Find Skill

智能搜索和发现技能包，支持中英双语、多来源，按关键词、标签及作者快速定位所需技能。

Security Scan

The skill appears to implement a search/discovery tool consistent with its description; it performs network queries to external mirrors but does not ask for credentials or access unrelated system resources.

Purpose & Capability

Name/description match the code: this is a skills search/discovery tool. It requires no credentials and only performs HTTP requests to skill indexes and mirrors. Minor inconsistencies: SKILL.md lists Fuse.js and TypeScript in the tech stack, but package.json only depends on axios and the repository is plain JS, not TypeScript. These are likely documentation mismatches rather than functional issues.

Instruction Scope

Runtime instructions are CLI-oriented and the code follows that scope. The implementation issues network calls to clawhub.ai and an external mirror at https://skills.volces.com/api/v1/search to fetch results; it caches results locally. There are no instructions or code paths that read local secrets, system config, or other unrelated files in the provided files. The use of an external mirror (not documented in SKILL.md) is worth noting.

Install Mechanism

No install spec is provided in SKILL.md/registry metadata (instruction-only), but the package contains source files and package.json (depends on axios). That mismatch means the skill will require Node.js/npm to run but the registry metadata doesn't declare an install process. Also SKILL.md mentions Fuse.js which is not present in package.json—this inconsistency may break runtime fuzzy-search features unless the missing dependency is added.

Credentials

The skill declares no required environment variables, no credentials, and no protected config paths. Its network requests are to public HTTP endpoints and it uses local in-memory caching. No secrets access is requested or evident in the code provided.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide configuration in the provided code, and has no special persistence or elevated privileges. It behaves like a normal CLI/network client.

Assessment

This skill is internally consistent with being a search/discovery tool and does not request credentials. Before installing or running it: 1) note it will make outbound HTTPS requests to clawhub.ai and to an external mirror at skills.volces.com — verify you trust those hosts (network egress). 2) The repository mentions Fuse.js/TypeScript but package.json only lists axios; ensure required dependencies are installed or add missing packages before running. 3) Because there is no declared install spec, run it in a controlled environment (container or VM) and inspect the remaining truncated files not shown here for any other network endpoints or unexpected behavior. If you need zero network egress, do not install or run this skill.

---

name: findskill version: 1.0.4 description: 智能搜索和发现 OpenClaw 技能，支持中英双语，多来源搜索 homepage: https://clawhub.ai metadata: openclaw: emoji: "🔍" requires: bins: []

FindSkill 技能包

简介

FindSkill 是一个强大的 OpenClaw 技能搜索和发现工具，帮助用户快速找到所需的技能包。

功能特点

• 智能搜索：支持关键词、标签、作者等多维度搜索
• 中英双语：完美支持中文和英文搜索
• 多来源搜索：可从 ClawHub、本地仓库等多个来源搜索技能
• 实时更新：技能数据库保持最新状态
• 详细信息：提供技能包的完整描述、使用示例和版本信息

使用场景

1. 寻找特定技能：快速定位符合需求的技能包
2. 技能分类浏览：按类别浏览可用技能
3. 技能趋势分析：了解热门技能和最新发布
4. 技能依赖查询：查看技能包之间的依赖关系

搜索语法

FindSkills 支持高级搜索语法：

• 关键词搜索："web scraping"
• 标签搜索：tag:automation
• 作者搜索：author:clawhub
• 组合搜索："data analysis" tag:python

安装与使用

安装后，您可以使用以下命令：

• 搜索技能：findskill search <关键词>
• 列出热门技能：findskill trending
• 查看技能详情：findskill info <技能名称>

技术栈

• Node.js
• TypeScript
• Axios（HTTP 请求）
• Fuse.js（模糊搜索）

贡献

欢迎在 GitHub 上提交 Issue 和 Pull Request！

许可证

MIT License