Building a SkillHub that Wins Users: Lessons from ClawHub and Nacos Registry

Four controversies of ClawHub

Unstable – rate‑limit errors. Chinese users frequently encounter Rate limit exceeded when installing Skills, because the community‑run service cannot sustain the rapid traffic growth (OpenClaw gained 170 k stars in two weeks).

Insecure – security lag. In December 2025 malicious Skills appeared on ClawHub. A Koi Security report on 2026‑01‑24 (the “ClawHavoc” incident) audited 2,857 Skills, finding 341 (≈11.9 %) containing code that stole API keys, wallet private keys, SSH credentials and browser passwords. OpenClaw responded by integrating VirusTotal scanning, appointing a dedicated security lead and publishing a threat model.

Untraceable – no version/source tracking. When a Skill exists both on ClawHub and a mirror, it is unclear which version is newest, how quickly a removed Skill is synchronized, or when security patches propagate.

Uncontrollable – low publishing threshold. Publishing requires only a GitHub account older than one week, which allows malicious Skills to slip into production.

Enterprise‑grade Skill governance requirements

Autonomous control. Imported community Skills are registered in the company’s own registry, fully decoupled from external platforms so upstream rate‑limits or outages cannot affect production.

Depth‑wise defense. All Skills undergo internal checks (prompt‑injection detection, sensitive‑information identification, permission‑escalation scanning) before entering production, avoiding reliance on external platform security evolution.

Version traceability. Every change is recorded with tags such as stable, canary and gray. A typical workflow publishes v1.1.0 with the canary tag, validates in a canary environment, then promotes to stable. Rollback to the previous stable version is instantaneous.

Release control. Multi‑level approval workflows ensure that only authorized Skills reach production.

Nacos AI Skill Registry (3.2.x)

Nacos introduces a private “Skill Registry” that functions as an enterprise‑level AI Skill npm. It accepts JSON or Zip packages (compatible with ClawHub’s format), provides fuzzy and exact search, and offers a web UI for creation, editing and inspection.

Full lifecycle management

Registration & discovery. Skills can be registered via JSON or a Zip containing SKILL.md and resources. The console visualizes the catalog.

Approval workflow. Starting with version 3.2.0, a multi‑level approval process is added. Developers submit a Skill, reviewers approve, and the Skill is released to the designated environment. Production environments enforce mandatory approval; test environments may allow direct publishing.

Versioning & gray release.

Developer publishes v1.1.0 with the canary tag.

Canary agents automatically pull the version for validation.

After verification, the tag switches to stable.

If issues arise, a rapid rollback to the previous stable version occurs without restarting applications.

Namespace isolation. Separate namespaces (e.g., dev, production) prevent cross‑environment interference.

Real‑time push & dynamic loading. Nacos’s configuration push notifies subscribed Agents of Skill or Prompt updates instantly, eliminating the need for application restarts.

AI Copilot assistance. Built‑in AI Copilot offers Skill optimization suggestions, automatic Skill draft generation from business scenarios, and Prompt debugging with streaming output recommendations.

nacos‑cli – the developer’s Skill management tool

# Linux / macOS: one‑line install
curl -fsSL https://nacos.io/nacos-installer.sh | sudo bash -s -- --cli
# Or via npm
npm install -g @nacos-group/cli
# Use without installing
npx @nacos-group/cli --help

Typical usage:

# List all Skills
nacos-cli skill-list -s 127.0.0.1:8848
# Download a Skill locally
nacos-cli skill-get my-skill -o ~/.skills
# Upload a local Skill to the Registry
nacos-cli skill-upload /path/to/skill
# Batch upload a directory of Skills
nacos-cli skill-upload --all /path/to/skills
# Real‑time sync from Registry to local
nacos-cli skill-sync --all

Beyond Skills – Complete AI Asset Registry

Skill Registry : registration, version management, search, Zip import, CLI management.

Prompt Registry : multi‑version release, tag‑based gray rollout, template variables, real‑time push.

MCP Registry : MCP Server registration, tool management, multi‑protocol endpoint adaptation.

Agent Registry : Agent card management, version control, endpoint discovery.

Upcoming 3.2.0 capabilities

Approval workflow. Multi‑level Skill approval addresses the low publishing threshold of ClawHub.

Security scanning. Automatic detection of prompt injection and sensitive data mitigates the risks exposed by the ClawHavoc incident.

Fine‑grained permissions. Distinguish edit rights from production publishing rights to satisfy enterprise governance.

All these capabilities directly respond to the concrete problems revealed by the ClawHub controversy.

Conclusion

ClawHub excels at community discovery, but enterprises need a private, governed registry to guarantee stability, security, traceability and control. Nacos’s AI Skill Registry, together with the nacos-cli tool, provides a complete, enterprise‑ready solution that complements the open ecosystem while eliminating the risks of upstream rate limits, security incidents and uncontrolled publishing.

Relevant resources:

Nacos GitHub: https://github.com/alibaba/nacos

nacos‑cli GitHub: https://github.com/nacos-group/nacos-cli

Official documentation: https://nacos.io