MCP Hub
Back to servers

openclaw-superpowers

44 plug-and-play skills for OpenClaw — self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graphs, and MCP health monitoring. Your agent teaches itself new behaviors during conversation.

GitHub
Stars
12
Forks
1
Updated
Mar 15, 2026
Validated
Mar 17, 2026

openclaw-superpowers

44 ready-to-use skills that make your AI agent autonomous, self-healing, and self-improving.

Skills Security Cron Scripts License: MIT

A plug-and-play skill library for OpenClaw — the open-source AI agent runtime. Gives your agent structured thinking, security guardrails, persistent memory, cron scheduling, self-recovery, and the ability to write its own new skills during conversation.

Built for developers who want their AI agent to run autonomously 24/7, not just respond to prompts in a chat window.

Inspired by obra/superpowers. Extended for agents that never sleep.


Why this exists

Most AI agent frameworks give you a chatbot that forgets everything between sessions. OpenClaw is different — it runs persistently, handles multi-hour tasks, and has native cron scheduling. But out of the box, it doesn't know how to use those capabilities well.

openclaw-superpowers bridges that gap. Install once, and your agent immediately knows how to:

  • Think before it acts — brainstorming, planning, and systematic debugging skills prevent the "dive in and break things" failure mode
  • Protect itself — 6 security skills detect prompt injection, block dangerous actions, audit installed code, and scan for leaked credentials
  • Run unattended — 12 cron-scheduled skills handle memory cleanup, health checks, budget tracking, and community monitoring while you sleep
  • Recover from failures — self-recovery, loop-breaking, and task handoff skills keep long-running work alive across crashes and restarts
  • Improve itself — the agent can write new skills during normal conversation using create-skill, encoding your preferences as permanent behaviors

The self-modifying agent

This is what makes openclaw-superpowers different from every other plugin library:

"Every time I do a code review, check for security issues first."

Your agent invokes create-skill, writes a new SKILL.md, and that behavior is live — immediately, permanently, no restart needed. The agent encodes your preferences as durable skills. You describe what you want. It teaches itself.

The community-skill-radar skill takes this further: it scans Reddit every 3 days for pain points and feature requests from the OpenClaw community, scores them by signal strength, and writes a prioritized PROPOSALS.md — so the agent (or you) always knows what to build next.


Quickstart

git clone https://github.com/ArchieIndian/openclaw-superpowers ~/.openclaw/extensions/superpowers
cd ~/.openclaw/extensions/superpowers && ./install.sh
openclaw gateway restart

install.sh symlinks all 44 skills, creates state directories for stateful skills, and registers cron jobs — everything in one step. That's it. Your agent now has superpowers.


Skills included

Core (15 skills)

Methodology skills that work in any AI agent runtime. Adapted from obra/superpowers plus new additions for skill quality assurance.

SkillWhat it doesScript
using-superpowersBootstrap — teaches the agent how to find and invoke skills
brainstormingStructured ideation before any implementation
writing-plansClear, reviewable implementation plans
executing-plansExecutes plans step-by-step with verification
systematic-debugging4-phase root cause process before any fix
verification-before-completionEnsures tasks are done, not just attempted
test-driven-developmentRed-green-refactor discipline
subagent-driven-developmentParallel subagent execution for complex tasks
create-skillWrites new skills during conversation
skill-vettingSecurity scanner for ClawHub skills before installingvet.sh
project-onboardingCrawls a new codebase to generate a PROJECT.md context fileonboard.py
fact-check-before-trustSecondary verification pass for factual claims before acting on them
skill-trigger-testerScores a skill's description against sample prompts to predict trigger reliabilitytest.py
skill-conflict-detectorDetects name shadowing and description-overlap conflicts between installed skillsdetect.py
skill-portability-checkerValidates OS/binary dependencies in companion scripts; catches non-portable callscheck.py

OpenClaw-Native (28 skills)

Skills that require OpenClaw's persistent runtime — cron scheduling, session state, or long-running execution. These are the skills that make a 24/7 autonomous agent actually work reliably.

