# Skill Finder > Multi-source skill discovery for OpenClaw, Claude Code, Codex, Cursor, Windsurf, and more. Search ClawHub, GitHub, and npm — then install to every AI platform you use in one command. - Skill: `sanada123/skill-finder` (Agent Skill, multi-file: 3 files) - Install (CLI): `npx skillmds@latest add sanada123/skill-finder` - Raw SKILL.md: https://api.skillmd.com/api/skills/sanada123/skill-finder/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Product & Planning - License: MIT - Author: sanada123 (https://skillmd.com/u/sanada123) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/sanada123/skill-finder --- # skill-finder **Find skills everywhere. Install to every AI platform you use.** Multi-source skill discovery: search ClawHub, GitHub, npm, and local skills in one command. Find, vet, and install across OpenClaw, Claude Code, Codex, Cursor, Windsurf, and more. --- ## Overview `skill-hunter` only searches ClawHub. **skill-finder** searches 6 sources simultaneously, deduplicates results, ranks by trust, and lets you vet security before installing anything. | | skill-hunter | skill-finder | |---|---|---| | Sources | 1 (ClawHub) | 6 (ClawHub + GitHub + npm + local + more) | | Security vetting | None | Built-in VET command | | Install from GitHub | No | Yes | | Shows local skills | No | Yes | | Deduplication | No | Yes | --- ## Quick Start ```bash # Find skills about Telegram skill-finder: find telegram # See what's trending on ClawHub this week skill-finder: scout trending # Vet a skill before installing skill-finder: vet telegram-bot # Install from GitHub instead of ClawHub skill-finder: install github:sanada123/openclaw-skills/telegram-bot # See all detected AI platforms and installed skills skill-finder: status # Install to a specific platform skill-finder: install telegram-bot --platform claude-code # Install to all detected platforms at once skill-finder: install telegram-bot ``` --- ## Commands ### FIND — Search everywhere, ranked by trust ```bash skill-finder: find ``` Searches all 6 sources concurrently, deduplicates by name/slug, and returns ranked results. **Output columns:** ``` RANK NAME SOURCE DESCRIPTION INSTALL 1 telegram-bot local Send Telegram messages (already installed) 2 telegram-notifier our-github Notify via Telegram install github:sanada123/openclaw-skills/telegram-notifier 3 telegram-claude clawhub Full Telegram + Claude bot install telegram-claude 4 telegram-webhook npm Webhook handler for Telegram install npm:openclaw-skill-telegram-webhook ``` **Ranking logic:** 1. Local installed skills (already have them) 2. Our GitHub (`sanada123/openclaw-skills`) — trusted source 3. ClawHub (ranked by semantic relevance score) 4. GitHub community skills (ranked by stars) 5. npm packages (ranked by weekly downloads) 6. skillsmp.com (if available) **Options:** ```bash skill-finder: find telegram --source clawhub # Single source only skill-finder: find telegram --top 5 # Limit results skill-finder: find telegram --safe # Only SAFE-vetted skills ``` --- ### SCOUT — Browse trending and new skills ```bash skill-finder: scout trending # Top skills this week across sources skill-finder: scout newest # Most recently published skill-finder: scout popular # All-time most installed ``` Sources checked: ClawHub trending endpoint + GitHub topic stars + npm weekly downloads. **Example output:** ``` TRENDING THIS WEEK 1. n8n-workflow-builder clawhub ★ 847 "Build n8n workflows with AI" 2. mcp-server-builder clawhub ★ 623 "Create MCP servers" 3. openclaw-skill-slack npm ↓ 2.1k "Slack integration toolkit" ``` --- ### VET — Security analysis before install ```bash skill-finder: vet skill-finder: vet github:user/repo/path skill-finder: vet https://raw.githubusercontent.com/... ``` Pulls the SKILL.md and runs a 10-point security checklist. **Security scorecard:** | Check | Flag | Points | |---|---|---| | Reads env vars (API keys, tokens) | REVIEW | -1 | | Executes shell commands | REVIEW | -1 | | Makes outbound network calls | INFO | 0 | | Calls known-safe APIs only | SAFE | +1 | | Installs packages at runtime | RISKY | -2 | | Accesses filesystem outside workspace | RISKY | -2 | | Contains obfuscated code | RISKY | -3 | | Has pinned dependency versions | SAFE | +1 | | Published author has other trusted skills | SAFE | +1 | | SKILL.md has explicit permissions section | SAFE | +1 | **Verdicts:** - **SAFE** (8–10): Install with confidence - **REVIEW** (5–7): Read the skill carefully before installing - **RISKY** (0–4): Do not install without understanding exactly what it does **Example output:** ``` VET REPORT: telegram-bot (clawhub) Score: 7/10 — REVIEW Flags: [REVIEW] Reads env vars: TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID [INFO] Makes outbound calls: api.telegram.org [SAFE] Author sanada123 has 12 published skills [SAFE] Has explicit permissions section in SKILL.md Recommendation: Safe to install if you intend to use Telegram. The env