跳转到正文
skillsafebeta
← 报告库
用途分类 / 其他用途

Find Skills Skill 安全审计

作者说它能做什么（原文）

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.

第三方安全检查结论

发现安全风险

已检查文件
1
发现的风险
2
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。发现 1 项风险
中风险

可在未审查实际内容的情况下全局安装第三方 Skill，并跳过确认

原文依据：3 处
发现了什么

流程以安装量、发布者名声和 GitHub stars 作为推荐依据，随后建议用 `npx skills add` 从 GitHub 或其他来源安装。`-g` 将内容置于用户级全局范围，`-y` 会跳过安装确认；这些流行度指标不能证明 Skill 的指令、脚本或依赖安全。

为什么需要注意

如果被推荐的软件包被冒充、接管或本身含有危险指令/安装代码，安装过程或今后调用该 Skill 时可能执行不受信任的行为，并持续影响该用户的其他代理会话。提供的证据不能证明任何具体候选包已经恶意。

流程的“验证”只检查安装量、发布者声誉和 stars，没有要求审查 Skill 指令、脚本或依赖；随后允许从 GitHub 或其他来源全局安装，并用 `-y` 跳过确认。用户同意安装时，这会扩大未经内容审查的风险。可要求固定提交、查看全部文件、限制权限、使用本地安装并保留确认。

SKILL.md:23来自说明文档打开原文件
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.**Key commands:**- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
查看另外 2 个位置
SKILL.md:65来自说明文档打开原文件
### Step 4: Verify Quality Before Recommending**Do not recommend a skill based solely on search results.** Always verify:1. **Install count** — Prefer skills with 1K+ installs. Be cautious with anything under 100.2. **Source reputation** — Official sources (`vercel-labs`, `anthropics`, `microsoft`) are more trustworthy than unknown authors.3. **GitHub stars** — Check the source repository. A skill from a repo with <100 stars should be treated with skepticism.
SKILL.md:95来自说明文档打开原文件
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。未发现风险
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。未发现风险
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。发现 1 项风险
低风险

安装命令没有固定依赖版本

原文依据：20 处
发现了什么

安装命令没有指定依赖版本。同样的命令以后可能下载不同代码，你实际安装的内容可能与这次检查时不同。

为什么需要注意

即使命令和报告没变，以后安装时也可能下载到另一份代码。

这段代码的正常用途

该行只是解释 Skills CLI 的用途，并未执行或明确建议安装任何具体 Skill。虽然 `npx skills` 未固定 CLI 版本，但候选所称“安装命令”与此行上下文不符。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。

这是供实际使用的搜索命令。`npx skills` 没有固定 CLI 包版本，首次运行时可能下载并执行当时解析到的版本；即使它只搜索 Skill，也存在上游包随时间变化的风险。用户可要求固定 CLI 版本并说明其来源。

该行明确描述从 GitHub 或其他来源安装 Skill，却没有固定 CLI 版本，也没有要求把 `<package>` 固定到提交或发布版本。相同形式的命令日后可能取得不同内容；安装前可要求明确来源和不可变版本。

该命令主动更新所有已安装 Skill，且运行的 `skills` CLI 本身未固定版本。更新操作按目的就会替换现有内容，因此用户应在运行前确认将采用哪些版本以及能否审查变更。

这是流程要求运行的搜索命令，而非安装 Skill 的命令。不过 `npx skills` 未固定 CLI 版本，运行时可能获取并执行后来发布的 CLI 代码，因此候选指出的版本漂移风险仍成立，但影响对象是 CLI。

这段代码的正常用途

该文本是把用户问题映射为搜索词的示例，不是额外的安装步骤。它确实沿用了未固定版本的 `npx skills` 搜索命令，但该候选将示例中的搜索描述成安装，夸大了此处的直接行为。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。
这段代码的正常用途

这是搜索用法示例，不会按该行安装搜索结果。尽管示例中的 `npx skills` CLI 未固定版本，候选所称的“安装命令”并不是这段文字展示的行为。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。
这段代码的正常用途

该行只是第三个搜索示例，并非安装命令。未固定的 `npx` CLI 仍有一般版本漂移风险，但没有证据表明这条示例会安装某个 Skill。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。

示例明确建议安装 `owner/repo@skill`，但没有固定仓库提交、标签或 CLI 版本。因此同一命令未来可能取得变化后的 Skill 或 CLI。安装前可要求提供已审查的提交哈希及文件清单。

这是实际安装模板，Skill 来源未固定到不可变版本，CLI 也未固定版本；`-g` 扩大到用户级全局范围，`-y` 跳过确认。若上游内容改变，用户可能在没有交互复核的情况下安装不同代码。可要求去掉 `-y`、避免全局安装并固定提交。

该步骤建议运行未固定版本的 `npx skills` 来创建本地 Skill。它不是安装第三方 Skill，但 `npx` 仍可能下载并执行当时最新的 CLI，因此存在候选所述的依赖版本漂移风险。用户可要求固定 CLI 版本后再运行。

