Find stable, reliable, and secure service for your agents
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: find-services Version: 1.0.1 The find-services skill is a discovery tool designed to search for third-party services using the openspend CLI. The SKILL.md instructions include strong safety boundaries, explicitly prohibiting the installation of software, the handling of sensitive credentials/secrets, and requiring user confirmation before performing authentication tasks. The workflow is limited to search and reporting, with no evidence of malicious intent or high-risk execution patterns.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run local OpenSpend commands to check the CLI/session and search for service providers.
The skill instructs the agent to run local OpenSpend CLI commands, including a marketplace search. This is central to the stated purpose and bounded to discovery.
command -v openspend openspend version openspend whoami ... openspend search "<capability query>" --limit 5 --json
Use this only if you trust the OpenSpend CLI in your environment, and review the resulting provider list before taking any setup or paid action.
If approved, the agent may authenticate to OpenSpend or use an existing OpenSpend account session for search.
The skill can use an existing OpenSpend session or ask the user to approve login. This is expected for an OpenSpend search workflow and is explicitly scoped.
Preferred path: run search with existing CLI session only. Optional credentialed path: OpenSpend user login via `openspend auth login` with explicit user confirmation.
Only approve login if you intend to use your OpenSpend account for this search; do not provide unrelated secrets or payment credentials.
The skill will only work where the OpenSpend CLI is already available or where another setup flow handles installation.
The registry metadata does not declare or install the `openspend` CLI even though the skill instructions rely on it. The artifact mitigates this by telling the agent not to install/update tools and to stop or hand off if the CLI is missing.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Verify the OpenSpend CLI is already installed from a trusted source before using this skill.