@kanyun/rush-find-skills

by Krisv0.3.2

❌ Risky

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...

clawhub install rush-find-skills
📥
0
All-time Downloads
📦
0
Active Installs
0
Stars

Security Analysis

🤖 Powered by DeepSeek AI

35/100
Safety Score

This skill poses significant security risks due to multiple suspicious indicators flagged by moderation systems, unknown authorship, and the dangerous capability to install arbitrary skills. The combination of malware suspicions, lack of license, and high social engineering potential makes it unsuitable for deployment without thorough code review and sandboxing.

⚠️Data Privacy RiskSkill discovers/installs other skills, potentially exposing user queries and installation patterns
Permission ScopeAbility to install arbitrary skills creates significant privilege escalation risk
Supply Chain RiskAuthor unknown, moderation flags suspicious, no verified identity
⚠️Code TransparencyNo license specified, documentation-only changes in changelog suggest minimal transparency
Malware IndicatorsModeration system flags both LLM and VirusTotal suspicious patterns
Social Engineering RiskCould manipulate users into installing malicious skills via trusted recommendations
⚠️Dependency SafetyRelies on external registry (Rush) with unknown security controls
Update FrequencyMultiple versions and recent documentation updates
⚠️Community ValidationZero stars/comments despite 425 downloads, no community trust signals
License ComplianceNo license specified - unclear usage rights and redistribution terms

Last scanned: 3/29/2026

Community Mentions

From Reddit & GitHub discussions

🔍

No community mentions found yet.

Be the first to discuss this skill on Reddit or GitHub!

User Reviews

Loading reviews...

Sign in to write a review

Sign In

Changelog v0.3.2

- Expanded documentation on trust and security; clarified why the Rush registry is used by default and how registry selection works. - Added instructions to prefer globally installed `reskill` CLI, falling back to `npx` only if needed. - Improved and streamlined guidance on resolving registries and command examples. - No functional code changes—documentation only.

Safety Score

35
out of 100
❌ Risky

🤖 AI-powered scan

Info

Version
0.3.2
Versions
3
Author
krislavten
Updated
Mar 29, 2026
Install on ClawHub →⚖️ Compare Skills← Browse All Skills