The OpenClaw Hub
ClawHub is the central registry for OpenClaw Skills — extensions that let your AI assistant work with services on your server and with external APIs. This page explains how to search for and install skills via CLI and which security rules apply to third-party skills.
Extension via Skills
A skill is a folder with a
SKILL.md file and optional scripts that teaches OpenClaw how to use a tool, a local service or an external API. OpenClaw ships with a set of bundled skills (e.g. github, weather, summarize), and ClawHub provides additional community skills, for example for Docker, Home Assistant or Uptime Kuma.Since OpenClaw runs on your VPS or dedicated server, these skills are executed directly in your server environment. The AI can use them to carry out tasks locally or remotely via CLI.
Security on Your Server
Third-party skills run with the permissions of the OpenClaw process and can therefore access your system and data. The official documentation recommends treating them as untrusted code.
Root execution: The Server4You template runs OpenClaw under
root. According to the official OpenClaw documentation, running the Gateway and its agent commands as root is unsafe and not supported, because a compromised skill could then take over the entire server. Install only skills you trust – or move OpenClaw to a dedicated non-root user that owns the configuration in ~/.openclaw.API scoping: Skills often require API tokens (e.g. for GitHub or Cloudflare). Always use tokens with the minimum required permissions. Do not use global admin keys for simple status checks.
Source trust: ClawHub is an open registry. Before installing a skill and providing credentials, check the publisher, the source code and the security scan shown on the skill page on ClawHub. After installation,
openclaw skills verify checks the skill's verification status.How to Manage Skills
Skills are managed with the
openclaw skills command on your server. Run the commands as the user OpenClaw runs under (in the Server4You template: root). ClawHub skills are referenced in the form @owner/skill-name; you can find the exact name on the skill page at clawhub.ai.Search for available skills
Terminal
openclaw skills search "docker"
openclaw skills list
Install a skill to your instance
Terminal
openclaw skills install @owner/skill-name
openclaw skills verify @owner/skill-name
openclaw skills update --all
Further Reading
To make the most out of your OpenClaw installation and keep it secure, we recommend reading our related guides:
Explore the Registry
Find the right tools for your automation workflow on the official Hub.
Visit ClawHub.ai