当需要搜索或推荐 TikTok、YouTube、Instagram 红人时使用，通过 Finder 获取候选红人。

This skill does what it claims (search Finder for creators) and needs your Finder API key to operate. Key points before installing or using it: - Do NOT paste long-lived API keys or other secrets into chat unless you understand the platform's chat retention and trust it; the skill instructs the assistant to accept a pasted key and write it directly to ~/.finder/config.json. If you prefer, create that config file yourself instead of sharing the key in chat. - The skill will read and write a local file (~/.finder/config.json) and may run curl/python/powershell commands if the agent environment allows execution. Be comfortable with the agent performing those filesystem and network actions. - Verify you trust the endpoint (https://finder.optell.com) and the email address [email protected] used for quota issues. - If you want tighter control: manually create ~/.finder/config.json with the API key, or provide a short-lived token and revoke it after use. If you have limited trust in automated behavior, avoid pasting credentials in chat and require explicit confirmation before the skill writes files or performs API calls.

Type: OpenClaw Skill Name: finder-local-search Version: 1.0.1 The skill is classified as suspicious because it utilizes high-risk shell and network capabilities that are vulnerable to command injection. It provides instructions and templates in SKILL.md, references/config.md, and references/examples.md that direct the agent to write user-provided API keys into local configuration files (~/.finder/config.json) using shell redirection (e.g., cat <<EOF). This pattern lacks input sanitization, potentially allowing a user or a malicious prompt to execute arbitrary commands on the host system. While these actions are plausibly intended for the stated purpose of searching influencers via https://finder.optell.com, the implementation introduces significant security risks.