📦
tool-discovery
87Choose the Right AI Tool for Every Task
by 0xDarkMatter
Choosing between many skills and agents can delay technical work. This skill maps each task to focused tools using concise catalogs and selection rules.
Productivity View
Skills skill-lookup
📦
skill-lookup
Content revision r2 High Risk ⚙️ External commands
Find and Install Agent Skills
Finding reusable agent skills across a registry can take time. This skill searches prompts.chat, retrieves selected packages, and installs their files for Claude.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "skill-lookup" from https://skillstore.io/skills/f-skill-lookup.md and its manifest at https://skillstore.io/api/skills/f-skill-lookup/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "skill-lookup". Find code review skills in the coding category.
Expected outcome:
- Repository Review Assistant: Reviews changes and summarizes defects. Author: Example Author. Files: 3.
- Pull Request Checklist: Applies a structured review checklist. Author: Sample Team. Files: 2.
Using "skill-lookup". Compare the top skills for API documentation.
Expected outcome:
The first skill focuses on endpoint references. The second adds examples and tutorials. The second better matches comprehensive documentation work.
Using "skill-lookup". Retrieve the selected skill and show its files.
Expected outcome:
The package contains SKILL.md, a reference guide, and one helper script. Review these files before confirming installation.
Security Audit
High Riskv5 • 7/23/2026 Open versioned report
All 18 static detections are false positives caused by Markdown backticks around tool names, paths, parameters, and examples. The installation workflow still presents supply-chain and path traversal risks because it copies retrieved files without content review, integrity verification, or path validation.
1
Files scanned
77
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Unreviewed Third-Party Skill Installation
The workflow retrieves all registry files, including instructions and scripts, then writes them into the active Claude skills directory without security review or integrity verification.
The documented workflow explicitly retrieves every packaged file and installs each file. No trust check, content inspection, or integrity verification is required.
High
Unvalidated Installation Paths
The workflow interpolates a registry slug and filename into destination paths without requiring validation, allowing malicious path components to write outside the skill directory.
The destination templates use returned identifiers directly and specify no containment check. Exploitation depends on whether the registry permits crafted slugs or filenames.
Risk Factors
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/f-skill-lookup/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/f-skill-lookup?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/f-skill-lookup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/f-skill-lookup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/f-skill-lookup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
f. (2026). skill-lookup security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/f-skill-lookup/audits/5BibTeX citation
@techreport{f-f-skill-lookup-2026,
author = {f},
title = {skill-lookup security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/f-skill-lookup/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-lookup security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "f"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/f-skill-lookup/audits/5"
identifiers:
- type: other
value: "skillstore:f-skill-lookup:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
85
Content
70
Community
83
Spec Compliance
What You Can Build
Add a Claude capability
Find and install a focused skill for a recurring Claude workflow.
Review available extensions
Compare authors, categories, tags, and package files before approving an internal skill.
Research reusable patterns
Retrieve existing skills to study their instructions, references, scripts, and configuration.
Try These Prompts
Find a skill
Search prompts.chat for skills that help with [task]. Show the five most relevant results with descriptions and authors.
Search with filters
Find up to [limit] skills for [task] in category [category] with tag [tag]. Include file counts and links.
Compare candidates
Search for [task], compare the top three skills by purpose, author, tags, and included files, then recommend one.
Retrieve and install safely
Retrieve skill [skill ID]. Show its full file manifest and review the contents before asking me to confirm installation.
Best Practices
- Use specific task terms and relevant category or tag filters.
- Compare the author, description, and complete file list before selecting a skill.
- Inspect retrieved instructions, scripts, and paths before confirming installation.
Avoid
- Do not install the first result without reviewing its source and files.
- Do not assume the required prompts.chat MCP tools are already configured.
- Do not treat a registry listing as proof that a package is secure.
Frequently Asked Questions
Which registry does this skill search?
It searches the prompts.chat Agent Skills registry through MCP tools.
Can it filter search results?
Yes. It supports keyword, category, and tag filters, with a maximum of 50 results.
What information appears in search results?
Results can include titles, descriptions, authors, file lists, categories, tags, and links.
Where does it install a selected skill?
The documented workflow writes files under .claude/skills using the selected skill slug.
Does it verify downloaded skills are safe?
No. The workflow does not require content review, source verification, integrity checks, or path validation.
Which tools are required?
The search_skills and get_skill MCP tools from prompts.chat must be available.
Developer Details
Author
fLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
c43861a65bb95efcae259cd161c9d6f4dc7eec6f
Maintenance freshness
7/25/2026
Usage
16 downloads · 183 views
File structure
📄 SKILL.md
Related Skills
View all📦
slash-command-encoder
82Create Slash Commands for AI Workflows
by DNYoussef
Repeated AI workflows are slow when users rely on long natural language prompts. This skill helps define concise slash commands with routing, validation, chaining, and help text.
Productivity View
📦
obsidian-helper
81Organize Obsidian Notes with AI
by ZhanlinCui
Obsidian vaults can become hard to review and update consistently. This skill helps Claude and Codex create daily notes, capture ideas, and summarize recent work.
Productivity View
📦
writingmate-mcp
80Compare AI Models and Generate Media
by writingmate
Choosing and testing AI models across separate services takes time. Writingmate connects an MCP host to model discovery, text comparison, image generation, and video generation.
Productivity View
📦
skills-cli
79Manage Agent Skills with the Skills CLI
by xixu-me
Finding and maintaining agent skills can be slow across tools and machines. This skill guides discovery, installation, updates, backups, and troubleshooting with the skills CLI.
Productivity View
📦
chatcrystal-task-writeback
79Persist ChatCrystal Task Outcomes
by ZengLiangYi
Useful fixes and decisions often disappear after a task ends. This skill records durable task outcomes in ChatCrystal or prepares a save-ready memory candidate.
Productivity View