Scan Report
0 /100
find-skills
Helps users discover and install agent skills from the open skills ecosystem using the npx skills CLI
Pure documentation skill that guides users on using the public npx skills CLI to discover and install agent skills from skills.sh. No executable code, scripts, or dependencies are present.
Safe to install
This skill is safe to use. It contains only Markdown documentation and does not execute any code beyond the standard npx skills CLI commands.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md declares Read tool usage for reading skill documentation |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md documents Bash usage via 'npx skills find' and 'npx skills add' command… |
| Network | READ | READ | ✓ Aligned | SKILL.md references skills.sh and the public skills ecosystem, accessed via npx … |
2 findings
Medium External URL 外部 URL
https://skills.sh/ SKILL.md:32 Medium External URL 外部 URL
https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices SKILL.md:64 File Tree
2 files · 4.7 KB · 138 lines Markdown 1f · 133L
JSON 1f · 5L
├─
_meta.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ No executable code files or scripts present
✓ No dependencies to manage or audit
✓ No sensitive file access patterns detected
✓ Documentation accurately describes all CLI behavior
✓ Skill is purely informational with no hidden functionality
✓ Uses only standard, documented npx CLI commands
✓ No credential harvesting, data exfiltration, or obfuscation observed