AI Tools 2026-05-29 · ~15 min

2026 Must-Have OpenClaw Skills: The Most Complete List and Install Priority

If you already run—or are about to run—OpenClaw and feel lost among ClawHub, GitHub lists, and third-party directories shouting “must install,” here is the direct answer: do not install everything. Verify core bundled skills first, then add 3–5 high-value external skills for your workflow. This guide includes a four-tier decision matrix, scene bundles, a verify safety checklist, a Top 20 table, and a seven-step path (CLI per official OpenClaw Skills docs, checked 2026-05-29).

2026 OpenClaw Skills must-install list and install priority

1. Bottom line: don’t install every OpenClaw skill—use priority tiers

In 2026, the easiest way to break an OpenClaw setup is not the gateway itself—it is Skills. ClawHub, official docs, GitHub repos, and third-party directories all label items “must have” or “Top 10.” Each one sounds like it will make your agent smarter. More skills, however, mean a larger audit surface and more accidental triggers—not necessarily better automation.

A workable strategy is four tiers. “Most complete” in this article means coverage of common directions, not install them all:

Tier Action Typical examples Before install
① Verify bundled core Confirm built-in/bundled skills are visible and sandboxed web-search, browser, code-execution, file-operations list + check; limit workspace
② Fresh env priorities Add 3–5 from ClawHub GitHub, PDF, Playwright, Calendar, Email verify + inspect
③ Scene-specific Install only when a real workflow needs it SEO/GEO, Obsidian, Slack/Telegram, Google Workspace minimal OAuth scope
④ Install cautiously Isolated agent; default off shell/DevOps/cloud, password managers, mega skill packs source review + least privilege

Developers should verify search, code, files, and GitHub first; content/SEO users add scraping, document parsing, and keyword workflows; office automation users add Calendar, Email, Workspace, and chat channels last. Any skill that needs browser login state, secrets, or production repo write access must pass verify / inspect before you install it on a primary agent.

2. What OpenClaw Skills actually are

Skills are not a casual plugin list. They are capability packs that tell the agent how to call external tools, services, browsers, files, and automation flows when a matching task appears. Each skill ships with SKILL.md (and optional manifest/install scripts) describing triggers, steps, and CLI/API dependencies. The gateway loads that guidance on demand instead of stuffing every tool manual into the system prompt.

  • Sources: bundled built-ins, the ClawHub registry, git:owner/repo, or local ./path.
  • Scope: default install target is the active agent workspace <workspace>/skills/; --global writes to the shared directory (default ~/.openclaw/skills) unless narrowed with agents.list[].skills.
  • Load order (simplified): workspace /skills → project/personal agents dirs → ~/.openclaw/skills → bundled → skills.load.extraDirs (see Skills config).
  • vs Channels / Cron: Channels are message ingress; Cron is scheduled triggers; Skills are “how to finish this kind of task with tools.”

Installing more skills does not automatically strengthen the gateway—disabled or allowlisted-out skills never reach the prompt. A misplaced high-permission skill in the wrong workspace can still read files, call outbound networks, or drive a logged-in browser when triggered.

3. Commands you need before installing anything

The table below follows the openclaw skills CLI reference (checked 2026-05-29). If subcommands change, run openclaw skills --help. Do not copy stale slugs—search, then verify/inspect, then install.

Command Purpose How to use in this guide
openclaw skills search "query"Search ClawHubPick candidates—no batch installs
openclaw skills list [--eligible]Local visible/installed skillsCompare against bundled core
openclaw skills info <name>Metadata for one skillConfirm name and deps after install
openclaw skills check [--agent id]Ready skills visible to an agentRequired on new environments
clawhub inspect <slug> --filesPreview package files (clawhub CLI)Required for external skills
openclaw skills verify <slug>ClawHub trust envelope JSONIf verify fails, delay install
openclaw skills install <slug>Install from ClawHub to workspaceOnly after verify/inspect
openclaw skills install git:owner/repo@refInstall from GitTrusted org/repo only
openclaw skills install ./path --as nameLocal directoryYour own workflow skills
openclaw skills install --globalShared dir, all local agentsAvoid for high-permission skills
openclaw skills update --allUpdate ClawHub-tracked installsMaintenance window + config backup
skills.entries.*.enabled (config)Disable without deletingSafer than leaving a bad skill callable
agents.list[].skills (config)Per-agent allowlistProduction agents: minimum surface
Remove skills/<slug>/Physical uninstallPlus enabled:false; new session

Note: the official CLI docs do not expose a dedicated uninstall subcommand. Uninstall = delete the install directory + set enabled: false + tighten agent allowlists. If a skill does not appear in chat after install, open a new Gateway session or confirm skills.load.watch refreshed the snapshot.

