Skip to content
skillsafebeta
← Report library
Purpose / Other

Find Skills Skill Security Audit

What the author says it does (original text)

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

A third-party Skill can be installed globally without content review or confirmation

Source references: 3
What we found

The workflow bases recommendations on install count, publisher reputation, and GitHub stars, then proposes `npx skills add` for packages from GitHub or other sources. `-g` installs at user-wide scope and `-y` suppresses confirmation; popularity signals do not establish that a Skill's instructions, scripts, or dependencies are safe.

Why this matters

If a recommended package is impersonated, compromised, or contains dangerous instructions or install code, untrusted behavior could run during installation or later Skill use and persist across that user's agent sessions. The evidence does not establish that any particular candidate package is malicious.

The stated verification checks only install counts, publisher reputation, and stars; it does not require reviewing skill instructions, scripts, or dependencies. The workflow then permits installation from GitHub or other sources in user-global scope with confirmation skipped. Once a user agrees, this increases exposure to unreviewed content. Users can require a pinned commit, full file review, restricted permissions, local installation, and confirmation.

SKILL.md:23In the instructionsOpen original file
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.**Key commands:**- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
Show 2 other places
SKILL.md:65In the instructionsOpen original file
### Step 4: Verify Quality Before Recommending**Do not recommend a skill based solely on search results.** Always verify:1. **Install count** — Prefer skills with 1K+ installs. Be cautious with anything under 100.2. **Source reputation** — Official sources (`vercel-labs`, `anthropics`, `microsoft`) are more trustworthy than unknown authors.3. **GitHub stars** — Check the source repository. A skill from a repo with <100 stars should be treated with skepticism.
SKILL.md:95In the instructionsOpen original file
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

The install command does not pin a dependency version

Source references: 20
What we found

The installation command does not specify dependency versions. The same command may download different code later, so what you install can differ from what was checked.

Why this matters

A later install may download different code even though the command and this report have not changed.

Legitimate use of this code

This line only explains what the Skills CLI is; it neither executes nor explicitly recommends installing a specific skill. Although the `npx skills` CLI version is unpinned, the candidate's characterization of this line as an installation command does not fit the context.

This assessment concerns the code and conditions shown, not proof that harm has occurred.

This is a command intended for actual searches. `npx skills` does not pin the CLI package version, so a first run may download and execute whichever version resolves at that time. That creates an upstream-change risk even though the requested operation is only a search. A user can ask for a pinned CLI version and its source.

The line explicitly describes installing a skill from GitHub or other sources, but it pins neither the CLI nor the `<package>` to a release or commit. The same command form may retrieve different content later; users can require a specific source and immutable version before installation.

This command actively updates every installed skill, and the invoked `skills` CLI is itself unpinned. Updating is specifically intended to replace existing content, so users should confirm the target versions and whether changes can be reviewed before running it.

This workflow command searches rather than installs a skill. However, the `npx skills` CLI version is unpinned, so running it may fetch and execute later-published CLI code. The version-drift risk is therefore plausible, but it applies to the CLI rather than a discovered skill.

Legitimate use of this code

This is an example mapping a user question to search terms, not an additional installation step. It does reuse the unpinned `npx skills` search command, but describing this example as an installation overstates the behavior shown here.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
Legitimate use of this code

This is a search-usage example and does not install a search result on this line. Although the example leaves the `npx skills` CLI version unpinned, the cited text does not show the installation behavior claimed by the candidate.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
Legitimate use of this code

This line is a third search example, not an installation command. The unpinned `npx` CLI still has a general version-drift risk, but the cited example does not show a skill being installed.

This assessment concerns the code and conditions shown, not proof that harm has occurred.

The example explicitly recommends installing `owner/repo@skill` without pinning a repository commit, release tag, or CLI version. The same command may therefore retrieve changed skill or CLI content later. Before installation, users can request a reviewed commit hash and file list.

This is an actionable installation template that pins neither the skill source to an immutable version nor the CLI version. `-g` expands installation to user-global scope and `-y` skips confirmation. If upstream content changes, different code could be installed without an interactive review. Users can require removal of `-y`, local scope, and a pinned commit.

This step recommends running an unpinned `npx skills` package to create a local skill. It does not install a third-party skill, but `npx` may still download and execute the then-current CLI, so the candidate's dependency version-drift concern is plausible. Users can require the CLI version to be pinned first.

