Skill Finder

skill-finder

Find skills everywhere. Install to every AI platform you use.

Multi-source skill discovery: search ClawHub, GitHub, npm, and local skills in one command. Find, vet, and install across OpenClaw, Claude Code, Codex, Cursor, Windsurf, and more.

---

Overview

skill-hunter only searches ClawHub. skill-finder searches 6 sources simultaneously, deduplicates results, ranks by trust, and lets you vet security before installing anything.

| | skill-hunter | skill-finder | |---|---|---| | Sources | 1 (ClawHub) | 6 (ClawHub + GitHub + npm + local + more) | | Security vetting | None | Built-in VET command | | Install from GitHub | No | Yes | | Shows local skills | No | Yes | | Deduplication | No | Yes |

---

Quick Start

# Find skills about Telegram
skill-finder: find telegram

# See what's trending on ClawHub this week
skill-finder: scout trending

# Vet a skill before installing
skill-finder: vet telegram-bot

# Install from GitHub instead of ClawHub
skill-finder: install github:sanada123/openclaw-skills/telegram-bot

# See all detected AI platforms and installed skills
skill-finder: status

# Install to a specific platform
skill-finder: install telegram-bot --platform claude-code

# Install to all detected platforms at once
skill-finder: install telegram-bot

---

Commands

FIND — Search everywhere, ranked by trust

skill-finder: find 

Searches all 6 sources concurrently, deduplicates by name/slug, and returns ranked results.

Output columns:

RANK  NAME                SOURCE      DESCRIPTION                    INSTALL
 1    telegram-bot        local       Send Telegram messages         (already installed)
 2    telegram-notifier   our-github  Notify via Telegram            install github:sanada123/openclaw-skills/telegram-notifier
 3    telegram-claude     clawhub     Full Telegram + Claude bot     install telegram-claude
 4    telegram-webhook    npm         Webhook handler for Telegram   install npm:openclaw-skill-telegram-webhook

Ranking logic:

1. Local installed skills (already have them)
2. Our GitHub (sanada123/openclaw-skills) — trusted source
3. ClawHub (ranked by semantic relevance score)
4. GitHub community skills (ranked by stars)
5. npm packages (ranked by weekly downloads)
6. skillsmp.com (if available)

Options:

skill-finder: find telegram --source clawhub     # Single source only
skill-finder: find telegram --top 5              # Limit results
skill-finder: find telegram --safe               # Only SAFE-vetted skills

---

SCOUT — Browse trending and new skills

skill-finder: scout trending    # Top skills this week across sources
skill-finder: scout newest      # Most recently published
skill-finder: scout popular     # All-time most installed

Sources checked: ClawHub trending endpoint + GitHub topic stars + npm weekly downloads.

Example output:

TRENDING THIS WEEK
  1. n8n-workflow-builder    clawhub    ★ 847   "Build n8n workflows with AI"
  2. mcp-server-builder      clawhub    ★ 623   "Create MCP servers"
  3. openclaw-skill-slack    npm        ↓ 2.1k  "Slack integration toolkit"

---

VET — Security analysis before install

skill-finder: vet 
skill-finder: vet github:user/repo/path
skill-finder: vet https://raw.githubusercontent.com/...

Pulls the SKILL.md and runs a 10-point security checklist.

Security scorecard:

| Check | Flag | Points | |---|---|---| | Reads env vars (API keys, tokens) | REVIEW | -1 | | Executes shell commands | REVIEW | -1 | | Makes outbound network calls | INFO | 0 | | Calls known-safe APIs only | SAFE | +1 | | Installs packages at runtime | RISKY | -2 | | Accesses filesystem outside workspace | RISKY | -2 | | Contains obfuscated code | RISKY | -3 | | Has pinned dependency versions | SAFE | +1 | | Published author has other trusted skills | SAFE | +1 | | SKILL.md has explicit permissions section | SAFE | +1 |

Verdicts:

• SAFE (8–10): Install with confidence
• REVIEW (5–7): Read the skill carefully before installing
• RISKY (0–4): Do not install without understanding exactly what it does

Example output:

VET REPORT: telegram-bot (clawhub)
Score: 7/10 — REVIEW

Flags:
  [REVIEW] Reads env vars: TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID
  [INFO]   Makes outbound calls: api.telegram.org
  [SAFE]   Author sanada123 has 12 published skills
  [SAFE]   Has explicit permissions section in SKILL.md

Recommendation: Safe to install if you intend to use Telegram. The env vars
it reads are expected for this skill type. Review lines 23-31 of SKILL.md.