4. Bundled skills you should verify first

These are capability directions; exact bundled names on your machine come from openclaw skills list --verbose. On a new environment, step one is not “install more”—it is confirming these show ready in openclaw skills check:

Direction Value Best for Verify Risk
web-searchFresh external contextEveryoneSearch providers, citationsMedium
browserPages, forms, screenshotsOps, QA, researchLogin profiles, sensitive sitesHigh
code-executionScripts, data checksDevelopersSandbox; not prod rootHigh
file-operationsRead/write workspace filesEveryoneWorkspace root onlyHigh
channelsTelegram, Slack, etc.Always-on assistantspairing, groupPolicyHigh
cron / schedulesPatrols, digestsOps, contentStoppable, auditable jobsHigh
memoryCross-session recallPersonal assistantsNo secrets in MEMORYMedium
GitHub / reposIssues, PRs, reviewDevelopersLow-scope tokensHigh
MCP / tool bridgeMore local servicesAdvanced usersReview each MCP serverHigh

If bundled skills are off via skills.allowBundled or entries.*.enabled: false, re-enable them before adding ClawHub extensions. Path/snapshot issues: see our Workspace Skills loading runbook.

5. External skills to prioritize on a new 2026 environment

ClawHub slugs, maintainers, and verify policies change—this table lists directions only. Workflow: openclaw skills search …clawhub inspect / openclaw skills verifyinstall (confirm the current slug on install day; do not hard-code examples from this post).

Direction Priority Solves Audience Pre-install check High privilege
GitHubP0Issues, PRs, reviewDevelopersToken scope, repo allowlistYes
PDF / DocumentsP0Contracts, papersResearch, legal, opsNo sensitive uploads to third partiesMedium
Playwright / Web testP1E2E, visual regressionFrontend, QATest domains, browser contextMed–high
Web scraping / extractionP1Structured excerptsResearch, SEOrobots, rate limits, copyrightMedium
CalendarP1Schedules, remindersPersonal assistantsRead vs write boundariesMedium
EmailP1Summaries, draftsOffice automationRead-only or draft-first; no bulk sendYes
Obsidian / NotionP1Knowledge basesPKM usersVault/workspace scopeMed–high
SEO / GEOP2Keywords, briefs, analyticsSites, indie devsNo low-quality bulk publishingMedium
Slack / Discord / TelegramP2Team notificationsSmall teamsMis-send, spam riskYes
Google WorkspaceP2Docs, Sheets, DriveOffice automationFolder + service account scopeYes
Image / Video generationP2Assets, thumbnailsContent, designCost, copyright, brandMedium
Skill creator / factoryP2Custom workflowsLong-term usersGenerated shell scripts?Med–high

6. Scene bundles: which group fits your work

Scene Suggested stack (core + external) Verify hardest
Developerfile-operations + code-execution + GitHub + MCP; optional PlaywrightRepo write scope, sandbox
SEO / content siteweb-search + extraction + SEO/GEO + PDF; avoid auto-postingCMS/production DB writes
Researchweb-search + scraping + PDF + ObsidianCompliance, attribution
Personal knowledge basefile-operations + Obsidian/Notion + memoryVault allowlist, backups
Office collaborationCalendar + Email + Google Workspace + chat channelOAuth scope, mis-send
Web testingbrowser + Playwright + code-executionTest URLs, credential isolation
Always-on assistantchannels + cron + Calendar + memoryStoppable jobs, group policy
DevOpsGitHub + cron + MCP; shell/cloud only on isolated agentsProduction kube/cloud creds
Security audit (defensive)Dependency/config checks; no unauthorized scanningAuthorized targets only
Multi-agent routingSplit allowlists per agent; avoid --global for risky skillsagents.list[].skills boundaries
Smart homeDedicated IoT/MCP bridge; separate workspaceLAN control plane, accidental actions

7. Skills you should not install blindly

These belong in tier ④ by default—not banned, but requiring inspect, source review, and least privilege, and only for authorized, compliant use:

  • High-privilege shell / DevOps / cloud: can run destructive commands or change production; use isolated agents and minimal IAM.
  • Browser login state: cookies may persist in profiles; do not automate banking, mail, or social accounts without clear boundaries.
  • Full mailbox / social APIs: fine for low-frequency personal assist—not for spam or bypassing platform limits.
  • Payments / password managers / production repo write: avoid on a 24/7 primary gateway unless you have audit and review workflows.
  • Third-party “one-click skill packs”: collections with hundreds or thousands of entries are for test environments—unpack and verify one by one, not for dumping into ~/.openclaw/skills on a production Mac.
  • Offensive red-team / jailbreak kits: authorized test labs only; never point at third-party services without permission.

