Files
openclaw/docs/platforms/mac/skills.md
Josh Avant 154f439c81 Add operator install policy and remove dangerous-code install scanners (#89516)
* feat: add operator install policy

* test: cover plain-file plugin install code

* fix: preserve locationless install policy findings

* refactor: remove install-time plugin scanner

* test: remove stale plugin install helper

* fix: preserve before-install builtin scan type

* fix: preserve plugin dependency denylist

---------

Co-authored-by: Mainframe <mainframe@MainfraacStudio.localdomain>
2026-06-03 14:17:29 -07:00

46 lines
1.7 KiB
Markdown

---
summary: "macOS Skills settings UI and gateway-backed status"
read_when:
- Updating the macOS Skills settings UI
- Changing skills gating or install behavior
title: "Skills (macOS)"
---
The macOS app surfaces OpenClaw skills via the gateway; it does not parse skills locally.
## Data source
- `skills.status` (gateway) returns all skills plus eligibility and missing requirements
(including allowlist blocks for bundled skills).
- Requirements are derived from `metadata.openclaw.requires` in each `SKILL.md`.
## Install actions
- `metadata.openclaw.install` defines install options (brew/node/go/uv).
- The app calls `skills.install` to run installers on the gateway host.
- Operator-owned `security.installPolicy` can block gateway-backed skill
installs before installer metadata runs. Install-time built-in dangerous-code
blocking is not part of the skill install flow.
- If every install option is `download`, the gateway surfaces all download
choices.
- Otherwise, the gateway picks one preferred installer using the current
install preferences and host binaries: Homebrew first when
`skills.install.preferBrew` is enabled and `brew` exists, then `uv`, then the
configured node manager from `skills.install.nodeManager`, then later
fallbacks like `go` or `download`.
- Node install labels reflect the configured node manager, including `yarn`.
## Env/API keys
- The app stores keys in `~/.openclaw/openclaw.json` under `skills.entries.<skillKey>`.
- `skills.update` patches `enabled`, `apiKey`, and `env`.
## Remote mode
- Install + config updates happen on the gateway host (not the local Mac).
## Related
- [Skills](/tools/skills)
- [macOS app](/platforms/macos)