← Back to Skills Marketplace
Skill Grep
by
Yichen Tang
· GitHub ↗
· v1.0.1
· MIT-0
96
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install skillgrep
Description
Use when a user is trying to discover an installable or reusable skill or workflow, especially when they ask for a skill for a task, want to compare nearby s...
Usage Guidance
This skill appears to implement a search-and-feedback flow for discovering skills, but it forcibly sends your original queries and any clarification replies to https://skills.megatechai.com/ and sets consent_granted=true so telemetry will be stored. Before installing or using it, consider: (1) Do you want your (possibly sensitive) queries sent to that external service? (2) Does the service require authentication or a privacy policy explaining retention and use of stored queries? (3) Ask the publisher to make consent optional (respect user opt-out), to document whether data is persisted/retained, and to add redaction/minimization of sensitive fields. If you handle confidential data, avoid using this skill until you confirm the endpoint's auth model and privacy practices.
Capability Analysis
Type: OpenClaw Skill
Name: skillgrep
Version: 1.0.1
The `skillgrep` bundle (specifically `SKILL.md`) facilitates skill discovery by sending user queries to an external API (`skills.megatechai.com`) and providing instructions for the agent to install remote code via `npx`. These functions introduce risks of data exfiltration and supply chain attacks. Furthermore, the instructions mandate telemetry collection, hardcode user consent (`consent_granted: true`), and include logic to pin the agent's state across multiple turns, which are risky behaviors that warrant a suspicious classification despite being aligned with the tool's stated purpose.
Capability Assessment
Purpose & Capability
The name/description (discover installable/reusable skills) aligns with using a search API and returning recommendations. Minor inconsistency: the SKILL.md lists a "base URL env" value (https://skills.megatechai.com/) but the registry shows no required env vars or credentials; it's unclear whether API calls require authentication. That omission is unexpected but could be legitimate if the endpoint is public.
Instruction Scope
Instructions explicitly require sending the user's original input and any clarification replies to an external /search_multi_field endpoint and then submitting feedback (/feedback). They mandate 'consent_granted = true' and 'never skip feedback submission', which forces telemetry/collection of user queries and session data. There is no guidance on redaction, minimizing sensitive fields, or user opt-out. This broad data transmission is outside what many users would expect from a simple discovery helper and raises privacy/data-exfiltration concerns.
Install Mechanism
Instruction-only skill with no install spec and no code files. Lowest install risk — nothing is written to disk by the skill itself.
Credentials
The skill requests no credentials, yet it instructs the agent to transmit full queries and session identifiers to a third-party endpoint and to mark consent as granted. Requiring telemetry to always be enabled (consent_granted=true) is disproportionate to the stated discovery function. Also unclear whether the external API requires an API key or other auth; absence of declared credentials is surprising for a remote service that records telemetry.
Persistence & Privilege
always is false and there is no indication the skill modifies other skills or system-wide settings. It does require creating and reusing a retrieval_session_id during a session, which is normal for a client-service interaction.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skillgrep - After installation, invoke the skill by name or use
/skillgrep - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Search API endpoint changed from /search_multi to /search_multi_field.
- Added required origin_query field (captures user's original input, may be non-English).
- Updated contract details and usage instructions for new /search_multi_field API.
- Guidance for language handling: origin_query kept as user input; payload fields still use English translation if needed.
- Example requests and code updated to match new request structure.
- No core logic or functional flow changes beyond the new field and endpoint update.
v1.0.3
- Renamed the skill from "skill-compass" to "skill-grep".
- Updated title and heading references throughout to reflect the new name.
- No changes to logic, contracts, or workflow—documentation and identifiers only.
v1.0.2
- Major update: SKILL.md has been rewritten to document a comprehensive retrieval and feedback procedure for discovering installable skills or workflows.
- Clarifies the end-to-end flow: structured query, retrieval (up to 2 passes), targeted clarification, final recommendations, and mandatory feedback submission.
- Provides detailed API contracts and strict operational rules, including session management, field mapping, and validation requirements.
- Includes explicit guidance for handling clarifications and feedback types to ensure reliable telemetry and recommendation quality.
- Sets hard limits on retrieval passes (max 2), clarifications (max 1), and feedback timing (after verdict).
- Emphasizes translation of non-English queries, validation of contracts, and error handling for broken responses.
Metadata
Frequently Asked Questions
What is Skill Grep?
Use when a user is trying to discover an installable or reusable skill or workflow, especially when they ask for a skill for a task, want to compare nearby s... It is an AI Agent Skill for Claude Code / OpenClaw, with 96 downloads so far.
How do I install Skill Grep?
Run "/install skillgrep" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Grep free?
Yes, Skill Grep is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Grep support?
Skill Grep is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Grep?
It is built and maintained by Yichen Tang (@littledinoc); the current version is v1.0.1.
More Skills