← Back to Skills Marketplace
74
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openspace-skill-discovery
Description
Search for reusable skills across OpenSpace's local registry and cloud community. Reusing proven skills saves tokens, improves reliability, and extends your...
Usage Guidance
This skill is plausible for discovering and reusing skills, but its instructions mention cloud access and automatic downloading without declaring required credentials or describing how downloads are vetted. Before installing or using auto_import: (1) confirm where the 'API key' lives (platform-provided or must be supplied) and why the skill didn't declare it; (2) disable or require manual approval for auto_import so you can review any cloud skill before it is saved locally; (3) ask what paths are used for saved skills and whether downloaded SKILL.md and code are integrity-checked or sandboxed. Because this is instruction-only, there was no code to scan — extra caution around network downloads and local writes is recommended.
Capability Analysis
Type: OpenClaw Skill
Name: openspace-skill-discovery
Version: 1.0.0
The skill-discovery bundle is classified as suspicious due to the `auto_import` parameter in `SKILL.md`, which defaults to `true`. This feature automatically downloads skills from a cloud community and explicitly instructs the AI agent to 'read SKILL.md at local_path, follow the instructions.' This creates a high-risk vector for remote instruction injection or supply chain attacks, as the agent is directed to execute logic from untrusted external sources without a mandatory manual review or confirmation step.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (discover skills locally and in the cloud) aligns with the instructions which show a search_skills API and reading SKILL.md files locally. However, the SKILL.md explicitly discusses cloud access and auto-importing cloud hits but the skill metadata declares no credentials or config paths to enable cloud access; this is plausible if the platform provides built-in credentials, but the skill does not explain that assumption.
Instruction Scope
Instructions are mostly scoped to discovery and reading SKILL.md files, which is appropriate. But they also permit auto_import ("Auto-download top cloud hits locally") and reference an API key fallback path ("falls back to local-only if no API key"). Those steps imply network downloads and writing files to disk and assume an API key exists somewhere; neither the download targets nor the storage paths or verification/approval steps are specified.
Install Mechanism
This is instruction-only (no install spec, no code files), which is low risk on its own. But the instructions allow auto-downloading cloud skills into local storage even though no install or verification mechanism is documented. That gap raises a moderate concern: the skill could cause the agent to write unvetted code to disk if auto_import is used.
Credentials
Requires.env lists none, yet the SKILL.md refers to an API key (cloud vs local behavior). This mismatch is notable: either the skill expects platform-level credentials (not declared) or it omitted declaring required credentials. If cloud access requires keys, the skill should declare them; otherwise the behavior is ambiguous.
Persistence & Privilege
The skill does not request always:true and declares no config-paths or persistent privileges. It does instruct reading local SKILL.md files and may cause local files to be written if auto_import is used, but it does not demand system-wide privileges or to modify other skills' configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openspace-skill-discovery - After installation, invoke the skill by name or use
/openspace-skill-discovery - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Skill Discovery 1.0.0 – Initial Release
- Enables searching for reusable skills across OpenSpace's local registry and the cloud community.
- Helps users find relevant skills to save tokens, improve reliability, and extend capabilities.
- Supports natural language or keyword-based queries for skill discovery.
- Provides options to auto-import cloud skills and specifies when to use or delegate discovered skills.
- Clearly informs users about available skills and recommendations for next steps.
Metadata
Frequently Asked Questions
What is OpenSpace Skill Discovery?
Search for reusable skills across OpenSpace's local registry and cloud community. Reusing proven skills saves tokens, improves reliability, and extends your... It is an AI Agent Skill for Claude Code / OpenClaw, with 74 downloads so far.
How do I install OpenSpace Skill Discovery?
Run "/install openspace-skill-discovery" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenSpace Skill Discovery free?
Yes, OpenSpace Skill Discovery is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenSpace Skill Discovery support?
OpenSpace Skill Discovery is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenSpace Skill Discovery?
It is built and maintained by X-RayLuan (@x-rayluan); the current version is v1.0.0.
More Skills