📦

find-skills

Name: find-skills
Author: brianlovin

Révision du contenu r1 Risque élevé ⚙️ Commandes externes🌐 Accès réseau

Discover and Install Agent Skills

Finding the right agent extension can require broad marketplace searches and manual comparison. This skill converts a task into focused searches and presents relevant options.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "find-skills" from https://skillstore.io/skills/brianlovin-find-skills.md and its manifest at https://skillstore.io/api/skills/brianlovin-find-skills/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/brianlovin-find-skills.md manifest signé GET /api/skills/brianlovin-find-skills/manifest lockfile signé GET /api/skills/brianlovin-find-skills/lockfile

Tester

Utilisation de « find-skills ». Find a skill for improving React application performance.

Résultat attendu:

Recommended match: Vercel React Best Practices. It provides React and Next.js optimization guidance. Review its skills.sh page before choosing installation.

Utilisation de « find-skills ». I need help reviewing pull requests.

Résultat attendu:

A focused search found skills related to pull request review and code quality.
Each option includes its purpose, source repository, and marketplace details for comparison.
No installation was performed.

Utilisation de « find-skills ». Find a skill for a specialized task with no marketplace results.

Résultat attendu:

No relevant skill was found for the selected terms. The agent can help directly, try alternative keywords, or outline a new skill.

Audit de sécurité

Risque élevé

v1 • 21/08/2026 Ouvrir le rapport versionné

Most static alerts are false positives caused by Markdown backticks and public documentation links. The skill intentionally runs the Skills CLI and can globally install an unverified third-party skill while bypassing confirmation. Source review and explicit installation approval are required.

Fichiers analysés

134

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Élevé

SKILL.md:87-95

Unverified Global Skill Installation

The workflow offers to install a discovered third-party skill globally with -y, without source verification or content review. Disabling confirmation can persist malicious skill instructions.

Lines 87-95 explicitly direct the agent to install the selected package globally and explain that -y skips confirmation. No verification step appears before installation.

Éléments d’évaluation des capacités (5)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé

SKILL.md:91-93

Ruby/shell backtick execution

```bash

Lines 89-93 instruct the agent to run a global installation command with confirmation disabled. It installs a discovered third-party skill and changes persistent user-level state.

Moyen

SKILL.md:48-50

Ruby/shell backtick execution

```bash

Lines 46-50 explicitly direct the agent to run npx skills find. This invokes an external npm CLI and may download the package when it is unavailable locally.

Moyen

SKILL.md:54-55

Ruby/shell backtick execution

- User asks "how do I make my React app faster?" → `npx skills find react performance`

Line 54 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

Moyen

SKILL.md:55-56

Ruby/shell backtick execution

- User asks "can you help me with PR reviews?" → `npx skills find pr review`

Line 55 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

Moyen

SKILL.md:56-60

Ruby/shell backtick execution

- User asks "I need to create a changelog" → `npx skills find changelog`

Line 56 supplies a concrete npx search invocation for the agent workflow. Running it executes an external npm CLI, although the example query is benign.

Facteurs de risque

⚙️ Commandes externes (20)

🌐 Accès réseau (3)

SKILL.md:32 SKILL.md:64 SKILL.md:84

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/brianlovin-find-skills/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/brianlovin-find-skills/security.svg)](https://skillstore.io/skills/brianlovin-find-skills?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/brianlovin-find-skills?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brianlovin-find-skills/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/brianlovin-find-skills.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

brianlovin. (2026). find-skills security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brianlovin-find-skills/audits/1

Citation BibTeX

@techreport{brianlovin-brianlovin-find-skills-2026,
  author = {brianlovin},
  title = {find-skills security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/brianlovin-find-skills/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "find-skills security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "brianlovin"
date-released: "2026-08-21"
url: "https://skillstore.io/skills/brianlovin-find-skills/audits/1"
identifiers:
  - type: other
    value: "skillstore:brianlovin-find-skills:audit:1"
    description: "Skillstore immutable audit report identifier"

Comparer les variantes

3 variantes installables

Chaque auteur reste un skill installable distinct. La variante recommandée est classée selon les preuves Skillstore.

Pourquoi cette variante est première

Meilleur score Skillstore

Auteur / source Score Skillstore Niveau de confiance des preuves Utilisation Skillstore Mis à jour

agentspace-so Recommandé

agentspace-so-find-skills

Score Skillstore 75

Niveau de confiance des preuves Élevé

Utilisation Skillstore 154

Mis à jour

2026-10-22

vercel-labs

vercel-labs-find-skills

Score Skillstore 38

Niveau de confiance des preuves Élevé

Utilisation Skillstore 453

Mis à jour

2026-09-09

brianlovin Actuelle

brianlovin-find-skills

Score Skillstore 38

Niveau de confiance des preuves Moyen

Utilisation Skillstore 6

Mis à jour

2026-09-09

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Find Framework Guidance

Search for a focused skill that improves React or Next.js performance work.

Standardize Code Reviews

Discover review skills that support consistent pull request checks across a team.

Extend Agent Workflows

Compare available skills for documentation, testing, deployment, or other recurring tasks.

Essayez ces prompts

Find One Skill

Find a skill that helps with React performance. Show the best match and explain its purpose. Do not install it.

Compare Skill Options

Search for pull request review skills. Compare up to three relevant options by focus, source, and expected workflow. Do not install anything.

Search Across Related Terms

Find skills for end-to-end web testing. Try Playwright, browser testing, and e2e terms. Explain which result best fits a TypeScript project.

Evaluate Before Installation

Find a deployment skill for Kubernetes. Review the source and skill contents for security concerns, summarize permissions, then ask before any installation.

Bonnes pratiques

Use specific task and technology keywords in each search.
Compare multiple results and review their source contents before installation.
Require explicit user approval immediately before any persistent installation.

Éviter

Do not install the first search result without checking its source and scope.
Do not use confirmation-bypass flags for third-party installations.
Do not treat marketplace availability as proof of security or quality.

Foire aux questions

What does this skill search?

It searches the open agent skills ecosystem through the Skills CLI using keywords derived from your task.

Can it install a selected skill?

Yes. Installation should occur only after source review and explicit user approval.

Does it verify marketplace skills?

No. The workflow does not provide built-in security verification, reputation checks, or content auditing.

What happens when no result matches?

It can try related search terms, help with the task directly, or suggest creating a new skill.

Which agent tools are supported?

The marketplace metadata lists Claude, Codex, and Claude Code as supported tools.

Does discovery require network access?

Yes. The Skills CLI and skills.sh marketplace must be reachable for current search results and details.

Détails du développeur

Auteur

brianlovin

Licence

MIT

Révision Skillstore

Avis de version

L’auteur n’a déclaré aucune version.

Dépôt

https://github.com/brianlovin/agent-config/tree/1a9819ebf3fee811150fc76cbe177ea4e5f747ff/skills/find-skills

Réf

f3892a43246af3d370b4fd76c40c2c2712b351f6

Récence de maintenance

22/08/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📄 SKILL.md