Legitimate use of this code

This line appears inside an example response and initializes the user's own skill rather than installing an existing third-party skill. The unpinned CLI is still a general supply-chain consideration, but classifying this example as an installation command is inaccurate.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:23In the instructionsOpen original file
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
Show 19 other places
SKILL.md:21In the instructionsOpen original file
## What is the Skills CLI?The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
SKILL.md:27In the instructionsOpen original file
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources
SKILL.md:25In the instructionsOpen original file
**Key commands:**- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:28In the instructionsOpen original file
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:29In the instructionsOpen original file
- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:56In the instructionsOpen original file
```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:51In the instructionsOpen original file
### Step 3: Search for SkillsIf the leaderboard doesn't cover the user's need, run the find command:```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:61In the instructionsOpen original file
- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`
SKILL.md:59In the instructionsOpen original file
For example:- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:62In the instructionsOpen original file
- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:63In the instructionsOpen original file
- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:90In the instructionsOpen original file
To install it:npx skills add vercel-labs/agent-skills@react-best-practices
SKILL.md:82In the instructionsOpen original file
Example response:```I found a skill that might help! The "react-best-practices" skill providesReact and Next.js performance optimization guidelines from Vercel Engineering.(185K installs)To install it:npx skills add vercel-labs/agent-skills@react-best-practicesLearn more: https://skills.sh/vercel-labs/agent-skills/react-best-practices```
SKILL.md:100In the instructionsOpen original file
```bashnpx skills add <owner/repo@skill> -g -y```
SKILL.md:95In the instructionsOpen original file
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
SKILL.md:131In the instructionsOpen original file
2. Offer to help with the task directly using your general capabilities3. Suggest the user could create their own skill with `npx skills init`
SKILL.md:125In the instructionsOpen original file
## When No Skills Are FoundIf no relevant skills exist:1. Acknowledge that no existing skill was found2. Offer to help with the task directly using your general capabilities3. Suggest the user could create their own skill with `npx skills init`
SKILL.md:140In the instructionsOpen original file
If this is something you do often, you could create your own skill:npx skills init my-xyz-skill```
SKILL.md:133In the instructionsOpen original file
Example:```I searched for skills related to "xyz" but didn't find any matches.I can still help you with this task directly! Would you like me to proceed?If this is something you do often, you could create your own skill:npx skills init my-xyz-skill```
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

6 instruction sections

This Skill discovers third-party Skills through the skills.sh leaderboard and `npx skills find`, then presents their name, source, install count, installation command, and details link.

View source
SKILL.md:43In the instructionsOpen original file
### Step 2: Check the Leaderboard FirstBefore running a CLI search, check the [skills.sh leaderboard](https://skills.sh/) to see if a well-known skill already exists for the domain. The leaderboard ranks skills by total installs, surfacing the most popular and battle-tested options.
SKILL.md:51In the instructionsOpen original file
### Step 3: Search for SkillsIf the leaderboard doesn't cover the user's need, run the find command:```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:73In the instructionsOpen original file
### Step 5: Present Options to the UserWhen you find relevant skills, present them to the user with:1. The skill name and what it does2. The install count and source3. The install command they can run4. A link to learn more at skills.sh

Installation is not automatically triggered: the text first requires the user to want to proceed, after which it proposes a global installation without confirmation prompts.

View source
SKILL.md:95In the instructionsOpen original file
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.

The stated pre-recommendation checks cover only install count, publisher reputation, and GitHub stars; the provided source does not require reviewing the candidate Skill's instructions, scripts, permissions, or dependencies.

View source
SKILL.md:65In the instructionsOpen original file
### Step 4: Verify Quality Before Recommending**Do not recommend a skill based solely on search results.** Always verify:1. **Install count** — Prefer skills with 1K+ installs. Be cautious with anything under 100.2. **Source reputation** — Official sources (`vercel-labs`, `anthropics`, `microsoft`) are more trustworthy than unknown authors.3. **GitHub stars** — Check the source repository. A skill from a repo with <100 stars should be treated with skepticism.
Start here · InstructionsSKILL.md
find-skills
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Install extra software packages
SKILL.md:23In the instructionsOpen original file
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
SKILL.md:27In the instructionsOpen original file
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources
SKILL.md:28In the instructionsOpen original file
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
Connect to websites
SKILL.md:31In the instructionsOpen original file
**Browse skills at:** https://skills.sh/
SKILL.md:45In the instructionsOpen original file
Before running a CLI search, check the [skills.sh leaderboard](https://skills.sh/) to see if a well-known skill already exists for the domain. The leaderboard ranks skills by total installs, surfacing the most popular and battle-tested options.
SKILL.md:92In the instructionsOpen original file
Learn more: https://skills.sh/vercel-labs/agent-skills/react-best-practices```
Run commands
SKILL.md:55In the instructionsOpen original file
```bashnpx skills find [query] [--owner <owner>]
SKILL.md:99In the instructionsOpen original file
```bashnpx skills add <owner/repo@skill> -g -y
Lines read
142
File checksum (to compare versions)
9b11625a941ee8c2e8182117083e264725da35bf9c5ffae62a6c16c61c3a2567