Skip to main content
Packages from IronHub can be installed through the CLI or by asking your agent in chat.

​
CLI

Filter the catalog by keyword:

​
List

Browse all entries, optionally filtered by kind:

​
Inspect an entry

Prints the entry’s provenance, version, and SHA-256 artifact digest. Use the digest to pin an exact version during install.

​
Install

Community entries (provenance New) require explicit acknowledgement from the operator. The agent cannot install them autonomously. Pass --acknowledge-unverified to confirm.

​
Pin to a version or digest

By default IronClaw installs the version in the current manifest. To require a specific version or digest:

​
Force reinstall

​
Via chat

Ask your agent to search IronHub, inspect an entry, or install a package. It will fetch the catalog, present matching results, and ask your approval before installing anything.
Approving in chat cannot install a community entry (provenance New). The model-facing install path never sets the acknowledgement the gate requires, so the install is refused no matter how you answer. Install those from the CLI with --acknowledge-unverified.

​
Where things are installed

​
Trust and tool access

Packages installed from IronHub have Installed trust — the model sees the skill description but not its full prompt body, and the agent cannot self-activate them. Skills you place directly in your skills directory have Trusted trust — the full prompt body is loaded and the agent can activate them autonomously. If you fully trust an IronHub skill, move it to ~/.ironclaw/skills/ after reviewing its contents.
Never move a skill you haven’t reviewed into the trusted directory. A skill in ~/.ironclaw/skills/ has the same execution power as you do.