这段代码的正常用途

该行位于示例回复中，展示的是初始化自己的 Skill，而非安装现有第三方 Skill。虽然 CLI 版本未固定是一般供应链注意点，但候选将此示例归为安装命令并不准确。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。
SKILL.md:23来自说明文档打开原文件
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
查看另外 19 个位置
SKILL.md:21来自说明文档打开原文件
## What is the Skills CLI?The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
SKILL.md:27来自说明文档打开原文件
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources
SKILL.md:25来自说明文档打开原文件
**Key commands:**- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:28来自说明文档打开原文件
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:29来自说明文档打开原文件
- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
SKILL.md:56来自说明文档打开原文件
```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:51来自说明文档打开原文件
### Step 3: Search for SkillsIf the leaderboard doesn't cover the user's need, run the find command:```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:61来自说明文档打开原文件
- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`
SKILL.md:59来自说明文档打开原文件
For example:- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:62来自说明文档打开原文件
- User asks "how do I make my React app faster?" → `npx skills find react performance`- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:63来自说明文档打开原文件
- User asks "can you help me with PR reviews?" → `npx skills find pr review`- User asks "I need to create a changelog" → `npx skills find changelog`
SKILL.md:90来自说明文档打开原文件
To install it:npx skills add vercel-labs/agent-skills@react-best-practices
SKILL.md:82来自说明文档打开原文件
Example response:```I found a skill that might help! The "react-best-practices" skill providesReact and Next.js performance optimization guidelines from Vercel Engineering.(185K installs)To install it:npx skills add vercel-labs/agent-skills@react-best-practicesLearn more: https://skills.sh/vercel-labs/agent-skills/react-best-practices```
SKILL.md:100来自说明文档打开原文件
```bashnpx skills add <owner/repo@skill> -g -y```
SKILL.md:95来自说明文档打开原文件
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
SKILL.md:131来自说明文档打开原文件
2. Offer to help with the task directly using your general capabilities3. Suggest the user could create their own skill with `npx skills init`
SKILL.md:125来自说明文档打开原文件
## When No Skills Are FoundIf no relevant skills exist:1. Acknowledge that no existing skill was found2. Offer to help with the task directly using your general capabilities3. Suggest the user could create their own skill with `npx skills init`
SKILL.md:140来自说明文档打开原文件
If this is something you do often, you could create your own skill:npx skills init my-xyz-skill```
SKILL.md:133来自说明文档打开原文件
Example:```I searched for skills related to "xyz" but didn't find any matches.I can still help you with this task directly! Would you like me to proceed?If this is something you do often, you could create your own skill:npx skills init my-xyz-skill```
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

6 个说明模块

该 Skill 用于通过 skills.sh 排行榜和 `npx skills find` 查找第三方 Skill，然后向用户展示名称、来源、安装量、安装命令及详情链接。

查看原文
SKILL.md:43来自说明文档打开原文件
### Step 2: Check the Leaderboard FirstBefore running a CLI search, check the [skills.sh leaderboard](https://skills.sh/) to see if a well-known skill already exists for the domain. The leaderboard ranks skills by total installs, surfacing the most popular and battle-tested options.
SKILL.md:51来自说明文档打开原文件
### Step 3: Search for SkillsIf the leaderboard doesn't cover the user's need, run the find command:```bashnpx skills find [query] [--owner <owner>]```
SKILL.md:73来自说明文档打开原文件
### Step 5: Present Options to the UserWhen you find relevant skills, present them to the user with:1. The skill name and what it does2. The install count and source3. The install command they can run4. A link to learn more at skills.sh

安装并非自动触发：文本要求先由用户表示要继续；随后建议执行全局、无确认安装。

查看原文
SKILL.md:95来自说明文档打开原文件
### Step 6: Offer to InstallIf the user wants to proceed, you can install the skill for them:```bashnpx skills add <owner/repo@skill> -g -y```The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.

推荐前的质量检查仅明确要求查看安装量、发布者声誉和 GitHub stars；提供的源码中没有要求审查待安装 Skill 的指令、脚本、权限或依赖。

查看原文
SKILL.md:65来自说明文档打开原文件
### Step 4: Verify Quality Before Recommending**Do not recommend a skill based solely on search results.** Always verify:1. **Install count** — Prefer skills with 1K+ installs. Be cautious with anything under 100.2. **Source reputation** — Official sources (`vercel-labs`, `anthropics`, `microsoft`) are more trustworthy than unknown authors.3. **GitHub stars** — Check the source repository. A skill from a repo with <100 stars should be treated with skepticism.
从这里开始 · 工作说明SKILL.md
find-skills
连线表示工作说明包含的模块，不是实际运行顺序。点击模块可查看原文。
文件与检查记录1 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。

  • SKILL.md工作说明

代码和说明中提到的操作

安装其他软件包
SKILL.md:23来自说明文档打开原文件
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.
SKILL.md:27来自说明文档打开原文件
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources
SKILL.md:28来自说明文档打开原文件
- `npx skills find [query] [--owner <owner>]` - Search for skills interactively or by keyword, optionally scoped to a GitHub owner- `npx skills add <package>` - Install a skill from GitHub or other sources- `npx skills update` - Update all installed skills
连接外部网站
SKILL.md:31来自说明文档打开原文件
**Browse skills at:** https://skills.sh/
SKILL.md:45来自说明文档打开原文件
Before running a CLI search, check the [skills.sh leaderboard](https://skills.sh/) to see if a well-known skill already exists for the domain. The leaderboard ranks skills by total installs, surfacing the most popular and battle-tested options.
SKILL.md:92来自说明文档打开原文件
Learn more: https://skills.sh/vercel-labs/agent-skills/react-best-practices```
运行命令
SKILL.md:55来自说明文档打开原文件
```bashnpx skills find [query] [--owner <owner>]
SKILL.md:99来自说明文档打开原文件
```bashnpx skills add <owner/repo@skill> -g -y
读取了多少行
142
文件校验值（用于核对版本）
9b11625a941ee8c2e8182117083e264725da35bf9c5ffae62a6c16c61c3a2567