OpenClaw Master Skills is a curated, regularly updated collection of skills that extends an AI personal assistant platform with capabilities such as research, browser automation, presentation creation, and prompt work. It is intended for people using OpenClaw or MyClaw.ai to give their agents additional tasks and workflows. The catalogue contains many skills and agents from this collection.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LeoYeAI/openclaw-master-skills --skill agent-skill-reviewergit clone --depth 1 https://github.com/LeoYeAI/openclaw-master-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/leoyeai/openclaw-master-skills/agent-skill-reviewer)<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/agent-skill-reviewer"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/agent-skill-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/leoyeai/openclaw-master-skills/agent-skill-reviewer"><img src="https://agentmods.dev/badge/skills/leoyeai/openclaw-master-skills/agent-skill-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 8 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 102 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 516 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 423 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 427 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 431 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 434 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium MCP Rug Pull · line 477 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Agent Snooping · line 480 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.04797 |
| Opus 5 | $0.00047 | $0.02398 |
| Sonnet 5 | $0.00019 | $0.00959 |
| Haiku 4.5 | $0.00009 | $0.00480 |
Grade A, and why
skill-reviewer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **检查 requires 与实际使用是否匹配** — 常见缺陷是列出 bash（所有都有）而不是实际工具如 docker、curl、jq。 How it starts
The opening of the file, as written. The whole thing — 564 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill Reviewer
说明：这是一个Skill审核工具，用于审核其他技能的质量。文档中包含的"错误示例"（如无效 YAML、错误命名等）仅用于教学演示，展示不应该怎么写。不存在任何恶意或混淆代码。
依据 Anthropic 官方 Skills 开发指南，对技能进行全面审核。提供结构化审核框架、评分系统、缺陷检查清单和改进建议。
核心职责
- 结构验证 - 检查文件夹结构、文件命名规范
示例：
ls skills/my-skill/检查SKILL.md是否存在 - YAML 审核 - 验证前置信息格式和必填字段
示例：
head -20 SKILL.md检查 name/description - 描述评估 - 检查触发条件是否清晰
示例：description 应包含"当用户...时"触发条件
- 组织评分 - 评估技能是否按任务组织、常见操作优先
示例："## 编码和解码" ✅ vs "## 理论" ❌
- 指令审查 - 评估主体指令的质量和完整性
示例：是否有工作流程、示例、错误处理
- 示例质量 - 评估示例密度和可执行性
示例：每 5-30 行 1 个代码块为最佳密度
- Tips 评分 - 评估技巧部分的质量和价值
示例：5-10 条非显而易见的实用技巧
- 最佳实践 - 对照官方指南检查合规性
示例：检查是否按任务组织而非抽象概念
工作流程
第 1 步：接收审核请求
当用户请求审核 skill 时：
- 确认 skill 文件夹路径或读取 SKILL.md 内容
- 判断审核严格程度：
严格模式（必须读取完整版官方指南）：
当用户表达以下意图时，必须先读取 references/anthropic-skills-development-guide.md 完整版指南：
- 明确要求"严格检查"、"仔细审核"、"全面审查"
- 提到"高质量要求"、"生产级别"、"发布前检查"
- 表达"不想有任何遗漏"、"按最高标准"
- 用于团队/组织/公司项目
- 准备公开发布或分享给他人
常规模式：
- 优先读取
references/checklist.md（快速检查清单） - 遇到疑问或边缘案例时读取完整版官方指南
第 2 步：结构检查
文件夹结构验证：
[ ] 技能文件夹使用 kebab-case 命名（如 my-skill）
[ ] SKILL.md 存在且命名精确（区分大小写）
[ ] 无 README.md 在技能文件夹内
[ ] 可选文件夹（如存在）命名规范
可选文件夹命名规范（如存在）：
-
scripts/- 全小写复数，无空格/下划线 -
references/- 全小写复数，无空格/下划线 -
assets/- 全小写复数，无空格/下划线
❌ 错误示例： Scripts、script、scripts_backup、References、refs、Assets、asset_files
示例：检查文件夹结构
# 查看技能文件夹结构
ls -la skills/china-holidays/
预期输出：
skills/china-holidays/
├── SKILL.md # ✅ 正确：精确命名
└── references/ # ✅ 正确：全小写复数
└── calendar-guide.md
评分：__/4
第 3 步：YAML 前置信息检查
必填字段验证：
[ ] name 字段存在，kebab-case，无空格大写
[ ] description 字段存在，非空
[ ] YAML 分隔符完整（--- 开头和结尾）
[ ] 无 XML 标签（< >）
[ ] name 不以 claude/anthropic 开头
示例：验证 YAML 前置信息
# 读取前 20 行检查 YAML
head -20 skills/china-holidays/SKILL.md
预期输出（正确示例）：
---
name: china-holidays
description: 获取中国国家法定节假日安排。当用户询问"放假安排"、"节假日"时使用。
---
错误示例（应该拒绝）：
name: ChinaHolidays # ❌ 大写，应该 kebab-case
name: claude-scheduler # ❌ 以 claude 开头
description: "" # ❌ 空描述
<skill> # ❌ 包含 XML 标签
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 564 lines · 94 tokens per session scan A c94ff6c681c4
skill-reviewer is a skill published in the GitHub repository LeoYeAI/openclaw-master-skills (2,141 stars, last pushed 1mo ago), licensed MIT. It adds 94 tokens to every session and 4,797 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
autoplan
Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with auto-decisions using 6 decision principles. Surfaces taste decisions (close approaches, borderline scope, codex disagreements) at a final approval gate. One command, fully reviewed plan out. Use when…
redteam-code-audit-detail-pack
Domain routing and boundary guidance for authorized source code security review, including dangerous function tracing, data-flow analysis, logic flaw detection, and dependency review. Use when a task belongs to the code audit domain and needs scope, evidence, pivot, or exit criteria.
cocoreview
CocoReview — structured code review with six-severity findings vocabulary, progressive disclosure architecture, and universal anti-pattern baseline. Invoked via $review [file] [--complexity] [--security] [--architecture] [--language ].
review
Enter the Review phase of CocoBrew. Aggregates findings from Code Quality Advisor, CocoCupper intelligence, spec compliance check, and decision coverage gate. Produces review.md with decision points. Requires developer approval before $ship can proceed.
code-reviewer
Code review specialist focused on patterns, bugs, security, and performance.
stage-coach
Consume CocoSentinel per-stage external coach requests and produce stage quality scores.