Skill finder
π§ Agent skills for founders who code, parent, and build companies. Productivity systems, deep work, baby sleep guides, burnout recovery β all evidence-based. For OpenClaw, Claude Code, Codex CLI & Cursor.
npx -y skills add sanada123/openclaw-skills --skill skill-finderAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Multi-source skill discovery for OpenClaw, Claude Code, Codex, Cursor, Windsurf, and more. Search ClawHub, GitHub, and npm β then install to every AI platform you use in one command.
The file declares its own license as MIT. That is the authorβs claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
10.1 KB, as published. Nobody here has run it
skill-finder
Find skills everywhere. Install to every AI platform you use.
Multi-source skill discovery: search ClawHub, GitHub, npm, and local skills in one command. Find, vet, and install across OpenClaw, Claude Code, Codex, Cursor, Windsurf, and more.
Overview
skill-hunter only searches ClawHub. skill-finder searches 6 sources simultaneously, deduplicates results, ranks by trust, and lets you vet security before installing anything.
| skill-hunter | skill-finder | |
|---|---|---|
| Sources | 1 (ClawHub) | 6 (ClawHub + GitHub + npm + local + more) |
| Security vetting | None | Built-in VET command |
| Install from GitHub | No | Yes |
| Shows local skills | No | Yes |
| Deduplication | No | Yes |
Quick Start
# Find skills about Telegram
skill-finder: find telegram
# See what's trending on ClawHub this week
skill-finder: scout trending
# Vet a skill before installing
skill-finder: vet telegram-bot
# Install from GitHub instead of ClawHub
skill-finder: install github:sanada123/openclaw-skills/telegram-bot
# See all detected AI platforms and installed skills
skill-finder: status
# Install to a specific platform
skill-finder: install telegram-bot --platform claude-code
# Install to all detected platforms at once
skill-finder: install telegram-bot
Commands
FIND β Search everywhere, ranked by trust
skill-finder: find <query>
Searches all 6 sources concurrently, deduplicates by name/slug, and returns ranked results.
Output columns:
RANK NAME SOURCE DESCRIPTION INSTALL
1 telegram-bot local Send Telegram messages (already installed)
2 telegram-notifier our-github Notify via Telegram install github:sanada123/openclaw-skills/telegram-notifier
3 telegram-claude clawhub Full Telegram + Claude bot install telegram-claude
4 telegram-webhook npm Webhook handler for Telegram install npm:openclaw-skill-telegram-webhook
Ranking logic:
- Local installed skills (already have them)
- Our GitHub (
sanada123/openclaw-skills) β trusted source - ClawHub (ranked by semantic relevance score)
- GitHub community skills (ranked by stars)
- npm packages (ranked by weekly downloads)
- skillsmp.com (if available)
Options:
skill-finder: find telegram --source clawhub # Single source only
skill-finder: find telegram --top 5 # Limit results
skill-finder: find telegram --safe # Only SAFE-vetted skills
SCOUT β Browse trending and new skills
skill-finder: scout trending # Top skills this week across sources
skill-finder: scout newest # Most recently published
skill-finder: scout popular # All-time most installed
Sources checked: ClawHub trending endpoint + GitHub topic stars + npm weekly downloads.
Example output:
TRENDING THIS WEEK
1. n8n-workflow-builder clawhub β
847 "Build n8n workflows with AI"
2. mcp-server-builder clawhub β
623 "Create MCP servers"
3. openclaw-skill-slack npm β 2.1k "Slack integration toolkit"
VET β Security analysis before install
skill-finder: vet <slug>
skill-finder: vet github:user/repo/path
skill-finder: vet https://raw.githubusercontent.com/...
Pulls the SKILL.md and runs a 10-point security checklist.
Security scorecard:
| Check | Flag | Points |
|---|---|---|
| Reads env vars (API keys, tokens) | REVIEW | -1 |
| Executes shell commands | REVIEW | -1 |
| Makes outbound network calls | INFO | 0 |
| Calls known-safe APIs only | SAFE | +1 |
| Installs packages at runtime | RISKY | -2 |
| Accesses filesystem outside workspace | RISKY | -2 |
| Contains obfuscated code | RISKY | -3 |
| Has pinned dependency versions | SAFE | +1 |
| Published author has other trusted skills | SAFE | +1 |
| SKILL.md has explicit permissions section | SAFE | +1 |
Verdicts:
- SAFE (8β10): Install with confidence
- REVIEW (5β7): Read the skill carefully before installing
- RISKY (0β4): Do not install without understanding exactly what it does
Example output:
VET REPORT: telegram-bot (clawhub)
Score: 7/10 β REVIEW
Flags:
[REVIEW] Reads env vars: TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID
[INFO] Makes outbound calls: api.telegram.org
[SAFE] Author sanada123 has 12 published skills
[SAFE] Has explicit permissions section in SKILL.md
Recommendation: Safe to install if you intend to use Telegram. The env vars
it reads are expected for this skill type. Review lines 23-31 of SKILL.md.