SkillWhat it doesCronScript
long-running-task-managementBreaks multi-hour tasks into checkpointed stages with resumeevery 15 min
persistent-memory-hygieneKeeps the agent's memory store clean and useful over timedaily 11pm
task-handoffGracefully hands off incomplete tasks across agent restarts
agent-self-recoveryDetects when the agent is stuck in a loop and escapes
context-window-managementPrevents context overflow on long-running sessions
daily-reviewEnd-of-day structured summary and next-session prepweekdays 6pm
morning-briefingDaily briefing: priorities, active tasks, pending handoffsweekdays 7amrun.py
secrets-hygieneAudits installed skills for stale credentials and orphaned secretsMondays 9amaudit.py
workflow-orchestrationChains skills into resumable named workflows with on-failure conditionsrun.py
context-budget-guardEstimates context usage and triggers compaction before overflowcheck.py
prompt-injection-guardDetects injection attempts in external content before the agent actsguard.py
spend-circuit-breakerTracks API spend against a monthly budget; pauses crons at 100%every 4hcheck.py
dangerous-action-guardRequires explicit user confirmation before irreversible actionsaudit.py
loop-circuit-breakerDetects infinite retry loops from deterministic errors and breaks themcheck.py
workspace-integrity-guardianDetects drift or tampering in SOUL.md, AGENTS.md, MEMORY.mdSundays 3amguard.py
multi-agent-coordinatorManages parallel agent fleets: health checks, consistency, handoffsrun.py
cron-hygieneAudits cron skills for session mode waste and token efficiencyMondays 9amaudit.py
channel-context-bridgeWrites a context card at session end for seamless channel switchingbridge.py
skill-doctorDiagnoses silent skill discovery failures — YAML errors, path violations, schema mismatchesdoctor.py
installed-skill-auditorWeekly post-install audit of all skills for injection, credentials, and driftMondays 9amaudit.py
skill-loadout-managerNamed skill profiles to manage active skill sets and prevent system prompt bloatloadout.py
skill-compatibility-checkerChecks installed skills against the current OpenClaw version for feature compatibilitycheck.py
heartbeat-governorEnforces per-skill execution budgets for cron skills; auto-pauses runaway skillsevery hourgovernor.py
community-skill-radarScans Reddit for OpenClaw pain points and feature requests; writes prioritized PROPOSALS.mdevery 3 daysradar.py
memory-graph-builderParses MEMORY.md into a knowledge graph; detects duplicates, contradictions, stale entriesdaily 10pmgraph.py
config-encryption-auditorScans config directories for plaintext API keys, tokens, and world-readable permissionsSundays 9amaudit.py
tool-description-optimizerScores skill descriptions for trigger quality — clarity, specificity, keyword density — and suggests rewritesoptimize.py
mcp-health-checkerMonitors MCP server connections for health, latency, and availability; detects stale connectionsevery 6hcheck.py

Community (1 skill)

Skills written by agents and contributors. Any agent can add a community skill via create-skill.

SkillWhat it doesCronScript
obsidian-syncSyncs OpenClaw memory to an Obsidian vault nightlydaily 10pmsync.py

Security & guardrails

Six skills form a defense-in-depth security layer for autonomous agents:

ThreatSkillHow it works
Malicious skill installsskill-vettingPre-install scanner with 6 security flags — rates SAFE / CAUTION / DO NOT INSTALL
Prompt injection from external contentprompt-injection-guardDetects 6 injection signal types at runtime; blocks on 2+ signals
Agent takes destructive action without askingdangerous-action-guardPre-execution confirmation gate with 5-min expiry and full audit trail
Post-install tampering or credential injectioninstalled-skill-auditorWeekly SHA-256 drift detection; checks for INJECTION / CREDENTIAL / EXFILTRATION
Silent skill loading failuresskill-doctor6 diagnostic checks per skill; surfaces every load-time failure
Plaintext secrets in config filesconfig-encryption-auditorScans for 8 API key patterns + 3 token patterns; auto-fixes permissions

