| 201 | skillnet analyze ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 209 | skillnet analyze ~/.openclaw/workspace/skills |
Access to hidden dotfiles in home directory
| 217 | skillnet evaluate ~/.openclaw/workspace/skills/skill-a |
Access to hidden dotfiles in home directory
| 218 | skillnet evaluate ~/.openclaw/workspace/skills/skill-b |
Access to hidden dotfiles in home directory
| 221 | `skillnet analyze` only generates a report — it never modifies or deletes skills. Any cleanup actions (removing duplicates, pruning low-quality skills) require user confirmation before executing. Use |
Access to hidden dotfiles in home directory
| 232 | | User provides a GitHub URL | Confirm with user → `skillnet create --github <url> -d ~/.openclaw/workspace/skills` → evaluate → read SKILL.md → apply | |
Access to hidden dotfiles in home directory
| 233 | | User shares a PDF/DOCX/PPT | Confirm with user → `skillnet create --office <file> -d ~/.openclaw/workspace/skills` → evaluate → read SKILL.md → apply | |
Access to hidden dotfiles in home directory
| 234 | | User provides execution logs or data | Confirm with user → `skillnet create <file> -d ~/.openclaw/workspace/skills` → evaluate → read SKILL.md → apply | |
External URL reference
| 246 | | `BASE_URL` | custom LLM endpoint | `https://api.openai.com/v1` | |