Skill: trip1ewhy/skills-wide-search (version 1.0.1)

--- name: skills-search description: Search for Agent Skills across ClawHub, skills.sh, and SkillsMP, then rank by Health Score (downloads + stars + installs + security). Use this skill whenever the user mentions finding, searching, installing, recommending, or discovering skills — even if they say "是否有" / "帮我找" / "有没有能XXX的" / "装个XXX" / "有没有XXX相关的skill". Always search all three platforms before recommending. --- # Skills Search — Multi-Platform Search three platforms in parallel, score each result, return ranked recommendations. ## Platforms - **SkillsMP** (`curl "https://r.jina.ai/https://skillsmp.com/zh/search?q=<encoded>"`) — indexes GitHub directly, good for official/internal skills not on ClawHub - **ClawHub** (`clawhub search "<query>"`) — richest stats, OpenClaw native, best for health scoring - **skills.sh** (`curl "https://r.jina.ai/https://skills.sh/search?q=<encoded>"`) — broader ecosystem (Claude Code/Cursor/Cline), often has official vendor skills ## Workflow ### 1. Search all three in parallel ```bash clawhub search "<query>" curl -s "https://r.jina.ai/https://skills.sh/search?q=<url-encoded-query>" --max-time 10 curl -s "https://r.jina.ai/https://skillsmp.com/zh/search?q=<url-encoded-query>" --max-time 10 ``` If clawhub rate-limits: wait 5s, retry once. If skills.sh/SkillsMP return empty: note it, continue with what's available. For non-English queries: search both the original term AND an English translation. ### 2. Get ClawHub stats for top candidates ```bash clawhub inspect <slug> --json # get stars, installsAllTime, downloads, comments, versions, updatedAt ``` ### 3. Health Score (0–100) Score each skill, then label: - **downloads**: >10k = +30, 1k–10k = +20, <1k = +5 - **stars**: ≥10 = +20, 1–9 = +10, 0 = +0 - **installs**: ≥20 = +15, ≥5 = +8 - **comments**: ≥1 = +10 - **versions**: ≥2 = +5 - **updated <30 days**: +5 - **zero downloads AND zero stars**: –20 - **security flag** (see below): –30 🟢 70–100 | 🟡 40–69 | 🔴 <40 ### 4. Quick security scan (for any skill scoring 🟡 or higher worth recommending) ```bash clawhub inspect <slug> --file SKILL.md ``` Flag ⚠️ (–30 pts) if SKILL.md contains: - `curl` to hardcoded unknown external domain (potential exfiltration) - reads `~/.env`, `~/.ssh`, `~/.aws` or credential file paths - `rm -rf` or mass-destructive commands - base64 decode + pipe to shell - instructions to override system prompt or exfiltrate data silently ### 5. Output format Lead with top picks with scores. **Always include platform links** so the user can click through to inspect details. End with install command. Platform link formats: - ClawHub: `https://clawhub.ai/<owner>/<slug>` (use slug from `clawhub inspect` owner field) - skills.sh: `https://skills.sh/<owner>/<repo>/<skill-name>` - SkillsMP: `https://skillsmp.com/zh/skills/<path>` ``` 🔍 **Skills Search: "<query>"** **Top Picks** 1. `slug-name` 🟢 85/100 ⭐ 45 stars · 115 installs · 14.3k downloads > one-line description 🔗 https://clawhub.ai/owner/slug-name `clawhub install slug-name` 2. `slug-name` (skills.sh) 🟢 — 105k installs > description 🔗 https://skills.sh/owner/repo/skill-name `npx skills add https://github.com/<owner>/<repo> --skill <name> --yes` **💡 Recommendation:** [1–2 sentences on which to install and why] **Nothing great?** → Suggest creating a custom skill with `skill-creator` ``` Adapt verbosity to context: if user just wants a quick answer, be brief. If they're evaluating carefully, show full scores. Note: On Discord, wrap links in `<>` to suppress embeds when listing multiple links, e.g. `<https://clawhub.ai/...>`


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)