Best Places to Find OpenClaw Skills in 2026

The best place to find OpenClaw skills in 2026 is Remote OpenClaw, whose OpenClaw skills hub indexes 4,300+ community skills with a VirusTotal scan status on every listing, free with no signup. Full disclosure: Remote OpenClaw is our directory. Below it we rank five genuinely useful alternatives, starting with ClawHub, the official registry where those skills are published in the first place.

How We Ranked These Sources

An OpenClaw skills source earns its rank on coverage, security signals, and how fast you get from listing to installed skill. OpenClaw skills are SKILL.md packages, plain Markdown you can read before running, and after the ClawHavoc malware campaign proved the official registry's open publishing can be abused, security vetting weighs more heavily here than it would for any other agent's ecosystem. We verified each source live in July 2026. If you are new to skills themselves, start with the complete OpenClaw skills guide, then come back to pick your sources. Running other agents too? The agent skills directories roundup covers sources for every SKILL.md client, and there are sibling guides for Hermes Agent skills and Codex skills.

The 6 Best Places to Find OpenClaw Skills in 2026

1. Remote OpenClaw

Remote OpenClaw's OpenClaw skills hub indexes 4,300+ community skills and is the only source on this list that shows a VirusTotal scan status on every listing before you install. Full disclosure: Remote OpenClaw is our directory. The verifiable case for #1: free, no signup, public usage analytics, suspicious and malicious listings filtered out, and each skill page shows the copyable install command. It is also part of a wider index (4,384+ skills, 13,870+ MCP servers, 3,687 plugins) covering Claude Code, Codex, OpenCode, OpenClaw, and Hermes, searchable from the terminal with npx remoteopenclaw search <query>. The honest limitation: it is a discovery and vetting layer, not the registry itself, so publishing a skill still happens on ClawHub.

2. ClawHub

ClawHub is the official public registry for OpenClaw skills and plugins, the npm of the OpenClaw ecosystem, and every other source on this list ultimately draws from it. Install the CLI once with npm i -g clawhub, then clawhub install <skill-slug> drops the skill into ./skills and pins the version in .clawhub/lock.json. Search runs on vector embeddings, publishing is free and open to anyone via clawhub skill publish, and releases pass automated SkillScan security screening with signed manifests and moderator takedowns. Our full ClawHub guide covers every command. The honest limitation: no human approves listings before they go live, and that gap is exactly where the ClawHavoc campaign's malicious uploads got in.

3. skills.sh

skills.sh, Vercel's cross-agent skills directory, ranks skills by real install telemetry, 876,990 all-time installs as of July 2026, tracked through its npx skills add <owner/repo> CLI. Because OpenClaw reads the same SKILL.md standard as the 20+ agents skills.sh covers, its leaderboard is the best signal for which cross-compatible skills developers actually adopt, and its Hot and Trending tabs update in near real time. It is free and includes a security-audits section. The limitation: it is not OpenClaw-specific, so you will filter through skills aimed at Claude Code or Cursor, and its install counts are self-reported CLI telemetry rather than usage data.

4. VoltAgent/awesome-openclaw-skills

VoltAgent/awesome-openclaw-skills is the heavyweight curated list: 5,400+ skills filtered and categorized from the official OpenClaw registry across 28 categories, from coding agents and IDEs (1,184 skills) to DevOps (393) and browser automation (323), with roughly 7,215 spam, duplicate, low-quality, or malicious registry items explicitly excluded. The repo has 50,000+ stars, partners with VirusTotal for security filtering, and only accepts entries already published on ClawHub, so every listing has a canonical install path. The honest limitation comes from its own security notice: skills are "curated but not audited," and as a downstream filter of ClawHub it inherits whatever slips past both layers.

5. GitHub topic searches

GitHub itself remains a genuinely useful discovery layer, because every OpenClaw skill is just a repo or folder containing a SKILL.md file. Searching the openclaw topic, or running a code search like path:SKILL.md openclaw, surfaces skills before they reach any registry, including internal-style skills developers never bothered to publish. You get full source, commit history, and issues as trust signals, which is more context than most directory listings offer. The limitation is the obvious one: zero vetting, zero install tooling, and no popularity signal beyond stars, so it is best as a supplement for niches the registries have not filled yet.

6. Marketplaces: LobeHub and beyond

General agent marketplaces round out the list. LobeHub advertises 217,527+ skills in the cross-agent SKILL.md format and references ClawHub coverage in its marketing, making it the biggest raw index that includes OpenClaw-compatible skills; browsing is free. And for skills sold rather than shared, the Remote OpenClaw marketplace lists paid OpenClaw skills and persona bundles from vetted sellers, since ClawHub itself has no monetization at all. The honest limitation for LobeHub: it displays conflicting skill totals, states no curation criteria, and blocks automated fetchers, so treat it as a long-tail fallback rather than a primary source.

Comparison Table

Here is how the six sources compare on size, agent coverage, cost, and standout capability as of July 2026.

OpenClaw Plugins: The Other Install Flow

OpenClaw plugins are code and bundle packages, distinct from text-based skills, and they install through ClawHub with a prefixed command rather than the skill flow. Both native paths run from your OpenClaw session:

# Search and install skills natively
openclaw skills search "calendar"
openclaw skills install @openclaw/demo
openclaw skills update --all

# Plugins use the clawhub: prefix
openclaw plugins install clawhub:<package>

The rule of thumb: if it is instructions the agent reads, it is a skill; if it ships executable code the agent loads, it is a plugin, and it deserves proportionally more scrutiny before install. ClawHub tracks both types with versions and changelogs, and our ClawHub guide walks through the plugin publish flow with clawhub package publish --dry-run. For a shortlist of what to install first once your sources are set, see the best OpenClaw skills for 2026.

Security Limitations to Know

Every OpenClaw skill source inherits one hard fact: in February 2026, Koi Security researchers audited the 2,857 skills then on ClawHub and identified 341 malicious entries, most traced to the coordinated ClawHavoc operation. Directories mitigate this differently, VirusTotal statuses here, SkillScan at the registry, human curation at VoltAgent, but none of them replaces reading the SKILL.md yourself. Check declared env vars against actual behavior, distrust Base64 blobs and curl-pipe-bash lines, and prefer publishers with version history. If you installed skills before mid-2026, run through the ClawHub malicious skills audit to check your existing setup.

Related Guides

• ClawHub: The OpenClaw Skills Hub Explained (2026 Guide)
• OpenClaw Skills: The Complete Guide
• 15 Best OpenClaw Skills You Should Install Right Now
• ClawHub Malicious Skills Audit: Step by Step