```bash

openclaw skills search "calendar"

openclaw skills install @owner/<slug>

openclaw skills install @owner/<slug> --acknowledge-clawhub-risk

openclaw skills update @owner/<slug>

openclaw skills update @owner/<slug> --acknowledge-clawhub-risk

openclaw skills verify @owner/<slug>

openclaw plugins search "calendar"

openclaw plugins install clawhub:<package>

openclaw plugins install clawhub:<package> --acknowledge-clawhub-risk

openclaw plugins update <id-or-npm-spec>

```

Skill installs target the active workspace `skills/` directory by default. Add

`--global` to install into the shared managed skills directory.

OpenClaw checks the selected community ClawHub skill or plugin trust state

before downloading it. Versioned community skill and plugin releases use

exact-release trust metadata; resolver-backed GitHub skills rely on ClawHub's

install resolver to enforce scan and force-install policy before it returns a

pinned commit. Malicious or blocked community releases are refused. Risky

community releases require review and `--acknowledge-clawhub-risk` when a

non-interactive command should continue after that review.

Official ClawHub publishers/packages and bundled OpenClaw sources bypass this

release-trust prompt and security-verdict fetch during install and update.

Plugin installs use the `clawhub:` prefix when you want ClawHub resolution

instead of npm or another install source.

openclaw plugins install git:github.com/<owner>/<repo>@<ref>

openclaw plugins install <package> --force # overwrite existing install

openclaw plugins install <package> --pin # pin version

openclaw plugins install clawhub:<package> --acknowledge-clawhub-risk

openclaw plugins install <package> --dangerously-force-unsafe-install

openclaw plugins install <path> # local path

openclaw plugins install <plugin>@<marketplace> # marketplace

If a plugin you published on ClawHub is hidden or blocked by a registry scan, use the publisher steps in [ClawHub publishing](/clawhub/publishing). `--dangerously-force-unsafe-install` does not ask ClawHub to rescan the plugin or make a blocked release public.

</Accordion>

<Accordion title="--acknowledge-clawhub-risk">

Community ClawHub installs check the selected release trust record before downloading the package. If ClawHub disables download for the release, reports malicious scan findings, or puts the release in a blocking moderation state such as quarantine, OpenClaw refuses the release. For non-blocking risky scan statuses, risky moderation states, or registry reasons, OpenClaw shows the trust details and asks for confirmation before continuing.

Use `--acknowledge-clawhub-risk` only after reviewing the ClawHub warning and deciding to continue without an interactive prompt. Pending or stale clean trust records warn but do not require acknowledgement. Official ClawHub packages and bundled OpenClaw plugin sources bypass this release-trust prompt.

</Accordion>

<Accordion title="Hook packs and npm specs">

`plugins install` is also the install surface for hook packs that expose `openclaw.hooks` in `package.json`. Use `openclaw hooks` for filtered hook visibility and per-hook enablement, not package installation.

openclaw plugins update --all

openclaw plugins update <id-or-npm-spec> --dry-run

openclaw plugins update @openclaw/voice-call

openclaw plugins update openclaw-codex-app-server --acknowledge-clawhub-risk

openclaw plugins update openclaw-codex-app-server --dangerously-force-unsafe-install

```

<Accordion title="--dangerously-force-unsafe-install on update">

`--dangerously-force-unsafe-install` is also accepted on `plugins update` for compatibility, but it is deprecated and no longer changes plugin update behavior. Operator `security.installPolicy` can still block updates; plugin `before_install` hooks only apply in processes where plugin hooks are loaded.

</Accordion>

<Accordion title="--acknowledge-clawhub-risk on update">

Community ClawHub-backed plugin updates run the same exact-release trust check as installs before downloading the replacement package. Use `--acknowledge-clawhub-risk` for reviewed automation that should continue when the selected ClawHub release has a risky trust warning. Official ClawHub packages and bundled OpenClaw plugin sources bypass this release-trust prompt.

</Accordion>

</AccordionGroup>

### Inspect

openclaw skills install git:owner/repo@main

openclaw skills install ./path/to/skill --as custom-name

openclaw skills install @owner/<slug> --force

openclaw skills install @owner/<slug> --acknowledge-clawhub-risk

openclaw skills install @owner/<slug> --agent <id>

openclaw skills install @owner/<slug> --global

openclaw skills update @owner/<slug>

openclaw skills update @owner/<slug> --acknowledge-clawhub-risk

openclaw skills update @owner/<slug> --global

openclaw skills update --all

openclaw skills update --all --agent <id>

- `install --version <version>` applies only to ClawHub skill refs.

- `install --force` overwrites an existing workspace skill folder for the same

slug.

- Community ClawHub skill installs and updates check trust before downloading.

Versioned community archive releases use exact-release trust metadata.

Resolver-backed GitHub skills rely on ClawHub's install resolver to enforce

scan and force-install policy before it returns a pinned commit. Malicious or

blocked community releases are refused. Risky community releases require

review and `--acknowledge-clawhub-risk` when a non-interactive command should

continue after that review. Official ClawHub skill publishers and bundled

OpenClaw skill sources bypass this release-trust prompt.

- `--global` targets the shared managed skills directory and cannot be combined

with `--agent <id>`.

- `--agent <id>` targets one configured agent workspace and overrides current

openclaw update --dry-run

openclaw update --no-restart

openclaw update --yes

openclaw update --acknowledge-clawhub-risk

openclaw update --json

openclaw --update

