Skill: pfaria32/capability-awareness (version 1.0.3)

# Capability Awareness System Makes OpenClaw agents aware of custom skills and capabilities. Skills-first approach with on-demand documentation loading. Zero overhead when not in use. Foundation for skill marketplace discovery. **When to use:** Skill discovery, capability documentation, agent self-awareness of available tools **What to know:** **Repository:** https://github.com/pfaria32/openclaw-capability-awareness ## Problem Default OpenClaw agents don't know about custom skills you've installed. They need to: 1. Discover what capabilities exist 2. Know when to use each skill 3. Access skill documentation on demand ## Solution **Skills-First Approach:** - Agent sees skill descriptions in prompt - Reads full SKILL.md when topic is relevant - Zero overhead when skills not in use - Simple, proven, low-risk ## Implementation Options ### Option 1: Skills-First (Recommended for v1) Add capability cards to agent prompt: ``` Available Skills: - token-economy: Model routing and cost optimization - health-tracking: Apple Health and Strava integration - memory-system: RAG-based semantic search ``` Agent reads full SKILL.md when needed. ### Option 2: Full Injection (Advanced) - Router-gated skill loading - Dynamic prompt injection - Context-aware capability exposure - Zero baseline cost (only loads when relevant) ## Installation ```bash cd /home/node/.openclaw/workspace git clone https://github.com/pfaria32/openclaw-capability-awareness.git projects/capability-awareness-system ``` ## Usage ### Current Implementation (Skills-First) Skills are documented in `workspace/skills/*/SKILL.md`. The agent loads these automatically through the AGENTS.md workflow: ```markdown ## Skills (mandatory) Before replying: scan <available_skills> <description> entries. - If exactly one skill clearly applies: read its SKILL.md at <location> with `read`, then follow it. ``` This is already working! Just add new skills to the workspace/skills directory. ### Future Implementation (Full Injection) See repository for: - Router design and schema - Embedding-based skill matching - Dynamic prompt injection strategy - Cost/token analysis ## Status ✅ **Skills-First approach** — Deployed and working 📋 **Full Injection design** — Documented, not yet implemented ## Attribution Built to support the emerging OpenClaw skill ecosystem. Simple beats clever. ## Documentation Implementation options, design decisions, and upgrade path documented in repository.

path: README.md
content: # Capability Awareness System

Makes OpenClaw agents aware of custom skills and capabilities. Skills-first approach with on-demand documentation loading. Zero overhead when not in use. Foundation for skill marketplace discovery.

## Features

- Skill descriptions in agent prompt
- On-demand SKILL.md loading when relevant
- Zero overhead when skills not in use
- Simple skills-first approach (no complex routing)
- Foundation for skill ecosystem

## Use Cases

- Make agents aware of custom capabilities
- Enable skill discovery without complexity
- Build toward skill marketplace
- Improve agent self-awareness

## Installation

```bash
clawhub install capability-awareness
```

## Repository

https://github.com/pfaria32/openclaw-capability-awareness

## License

MIT


path: SECURITY.md
content: # Security Notice - Capability Awareness System

## Purpose

Capability Awareness is a **SKILL DISCOVERY FRAMEWORK** that helps OpenClaw agents understand their available capabilities. It does NOT contain malicious code.

## What This Tool Does

✅ **Documents available skills** in agent prompts  
✅ **Enables on-demand loading** of skill documentation  
✅ **Provides discovery framework** for skill ecosystem  
✅ **Zero overhead** when skills not in use

## What This Tool Does NOT Do

❌ **Does NOT execute code** - Only provides documentation  
❌ **Does NOT access files** - Reads SKILL.md when relevant  
❌ **Does NOT modify behavior** - Informs agent of capabilities  
❌ **Does NOT bypass permissions** - Works within OpenClaw's security model

## How It Works

1. Agent sees list of available skills in prompt
2. When topic is relevant, agent reads `SKILL.md` file
3. Agent follows skill instructions (with existing OpenClaw permissions)
4. No runtime overhead when skills not needed

**This is documentation discovery, not privilege escalation.**

## False Positive Explanation

Automated security tools may flag this because:

1. **File reading** - Reads SKILL.md files (which is their purpose)
2. **Dynamic behavior** - Agent behavior changes based on available skills (by design)
3. **Prompt modification** - Injects skill descriptions into prompt (for discovery)

**This is capability awareness, not security bypass.**

## Safe Usage

```bash
# Install the skill
clawhub install capability-awareness

# Add skill descriptions to your workspace
# See IMPLEMENTATION_PLAN.md for details

# Agent automatically discovers and uses skills
```

## Security Model

### What the Agent Can See
- Skill names and descriptions (from SKILL.md)
- When to use each skill
- Documentation for relevant skills

### What the Agent Cannot Do
- Access files outside workspace (OpenClaw sandbox enforces this)
- Execute arbitrary code (must use permitted OpenClaw tools)
- Bypass existing security controls
- Escalate privileges

### Permission Inheritance
- Skills operate within agent's existing permissions
- No new privileges granted
- OpenClaw's tool policy still applies
- Sandbox restrictions still enforced

## Verification

To verify safety:
1. ✅ Review the design docs: `IMPLEMENTATION_PLAN.md` (conceptual framework)
2. ✅ Check implementation: Skills-first approach (no runtime code)
3. ✅ Inspect skill files: Plain markdown documentation only
4. ✅ Test permissions: Agent still constrained by OpenClaw policies

## Comparison to Plugin Systems

| System | Dynamic Loading? | Permission Model |
|--------|-----------------|------------------|
| Browser plugins | ✅ Yes | Separate permissions |
| **Capability Awareness** | ❌ No (docs only) | Inherits agent permissions |
| OpenClaw skills | ✅ Yes | Tool policy controlled |

**Capability Awareness is simpler and safer** - it only loads documentation, not executable code.

## License & Disclaimer

MIT License - Provided "AS IS" with NO WARRANTIES.

**Design goal:** Enable skill discovery without complexity or security risks.

---

**TL;DR:** This is a documentation discovery system that helps agents understand their capabilities. It only reads SKILL.md files (documentation), does not execute code, and does not bypass OpenClaw's existing security model.


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: suspicious | SkillSpector: clean (LOW)