@kanyun/rush-find-skills

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...

This skill is coherent with a 'find and install skills' purpose, but check a few things before installing or running it: 1) Verify the registry — the SKILL.md defaults to https://rush.zhenguanyu.com (a third-party registry). If you don't trust that host, override the registry explicitly or refuse installs from it. 2) Be cautious about using npx or installing reskill globally: those commands will fetch and execute remote code. Prefer reviewing the reskill project source and the specific skill package before installation. 3) Note the metadata mismatches (SKILL.md name/version/author differ from the registry metadata) and the undeclared RESKILL_REGISTRY env var — ask the publisher to clarify. 4) Ensure the agent asks for your explicit approval before any install (the doc says it should, but verify behavior). If you need higher assurance, test searches without installing, or run reskill commands yourself in an isolated environment and inspect any candidate skill code before installation.

Type: OpenClaw Skill Name: rush-find-skills Version: 0.3.2 The skill is classified as suspicious due to its explicit instructions for the AI agent to perform high-risk operations, including direct shell command execution (`npm`, `npx`, `which`, `reskill`, `mkdir`, `echo`), reading environment variables (`RESKILL_REGISTRY`), and scanning the file system for configuration files (`skills.json`) and agent directories (`.cursor/`, `.claude/`). While these actions are presented as necessary for the stated purpose of finding and installing skills via the `reskill` package manager, they introduce a significant attack surface. A lack of robust input sanitization by the agent when constructing commands from user input or discovered data could lead to shell injection or unauthorized file access, even though the `SKILL.md` itself does not instruct malicious intent.