技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 26 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：cs995279497-byte/chen-find-skills
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's behavior and requirements match its stated purpose (finding and installing other skills), but its runtime instructions advise installing third‑party packages via npx (including a -g -y option) which carries the usual risks of executing external code — verify packages before installing.
目的
Name, description, and SKILL.md all describe searching for and installing skills using the Skills CLI (npx skills). There are no unrelated env vars, binaries, or config paths requested; the requested capabilities align with the stated purpose.
说明范围
Instructions are focused on search and install workflows (npx skills find/add/check/update) and do not ask the agent to read unrelated files or secrets. However the guidance explicitly recommends installing packages (including 'npx skills add <...> -g -y'), which can execute arbitrary install scripts from third‑party repos and can install globally without interactive confirmation. The skill does not instruct verification steps (audit package, …
安装机制
There is no install spec in the skill bundle itself (instruction-only), which is low-risk. Runtime instructions rely on the public 'npx skills' CLI and downloading/installing skill packages from GitHub/skills.sh. That is expected for a discovery/install tool but inherently allows execution of upstream package install scripts; users should treat installs as execution of third‑party code.
证书
The skill requests no environment variables, credentials, or config paths. No disproportionate secret access is requested.
持久
The skill is not always-enabled and uses normal autonomous invocation settings. The potential privilege concern is operational rather than intrinsic: the SKILL.md encourages global installs (-g) and skipping confirmations (-y), which can change user system state and require elevated access depending on environment. This is a legitimate behavior for an installer but should be executed only with explicit user consent.
综合结论
This skill is coherent for finding and installing other skills, but installing a skill with 'npx skills add' downloads and runs code from third parties. Before installing: verify the package owner and repository on skills.sh or GitHub, inspect package metadata and install scripts, prefer local/non-global installs if unsure, and do not allow the agent to run global installs with '-y' without your explicit permission. If you want stricter safety…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Chen Find Skills」。简介：Helps users discover and install agent skills when they ask questions like "how…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/cs995279497-byte/chen-find-skills/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。