A deterministic setup and remediation helper that prepares target Openclaw Skills for execution within a secure sandbox environment.
The fastest way to install a skill directly from the registry.
npx clawhub@latest install safe-bootstrapper
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
Copy this prompt to OpenClaw to install it automatically.
Help me install safe-bootstrapper using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Get the raw skill files in a ZIP archive.
SAFE Bootstrapper is a specialized utility designed to bridge the gap between skill installation and execution. It acts as a pre-flight controller for Openclaw Skills, ensuring that all local prerequisites—such as environment files, directory structures, and git repositories—are correctly configured before any behavioral fuzzing or complex workflows begin.
By focusing on deterministic local remediation, this skill eliminates the manual friction often associated with setting up complex AI agent environments. It operates with a strict security-first approach, refusing any actions that require elevated privileges or external network access, making it an essential tool for developers who prioritize safe, reproducible AI agent deployments.
To utilize this skill within your environment, invoke it directly through the Openclaw interface. No external installation of dependencies is required as it uses sandbox-local primitives.
# Basic invocation to bootstrap a specific skill
/safe_bootstrapper target=my-target-skill
# Invocation with optional operator guidance
/safe_bootstrapper target=my-target-skill notes="ensure .env is copied from .env.example"
The skill produces a structured JSON output report. The following table describes the primary fields used to organize the setup data for Openclaw Skills:
| Field | Type | Description |
|---|---|---|
summary |
String | A plain-language overview of the readiness status and attempted fixes. |
ready |
Boolean | Indicates if the target can proceed without further deterministic setup. |
run_status |
String | Captures the execution outcome (completed, refused_preflight, or invalid_request). |
applied_fixes |
Array | A list of specific local remediations successfully performed during the run. |
remaining_blockers |
Array | List of issues requiring manual intervention or policy-gated actions. |
rerun_command |
String | The suggested next command to execute once blockers are cleared. |
npm install or docker compose to prevent unauthorized execution.Loading
A sandbox-exclusive security tool that orchestrates worker subagents to probe, test, and report on the behavioral risks of installed skills.

An enterprise-grade AI agency framework featuring 61 specialized agents organized into functional departments for complex project execution.

A sandbox-only, behavior-led gray-box fuzzer designed to audit and report the risk levels of installed AI agent skills.

A high-performance skill for programmatically generating and iteratively editing Mermaid.js and Draw.io diagrams through multimodal context analysis.

An AI-powered medical billing assistant that translates clinical documentation into accurate ICD-10, CPT, and E&M codes while flagging denial risks.

A versatile skill for AI agents to send emails and configure SMTP services like QQ, 126, and Aliyun via environment variables.








































