No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by zeroclaw-labs · Agent Tool · ★ 63
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is zeroclaw-skills safe to install? View the security audit →
ZeroClaw Skills Index A skill registry for ZeroClaw — AI agent skills, tools, and workflows. Skills follow the agentskills.io open specification. What we audit, what we don't This registry is not a vetted security boundary. CI runs structure validation and pattern-matching scans (secret detection, dangerous-shape regexes, file-policy checks) on every PR. We do not audit skill code for security or correctness, and pattern matching does not catch novel or obfuscated misuse. Runtime behavior — network calls, package installs, files written, commands run — is the user's responsibility to evaluate before installing. Run and read the skill's before installing anything you don't recognize. Trust tiers The field in carries the trust signal: — authored and maintained by . Same contribution rules as everything else, but the author is us. — submissions from external contributors. The registry lists them and CI checks structure; we make no representation about the author's identity, intent, or the skill's runtime behavior. Treat them as you would any third-party code. Install a skill Browse skills Visit the Skills Hub to search and discover skills. Contributing a skill Anyo
| Stars | 63 |
| Forks | 54 |
| Category | Agent Tool |
| Quality Score | 69.9478005762545/100 |
| Open Issues | 10 |
| Last Updated | 2026-09-24 |
| Created | 2026-04-12 |
| Est. Tokens | ~13k |
Explore other popular agent tool tools:
zeroclaw-skills is Official skill registry for ZeroClaw — community-contributed AI agent skills, tools, and workflows. It is categorized as a Agent Tool with 63 GitHub stars.
You can find installation instructions and usage details in the zeroclaw-skills GitHub repository at github.com/zeroclaw-labs/zeroclaw-skills. The project has 63 stars and 54 forks, indicating an active community.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: