扫描报告
0 /100
find-skills
Helps users discover and install agent skills from the open skills ecosystem using the npx skills CLI
Pure documentation skill that guides users on using the public npx skills CLI to discover and install agent skills from skills.sh. No executable code, scripts, or dependencies are present.
可以安装
This skill is safe to use. It contains only Markdown documentation and does not execute any code beyond the standard npx skills CLI commands.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md declares Read tool usage for reading skill documentation |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md documents Bash usage via 'npx skills find' and 'npx skills add' command… |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md references skills.sh and the public skills ecosystem, accessed via npx … |
2 项发现
中危 外部 URL 外部 URL
https://skills.sh/ SKILL.md:32 中危 外部 URL 外部 URL
https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices SKILL.md:64 目录结构
2 文件 · 4.7 KB · 138 行 Markdown 1f · 133L
JSON 1f · 5L
├─
_meta.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ No executable code files or scripts present
✓ No dependencies to manage or audit
✓ No sensitive file access patterns detected
✓ Documentation accurately describes all CLI behavior
✓ Skill is purely informational with no hidden functionality
✓ Uses only standard, documented npx CLI commands
✓ No credential harvesting, data exfiltration, or obfuscation observed