Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gno.Bak 2026 01 28T18:01:20+10:30

v1.0.0

Search local documents, files, notes, and knowledge bases. Index directories, search with BM25/vector/hybrid, get AI answers with citations. Use when user wants to search files, find documents, query notes, look up information in local folders, index a directory, set up document search, build a knowledge base, needs RAG/semantic search, or wants to start a local web UI for their docs.

0· 1.7k·0 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description describe a local-document semantic search tool and the SKILL.md exclusively documents gno CLI commands (index, search, serve, manage models, MCP). Nothing in the manifest asks for unrelated credentials, binaries, or cloud access, so the requested capabilities align with the stated purpose.
Instruction Scope
Instructions tell the agent to run gno CLI commands and to read local documents (via collections). This is expected for a search/indexing tool, but it does grant the agent read access to files the user chooses to index and the ability to start a local web UI or MCP server—actions that can expose local data if misconfigured. The SKILL.md does not instruct reading arbitrary system files or exfiltrating data.
Install Mechanism
No install spec is provided (instruction-only), so nothing is written to disk by the skill itself. This is the lowest-risk pattern; it does assume a preinstalled 'gno' CLI is available on PATH but does not attempt to download or extract code.
Credentials
The skill declares no required environment variables, credentials, or config paths. All commands relate to local indexing, searching, and optional serving/model management, so the absence of extra secrets is proportionate to the stated functionality.
Persistence & Privilege
The skill does not set always:true, but it also does not set disableModelInvocation:false (left at default), meaning the model may invoke the skill when eligible. That is consistent with an agent-accessible tool, but users who don't want autonomous searches or file reads should consider adjusting invocation policies.
Assessment
This skill is coherent for local document search, but before using it you should: (1) ensure the 'gno' CLI you run is from a trusted source; (2) be deliberate about which directories you add to collections—indexing exposes those files to the tool and any served web UI; (3) review & secure any MCP/web UI configuration (network binding, auth) before serving; and (4) if you don't want the agent to autonomously run searches that read local files, disable model-initiated invocation or require explicit user consent.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c4gw68effdd2k7c4mjb6e7s802szk
1.7kdownloads
0stars
1versions
Updated 11h ago
v1.0.0
MIT-0

GNO - Local Knowledge Engine

Fast local semantic search. Index once, search instantly. No cloud, no API keys.

When to Use This Skill

  • User asks to search files, documents, or notes
  • User wants to find information in local folders
  • User needs to index a directory for searching
  • User mentions PDFs, markdown, Word docs, code to search
  • User asks about knowledge base or RAG setup
  • User wants semantic/vector search over their files
  • User needs to set up MCP for document access
  • User wants a web UI to browse/search documents
  • User asks to get AI answers from their documents
  • User wants to tag, categorize, or filter documents
  • User asks about backlinks, wiki links, or related notes
  • User wants to visualize document connections or see a knowledge graph

Quick Start

gno init                              # Initialize in current directory
gno collection add ~/docs --name docs # Add folder to index
gno index                             # Build index (ingest + embed)
gno search "your query"               # BM25 keyword search

Command Overview

CategoryCommandsDescription
Searchsearch, vsearch, query, askFind documents by keywords, meaning, or get AI answers
Linkslinks, backlinks, similar, graphNavigate document relationships and visualize connections
Retrieveget, multi-get, lsFetch document content by URI or ID
Indexinit, collection add/list/remove, index, update, embedSet up and maintain document index
Tagstags, tags add, tags rmOrganize and filter documents
Contextcontext add/list/rm/checkAdd hints to improve search relevance
Modelsmodels list/use/pull/clear/pathManage local AI models
ServeserveWeb UI for browsing and searching
MCPmcp, mcp install/uninstall/statusAI assistant integration
Skillskill install/uninstall/show/pathsInstall skill for AI agents
Adminstatus, doctor, cleanup, reset, vec, completionMaintenance and diagnostics

Search Modes

CommandSpeedBest For
gno searchinstantExact keyword matching
gno vsearch~0.5sFinding similar concepts
gno query --fast~0.7sQuick lookups
gno query~2-3sBalanced (default)
gno query --thorough~5-8sBest recall, complex queries
gno ask --answer~3-5sAI-generated answer with citations

Retry strategy: Use default first. If no results: rephrase query, then try --thorough.

Common Flags

-n <num>              Max results (default: 5)
-c, --collection      Filter to collection
--tags-any <t1,t2>    Has ANY of these tags
--tags-all <t1,t2>    Has ALL of these tags
--json                JSON output
--files               URI list output
--line-numbers        Include line numbers

Global Flags

--index <name>    Alternate index (default: "default")
--config <path>   Override config file
--verbose         Verbose logging
--json            JSON output
--yes             Non-interactive mode
--offline         Use cached models only
--no-color        Disable colors
--no-pager        Disable paging

Important: Embedding After Changes

If you edit/create files that should be searchable via vector search:

gno index              # Full re-index (sync + embed)
# or
gno embed              # Embed only (if already synced)

MCP gno.sync and gno.capture do NOT auto-embed. Use CLI for embedding.

Reference Documentation

TopicFile
Complete CLI reference (all commands, options, flags)cli-reference.md
MCP server setup and toolsmcp-reference.md
Usage examples and patternsexamples.md

Comments

Loading comments...