智能搜索和发现 OpenClaw 技能，支持中英双语，多来源搜索

This skill appears to implement what it claims (a skills search/recommender) but there are a few red flags to check before installing: - Verify the external endpoints: the code queries https://clawhub.ai and a mirror at https://skills.volces.com. Confirm you trust that mirror domain; if not, remove or sandbox network access. - Confirm dependencies and packaging: SKILL.md mentions Fuse.js/TypeScript but package.json only contains axios and the repo version differs from the registry metadata. Ensure required libraries are installed and consider running the package in an isolated environment first. - No secrets are required; do not supply API keys or tokens to unknown endpoints unless you can verify the endpoint's legitimacy. - If you need higher assurance, review the source-manager and source implementation files (src/sources/*) to see exactly which remote URLs are called and how responses are handled. Given these inconsistencies and the presence of a third-party mirror, proceed with caution (run in a sandbox or review network traffic) rather than outright blocking the skill.

Type: OpenClaw Skill Name: findskills Version: 1.0.5 The 'findskills' bundle is a legitimate utility designed to search and discover OpenClaw skill packages across multiple sources, including ClawHub and GitHub. The code implements standard search engine features such as result caching (cache.js), i18n query translation (i18n.js), and similarity-based recommendations (recommender.js). All network activity is restricted to expected endpoints (clawhub.ai, api.github.com, and a mirror at skills.volces.com), and there is no evidence of data exfiltration, malicious execution, or prompt injection attempts in the documentation or source code.