ClawHub

Query-Skills

v1.0.0

智能搜索和发现 OpenClaw 技能，支持中英双语、多来源搜索、实时更新及技能详情查询。

⭐ 0· 52·0 current·0 all-time
bybittao@hgta23
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (搜索/发现 OpenClaw 技能) match the included code: a search engine, source adapters (ClawHub, GitHub mock), ranking/recommender logic and UI helpers. No unexpected binaries, config paths, or unrelated APIs are requested.
ℹ
Instruction Scope
SKILL.md describes search/list/info commands and the code implements them. Runtime behavior sends user queries to external endpoints (https://clawhub.ai and a hard-coded mirror https://skills.volces.com). Sending queries to those network endpoints is expected for this skill, but the mirror is a third-party domain and is not explicitly documented in SKILL.md beyond code references.
✓
Install Mechanism
No install spec and only a lightweight Node.js package.json (axios dependency). No downloads from unknown URLs or extraction steps are present in the manifest.
✓
Credentials
The skill requires no environment variables or credentials in the registry metadata. The code can accept an API key option for ClawHub but does not require it. No broad secret access or unrelated credential requests were found.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes. It does not modify other skills or agent configuration in the provided code.
Assessment
This skill appears to be a straightforward search/discovery tool. Before installing, note that it will send search queries over the network to https://clawhub.ai and (as a coded fallback) https://skills.volces.com — if you require that queries only go to an official index, inspect source-manager.js and ClawHubAPI usage or run the skill in a restricted environment. No credentials are required by default, but the code accepts an optional API key for ClawHub; review or configure that behavior if you plan to provide secrets. If you have strict network/policy requirements, consider limiting outbound network access or reviewing the mirror domain (skills.volces.com) to ensure you trust it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97aqq92d232ezb7xk8wysfpx984dwn5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments