Real Skill packageSource verifiedClawHub registry

Skill严选猎手

外部Skill搜索，GitHub/ClawHub/SkillHub/Skills.sh四源发现。触发词：搜skill、外部skill、找skill、搜外部、GitHub skill、ClawHub skill、SkillHub skill、腾讯skill商店、Skills.sh。即使用户没说「搜skill」，只要提到「找外部工具」「有没有现成的Skill」「GitHub上有没有」也要用。不适用：内部Skill市场skill（用skillhub）

Identity and source

Publisher attribution木先生iPPTregistry owner unverified by skillvetai
Functional categorySoftware Developmentautomatically inferred · 59% rule confidence
Package forminstruction with code8 recorded files
Canonical sourceClawHub registryclawhub:muippt:mu-skill-hunter
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 8/19/2026.claude/skills/mu-skill-hunter

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 8/19/2026.agents/skills/mu-skill-hunter

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 8/19/2026skills/mu-skill-hunter

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @muippt/mu-skill-hunter
clawhub inspect @muippt/mu-skill-hunter --version 1.0.0

Security evidence

SkillVetAI static result: high signal

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
7 / 7 inspected as text
Checked
8/19/2026, 1:56:54 AM
Scanner
0.1.3
Policy
1.0.3
10 automated findings
highRemote content is piped directly to a shellSKILL.md:57 · confidence 98%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh | bash
highRemote content is piped directly to a shellscripts/search.py:197 · confidence 98%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh | bash
highRemote content is piped directly to a shellreferences/search-guide.md:54 · confidence 98%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh | bash
highDynamic code or shell execution is presentreferences/security-levels.md:20 · confidence 78%eval(
highEncoded content is decoded and executedreferences/security-levels.md:19 · confidence 90%base64
mediumPrompt-override language requires reviewreferences/security-levels.md:28 · confidence 62%ignore previous instructions
mediumWorld-writable permissions are requestedreferences/security-levels.md:25 · confidence 95%chmod 777
mediumRemote installer is downloaded without an integrity checkSKILL.md:57 · confidence 70%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh
mediumRemote installer is downloaded without an integrity checkscripts/search.py:197 · confidence 70%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh
mediumRemote installer is downloaded without an integrity checkreferences/search-guide.md:54 · confidence 70%curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh
5 High/Critical review queue entries
STATIC_DOWNLOAD_PIPE_TO_SHELLpending
STATIC_DOWNLOAD_PIPE_TO_SHELLpending
STATIC_DOWNLOAD_PIPE_TO_SHELLpending
STATIC_DYNAMIC_CODE_EXECUTIONpending
STATIC_OBFUSCATED_EXECUTIONpending
Open human review queue →
5 inferred permission indicators
  • shell execution — automatically inferred
  • network access — automatically inferred
  • filesystem read — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
7 dependency and API indicators
  • api: api.github.com
  • api: api.skillhub.cn
  • api: clawhub.ai
  • api: github.com
  • api: skillhub-1388575217.cos.ap-guangzhou.myqcloud.com
  • api: skillhub.cn
  • api: skills.sh
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
8/19/2026, 2:00:39 AM
Release binding
Matches this record
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:7c9d0908462baff9b2bce45ccd5bc980d0ec51b7095727f0e60a91ad26935b4a
Show up to 8 recorded paths
  • references/search-guide.md
  • references/security-levels.md
  • references/weekly-report-template.md
  • scripts/scanner.py
  • scripts/search.py
  • scripts/trending.py
  • skill-card.md
  • SKILL.md

Source changelog

mu-skill-hunter v2.8.0 brings a comprehensive upgrade for external Skill discovery, safety, and reporting. - Adds robust four-source search (GitHub, ClawHub, SkillHub, Skills.sh) with clear source tag, summary, clickable link, and popularity for every result. - Introduces mandatory pre-install code scanning via scanner.py to prevent prompt injection and block high/critical risk Skills unless approved. - Launches an automated weekly Skill trend report (Cron) with scene calibration, strict formatting, and automatic WeChat/Feishu push. - Implements detailed failure handling and environment checks for each source (with clear CLI install/config prompts). - Enforces strict operational boundaries and anti-patterns to enhance safety and user experience. - Introduces clear first-use onboarding for both search and reporting features.