Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
Security Analysis
high confidenceThis is an instruction-only helper whose requests and instructions match its stated purpose (finding and installing skills); it's coherent, but be aware it recommends installing third‑party packages via npx and even suggests using -g -y which bypasses prompts.
Name/description align with what the skill does: it helps discover and install agent skills. It does not request unrelated binaries, env vars, or privileges.
SKILL.md stays on topic (searching skills, presenting results, offering to install). It explicitly tells the agent to run npx skills find/add and suggests global installation with -g -y (skip confirmation). That is within the skill's purpose but reduces user consent and means the agent may execute unreviewed third‑party code when installing new skills.
No install spec or code files are included (instruction-only). The skill relies on the external 'skills' CLI via npx; this is expected for a discovery/installer helper. Note: npx executes remote packages at install time, which is normal but inherently executes third‑party code.
Requires no environment variables, credentials, or config paths — proportional to its purpose.
always:false and no special persistence requested. The default model-invocation/autonomy setting is unchanged; that is normal and not concerning by itself.
Guidance
This skill is coherent and does what it claims, but installing other skills via npx runs third‑party code. Before allowing installs, consider: (1) Require explicit user confirmation before running any npx skills add command (avoid automated -y). (2) Prefer not to install globally (-g) unless you understand the implications. (3) Inspect the skill's repository or package (owner, README, recent commits) before installation. (4) If possible, test new skills in an isolated environment or sandbox. (5) If you don't trust a publisher, decline installation and ask the agent to perform the task directly instead.
Latest Release
v0.1.0
- Initial release of the "find-skills" skill. - Helps users discover and install agent skills based on their questions or needs. - Provides guidance on when and how to search for skills using the Skills CLI. - Offers instructions for presenting and installing skills for users. - Includes tips for effective searching and advice when no relevant skill is found.
More by @Robin797860
Published by @Robin797860 on ClawHub
