← Back to Skills Marketplace
cp33333333333

find-skills

by cp33333333333 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
354
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install find-skills1
Description
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...
README (SKILL.md)

Find Skills

This skill helps you discover and install skills from the open agent skills ecosystem.

When to Use This Skill

Use this skill when the user:

  • Asks "how do I do X" where X might be a common task with an existing skill
  • Says "find a skill for X" or "is there a skill for X"
  • Asks "can you do X" where X is a specialized capability
  • Expresses interest in extending agent capabilities
  • Wants to search for tools, templates, or workflows
  • Mentions they wish they had help with a specific domain (design, testing, deployment, etc.)

What is the Skills CLI?

The Skills CLI (npx skills) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.

Key commands:

  • npx skills find [query] - Search for skills interactively or by keyword
  • npx skills add \x3Cpackage> - Install a skill from GitHub or other sources
  • npx skills check - Check for skill updates
  • npx skills update - Update all installed skills

Browse skills at: https://skills.sh/

How to Help Users Find Skills

Step 1: Understand What They Need

When a user asks for help with something, identify:

  1. The domain (e.g., React, testing, design, deployment)
  2. The specific task (e.g., writing tests, creating animations, reviewing PRs)
  3. Whether this is a common enough task that a skill likely exists

Step 2: Search for Skills

Run the find command with a relevant query:

npx skills find [query]

For example:

  • User asks "how do I make my React app faster?" → npx skills find react performance
  • User asks "can you help me with PR reviews?" → npx skills find pr review
  • User asks "I need to create a changelog" → npx skills find changelog

The command will return results like:

Install with npx skills add \x3Cowner/repo@skill>

vercel-labs/agent-skills@vercel-react-best-practices
└ https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices

Step 3: Present Options to the User

When you find relevant skills, present them to the user with:

  1. The skill name and what it does
  2. The install command they can run
  3. A link to learn more at skills.sh

Example response:

I found a skill that might help! The "vercel-react-best-practices" skill provides
React and Next.js performance optimization guidelines from Vercel Engineering.

To install it:
npx skills add vercel-labs/agent-skills@vercel-react-best-practices

Learn more: https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices

Step 4: Offer to Install

If the user wants to proceed, you can install the skill for them:

npx skills add \x3Cowner/repo@skill> -g -y

The -g flag installs globally (user-level) and -y skips confirmation prompts.

Common Skill Categories

When searching, consider these common categories:

Category Example Queries
Web Development react, nextjs, typescript, css, tailwind
Testing testing, jest, playwright, e2e
DevOps deploy, docker, kubernetes, ci-cd
Documentation docs, readme, changelog, api-docs
Code Quality review, lint, refactor, best-practices
Design ui, ux, design-system, accessibility
Productivity workflow, automation, git

Tips for Effective Searches

  1. Use specific keywords: "react testing" is better than just "testing"
  2. Try alternative terms: If "deploy" doesn't work, try "deployment" or "ci-cd"
  3. Check popular sources: Many skills come from vercel-labs/agent-skills or ComposioHQ/awesome-claude-skills

When No Skills Are Found

If no relevant skills exist:

  1. Acknowledge that no existing skill was found
  2. Offer to help with the task directly using your general capabilities
  3. Suggest the user could create their own skill with npx skills init

Example:

I searched for skills related to "xyz" but didn't find any matches.
I can still help you with this task directly! Would you like me to proceed?

If this is something you do often, you could create your own skill:
npx skills init my-xyz-skill
Usage Guidance
This skill is coherent with its purpose (finding/installing skills) but it advises running npx to fetch and globally install third-party packages and even recommends skipping confirmation (-y). Before allowing use or executing its suggested commands: 1) Require explicit user confirmation before any install. 2) Prefer not to use -g or -y; install locally or in a sandboxed environment. 3) Inspect the target repository/package (owner, code, README, recent releases) before installing. 4) Avoid running installs as root; run in a disposable environment or container. 5) Do not provide any credentials to the skill and verify URLs (prefer official release hosts). If you want lower risk, ask the agent to present options and links but refuse to perform installs automatically.
Capability Analysis
Type: OpenClaw Skill Name: find-skills1 Version: 1.0.0 The skill provides instructions for the agent to search for and install third-party packages using the 'npx skills' CLI. It is classified as suspicious due to a potential shell injection vulnerability in the 'npx skills find [query]' command and the instruction to use the '-y' flag in SKILL.md, which bypasses user confirmation during global software installation. While these behaviors are aligned with the skill's stated purpose as a package manager, they represent significant security risks if the agent processes unvalidated user input.
Capability Assessment
Purpose & Capability
The name/description and the SKILL.md consistently describe a helper that finds and installs agent skills via the Skills CLI. Required permissions and declared metadata align with that purpose.
Instruction Scope
The instructions explicitly tell the agent to run npx skills find and to offer npx skills add <owner/repo@skill> -g -y (global install and skip confirmation). That grants the agent a path to install arbitrary third-party code into the user's environment. The SKILL.md does not require reading unrelated files or env vars, but it does encourage automatic installation without user prompts.
Install Mechanism
There is no install spec bundled with the skill (instruction-only), so the install mechanism relies on npx fetching packages from external sources (GitHub/registry). While that matches the skill's purpose, directing global, unattended npx installs increases risk because arbitrary repositories may be fetched and executed.
Credentials
The skill requests no environment variables, credentials, or config paths. It does not attempt to access unrelated secrets or configs.
Persistence & Privilege
always is false and the skill is user-invocable only. However, the SKILL.md encourages global installation (-g) and skipping confirmation (-y), which—if the agent is allowed to execute commands autonomously—could lead to persistent, system-wide changes without explicit user consent. This is a procedural risk rather than a direct claim for elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install find-skills1
  3. After installation, invoke the skill by name or use /find-skills1
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the "find-skills" skill. - Helps users discover and install agent skills for common tasks and new capabilities. - Guides users through searching for skills with the Skills CLI (`npx skills`), including example queries and categories. - Explains how to present skill options and assist with installation. - Provides advice for situations when no relevant skills exist and encourages skill creation. - Includes helpful tips for finding the most relevant skills efficiently.
Metadata
Slug find-skills1
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is find-skills?

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express... It is an AI Agent Skill for Claude Code / OpenClaw, with 354 downloads so far.

How do I install find-skills?

Run "/install find-skills1" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is find-skills free?

Yes, find-skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does find-skills support?

find-skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created find-skills?

It is built and maintained by cp33333333333 (@cp33333333333); the current version is v1.0.0.

💬 Comments