← Back to Skills Marketplace
find-skills
by
penglovemeng
· GitHub ↗
· v0.1.0
· MIT-0
219
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install peng-find-skills
Description
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...
Usage Guidance
This skill is coherent with its stated purpose (finding and installing other skills), but it tells the agent to run 'npx' to fetch and globally install arbitrary packages non-interactively (-g -y). npx executes code fetched from remote registries/repos, which can run arbitrary scripts on your machine. Before installing anything suggested by this skill: (1) ensure 'npx' is available and run installs interactively (omit -y) so you can review prompts; (2) prefer not to install globally unless you understand the package and need it; (3) verify the package source on skills.sh or GitHub and read the repository/README; (4) avoid running installs as root; (5) if you want stricter control, ask the agent to show the repository link and install commands and review them yourself. The skill would be safer if SKILL.md declared 'npx' as a required binary and warned explicitly about verifying package provenance.
Capability Analysis
Type: OpenClaw Skill
Name: peng-find-skills
Version: 0.1.0
The skill is a utility designed to help users discover and install other agent skills using the 'npx skills' CLI. It provides standard instructions for searching, presenting options, and executing installation commands (e.g., 'npx skills add') which are consistent with its stated purpose in SKILL.md. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The name and description match the instructions: the skill's job is to search for and install other skills. However, SKILL.md instructs the agent to run the 'npx' CLI, but the skill metadata lists no required binaries. The omission is inconsistent (npx should be declared as a required binary).
Instruction Scope
Instructions are focused on finding and installing skills and do not ask the agent to read unrelated files or environment variables. However, they explicitly recommend using 'npx skills add <owner/repo@skill> -g -y' (global, non-interactive install). That grants wide discretion to install arbitrary remote code on the user's environment without prompting and lacks guidance about verifying package provenance or reviewing repository contents.
Install Mechanism
This instruction-only skill relies on 'npx' to download and execute code from npm/GitHub at install time. While this is expected for a package-based ecosystem, the skill provides no install spec and does not warn the user about the risks of running npx. Recommending global, non-interactive installs (-g -y) amplifies risk because it will install remote packages into the user's environment without confirmation.
Credentials
The skill requests no environment variables, credentials, or config paths. It does not attempt to access or exfiltrate secrets in SKILL.md.
Persistence & Privilege
The skill itself does not request persistent privileges (always:false) and is user-invocable. However, the instructions encourage global installs (-g), which affect the user's system environment. The skill does not modify other skills or agent configs directly.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install peng-find-skills - After installation, invoke the skill by name or use
/peng-find-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Update
Metadata
Frequently Asked Questions
What is find-skills?
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express... It is an AI Agent Skill for Claude Code / OpenClaw, with 219 downloads so far.
How do I install find-skills?
Run "/install peng-find-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is find-skills free?
Yes, find-skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does find-skills support?
find-skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created find-skills?
It is built and maintained by penglovemeng (@penglovemeng); the current version is v0.1.0.
More Skills