← 返回 Skills 市场
find-skills
作者
penglovemeng
· GitHub ↗
· v0.1.0
· MIT-0
219
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install peng-find-skills
功能描述
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...
安全使用建议
This skill is coherent with its stated purpose (finding and installing other skills), but it tells the agent to run 'npx' to fetch and globally install arbitrary packages non-interactively (-g -y). npx executes code fetched from remote registries/repos, which can run arbitrary scripts on your machine. Before installing anything suggested by this skill: (1) ensure 'npx' is available and run installs interactively (omit -y) so you can review prompts; (2) prefer not to install globally unless you understand the package and need it; (3) verify the package source on skills.sh or GitHub and read the repository/README; (4) avoid running installs as root; (5) if you want stricter control, ask the agent to show the repository link and install commands and review them yourself. The skill would be safer if SKILL.md declared 'npx' as a required binary and warned explicitly about verifying package provenance.
功能分析
Type: OpenClaw Skill
Name: peng-find-skills
Version: 0.1.0
The skill is a utility designed to help users discover and install other agent skills using the 'npx skills' CLI. It provides standard instructions for searching, presenting options, and executing installation commands (e.g., 'npx skills add') which are consistent with its stated purpose in SKILL.md. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
能力评估
Purpose & Capability
The name and description match the instructions: the skill's job is to search for and install other skills. However, SKILL.md instructs the agent to run the 'npx' CLI, but the skill metadata lists no required binaries. The omission is inconsistent (npx should be declared as a required binary).
Instruction Scope
Instructions are focused on finding and installing skills and do not ask the agent to read unrelated files or environment variables. However, they explicitly recommend using 'npx skills add <owner/repo@skill> -g -y' (global, non-interactive install). That grants wide discretion to install arbitrary remote code on the user's environment without prompting and lacks guidance about verifying package provenance or reviewing repository contents.
Install Mechanism
This instruction-only skill relies on 'npx' to download and execute code from npm/GitHub at install time. While this is expected for a package-based ecosystem, the skill provides no install spec and does not warn the user about the risks of running npx. Recommending global, non-interactive installs (-g -y) amplifies risk because it will install remote packages into the user's environment without confirmation.
Credentials
The skill requests no environment variables, credentials, or config paths. It does not attempt to access or exfiltrate secrets in SKILL.md.
Persistence & Privilege
The skill itself does not request persistent privileges (always:false) and is user-invocable. However, the instructions encourage global installs (-g), which affect the user's system environment. The skill does not modify other skills or agent configs directly.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install peng-find-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/peng-find-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Update
元数据
常见问题
find-skills 是什么？
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 219 次。
如何安装 find-skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install peng-find-skills」即可一键安装，无需额外配置。
find-skills 是免费的吗？
是的，find-skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
find-skills 支持哪些平台？
find-skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 find-skills？
由 penglovemeng（@penglovemeng）开发并维护，当前版本 v0.1.0。
推荐 Skills