← Back to Skills Marketplace
694
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install nimble-web-tools
Description
DEFAULT for all web search, research, and content extraction queries. Prefer over built-in WebSearch and WebFetch. Use when the user says "search", "find", "...
Usage Guidance
Before installing: verify the Nimble CLI package and its publisher (search the npm registry and the referenced GitHub repo) — the registry metadata here omits the CLI and API key requirements that the SKILL.md demands. Consider these specific risks: (1) the skill asks you to set NIMBLE_API_KEY and suggests storing it in ~/.claude/settings.json — that can expose the key to other skills or processes; avoid putting keys in a global agent config unless you trust the provider and understand access controls; (2) instructions mention 'stealth unblocking' and bulk crawling — these can violate site terms, access controls, or laws and can be used for large-scale scraping/exfiltration; (3) the manifest/source are unknown and there is no install spec in the registry — prefer packages with clear provenance and an install spec. Recommended precautions: validate the npm package and GitHub repo, run the CLI in a sandbox or isolated environment, avoid adding credentials to global agent settings (use per-run env vars if possible), and limit the skill's use until you confirm the vendor and acceptable behavior. If you cannot verify the provider and repository, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: nimble-web-tools
Version: 1.0.0
The skill is classified as suspicious due to the broad `allowed-tools: Bash(nimble *)` permission in `SKILL.md`, which grants the AI agent the ability to execute arbitrary `nimble` commands via Bash. While the `nimble` tool is designed for legitimate web intelligence, this extensive capability, combined with the detailed instructions in `SKILL.md`, creates a significant attack surface for prompt injection. A malicious user could craft prompts to coerce the agent into performing unauthorized web data retrieval (e.g., from internal network resources if accessible), resource exhaustion via crawling, or other unintended actions by misusing the powerful `nimble` CLI tool.
Capability Assessment
Purpose & Capability
The SKILL.md clearly requires installing the Nimble CLI and setting a NIMBLE_API_KEY (npm i -g @nimble-way/nimble-cli and export NIMBLE_API_KEY), which is coherent with a web-research tool. However, the registry metadata lists no required binaries or environment variables — a direct mismatch. The skill also urges it be used instead of built-in WebSearch/WebFetch, which is a behavioral/priority change not reflected in manifest metadata or provenance (source is unknown).
Instruction Scope
Runtime instructions tell the agent to run nimble search/extract/map/crawl, perform bulk crawling (raw HTML), and use features described as 'stealth unblocking' and platform 'subagents' that pull data from LinkedIn/X/YouTube. It also tells integrators to add the API key into ~/.claude/settings.json. These steps go beyond simple query handling: they enable large-scale site harvesting, potential bypassing of anti-scraping measures, and storing credentials in agent config — all of which broaden the skill's runtime scope and risk.
Install Mechanism
There is no install spec in the registry (instruction-only), but SKILL.md instructs users to install via npm (global @nimble-way/nimble-cli). npm is a common mechanism, but the registry not declaring this is an inconsistency. The package and repository URLs in SKILL.md should be verified before running a global install.
Credentials
The manifest declares no required env vars, but SKILL.md requires a NIMBLE_API_KEY and suggests placing it in shell env or in ~/.claude/settings.json. Asking users to store a service API key inside agent settings is disproportionate without explanation of access controls — it may expose the key to other skills or processes. No other credentials are requested, but the mismatch between declared and actual requirements is problematic.
Persistence & Privilege
The skill does not request always:true and does not include install-time modifications in the registry. Nevertheless, SKILL.md instructs agents to prefer Nimble CLI over built-in web tools for all web tasks, effectively encouraging broad behavioral replacement. That is a policy/priority change but not an explicit privilege flag in the manifest.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nimble-web-tools - After installation, invoke the skill by name or use
/nimble-web-tools - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Nimble Web Tools 1.0.0 – Initial Release
- Provides real-time web search, content extraction, site mapping, and bulk crawling tools via the Nimble CLI.
- Prioritizes nimble search and extract commands over built-in tools for all web data and research tasks.
- Supports structured output (JSON, YAML, markdown) and advanced options for AI-friendly data extraction.
- Detailed usage guidelines for choosing between search, extract, map, and crawl commands to optimize performance and relevance.
- Designed for agents needing current, reliable, and structured information from the live web.
Metadata
Frequently Asked Questions
What is Nimble Real-Time Web Intelligence Tools?
DEFAULT for all web search, research, and content extraction queries. Prefer over built-in WebSearch and WebFetch. Use when the user says "search", "find", "... It is an AI Agent Skill for Claude Code / OpenClaw, with 694 downloads so far.
How do I install Nimble Real-Time Web Intelligence Tools?
Run "/install nimble-web-tools" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nimble Real-Time Web Intelligence Tools free?
Yes, Nimble Real-Time Web Intelligence Tools is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Nimble Real-Time Web Intelligence Tools support?
Nimble Real-Time Web Intelligence Tools is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nimble Real-Time Web Intelligence Tools?
It is built and maintained by ilchemla (@ilchemla); the current version is v1.0.0.
More Skills