---

INSTALL — Install from any source to any platform

# From ClawHub (default) — installs to all detected platforms
skill-finder: install 

# From our GitHub skills repo
skill-finder: install github:sanada123/openclaw-skills/

# From any GitHub repo (org/repo/path/to/skill)
skill-finder: install github://

# Copy from local path
skill-finder: install local:

# From npm
skill-finder: install npm:

--platform flag — target a specific platform:

skill-finder: install  --platform openclaw
skill-finder: install  --platform claude-code
skill-finder: install  --platform codex
skill-finder: install  --platform cursor
skill-finder: install  --platform windsurf
skill-finder: install  --platform continue

When --platform is omitted, skill-finder detects all present platforms and installs to all of them.

Install flow:

1. Fetch SKILL.md from source
2. Auto-run VET (warn if RISKY, require --force to override)
3. Detect installed platforms (or use --platform override)
4. Copy to each platform's skill/rules directory
5. Confirm: "Installed skill-name → [platform1 path], [platform2 path]"

Skip vet (not recommended):

skill-finder: install telegram-bot --no-vet

Force-install to all platforms even if some lack a skills directory:

skill-finder: install telegram-bot --force --i-reviewed-it

---

STATUS — Inventory of all platforms and installed skills

skill-finder: status

Detects all installed AI platforms and lists skills found in each platform's skill directory.

Example output:

Detected platforms:
  ✓ OpenClaw     ~/.openclaw/skills/               (23 skills)
  ✓ Claude Code  ~/.claude/skills/                 (8 skills)
  ✓ Codex        ~/.codex/skills/                  (5 skills)
  ✗ Cursor       not detected
  ✗ Windsurf     not detected
  ✓ Local        ./skills/                         (12 skills)

INSTALLED SKILLS (47 total across all platforms)

OpenClaw (~/.openclaw/skills/):
  telegram-bot        v1.2   clawhub     updated 3 days ago
  n8n-workflow        v2.0   clawhub     updated 1 week ago

Claude Code (~/.claude/skills/):
  skill-finder        v2.0   local       updated today
  my-custom-tool      v1.0   local       updated 2 weeks ago

Options:
  skill-finder: status --outdated         # Show skills with updates available
  skill-finder: status --source github    # Filter by source
  skill-finder: status --platform cursor  # Show single platform only

---

Supported Platforms

| Platform | Skill/Rules Paths | |----------|-------------------| | OpenClaw | ~/.openclaw/skills/, ~/.openclaw/workspace/skills/, $OPENCLAW_SKILLS_DIR | | Claude Code | ~/.claude/skills/, ./.claude/skills/, CLAUDE.md in project root | | Codex (OpenAI) | ~/.codex/skills/, AGENTS.md in project root | | Cursor | ~/.cursor/rules/, ./.cursor/rules/ | | Windsurf | ~/.windsurf/rules/, ./.windsurf/rules/ | | Continue | ~/.continue/rules/ | | Aider | .aider.conf.yml based conventions | | Generic | ./skills/, ./.agents/skills/, ~/.agents/skills/ |

---

Source Priority Table

| # | Source | Trust Level | Best For | |---|---|---|---| | 1 | Local workspace | Highest — you own it | Already installed skills | | 2 | Our GitHub (sanada123/openclaw-skills) | High — your own published skills | Tested, personal skills | | 3 | ClawHub semantic search | High — curated platform | Discovering quality skills | | 4 | GitHub topic: openclaw-skill | Medium — community | Niche/experimental skills | | 5 | npm registry | Medium — versioned packages | Skills with dependencies | | 6 | skillsmp.com | Variable — try, fail gracefully | Alternative marketplace |

---

Security Framework

Always vet before installing skills you didn't write.

The VET command is automatic on INSTALL. To force-install a RISKY skill you've reviewed:

skill-finder: install  --force --i-reviewed-it

What VET cannot catch:

• Skills that behave differently based on environment
• Logic that only activates under certain conditions
• Social engineering (skill that tells you to do something harmful)

Golden rule: If a skill asks you to run commands outside the workspace, pipe to shell, or export credentials — stop and re-read it.

---

Rate Limits & Best Practices

| Source | Limit | Notes | |---|---|---| | ClawHub | 60 req/min | No auth needed for search | | GitHub API | 60 req/hour (unauthenticated) | Set GITHUB_TOKEN for 5000/hour | | npm registry | ~1000 req/hour | No auth needed | | skillsmp.com | Unknown | Fail gracefully if unavailable |

Set GitHub token for better rate limits:

export GITHUB_TOKEN=ghp_yourtoken
# skill-finder automatically uses it if set

Concurrent search: FIND runs all sources in parallel. Total search time ≈ slowest source response time (~1-2s), not sum of all.

---

See Also

• instructions.md — Full API reference, curl examples, dedup algorithm, security scoring details
• sources.md — Per-source documentation with working curl commands

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: sanada123
• Source: sanada123/openclaw-skills
• License: MIT
• Homepage: https://skillsmp.com/?q=lifestyle-optimizer

Install and usage instructions live in the source repository linked above.