ClawHub

Agentfinder

v1.0.0

Kayak for agents — search across ClawHub, SkillsMP, LobeHub, and more to find the right skill for your task. Compare results across registries, get recommend...

⭐ 0· 37·0 current·0 all-time
by@mirni
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AgentFinder: aggregator/search across registries) match the code and SKILL.md. The package only needs Python and uses a local index of registries/skills; URLs in the index are references only. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md tells the operator to run uvicorn locally and to call local endpoints (search, compare, recommend, registries). The instructions do not ask the agent to read system files, environment secrets, or transmit data to external endpoints; runtime behavior is limited to the local API described.
✓
Install Mechanism
Install spec indicates installing well-known Python packages (fastapi, uvicorn, pydantic) via pip. These are standard dependencies for a local FastAPI app. The install kind labeled 'uv' is uncommon but SKILL.md metadata shows pip package names; nothing is being downloaded from an untrusted custom URL or executed from a remote archive.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The code does not reference environment secrets. Requested privileges are minimal and proportional to a local search API.
✓
Persistence & Privilege
always is false and the skill does not request permanent presence or modify other skills or system-wide settings. It exposes a local HTTP API only when the operator runs the server.
Assessment
This skill appears internally consistent and limited to running a local FastAPI server that searches a built-in skill index. Before installing: 1) be aware it will install Python packages from PyPI (fastapi, uvicorn, pydantic) — install in a virtualenv or container if you prefer isolation; 2) the index is local/static, so it won't fetch live registry data unless modified to do so — review agentfinder/registries.py if you expect live scraping or syncing; 3) there is no network exfiltration or secret access in the current code, but if the owner adds adapters that call external registries you should review any new network code and required credentials. If you want, I can point out the exact lines that are safe or highlight where to add live-registry connectors safely.

Like a lobster shell, security has layers — review code before you run it.

latestvk972c5z7p61t85jgx4g5qrdjkn84tyvh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔎 Clawdis
Binspython

Install

uv

Comments