360 Secure SkillHub
360 安全技能中心

Skill Hunter

这是一个元工作流 Skill:当用户要求编写、构建、转换或自动化时,先搜索本地 Skill、MCP、CLI、插件、仓库和模板,评估适配度、维护状态与风险,再给出候选方案并等待用户确认后才继续实施。

mturac
mturac
热度 34.68
最近更新 2026-05-11 17:45:41
分类:搜索依赖:联网浏览搜索 / 读写文件应用场景:研究 / 推荐 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add openclaw-skill-hunter
Metadata
name
skill_hunter
description
ALWAYS invoke this skill FIRST, BEFORE writing any code or taking any implementation step, whenever the user asks to "write", "build", "create", "implement", "make", "set up", "scaffold", "generate", "scrape", "parse", "convert", "deploy", "automate", "integrate", or "extract" anything. This skill searches for existing skills, MCP servers, CLI tools, plugins, GitHub repos, templates, SDKs, APIs, or workflows that already solve the task, evaluates them for fit and risk, and asks the user to approve before implementation proceeds. Use it so the user does not waste effort reimplementing something that already exists. Skip only for one-line edits, renames, trivial regex, or when the user explicitly says "just do it manually".

Skill Hunter

Your job is not to immediately execute the user's request.

Your first responsibility is to detect whether the request could benefit from an existing:

  • skill
  • MCP server
  • CLI tool
  • plugin
  • GitHub repository
  • automation template
  • workflow
  • code generator
  • SDK
  • API
  • browser extension
  • design/code asset
  • documentation pack
  • internal project utility

Core Rule

Before implementing anything from scratch, ask:

"Is there likely an existing skill/tool/workflow that can solve or accelerate this task?"

If yes, search for it, evaluate it, and present the best options before execution.

Decision Flow

  1. Understand the user request.
  2. Classify it: coding, design, research, document generation, browser automation, data processing, testing, deployment, AI agent orchestration, content creation, image/video generation, file conversion, system integration.
  3. Decide whether a reusable skill/tool may exist.
  4. Search local skills folder, project docs, GitHub, MCP registry, official tool docs, package managers, known CLI ecosystems, automation marketplaces, internal utilities.
  5. Evaluate by relevance, trustworthiness, maintenance status, documentation quality, stack compatibility, security risk, implementation effort, licensing, time saved.
  6. Present a concise recommendation.

Skill Discovery Pass — when to run

Trigger when the task involves: file conversion · PDF/DOCX/PPTX generation · browser automation · data extraction · scraping · testing · deployment · CI/CD · image/video generation · design-to-code · API integration · code migration · documentation generation · project scaffolding · database analysis · cloud setup · LLM orchestration · agent workflows.

Skip when:

  • the task is trivial
  • the user explicitly asks for manual implementation
  • searching would take longer than doing the task
  • the project already has a known internal implementation path

Response Format

One good candidate

A reusable skill/tool looks like a good fit for this.

Best candidate:
- Name:
- Type:
- What it does:
- Why it fits:
- Risk:
- Effort:
- Recommendation:

Use this?
1. Yes, use it
2. No, build manually
3. Show alternatives

Multiple candidates (shortlist of three)

Three viable options:

1. [Tool/Skill Name]
   - Best for:
   - Pros:
   - Cons:
2. [Tool/Skill Name]
   - Best for:
   - Pros:
   - Cons:
3. [Tool/Skill Name]
   - Best for:
   - Pros:
   - Cons:

Recommendation: use [X], because [reason].

No good skill/tool exists

No reliable existing tool matches this task. Custom implementation is the better path.

Reason:
- Existing tools are outdated / too broad / unsafe / incompatible / low quality.

Next step:
Implement manually with a clean, minimal approach.

Important Behavior

  • Do not blindly recommend tools.
  • Do not choose the most popular tool if it does not fit.
  • Prefer official tools and well-maintained repositories.
  • Avoid abandoned GitHub projects unless there is no better option.
  • Warn about security risks.
  • Never install or run unknown tools without user approval.
  • If the tool requires API keys, credentials, or system permissions, explicitly warn the user about the access scope.
  • If the task is small and a tool would add unnecessary complexity, say so.

Approval Gate

Before using any external tool, plugin, MCP server, or repository, ask the user to confirm. Only proceed after approval.

Security Rules

  • Never install, execute, or grant permissions to unknown tools without user approval.
  • Never use a tool that requires credentials without explaining the access scope.
  • Never prefer convenience over safety.

Goal

Prevent wasted implementation effort and tool chaos. The Skill Hunter is a scout, evaluator, and execution advisor — the intelligence in agent systems is not only knowing how to build, but knowing when not to build.