← Back to Skills Marketplace
Wanng Ide Auto Skill Hunter
by
terrycarter1985
· GitHub ↗
· v1.0.0
· MIT-0
140
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wanng-ide-auto-skill-hunter
Description
Proactively discovers, ranks, and installs high-value ClawHub skills by mining unresolved user needs and agent context. Use when new tasks are unsolved, when...
Usage Guidance
This skill is coherent with its stated goal but has meaningful risks you should accept consciously before enabling automatic runs. Key actions you can take: 1) Start with --dry-run and SKILL_HUNTER_NO_REPORT=1 to preview candidates without installs or external reports. 2) Limit --max-install to 1 and run it manually at first. 3) Review the hunt.js code paths that perform git clones/scaffolds and the downstream SKILL.md/index.js of any candidate before allowing them to install/run. 4) Restrict execution to an isolated/sandboxed environment or a non-production workspace, and avoid pointing it at agent session directories containing sensitive PII until you audit it. 5) If you plan to enable scheduling, require human review/approval before installs or route reports to an internal audit-only endpoint. If you want lower risk, prefer manual discovery workflows or a read-only preview mode only.
Capability Analysis
Type: OpenClaw Skill
Name: wanng-ide-auto-skill-hunter
Version: 1.0.0
The skill implements an autonomous 'discover-and-install' loop that mines sensitive session logs and user profiles to identify capability gaps, then fetches and executes third-party code from external endpoints (clawhub.com). While this behavior is aligned with its stated purpose of agent evolution, the script (src/hunt.js) automatically executes untrusted remote payloads using execSync for 'self-testing' and suggests persistence via cron jobs, creating a significant Remote Code Execution (RCE) and supply chain risk. It also processes private conversation data to generate search queries, which could lead to unintentional data exposure.
Capability Assessment
Purpose & Capability
The name/description (discover, rank, install skills) match what the code does: mining session/memory files, searching ClawHub, and installing candidates. However the skill reaches into agent session logs (agents/main/sessions), USER.md, and personality state outside the immediate workspace—access that is reasonable for problem-mining but broader than a minimal 'discovery' tool and should be expected and reviewed.
Instruction Scope
SKILL.md instructs running the included hunt.js which (per source) reads recent session JSONL files, task memory, personality/user profile, scores candidates, then clones/installs top skills and runs self-tests. It also references an outbound reporting script and an env flag to disable reporting. Reading cross-session logs and sending external reports are outside purely local search and expand the data-surface exposed by this skill.
Install Mechanism
There is no formal install spec, but the code performs repo cloning and scaffold fallbacks to write new skills into the local skills directory. That amounts to downloading and executing third-party code at runtime — expected for a hunter, but high-risk because upstream skill code may be unvetted. The code uses child_process (execSync/spawnSync) which can run arbitrary system commands during discovery/install.
Credentials
The skill declares no required env vars, but the code reads workspace files (USER.md, memory files, sessions) and honors SKILL_HUNTER_MAX_INSTALL and SKILL_HUNTER_NO_REPORT env flags. It does not request cloud keys, but it does access potentially sensitive local artifacts (session logs, user profile) which is proportionate to problem-mining yet privacy-sensitive and not explicitly declared in metadata.
Persistence & Privilege
always:false and model invocation is allowed (default). The skill writes to the skills directory (installs/clones) and recommends periodic runs (cron). Autonomous installation capability combined with filesystem write and outbound reporting increases blast radius if misused, but autonomous invocation alone is normal for skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wanng-ide-auto-skill-hunter - After installation, invoke the skill by name or use
/wanng-ide-auto-skill-hunter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of auto-skill-hunter — a proactive skill discovery and installation tool for ClawHub agents.
- Automatically mines unresolved user needs and session context to find and rank high-value skills.
- Supports both fully automatic patrol mode and targeted skill hunts for specific gaps.
- Installs vetted skills and explains selection rationale in concise reports.
- Includes safety features: capped install count, preview (`--dry-run`), and never overwrites existing skills.
- Recommended for agents needing hands-off capability growth or lightweight discover/test/keep workflows.
Metadata
Frequently Asked Questions
What is Wanng Ide Auto Skill Hunter?
Proactively discovers, ranks, and installs high-value ClawHub skills by mining unresolved user needs and agent context. Use when new tasks are unsolved, when... It is an AI Agent Skill for Claude Code / OpenClaw, with 140 downloads so far.
How do I install Wanng Ide Auto Skill Hunter?
Run "/install wanng-ide-auto-skill-hunter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Wanng Ide Auto Skill Hunter free?
Yes, Wanng Ide Auto Skill Hunter is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Wanng Ide Auto Skill Hunter support?
Wanng Ide Auto Skill Hunter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Wanng Ide Auto Skill Hunter?
It is built and maintained by terrycarter1985 (@terrycarter1985); the current version is v1.0.0.
More Skills