← 返回 Skills 市场
287
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install muguozi1-openclaw-find-skills
功能描述
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...
安全使用建议
This skill is coherent and does what it says: it helps find and install other skills via the Skills CLI. Before using it (or following its install suggestions): 1) Be cautious when running `npx` or installing packages from unknown authors—these commands fetch and run remote code. 2) Avoid blindly using `-g -y`; prefer local installs or review the package/repository first. 3) Inspect the target skill's repository, README, and code for unexpected behavior, especially scripts that run at install time. 4) Do not run installs as root; use a sandbox or separate user when testing new skills. If you want, I can: fetch and show the suggested skill's repository URL and README before you install, or suggest safer install options (local or review-first).
功能分析
Type: OpenClaw Skill
Name: muguozi1-openclaw-find-skills
Version: 1.0.0
The skill provides the agent with the capability to search for and install third-party software using the `npx skills` CLI. While this aligns with its stated purpose, the instructions in `SKILL.md` explicitly direct the agent to use the `-y` flag to bypass confirmation prompts during global installation (`npx skills add <package> -g -y`). This represents a significant security risk as it could be leveraged via prompt injection to install arbitrary malicious packages without user intervention. Additionally, the bundle contains several placeholder scripts (`scripts/test.py`, `scripts/examples.py`) and repetitive metadata regarding 'Karpathy minimalism' and 'mass-optimization' that suggest automated or templated generation.
能力评估
Purpose & Capability
Name, description, and SKILL.md consistently describe discovering and installing skills via the Skills CLI (npx skills). The included example/test scripts are small, documentation-only, and related to demonstrating/validating the skill.
Instruction Scope
Runtime instructions are narrowly scoped to searching for and installing skills using the Skills CLI (npx skills find / npx skills add). They do not request unrelated files, credentials, or system paths. Note: the guide recommends running `npx` and using `-g -y` to install globally and skip prompts; these are legitimate for installing packages but increase the risk of installing/auto-executing unreviewed third-party code.
Install Mechanism
The skill itself has no install spec (instruction-only), which is low-risk. However, it instructs users/agents to use `npx skills add`, which will download and execute packages from the network (npm/GitHub). This is expected for a discovery/install helper but is a common vector for supply-chain risk and should be handled cautiously.
Credentials
No environment variables, credentials, or config paths are requested. Nothing disproportionate is required for the described purpose.
Persistence & Privilege
Skill does not request permanent presence or elevated platform privileges (always:false). The documentation suggests global installation of discovered skills (`-g`) and skipping confirmations (`-y`), which can increase attack surface if used without review. The skill itself does not modify other skills or system configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install muguozi1-openclaw-find-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/muguozi1-openclaw-find-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
find-skills 1.0.0 – Initial release
- Introduces a skill to help users discover and install agent skills based on their queries or needs.
- Provides guidelines on when and how to use the skill for searching, presenting, and installing relevant agent skills.
- Includes clear usage documentation, examples, troubleshooting steps, and best practices for effective searches.
- Outlines common categories to improve skill discovery.
- Follows minimalistic design principles for clarity and ease of use.
元数据
常见问题
Muguozi1 Openclaw Find Skills 是什么？
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 287 次。
如何安装 Muguozi1 Openclaw Find Skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install muguozi1-openclaw-find-skills」即可一键安装，无需额外配置。
Muguozi1 Openclaw Find Skills 是免费的吗？
是的，Muguozi1 Openclaw Find Skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Muguozi1 Openclaw Find Skills 支持哪些平台？
Muguozi1 Openclaw Find Skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Muguozi1 Openclaw Find Skills？
由 muguozi1（@muguozi1）开发并维护，当前版本 v1.0.0。
推荐 Skills