📦

find-skills

Name: find-skills
Author: brianlovin

مراجعة المحتوى r1 مخاطر عالية ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة

Discover and Install Agent Skills

Finding the right agent extension can require broad marketplace searches and manual comparison. This skill converts a task into focused searches and presents relevant options.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "find-skills" from https://skillstore.io/skills/brianlovin-find-skills.md and its manifest at https://skillstore.io/api/skills/brianlovin-find-skills/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/brianlovin-find-skills.md manifest موقَّع GET /api/skills/brianlovin-find-skills/manifest lockfile موقَّع GET /api/skills/brianlovin-find-skills/lockfile

اختبرها

جارٍ استخدام "find-skills". Find a skill for improving React application performance.

النتيجة المتوقعة:

Recommended match: Vercel React Best Practices. It provides React and Next.js optimization guidance. Review its skills.sh page before choosing installation.

جارٍ استخدام "find-skills". I need help reviewing pull requests.

النتيجة المتوقعة:

A focused search found skills related to pull request review and code quality.
Each option includes its purpose, source repository, and marketplace details for comparison.
No installation was performed.

جارٍ استخدام "find-skills". Find a skill for a specialized task with no marketplace results.

النتيجة المتوقعة:

No relevant skill was found for the selected terms. The agent can help directly, try alternative keywords, or outline a new skill.

التدقيق الأمني

مخاطر عالية

v1 • ٢١‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static alerts are false positives caused by Markdown backticks and public documentation links. The skill intentionally runs the Skills CLI and can globally install an unverified third-party skill while bypassing confirmation. Source review and explicit installation approval are required.

الملفات التي تم فحصها

134

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

مرتفع

SKILL.md:87-95

Unverified Global Skill Installation

The workflow offers to install a discovered third-party skill globally with -y, without source verification or content review. Disabling confirmation can persist malicious skill instructions.

Lines 87-95 explicitly direct the agent to install the selected package globally and explain that -y skips confirmation. No verification step appears before installation.

عناصر مراجعة القدرات (5)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

SKILL.md:91-93

Ruby/shell backtick execution

```bash

Lines 89-93 instruct the agent to run a global installation command with confirmation disabled. It installs a discovered third-party skill and changes persistent user-level state.

متوسط

SKILL.md:48-50

Ruby/shell backtick execution

```bash

Lines 46-50 explicitly direct the agent to run npx skills find. This invokes an external npm CLI and may download the package when it is unavailable locally.

متوسط

SKILL.md:54-55

Ruby/shell backtick execution

- User asks "how do I make my React app faster?" → `npx skills find react performance`

Line 54 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

متوسط

SKILL.md:55-56

Ruby/shell backtick execution

- User asks "can you help me with PR reviews?" → `npx skills find pr review`

Line 55 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

متوسط

SKILL.md:56-60

Ruby/shell backtick execution

- User asks "I need to create a changelog" → `npx skills find changelog`

Line 56 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

عوامل الخطر

⚙️ الأوامر الخارجية (20)

🌐 الوصول إلى الشبكة (3)

SKILL.md:32 SKILL.md:64 SKILL.md:84

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/brianlovin-find-skills/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/brianlovin-find-skills/security.svg)](https://skillstore.io/skills/brianlovin-find-skills?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/brianlovin-find-skills?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brianlovin-find-skills/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/brianlovin-find-skills.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

brianlovin. (2026). find-skills security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brianlovin-find-skills/audits/1

اقتباس BibTeX

@techreport{brianlovin-brianlovin-find-skills-2026,
  author = {brianlovin},
  title = {find-skills security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/brianlovin-find-skills/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "find-skills security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "brianlovin"
date-released: "2026-08-21"
url: "https://skillstore.io/skills/brianlovin-find-skills/audits/1"
identifiers:
  - type: other
    value: "skillstore:brianlovin-find-skills:audit:1"
    description: "Skillstore immutable audit report identifier"

مقارنة المتغيرات

3 متغيرات قابلة للتثبيت

تبقى مهارة كل مؤلف عنصراً مستقلاً قابلاً للتثبيت. يُرتب المتغير الموصى به وفق أدلة Skillstore.

سبب تصدر هذا المتغير

أعلى تقييم في Skillstore

المؤلف / المصدر تقييم Skillstore موثوقية الأدلة استخدام Skillstore تم التحديث

agentspace-so موصى به

agentspace-so-find-skills

تقييم Skillstore 75

موثوقية الأدلة مرتفع

استخدام Skillstore 118

تم التحديث

2026-09-09

vercel-labs

vercel-labs-find-skills

تقييم Skillstore 38

موثوقية الأدلة مرتفع

استخدام Skillstore 445

تم التحديث

2026-09-09

brianlovin الحالي

brianlovin-find-skills

تقييم Skillstore 38

موثوقية الأدلة متوسط

استخدام Skillstore 2

تم التحديث

2026-09-09

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Find Framework Guidance

Search for a focused skill that improves React or Next.js performance work.

Standardize Code Reviews

Discover review skills that support consistent pull request checks across a team.

Extend Agent Workflows

Compare available skills for documentation, testing, deployment, or other recurring tasks.

جرّب هذه الموجّهات

Find One Skill

Find a skill that helps with React performance. Show the best match and explain its purpose. Do not install it.

Compare Skill Options

Search for pull request review skills. Compare up to three relevant options by focus, source, and expected workflow. Do not install anything.

Search Across Related Terms

Find skills for end-to-end web testing. Try Playwright, browser testing, and e2e terms. Explain which result best fits a TypeScript project.

Evaluate Before Installation

Find a deployment skill for Kubernetes. Review the source and skill contents for security concerns, summarize permissions, then ask before any installation.

أفضل الممارسات

Use specific task and technology keywords in each search.
Compare multiple results and review their source contents before installation.
Require explicit user approval immediately before any persistent installation.

تجنب

Do not install the first search result without checking its source and scope.
Do not use confirmation-bypass flags for third-party installations.
Do not treat marketplace availability as proof of security or quality.

الأسئلة المتكررة

What does this skill search?

It searches the open agent skills ecosystem through the Skills CLI using keywords derived from your task.

Can it install a selected skill?

Yes. Installation should occur only after source review and explicit user approval.

Does it verify marketplace skills?

No. The workflow does not provide built-in security verification, reputation checks, or content auditing.

What happens when no result matches?

It can try related search terms, help with the task directly, or suggest creating a new skill.

Which agent tools are supported?

The marketplace metadata lists Claude, Codex, and Claude Code as supported tools.

Does discovery require network access?

Yes. The Skills CLI and skills.sh marketplace must be reachable for current search results and details.

تفاصيل المطور

المؤلف

brianlovin

الترخيص

MIT

مراجعة Skillstore

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/brianlovin/agent-config/tree/1a9819ebf3fee811150fc76cbe177ea4e5f747ff/skills/find-skills

مرجع

f3892a43246af3d370b4fd76c40c2c2712b351f6

حداثة الصيانة

٢٢‏/٨‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 SKILL.md