NVIDIA/NemoClaw is an open-source reference stack for running supported AI agents inside NVIDIA OpenShell sandboxes with managed inference, network policies, integrations, snapshots, and lifecycle controls. It is used to run agents such as OpenClaw, Hermes, and LangChain Deep Agents with administrative and security controls. Catalogue add-ons guide coding agents through NemoClaw workflows.
Borrowing it
Nothing to install: this file belongs to NVIDIA/NemoClaw. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/NVIDIA/NemoClaw/main/.agents/skills/nemoclaw-skills-guide/SKILL.mdgit clone --depth 1 https://github.com/NVIDIA/NemoClawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nvidia/nemoclaw/nemoclaw-skills-guide)<a href="https://agentmods.dev/skills/nvidia/nemoclaw/nemoclaw-skills-guide"><img src="https://agentmods.dev/badge/skills/nvidia/nemoclaw/nemoclaw-skills-guide/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nvidia/nemoclaw/nemoclaw-skills-guide"><img src="https://agentmods.dev/badge/skills/nvidia/nemoclaw/nemoclaw-skills-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.01382 |
| Opus 5.5 | $0.00012 | $0.00553 |
| Sonnet 5.5 | $0.00006 | $0.00276 |
| Haiku 4.5 | $0.00003 | $0.00138 |
Grade A, and why
nemoclaw-skills-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.
NemoClaw Skills Guide
Choose the skill whose capability matches the task. Use the catalog when selection is unclear; go directly to a known skill otherwise. Infer the audience from the request and repository context.
Contributor stages compose within one task: setup when needed, planning when requested, implementation for code and tests, and publication when the user requests a PR. A stage boundary does not require renewed authorization for work the user already requested.
Skill Catalog
User Skills
| Skill | Summary |
|---|---|
nemoclaw-user-guide |
Route human users' AI agents to llms.txt and the relevant NemoClaw Markdown docs for installation, configuration, operation, security, and troubleshooting. |
Maintainer Skills
| Skill | Summary |
|---|---|
nemoclaw-maintainer-morning |
Morning standup: triage the backlog, determine the day's target version, label selected items, surface stragglers, and output the daily plan. |
nemoclaw-maintainer-triage |
Propose Issue Type, Project fields, and approved labels for issues and PRs. Apply only changes that the maintainer accepts. |
nemoclaw-maintainer-policies |
Answer maintainer workflow questions from the read-only policy references. |
nemoclaw-maintainer-cross-issue-sweep |
Find open issues that a PR can also fix or conflict with. Report file and line evidence. |
nemoclaw-maintainer-day |
Run one daytime maintainer pass for the release version. Select a merge, salvage, security, test, conflict, or sequencing workflow. Designed for /loop. |
nemoclaw-maintainer-evening |
Complete the cumulative documentation PR and release entry, show release context, and optionally start tag cutting. |
nemoclaw-maintainer-cut-release-tag |
Verify candidate evidence, record the maintainer's E2E decision, and cut one signed semver tag. |
nemoclaw-maintainer-e2e |
Route requested local E2E, trusted GitHub dispatch, or read-only release evidence. |
nemoclaw-maintainer-audit-e2e-assertions |
Triage E2E failures by tracing every assertion and downstream gate before a repair push or rerun. |
nemoclaw-maintainer-classify-ci-failure |
Classify one failed GitHub Actions job from bounded, redacted logs and an optional validated artifact. |
nemoclaw-maintainer-analyze-ci-performance |
Analyze retained CLI test timings and base-image publication latency with bounded, read-only GitHub evidence. |
nemoclaw-maintainer-analyze-pr-value-stream |
Measure one PR from its earliest observable branch push through merge, separate approval delay from automation time, and compare the latest revision with a target. |
nemoclaw-maintainer-runtime-provider |
Implement or review one managed runtime provider through the bundle API, qualification-backed activation, provider-neutral orchestration, and exact-commit E2E qualification. |
nemoclaw-maintainer-fix-e2e-failures |
Continuously fix automatic main E2E failures by root cause, coordinate peer approvals, merge eligible PRs, and monitor new results. |
nemoclaw-maintainer-validate-launchable |
Run advisory validation of the staging Brev Launchable deployment, image and runtime identity, preinstalled user journey, inference, and cleanup. |
nemoclaw-maintainer-release-notes |
Draft the post-tag Announcement from live tag/compare data, with the three-paragraph narrative, categorized change list, and external-only contributor thanks. |
nemoclaw-maintainer-find-review-pr |
Find open security PRs with Urgent or High Project Priority. Link each PR to its issue and identify competing PRs. |
nemoclaw-maintainer-pr-comparator |
Compare open PRs for the same issue. Apply gates and score the eligible PRs before you recommend one to merge. |
nemoclaw-maintainer-normalize-title-tags |
Preview and remove bracketed NemoClaw title tags from issues and PRs case-insensitively, even when the tag appears later in the title. |
nemoclaw-maintainer-refactor-docs |
Split oversized Fern docs into focused topics with journey-based navigation, canonical ownership, route-safe redirects, variant checks, and deduplication. |
nemoclaw-maintainer-security-code-review |
Review PR or issue changes in nine security categories. Report PASS, WARNING, or FAIL for each category. |
nemoclaw-maintainer-verify-stale |
Verify whether old issues with native Issue Type Bug still reproduce on latest. Reuses or provisions a Brev box, scores confidence, and proposes evidence-backed Project/comment writes for approval; never auto-closes. |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago Changed · +1 lines 7ebdfa025b8e
- 1mo ago Changed · -44 lines · -47 tokens per session 6e12cbad4d51
- 1mo ago Changed bcc9679a24d5
- 1mo ago Changed · +2 lines 1c250584bd1e
- 2mo ago First seen · 107 lines · 77 tokens per session scan A 78f2584e3f46
nemoclaw-skills-guide is a skill published in the GitHub repository NVIDIA/NemoClaw (22,871 stars, last pushed today), licensed Apache-2.0. It adds 30 tokens to every session and 1,382 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
qveris
Access third-party professional data and tools through QVeris: find services, review supported scope when needed, call them, and generate production REST code. Use when existing tools are insufficient, a provider is unknown, comparison or fallback is needed, or the user requests QVeris.
app
A skill-management module for storing, organising, sharing, and managing reusable skills, including their descriptions, content, tags, and files.
qveris-cli
Use QVeris CLI to find and call third-party professional data and tools when existing tools are insufficient, a provider is unknown, comparison or fallback is needed, or the user requests QVeris.
openclaw-security-checker
A security checker for OpenClaw installations, including their configuration, permissions, containers, network access, and logs.
codegen
Run and manage the Orval code generation pipeline for API hooks, TypeScript models, and MSW mocks. Use when editing an OpenAPI spec, running task generate, adding or modifying MSW scenarios, troubleshooting generated code, or when generated hooks are missing or out of date.
typescript-expert
TypeScript expert for type system, generics, utility types, and strict mode patterns.