← Back to Skills Marketplace
huiw86

SkillNav

by HuiW86 · GitHub ↗ · v2.0.0 · MIT-0
cross-platform ⚠ suspicious
145
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install skillnav
Description
Search 3,900+ MCP servers with install commands, get daily AI brief, and discover trending tools — in Chinese. Data from skillnav.dev editorial team.
Usage Guidance
This skill appears to do what it says: it fetches data from skillnav.dev and formats it in Chinese. Two practical things to consider before installing or using it: (1) The /skillnav update command downloads a SKILL.md from raw.githubusercontent.com and writes it to ~/.claude/skills/skillnav/SKILL.md — only run update if you trust the upstream repository (review the SKILL.md on GitHub first). (2) Because the skill can replace its own instructions via that update, monitor or limit self-updates if you need a stricter security posture. Also note a minor metadata inconsistency (the registry listing showed no homepage while SKILL.md includes a GitHub homepage); you may want to confirm the official source URL on the registry or GitHub before trusting updates.
Capability Analysis
Type: OpenClaw Skill Name: skillnav Version: 2.0.0 The skill includes an 'update' command in SKILL.md that uses Bash to download and overwrite its own instruction file from a remote GitHub repository (raw.githubusercontent.com). This self-updating mechanism allows for remote instruction injection, which could be used to alter the agent's behavior or introduce malicious commands in the future. While this capability is risky, it is presented as a functional feature for the user rather than a hidden backdoor.
Capability Assessment
Purpose & Capability
The name/description claim (search MCP servers, daily AI brief, trending tools in Chinese) is implemented by WebFetch calls to skillnav.dev API endpoints and formatting rules in SKILL.md. The only extra capability is an 'update' action that downloads a SKILL.md from GitHub to the skill's own path — this is coherent with an auto-update feature.
Instruction Scope
Runtime instructions only call WebFetch to https://skillnav.dev/api/skill/query and, for update, curl raw.githubusercontent.com to overwrite the local SKILL.md. The skill does not read unrelated files or request environment variables. Note: the update step writes to ~/.claude/skills/skillnav/SKILL.md which allows the skill's instructions to be replaced remotely if the repository changes.
Install Mechanism
There is no install spec (instruction-only), lowering disk-write risk. The self-update uses a raw GitHub URL (a well-known host) to download a single SKILL.md file — moderate risk because remote content can change behavior but the source is a standard GitHub raw URL (not a private server or URL shortener).
Credentials
The skill requests no environment variables, no credentials, and does not access system config paths beyond writing to its own skill file during update. This is proportional to its purpose.
Persistence & Privilege
always is false and the skill is user-invocable (normal). The only persistence-like action is the explicit 'update' command which overwrites its own SKILL.md in the user's ~/.claude/skills directory. Self-updating is expected for skills but increases attack surface if the upstream repo or raw URL is compromised.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skillnav
  3. After installation, invoke the skill by name or use /skillnav
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
v2.0.0: unified search API, paper query, trending tools, version check, brand footer
v1.0.0
Initial release: brief + mcp search + trending
Metadata
Slug skillnav
Version 2.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is SkillNav?

Search 3,900+ MCP servers with install commands, get daily AI brief, and discover trending tools — in Chinese. Data from skillnav.dev editorial team. It is an AI Agent Skill for Claude Code / OpenClaw, with 145 downloads so far.

How do I install SkillNav?

Run "/install skillnav" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SkillNav free?

Yes, SkillNav is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SkillNav support?

SkillNav is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SkillNav?

It is built and maintained by HuiW86 (@huiw86); the current version is v2.0.0.

💬 Comments