skill-finder-cn

SUSPICIOUS: The skill's stated purpose matches its behavior, and there is no direct credential harvesting or exfiltration. The main risk is that it installs other skills, creating a transitive trust chain where downstream skills may be unsafe; the external `clawhub` dependency appears same-ecosystem but is not fully documented here.