Agent Skills Collector
v1.0.0根据Agent业务类型,从SkillHub (skillhub.tencent.com) 实时搜索收集相关的AI Skills并导出为Excel清单。支持交互式选择数据源。
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say it will search SkillHub and export Excel. The SKILL.md and the Python script implement searches (via the skillhub CLI and HTTP calls to a ClawHub mirror), collect metadata, translate descriptions, classify/tag, and write an Excel — all consistent with the stated purpose.
Instruction Scope
SKILL.md only asks the user to install the skillhub CLI and Python deps, then run the script or use skillhub search commands. The runtime instructions and script operations (subprocess call to 'skillhub', HTTP fetches, and Excel output) are within the expected scope and do not attempt to read unrelated local files or environment variables.
Install Mechanism
There is no automated install spec; the README asks the user to 'npm install -g skillhub' and 'pip3 install openpyxl requests'. Requirements are minimal and come from public registries; there are no obscure download URLs or archive extracts in the package itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. The script makes outbound HTTP requests (skillhub CLI output, cn.clawhub-mirror.com, and a public translation API) which are necessary for gathering metadata and translations — no secret access is requested.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request persistent agent privileges or modify other skills. It writes only the Excel output file and does not alter agent/system configuration.
Assessment
This skill appears coherent for collecting skills from SkillHub/ClawHub and exporting to Excel. Before installing/running: (1) review the skillhub CLI you will install via npm (confirm package source and trust), since the script invokes it via subprocess; (2) be aware the script makes outbound HTTP calls to cn.clawhub-mirror.com and a public translation API (no secrets are sent, but network access is required); (3) run the script in a non-privileged environment and inspect the Python file if you want to verify behavior (it only writes an Excel file and prints prompts); (4) if you need higher assurance, run it in an isolated/containerized environment or review the full script source first.Like a lobster shell, security has layers — review code before you run it.
collectorexcellatestskills
Agent Skills 收集
根据Agent的业务类型,实时从 SkillHub 搜索收集相关Skills。
前置要求
# 安装 skillhub CLI
npm install -g skillhub
# 安装 Python 依赖
pip3 install openpyxl requests
快速开始
方式1:直接搜索
skillhub search "hr" --json --search-limit 30
skillhub search "feishu" --json --search-limit 30
方式2:使用脚本
python3 scripts/collect_agent_skills.py <agent类型> --keywords "关键词1,关键词2" -o <输出路径>
# 示例
python3 scripts/collect_agent_skills.py hr --keywords "hr,招聘,考勤" -o hr_skills.xlsx
python3 scripts/collect_agent_skills.py it --keywords "k8s,docker,运维" -o it_skills.xlsx
支持的Agent类型和关键词
| 类型 | 关键词 |
|---|---|
| hr | hr, resume, recruit, employee, payroll, 招聘, 考勤, 绩效 |
| sales | crm, sales, customer, lead, 销售, 客户, 商机 |
| customer_service | support, ticket, service, 客服, 工单 |
| data_analysis | sql, database, analytics, bi, data, 分析 |
| finance | finance, invoice, tax, 报销, 发票, 税务 |
| it | cloud, k8s, docker, monitoring, security, 运维 |
| marketing | marketing, seo, ads, 营销, 推广 |
| legal | legal, contract, 合规, 合同 |
| content | writing, content, 写作, 文案 |
输出格式
Excel包含以下列:名称、关联度、类别、描述、安装命令、标签
注意事项
- 每次搜索后等待3-5秒,避免API限流
- 优先使用summary字段(中文描述)
- 根据slug去重
Comments
Loading comments...
