搜索&查询&安装Skill - skill4agent官方技能库

当需要搜索、查阅和安装在线技能库中的 skills 时使用此技能，支持中文。

This skill is coherent with its described purpose, but it relies on running remote code (via `npx`) and downloading/extracting ZIPs from a third-party site (skill4agent.com). Before using: (1) verify the skill4agent domain and npm package reputation; (2) prefer the API-read flow first to inspect SKILL.md and any 'script_check_notes' before running installs; (3) do not run `npx` or install downloaded skills in sensitive environments — use an isolated/sandbox workspace; (4) manually review any scripts flagged as 'need attention' before executing them; and (5) if you require stronger guarantees, obtain package checksums or signatures from the publisher or run installs inside disposable containers. The SKILL metadata lacks a homepage entry — consider verifying the publisher independently.

Type: OpenClaw Skill Name: skill4agent-cn Version: 1.0.1 The skill bundle provides a toolset for searching and installing third-party skills from the skill4agent.com platform via CLI (npx) and API calls. While the instructions in SKILL.md and SKILL_EN.md include safety-conscious directives—such as requiring user consent for scripts flagged as sensitive and performing post-installation reviews—the inherent capability to download and execute remote code constitutes a high-risk behavior. Additionally, the provided command templates (e.g., `npx skill4agent search <keyword>`) are susceptible to command injection if the AI agent does not properly sanitize user-supplied inputs before execution.