Pre-install safety checklist (10 items)

  1. Source: ClawHub page or trusted GitHub org—avoid anonymous zip drops
  2. openclaw skills verify <slug> and clawhub inspect --files
  3. Read full SKILL.md and frontmatter name
  4. Scan scripts/ for shell, curl, rm, external domains
  5. Secrets: does it read .env, Keychain, or plaintext tokens?
  6. Filesystem: confined to workspace / vault?
  7. Network: necessary outbound only; user data exfiltration?
  8. Browser: persistent login; payment pages?
  9. Maintenance: recent updates, issues, verify policy changes
  10. Reversible: enabled:false, delete dir, update path works

8. My 2026 Top 20 (capability directions, not fixed slugs)

Order balances beginner usability, developer throughput, content research, office automation, browser power, security boundaries, and long-term maintenance. Always search + verify before install—this is not an official ranking.

# Direction Type Risk Install note
1web-searchCoreMedVerify search providers
2browserCoreHighLimit sensitive sites
3file-operationsCoreHighWorkspace-bound
4code-executionCoreHighSandbox first
5GitHubExt / coreHighLow-scope token
6CalendarExternalMedRead/write boundaries
7EmailExternalHighRead/draft first
8PDF/DocumentsExternalMedSensitive docs local
9Obsidian/NotesExternalMedVault allowlist
10NotionExternalMedDatabase permissions
11PlaywrightExternalMedTest domains only
12SEO/GEOExternalMedNo bulk low-quality posts
13Web scrapingExternalMedrobots / rate limits
14Slack/Discord/TelegramExt / channelHighAnti mis-send
15Google WorkspaceExternalHighFolder scope
16Image/Video genExternalMedCost & copyright
17Cron/ScheduledCore / extHighAuditable, stoppable
18MCP/Tool bridgeCore / extHighPer-server review
19Skill creatorExternalMedSmall workflows first
20Security audit (defensive)ExternalHighIsolated agent

Reference numbers you can track: ClawHub’s public catalog grows with the community (check the site on install day); aim for ≤ 5 external ClawHub skills on a new gateway, expand after ~2 stable weeks; keep separate workspaces for production vs experiment agents.

9. Why “complete lists” mislead you

  1. Constraint: bigger lists feel like “install everything.” Community READMEs treat GitHub stars as proof you need Obsidian or browser automation—even when your workflow does not.
  2. Hidden cost: audit surface. Every skill that can read mail, post to channels, or drive a browser is another accidental trigger—worse on a 24/7 gateway.
  3. Stability: install without maintenance. Skipping check / update, keeping dead high-permission skills, and never tightening allowlists leads to breakage after OpenClaw upgrades.

10. Seven-step path you can run today

  1. Accept the gateway itself: if OpenClaw is not installed yet, follow our Mac install guide and clear fatal items in openclaw doctor.
  2. List local skills: openclaw skills list and openclaw skills check against section 4.
  3. Pick one scene row: from section 6—add only 2–3 external directions.
  4. Review each candidate: openclaw skills search …clawhub inspect <slug> --file SKILL.mdopenclaw skills verify <slug> using the section 7 checklist.
  5. Install and trial in isolation: openclaw skills install <slug> (skip --global unless you truly need sharing); use a test workspace, not production repos.
  6. New session check: restart Gateway or start a new agent session; confirm visibility with check --agent.
  7. Log maintenance: record slug, date, permission tier; weekly list, monthly update --all.

11. Post-install maintenance

  • Update on a schedule: openclaw skills update --all (back up ~/.openclaw/openclaw.json and workspaces before major bumps).
  • Disable before delete when unsure: skills.entries.<name>.enabled: false.
  • Remove unused high-permission skills: delete skills/<slug>/ and trim agent allowlists.
  • Ship your real workflows: use install ./my-skill or the official “Creating skills” flow instead of hoarding ClawHub trending items.

12. Run OpenClaw Skills on Mac mini with less friction

Browser, Playwright, Obsidian, MCP, and a always-on gateway are simpler on native macOS: no WSL layer, Homebrew and launchd are first-class, and Unix tooling is consistent. Mac mini M4’s unified memory handles Gateway + browser automation + light local models reasonably well; ~4W-class idle power suits a 24/7 Skills lab node where you trial high-permission ClawHub packages away from your daily laptop.

Gatekeeper, SIP, and FileVault also give clearer boundaries for ~/.openclaw/ and workspace skills/ than a typical Windows workstation—pair that with verify/inspect and you get a sane place to validate ClawHub skills before team rollout. Comparing agent platforms? See Hermes vs OpenClaw vs OpenHuman.

If you want a quiet, always-on host for layered Skills—not full-disk experiments on your main machine—Mac mini M4 or a ZoneMac remote macOS node is a strong starting point.

OpenClaw + Mac node

Run your OpenClaw Skills workflow on Mac mini

Remote macOS nodes and low-power 24/7 uptime—ideal for Gateway trials and isolated high-permission skills.

Native macOS ClawHub-friendly Rent on demand
macOS cloud rental OpenClaw Skills node
Get Now