← 返回 Skills 市场
145
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install skillnav
功能描述
Search 3,900+ MCP servers with install commands, get daily AI brief, and discover trending tools — in Chinese. Data from skillnav.dev editorial team.
安全使用建议
This skill appears to do what it says: it fetches data from skillnav.dev and formats it in Chinese. Two practical things to consider before installing or using it: (1) The /skillnav update command downloads a SKILL.md from raw.githubusercontent.com and writes it to ~/.claude/skills/skillnav/SKILL.md — only run update if you trust the upstream repository (review the SKILL.md on GitHub first). (2) Because the skill can replace its own instructions via that update, monitor or limit self-updates if you need a stricter security posture. Also note a minor metadata inconsistency (the registry listing showed no homepage while SKILL.md includes a GitHub homepage); you may want to confirm the official source URL on the registry or GitHub before trusting updates.
功能分析
Type: OpenClaw Skill
Name: skillnav
Version: 2.0.0
The skill includes an 'update' command in SKILL.md that uses Bash to download and overwrite its own instruction file from a remote GitHub repository (raw.githubusercontent.com). This self-updating mechanism allows for remote instruction injection, which could be used to alter the agent's behavior or introduce malicious commands in the future. While this capability is risky, it is presented as a functional feature for the user rather than a hidden backdoor.
能力评估
Purpose & Capability
The name/description claim (search MCP servers, daily AI brief, trending tools in Chinese) is implemented by WebFetch calls to skillnav.dev API endpoints and formatting rules in SKILL.md. The only extra capability is an 'update' action that downloads a SKILL.md from GitHub to the skill's own path — this is coherent with an auto-update feature.
Instruction Scope
Runtime instructions only call WebFetch to https://skillnav.dev/api/skill/query and, for update, curl raw.githubusercontent.com to overwrite the local SKILL.md. The skill does not read unrelated files or request environment variables. Note: the update step writes to ~/.claude/skills/skillnav/SKILL.md which allows the skill's instructions to be replaced remotely if the repository changes.
Install Mechanism
There is no install spec (instruction-only), lowering disk-write risk. The self-update uses a raw GitHub URL (a well-known host) to download a single SKILL.md file — moderate risk because remote content can change behavior but the source is a standard GitHub raw URL (not a private server or URL shortener).
Credentials
The skill requests no environment variables, no credentials, and does not access system config paths beyond writing to its own skill file during update. This is proportional to its purpose.
Persistence & Privilege
always is false and the skill is user-invocable (normal). The only persistence-like action is the explicit 'update' command which overwrites its own SKILL.md in the user's ~/.claude/skills directory. Self-updating is expected for skills but increases attack surface if the upstream repo or raw URL is compromised.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skillnav - 安装完成后，直接呼叫该 Skill 的名称或使用
/skillnav触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
v2.0.0: unified search API, paper query, trending tools, version check, brand footer
v1.0.0
Initial release: brief + mcp search + trending
元数据
常见问题
SkillNav 是什么？
Search 3,900+ MCP servers with install commands, get daily AI brief, and discover trending tools — in Chinese. Data from skillnav.dev editorial team. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 145 次。
如何安装 SkillNav？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skillnav」即可一键安装，无需额外配置。
SkillNav 是免费的吗？
是的，SkillNav 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SkillNav 支持哪些平台？
SkillNav 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SkillNav？
由 HuiW86（@huiw86）开发并维护，当前版本 v2.0.0。
推荐 Skills