How it compares

Featureopenclaw-superpowersobra/superpowersCustom prompts
Skills included4480
Self-modifying (agent writes new skills)YesNoNo
Cron scheduling12 scheduled skillsNoNo
Persistent state across sessionsYAML state schemasNoNo
Security guardrails6 defense-in-depth skillsNoNo
Companion scripts with CLI15 scriptsNoNo
Memory graph / knowledge graphYesNoNo
MCP server health monitoringYesNoNo
API spend tracking & budget enforcementYesNoNo
Community feature radar (Reddit scanning)YesNoNo
Multi-agent coordinationYesNoNo
Works with 24/7 persistent agentsBuilt for itSession-onlySession-only

Architecture

~/.openclaw/extensions/superpowers/
├── skills/
│   ├── core/                    # 15 methodology skills (any runtime)
│   │   ├── brainstorming/
│   │   │   └── SKILL.md
│   │   ├── create-skill/
│   │   │   ├── SKILL.md
│   │   │   └── TEMPLATE.md
│   │   └── ...
│   ├── openclaw-native/         # 28 persistent-runtime skills
│   │   ├── memory-graph-builder/
│   │   │   ├── SKILL.md             # Skill definition + YAML frontmatter
│   │   │   ├── STATE_SCHEMA.yaml    # State shape (committed, versioned)
│   │   │   ├── graph.py             # Companion script
│   │   │   └── example-state.yaml   # Annotated example
│   │   └── ...
│   └── community/               # Agent-written and contributed skills
├── scripts/
│   └── validate-skills.sh       # CI validation
├── tests/
│   └── test-runner.sh
└── install.sh                   # One-command setup

State model: Each stateful skill commits a STATE_SCHEMA.yaml defining the shape of its runtime data. At install time, install.sh creates ~/.openclaw/skill-state/<skill-name>/state.yaml on your machine. The schema is portable and versioned; the runtime state is local-only and never committed.


Companion scripts

Skills marked with a script ship a small executable alongside their SKILL.md:

  • 15 Python scripts (run.py, audit.py, check.py, guard.py, bridge.py, onboard.py, sync.py, doctor.py, loadout.py, governor.py, detect.py, test.py, radar.py, graph.py, optimize.py) — run directly to manipulate state, generate reports, or trigger actions. No extra dependencies; pyyaml is optional but recommended.
  • vet.sh — Pure bash scanner; runs on any system with grep.
  • Every script supports --help and --format json. Dry-run mode available on scripts that make changes.
  • See the example-state.yaml in each skill directory for sample state and a commented walkthrough of cron behaviour.

Use cases

Solo developer with a persistent AI agent

Install superpowers, and your agent handles memory cleanup, security audits, and daily briefings on autopilot. You focus on building; the agent maintains itself.

Team running multiple OpenClaw agents

Use multi-agent-coordinator for fleet health checks, skill-loadout-manager to keep system prompts lean per agent role, and heartbeat-governor to prevent runaway cron costs.

Open-source maintainer

community-skill-radar scans Reddit for pain points automatically. skill-vetting catches malicious community contributions before they're installed. installed-skill-auditor detects post-install tampering.

Security-conscious deployment

Six defense-in-depth skills: pre-install vetting, runtime injection detection, destructive action gates, post-install drift detection, credential scanning, and silent failure diagnosis.


Contributing

  1. Open a Skill Proposal issue — or just ask your agent to write one using create-skill
  2. Run ./scripts/validate-skills.sh
  3. Submit a PR — CI validates automatically
  4. Community skills may be promoted to core over time

Credits

Reviews

No reviews yet

Sign in to write a review