```

when npm plugin artifact drift is detected during post-update plugin sync.

- `--timeout <seconds>`: per-step timeout (default is 1800s).

- `--yes`: skip confirmation prompts (for example downgrade confirmation).

- `--acknowledge-clawhub-risk`: after reviewing community ClawHub trust

warnings, allow post-update plugin sync to continue without an interactive

prompt. Without this, risky community ClawHub plugin releases are skipped and

left unchanged when OpenClaw cannot prompt. Official ClawHub packages and

bundled OpenClaw plugin sources bypass this release-trust prompt.

`openclaw update` does not have a `--verbose` flag. Use `--dry-run` to preview

the planned channel/tag/install/restart actions, `--json` for machine-readable

```bash

openclaw update repair

openclaw update repair --channel beta

openclaw update repair --acknowledge-clawhub-risk

openclaw update repair --json

```

- `--json`: print machine-readable finalization JSON.

- `--timeout <seconds>`: timeout for repair steps (default `1800`).

- `--yes`: skip confirmation prompts.

- `--acknowledge-clawhub-risk`: after reviewing community ClawHub trust

warnings, allow repair-time plugin convergence to continue without an

interactive prompt. Official ClawHub packages and bundled OpenClaw plugin

sources bypass this release-trust prompt.

- `--no-restart`: accepted for update command parity; repair never restarts the

Gateway.

/** Structured ClawHub trust details carried in gateway error payloads. */

export const ClawHubTrustErrorCodes = {

SECURITY_UNAVAILABLE: "clawhub_security_unavailable",

RISK_ACKNOWLEDGEMENT_REQUIRED: "clawhub_risk_acknowledgement_required",

DOWNLOAD_BLOCKED: "clawhub_download_blocked",

} as const;

export type ClawHubTrustErrorCode =

(typeof ClawHubTrustErrorCodes)[keyof typeof ClawHubTrustErrorCodes];

export type ClawHubTrustErrorDetails = {

clawhubTrustCode?: ClawHubTrustErrorCode;

version?: string;

warning?: string;

};

function normalizeNonEmptyString(value: unknown): string | undefined {

return typeof value === "string" && value.trim().length > 0 ? value : undefined;

}

export function isClawHubTrustErrorCode(value: unknown): value is ClawHubTrustErrorCode {

return (

value === ClawHubTrustErrorCodes.SECURITY_UNAVAILABLE ||

value === ClawHubTrustErrorCodes.RISK_ACKNOWLEDGEMENT_REQUIRED ||

value === ClawHubTrustErrorCodes.DOWNLOAD_BLOCKED

);

}

export function buildClawHubTrustErrorDetails(params: {

code?: ClawHubTrustErrorCode;

version?: string;

warning?: string;

}): ClawHubTrustErrorDetails | undefined {

if (!params.code && !params.version && !params.warning) {

return undefined;

}

return {

...(params.code ? { clawhubTrustCode: params.code } : {}),

...(params.version ? { version: params.version } : {}),

...(params.warning ? { warning: params.warning } : {}),

};

}

export function readClawHubTrustErrorDetails(

details: unknown,

): ClawHubTrustErrorDetails | undefined {

if (!details || typeof details !== "object" || Array.isArray(details)) {

return undefined;

}

const raw = details as {

clawhubTrustCode?: unknown;

version?: unknown;

warning?: unknown;

