alibabacloud-find-skills

Mostly coherent Alibaba Cloud discovery skill with official-looking CLI/API usage and careful credential handling, but it expands into transitive installation of other skills. The main risk is trust delegation: especially the `npx clawhub install` path and arbitrary skill installation go beyond simple search/browse and create medium security risk, though there is no clear credential theft or exfiltration behavior.