INSTALL β Install from any source to any platform
# From ClawHub (default) β installs to all detected platforms
skill-finder: install <slug>
# From our GitHub skills repo
skill-finder: install github:sanada123/openclaw-skills/<skill-name>
# From any GitHub repo (org/repo/path/to/skill)
skill-finder: install github:<user>/<repo>/<path>
# Copy from local path
skill-finder: install local:</path/to/skill>
# From npm
skill-finder: install npm:<package-name>
--platform flag β target a specific platform:
skill-finder: install <slug> --platform openclaw
skill-finder: install <slug> --platform claude-code
skill-finder: install <slug> --platform codex
skill-finder: install <slug> --platform cursor
skill-finder: install <slug> --platform windsurf
skill-finder: install <slug> --platform continue
When --platform is omitted, skill-finder detects all present platforms and installs to all of them.
Install flow:
- Fetch SKILL.md from source
- Auto-run VET (warn if RISKY, require
--forceto override) - Detect installed platforms (or use
--platformoverride) - Copy to each platform's skill/rules directory
- Confirm: "Installed skill-name β [platform1 path], [platform2 path]"
Skip vet (not recommended):
skill-finder: install telegram-bot --no-vet
Force-install to all platforms even if some lack a skills directory:
skill-finder: install telegram-bot --force --i-reviewed-it
STATUS β Inventory of all platforms and installed skills
skill-finder: status
Detects all installed AI platforms and lists skills found in each platform's skill directory.
Example output:
Detected platforms:
β OpenClaw ~/.openclaw/skills/ (23 skills)
β Claude Code ~/.claude/skills/ (8 skills)
β Codex ~/.codex/skills/ (5 skills)
β Cursor not detected
β Windsurf not detected
β Local ./skills/ (12 skills)
INSTALLED SKILLS (47 total across all platforms)
OpenClaw (~/.openclaw/skills/):
telegram-bot v1.2 clawhub updated 3 days ago
n8n-workflow v2.0 clawhub updated 1 week ago
Claude Code (~/.claude/skills/):
skill-finder v2.0 local updated today
my-custom-tool v1.0 local updated 2 weeks ago
Options:
skill-finder: status --outdated # Show skills with updates available
skill-finder: status --source github # Filter by source
skill-finder: status --platform cursor # Show single platform only
Supported Platforms
| Platform | Skill/Rules Paths |
|---|---|
| OpenClaw | ~/.openclaw/skills/, ~/.openclaw/workspace/skills/, $OPENCLAW_SKILLS_DIR |
| Claude Code | ~/.claude/skills/, ./.claude/skills/, CLAUDE.md in project root |
| Codex (OpenAI) | ~/.codex/skills/, AGENTS.md in project root |
| Cursor | ~/.cursor/rules/, ./.cursor/rules/ |
| Windsurf | ~/.windsurf/rules/, ./.windsurf/rules/ |
| Continue | ~/.continue/rules/ |
| Aider | .aider.conf.yml based conventions |
| Generic | ./skills/, ./.agents/skills/, ~/.agents/skills/ |
Source Priority Table
| # | Source | Trust Level | Best For |
|---|---|---|---|
| 1 | Local workspace | Highest β you own it | Already installed skills |
| 2 | Our GitHub (sanada123/openclaw-skills) | High β your own published skills | Tested, personal skills |
| 3 | ClawHub semantic search | High β curated platform | Discovering quality skills |
| 4 | GitHub topic: openclaw-skill | Medium β community | Niche/experimental skills |
| 5 | npm registry | Medium β versioned packages | Skills with dependencies |
| 6 | skillsmp.com | Variable β try, fail gracefully | Alternative marketplace |
Security Framework
Always vet before installing skills you didn't write.
The VET command is automatic on INSTALL. To force-install a RISKY skill you've reviewed:
skill-finder: install <slug> --force --i-reviewed-it
What VET cannot catch:
- Skills that behave differently based on environment
- Logic that only activates under certain conditions
- Social engineering (skill that tells you to do something harmful)
Golden rule: If a skill asks you to run commands outside the workspace, pipe to shell, or export credentials β stop and re-read it.
Rate Limits & Best Practices
| Source | Limit | Notes |
|---|---|---|
| ClawHub | 60 req/min | No auth needed for search |
| GitHub API | 60 req/hour (unauthenticated) | Set GITHUB_TOKEN for 5000/hour |
| npm registry | ~1000 req/hour | No auth needed |
| skillsmp.com | Unknown | Fail gracefully if unavailable |
Set GitHub token for better rate limits:
export GITHUB_TOKEN=ghp_yourtoken
# skill-finder automatically uses it if set
Concurrent search: FIND runs all sources in parallel. Total search time β slowest source response time (~1-2s), not sum of all.
See Also
instructions.mdβ Full API reference, curl examples, dedup algorithm, security scoring detailssources.mdβ Per-source documentation with working curl commands