};

const code = isClawHubTrustErrorCode(raw.clawhubTrustCode) ? raw.clawhubTrustCode : undefined;

const version = normalizeNonEmptyString(raw.version);

const warning = normalizeNonEmptyString(raw.warning);

if (!code && !version && !warning) {

return undefined;

}

return {

...(code ? { clawhubTrustCode: code } : {}),

...(version ? { version } : {}),

...(warning ? { warning } : {}),

};

}

// Public gateway protocol entrypoint. Keep this barrel aligned with schema.ts

// so clients can import wire types, JSON schemas, and validators from one place.

export {

buildClawHubTrustErrorDetails,

ClawHubTrustErrorCodes,

isClawHubTrustErrorCode,

readClawHubTrustErrorDetails,

type ClawHubTrustErrorCode,

type ClawHubTrustErrorDetails,

} from "./clawhub-trust-error-details.js";

import { Compile, type Validator as TypeBoxValidator } from "typebox/compile";

import {

type AgentEvent,

import { describe, expect, it } from "vitest";

import {

AgentsListResultSchema,

SkillsDetailResultSchema,

SkillsProposalInspectResultSchema,

SkillsProposalRequestRevisionResultSchema,

ToolsEffectiveResultSchema,

).toBe(false);

});

});

describe("SkillsDetailResultSchema", () => {

it("accepts official ClawHub skill publisher metadata", () => {

const result = {

skill: {

slug: "tao-setup-nvidia-gpu-host",

displayName: "TAO Setup NVIDIA GPU Host",

summary: "Prepare an NVIDIA GPU host for TAO workflows.",

tags: { gpu: "GPU" },

channel: "official",

isOfficial: true,

createdAt: 1_700_000_000,

updatedAt: 1_700_010_000,

},

latestVersion: {

version: "1.0.0",

createdAt: 1_700_010_000,

},

owner: {

handle: "nvidia",

displayName: "NVIDIA",

image: "https://example.test/nvidia.png",

official: true,

channel: "official",

isOfficial: true,

},

};

expect(Value.Check(SkillsDetailResultSchema, result)).toBe(true);

});

});

slug: NonEmptyString,

version: Type.Optional(NonEmptyString),

force: Type.Optional(Type.Boolean()),

acknowledgeClawHubRisk: Type.Optional(Type.Boolean()),

timeoutMs: Type.Optional(Type.Integer({ minimum: 1000 })),

},

{ additionalProperties: false },

source: Type.Literal("clawhub"),

slug: Type.Optional(NonEmptyString),

all: Type.Optional(Type.Boolean()),

acknowledgeClawHubRisk: Type.Optional(Type.Boolean()),

},

{ additionalProperties: false },

),

displayName: NonEmptyString,

summary: Type.Optional(Type.String()),

tags: Type.Optional(Type.Record(NonEmptyString, Type.String())),

channel: Type.Optional(Type.Union([Type.String(), Type.Null()])),

isOfficial: Type.Optional(Type.Union([Type.Boolean(), Type.Null()])),

createdAt: Type.Integer(),

updatedAt: Type.Integer(),

},

handle: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),

displayName: Type.Optional(Type.Union([NonEmptyString, Type.Null()])),

image: Type.Optional(Type.Union([Type.String(), Type.Null()])),

official: Type.Optional(Type.Union([Type.Boolean(), Type.Null()])),

channel: Type.Optional(Type.Union([Type.String(), Type.Null()])),

isOfficial: Type.Optional(Type.Union([Type.Boolean(), Type.Null()])),

},

{ additionalProperties: false },

),

npmShasum: clawpack.npmShasum,

},

};

const securityDetail = {

package: artifactResolverDetail.package,

release: {

version: fixture.version,

},

trust: {

scanStatus: "clean",

moderationState: null,

blockedFromDownload: false,

reasons: [],

pending: false,

stale: false,

},

};

const server = http.createServer((request, response) => {

const url = new URL(request.url, "http://127.0.0.1");

json(response, artifactResolverDetail);

return;

}

if (

url.pathname ===

`/api/v1/packages/${encodeURIComponent(packageName)}/versions/${fixture.version}/security`

) {

json(response, securityDetail);

return;

}

if (

betaStatus !== undefined &&

url.pathname === `/api/v1/packages/${encodeURIComponent(packageName)}/versions/beta`