vars it reads are expected for this skill type. Review lines 23-31 of SKILL.md. ``` --- ### INSTALL — Install from any source to any platform ```bash # From ClawHub (default) — installs to all detected platforms skill-finder: install # From our GitHub skills repo skill-finder: install github:sanada123/openclaw-skills/ # From any GitHub repo (org/repo/path/to/skill) skill-finder: install github:// # Copy from local path skill-finder: install local: # From npm skill-finder: install npm: ``` **`--platform` flag — target a specific platform:** ```bash skill-finder: install --platform openclaw skill-finder: install --platform claude-code skill-finder: install --platform codex skill-finder: install --platform cursor skill-finder: install --platform windsurf skill-finder: install --platform continue ``` When `--platform` is omitted, skill-finder detects all present platforms and installs to **all of them**. **Install flow:** 1. Fetch SKILL.md from source 2. Auto-run VET (warn if RISKY, require `--force` to override) 3. Detect installed platforms (or use `--platform` override) 4. Copy to each platform's skill/rules directory 5. Confirm: "Installed skill-name → [platform1 path], [platform2 path]" **Skip vet (not recommended):** ```bash skill-finder: install telegram-bot --no-vet ``` **Force-install to all platforms even if some lack a skills directory:** ```bash skill-finder: install telegram-bot --force --i-reviewed-it ``` --- ### STATUS — Inventory of all platforms and installed skills ```bash skill-finder: status ``` Detects all installed AI platforms and lists skills found in each platform's skill directory. **Example output:** ``` Detected platforms: ✓ OpenClaw ~/.openclaw/skills/ (23 skills) ✓ Claude Code ~/.claude/skills/ (8 skills) ✓ Codex ~/.codex/skills/ (5 skills) ✗ Cursor not detected ✗ Windsurf not detected ✓ Local ./skills/ (12 skills) INSTALLED SKILLS (47 total across all platforms) OpenClaw (~/.openclaw/skills/): telegram-bot v1.2 clawhub updated 3 days ago n8n-workflow v2.0 clawhub updated 1 week ago Claude Code (~/.claude/skills/): skill-finder v2.0 local updated today my-custom-tool v1.0 local updated 2 weeks ago Options: skill-finder: status --outdated # Show skills with updates available skill-finder: status --source github # Filter by source skill-finder: status --platform cursor # Show single platform only ``` --- ## Supported Platforms | Platform | Skill/Rules Paths | |----------|-------------------| | **OpenClaw** | `~/.openclaw/skills/`, `~/.openclaw/workspace/skills/`, `$OPENCLAW_SKILLS_DIR` | | **Claude Code** | `~/.claude/skills/`, `./.claude/skills/`, `CLAUDE.md` in project root | | **Codex (OpenAI)** | `~/.codex/skills/`, `AGENTS.md` in project root | | **Cursor** | `~/.cursor/rules/`, `./.cursor/rules/` | | **Windsurf** | `~/.windsurf/rules/`, `./.windsurf/rules/` | | **Continue** | `~/.continue/rules/` | | **Aider** | `.aider.conf.yml` based conventions | | **Generic** | `./skills/`, `./.agents/skills/`, `~/.agents/skills/` | --- ## Source Priority Table | # | Source | Trust Level | Best For | |---|---|---|---| | 1 | Local workspace | Highest — you own it | Already installed skills | | 2 | Our GitHub (`sanada123/openclaw-skills`) | High — your own published skills | Tested, personal skills | | 3 | ClawHub semantic search | High — curated platform | Discovering quality skills | | 4 | GitHub topic: `openclaw-skill` | Medium — community | Niche/experimental skills | | 5 | npm registry | Medium — versioned packages | Skills with dependencies | | 6 | skillsmp.com | Variable — try, fail gracefully | Alternative marketplace | --- ## Security Framework **Always vet before installing skills you didn't write.** The VET command is automatic on INSTALL. To force-install a RISKY skill you've reviewed: ```bash skill-finder: install --force --i-reviewed-it ``` **What VET cannot catch:** - Skills that behave differently based on environment - Logic that only activates under certain conditions - Social engineering (skill that tells you to do something harmful) **Golden rule:** If a skill asks you to run commands outside the workspace, pipe to shell, or export credentials — stop and re-read it. --- ## Rate Limits & Best Practices | Source | Limit | Notes | |---|---|---| | ClawHub | 60 req/min | No auth needed for search | | GitHub API | 60 req/hour (unauthenticated) | Set `GITHUB_TOKEN` for 5000/hour | | npm registry | ~1000 req/hour | No auth needed | | skillsmp.com | Unknown | Fail gracefully if unavailable | **Set GitHub token for better rate limits:** ```bash export GITHUB_TOKEN=ghp_yourtoken # skill-finder automatically uses it if set ``` **Concurrent search:** FIND runs all sources in parallel. Total search time ≈ slowest source response time (~1-2s), not sum of all. --- ## See Also - `instructions.md` — Full API reference, curl examples, dedup algorithm, security scoring details - `sources.md` — Per-source documentation with working curl commands