skill-atlas
v1.0.0虾小宝AI Agent技能商店 - 中国AI Agent Skills地图。用于搜索、安装和管理AI Agent技能插件。当用户需要查找国内的AI Agent技能、插件市场、或者访问 ai.skillatlas.cn 时使用此技能。
⭐ 0· 116·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim a China-focused AI Agent skills marketplace. The SKILL.md only instructs the agent to search/browse that site and use web_fetch against https://ai.skillatlas.cn, and the skill requests no binaries, env vars, or installs — this is proportionate to the stated purpose.
Instruction Scope
Runtime instructions only tell the agent to call web_fetch(url="https://ai.skillatlas.cn/") and to use the site's search/API; there are no instructions to read local files, access unrelated environment variables, or transmit data to unexpected endpoints. The only external I/O is the marketplace site, which is consistent with the skill's goal.
Install Mechanism
No install spec and no code files — the skill is instruction-only, which minimizes disk/binary installation risk.
Credentials
The skill declares no required environment variables, credentials, or config paths. Nothing in the SKILL.md attempts to access secrets or unrelated services.
Persistence & Privilege
always is false and there is no mechanism to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default) but the skill itself does not request elevated persistence or privileges.
Assessment
This skill appears coherent and low-risk in itself: it only fetches the marketplace website. Before installing or following its recommendations, verify that https://ai.skillatlas.cn is the official marketplace you trust (the skill metadata shows no source/homepage). Be cautious when the marketplace suggests third-party skills — review each recommended skill's source, required permissions, and any requested credentials before installing. Remember that any web_fetch calls send your query text to the remote site, so avoid including sensitive data in searches. If you require a higher assurance level, prefer skills with verifiable source repos/homepages and inspect the actual install artifacts for each recommended plugin.Like a lobster shell, security has layers — review code before you run it.
latestvk974sbxg7qd561bx1y7ny7b8t583mq1n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
