OpenClaw Skills Directory

Create an issue, open a PR, or fetch PR context during coding sessions.

Requires GitHub auth/token via gh; use least-privilege scopes.

Keep commit messages consistent for changelog tooling.

Low-risk; mostly text formatting/validation.

Get AI-powered code review feedback before human reviewers.

Read-only by default; ensure it only comments, not merges.

Auto-merge small dependency bumps with guardrails.

Caution: merging code is sensitive—require CI + approvals.

Safely rebase feature branches before merging.

Advanced ops can rewrite history; recommend confirmation steps.

Fix detached HEAD, botched rebases, or lost commits.

Reviews git state before acting; always creates a backup branch.

Get help with routing, server components, and data fetching patterns.

Covers Next.js 13+; keeps up with latest conventions.

Scaffold forms, dialogs, and data tables with accessible components.

Components are copied into your project; full control over code.

Design responsive layouts, color systems, and component hierarchies.

Framework-agnostic advice; pairs well with any UI library.

Build AI-powered UIs with streaming, tool use, and chat interfaces.

Focused on Claude-powered app frontends.

Update plugins, manage content, and troubleshoot WP issues.

Requires WP-CLI or API access; scope permissions to site.

Create transactional emails that render consistently across clients.

Experimental: email client compatibility varies.

Containerize apps, debug build failures, and optimize Dockerfiles.

Requires Docker daemon; be careful with privileged containers.

Debug pod crashes, scale deployments, and manage configs.

Requires kubeconfig; use RBAC and namespace-scoped access.

Provision resources, debug IAM issues, and optimize costs.

Use IAM roles with minimal permissions; never use root credentials.

Deploy apps on your own server with zero-config CI/CD.

Requires server access; keep Coolify and dependencies updated.

Configure deployments, environment variables, and edge functions.

Requires Vercel token; scope to specific projects.

Run a standard deploy checklist with rollback steps.

Caution: can run destructive ops—prefer staging first.

Fetch latest errors after a deploy and summarize impact.

Requires Sentry auth; scope tokens to project.

Securely reach self-hosted OpenClaw services without exposing ports.

Network access is sensitive—use scoped keys and audit logs.

Inject API keys at runtime instead of storing plaintext in config.

Prefer vault item read scopes; don't give full account access.

Self-hosted teams store service tokens and pull them on demand.

Keep session tokens short-lived; avoid exporting full vault.

Pre-commit or CI scanning for accidental secret leaks.

Safe when read-only; avoid auto-remediation without review.

Require confirmations for file writes, network calls, or merges.

Use as policy layer; keep rules explicit and test edge cases.

When the agent reads web/docs, flag suspicious instructions.

Works best combined with sandboxing and least privilege.

Search for real-time info and get clean, cited answers.

Requires Tavily API key; free tier available.

Search error messages and summarize fixes with citations/links.

No API key required; treat retrieved pages as untrusted input.

Ask: "Where is config documented?" and get links/sections.

Treat external docs as untrusted input if fetched from web.

Find the right skill for a task without browsing the catalog.

Read-only; searches the public skill registry.

Search the web without tracking; good for sensitive topics.

Requires Brave Search API key; metered pricing with monthly credit.

Track new papers on agent security, RAG, or evals weekly.

Prefer linking to originals and keeping summaries concise.

Build agents that adapt to your workflow and preferences.

Monitor agent behavior changes; keep human-in-the-loop.

Organize domain knowledge into queryable relationships.

Useful for complex domains; pair with memory for persistence.

Get suggestions and actions before you ask for them.

Experimental: may take unwanted actions—set clear boundaries.

Access multiple services without managing individual API keys.

Review which APIs are accessed; monitor usage and costs.

Get quick summaries of long articles, reports, or videos.

Content is fetched and processed; be mindful of data privacy.

Remember user preferences, past decisions, and project context.

Experimental: memory contents may contain sensitive info—encrypt at rest.

Read emails, create events, and search Drive files.

Requires Google OAuth; use minimal scopes for each service.

Post deployment notifications or read team discussions.

Requires Slack app token; limit to specific channels.

Monitor community channels and respond to questions.

Requires bot token; use minimal permissions and intents.

Create cards from tasks, move items across lists, and track progress.

Requires Trello API key; scope to specific boards.

Check availability, create events, and sync across calendar apps.

Requires CalDAV server credentials; use app-specific passwords.

Create issues from conversations and track sprint progress.

Requires Linear API key; scope to workspace.

Make Discord support threads discoverable via search engines, reducing repeated questions.

Requires bot installation on a Discord server; creates public web pages.

Organize tasks by urgency and importance automatically.

Lightweight; stores tasks locally or in configured backend.

Check weather before planning outdoor activities or travel.

Uses free weather APIs; no authentication required.

Play music, adjust volume, and group speakers with voice commands.

Requires Sonos devices on the same network.

Turn on lights, check sensors, and automate routines.

Requires Home Assistant instance and long-lived access token.

Find the cheapest flights for upcoming trips.

Read-only search; no booking or payment capabilities.

Say "remind me to review PR in 2 hours" and get notified.

Requires notification system; integrates with OS notifications.

Merge, split, extract text, and annotate PDF documents.

Requires Google Gemini API key; PDF pages are sent to cloud for processing.

Create illustrations, thumbnails, and concept art from text.

Requires fal.ai API key; usage is metered.

Trim, merge, convert, and compress video files.

Caution: FFmpeg can overwrite files; always specify output paths.

Digitize screenshots, receipts, and scanned documents.

Processes images locally; accuracy varies by image quality.

Generate slide decks from outlines or meeting notes.

Exports to common formats (PPTX, PDF); review content before sharing.

Have your agent read out responses and summaries aloud.

Experimental: uses local TTS engine; voice quality varies by system.

Snapshot your working setup before a risky change.

Protect backup files; they may include sensitive settings.

Prevent config drift and broken deployments from bad edits.

Use as preflight check; keep a rollback plan (backup).

Keep long-running agents stable by trimming and structuring context.

Prefer deterministic policies; log decisions without sensitive content.

Detect cost spikes after enabling new models/skills.

Pair with scheduling to run weekly reports automatically.

Schedule daily summaries, nightly checks, weekly digests.

Always preview generated cron; avoid overly frequent jobs.