← Back to Skills Marketplace
playgod2023

ClawHub技能探索工具

by playgod2023 · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
1098
Downloads
1
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install clawhub-skill-explorer
Description
ClawHub技能探索和导航工具。帮助用户快速找到所需的技能，支持关键词搜索和分类浏览。
README (SKILL.md)

ClawHub技能探索和导航工具

技能概述

ClawHub技能探索和导航工具是一个专门为ClawHub平台设计的技能发现工具。它允许用户通过关键词搜索和分类浏览快速找到所需的技能，提高了技能发现的效率。

主要功能

🔍 技能搜索

  • 支持关键词搜索技能
  • 搜索结果支持按相关性排序
  • 搜索历史记录

📂 技能分类

  • 按技能类别分类显示
  • 支持技能标签筛选
  • 推荐相关技能

🏷️ 标签系统

  • 支持多种技能标签
  • 标签云可视化
  • 标签搜索功能

📊 技能详情

  • 查看技能详细信息
  • 技能安装和使用指南
  • 技能版本历史

🌟 收藏功能

  • 支持收藏感兴趣的技能
  • 管理个人技能收藏
  • 分享收藏的技能

架构设计

📦 核心组件

  1. 搜索模块：处理技能搜索逻辑
  2. 分类模块：管理技能分类和标签
  3. 详情模块：显示技能详细信息
  4. 收藏模块：处理用户收藏功能

🛠️ 技术栈

  • 后端：Node.js/Express
  • 前端：React.js
  • 数据库：MongoDB
  • API：ClawHub公开API

🚀 部署架构

  • 云服务：AWS/Azure/GCP
  • 容器化：Docker
  • CI/CD：GitHub Actions

使用方法

安装技能

clawhub install clawhub-skill-explorer

常用命令

搜索技能

clawhub-skill-explorer search --query "problem solving"

浏览分类

clawhub-skill-explorer browse --category "productivity"

查看技能详情

clawhub-skill-explorer view --slug "clawhub-search-verify"

收藏技能

clawhub-skill-explorer favorite --slug "clawhub-search-verify"

开发计划

第一阶段 (已完成)

  • ✅ 项目结构设计
  • ✅ 核心功能规划
  • ✅ 用户界面设计

第二阶段 (开发中)

  • 🔄 技能搜索功能开发
  • 🔄 分类和标签系统
  • 🔄 详情页面开发

第三阶段 (待开始)

  • 🔄 收藏功能开发
  • 🔄 用户界面优化
  • 🔄 性能优化

技术特点

🔒 安全性

  • API密钥管理
  • 搜索结果过滤
  • 用户数据保护

📈 性能优化

  • 搜索结果缓存
  • 图片懒加载
  • 代码优化

🌐 可访问性

  • 响应式设计
  • 无障碍支持
  • 多语言支持

贡献指南

欢迎开发者提交问题和改进建议。如果您有好的想法，请通过以下方式贡献：

  1. 提交问题：在GitHub仓库创建Issue
  2. 发送拉取请求：创建功能分支并发送PR
  3. 撰写文档：完善技能文档和教程

许可证

MIT License - 详见LICENSE文件

ClawHub技能探索和导航工具 - 让技能发现更简单，让工作更高效！

Usage Guidance
This package is not clearly malicious but contains unexpected automation and an embedded credential. Before installing or running anything: 1) Do not execute scripts untrusted—review each .py file line-by-line. 2) Remove or rotate the hard-coded token immediately; treat it as compromised if ever used. 3) Ask the author why the skill needs automated publish/optimization scripts and why credentials are embedded instead of using environment variables. 4) If you must test, run in an isolated sandbox or container and do not grant it access to your real ~/.openclaw workspace or production ClawHub credentials. 5) Consider rejecting or editing the package to remove auto-publish behavior and to require explicit, documented credentials via env vars before approving it for use.
Capability Analysis
Type: OpenClaw Skill Name: clawhub-skill-explorer Version: 1.1.0 The skill bundle is classified as suspicious due to two critical vulnerabilities. First, `scripts/clawhub_skill_explorer.py` uses `os.popen` with unsanitized user input (the `slug` variable in `clawhub inspect` and `clawhub star` commands), creating a shell injection vulnerability that could lead to arbitrary code execution. Second, `scripts/optimization_script.py` contains a hardcoded ClawHub API token (`clh_bbGajvH2n5moZ28O8z9n6SF57meUTQ6xGuiYtQ5UX1I`), which is a severe security flaw making the token vulnerable to theft and unauthorized use. While the skill's stated purpose of self-optimization and publishing is not malicious, these vulnerabilities pose significant risks.
Capability Assessment
⚠ Purpose & Capability
The name/description say this is a discovery/navigation tool, which would normally only need APIs to list and search skills. The bundle contains multiple automation scripts (optimize/publish/upgrade) that modify local config files, attempt to publish the skill, and schedule nightly optimization. Those self-promotion/self-publishing capabilities are not mentioned in SKILL.md and are out of scope for a pure explorer tool.
⚠ Instruction Scope
SKILL.md provides only usage and high-level architecture, but the repository includes scripts that run system commands (curl, clawhub publish), edit files under a specific user's home path, and contain an LLM-driven optimization workflow and a scheduled-nightly plan. The runtime instructions in SKILL.md do not disclose or justify these file-modifying and publish actions, so the actual runtime surface is broader than documented.
ℹ Install Mechanism
There is no install spec (instruction-only), which limits automatic code execution on install. However, code files are present in the bundle; installing or running them on the host would execute subprocess commands. The lack of an explicit install step means these scripts will not auto-run on install, but they can be executed by an agent or by a user with command-line access.
⚠ Credentials
The package declares no required credentials, but scripts contain a hard-coded ClawHub token and reference absolute user home paths (/Users/sunyanguang/.openclaw/...). Embedding a secret in-repo and relying on user-home-specific paths is disproportionate to a search/browse skill and is unexpected and unsafe.
⚠ Persistence & Privilege
The skill is not marked always:true, but repository files (JOURNAL.md, STATE.md, RUNBOOK.md, and scripts) explicitly plan a nightly 2:00am automated optimization/publish job and create or edit files under the user's .openclaw workspace. That implies persistent scheduled activity outside the documented runtime and could lead to repeated automated actions on the host if the scripts are run or scheduled by the user/agent.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawhub-skill-explorer
  3. After installation, invoke the skill by name or use /clawhub-skill-explorer
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
优化API调用策略，提升技能搜索效率和稳定性，改善API限制问题
v1.0.0
首个版本发布，支持技能搜索、分类浏览、平台统计等功能
Metadata
Slug clawhub-skill-explorer
Version 1.1.0
License —
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is ClawHub技能探索工具?

ClawHub技能探索和导航工具。帮助用户快速找到所需的技能，支持关键词搜索和分类浏览。 It is an AI Agent Skill for Claude Code / OpenClaw, with 1098 downloads so far.

How do I install ClawHub技能探索工具?

Run "/install clawhub-skill-explorer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ClawHub技能探索工具 free?

Yes, ClawHub技能探索工具 is completely free (open-source). You can download, install and use it at no cost.

Which platforms does ClawHub技能探索工具 support?

ClawHub技能探索工具 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ClawHub技能探索工具?

It is built and maintained by playgod2023 (@playgod2023); the current version is v1.1.0.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments