← Back to Skills Marketplace
kylinjackson

Find Skill HEQI

by KylinJackson · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
242
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install find-skill-v2
Description
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express...
README (SKILL.md)

Find Skills

This skill helps you discover and install skills from the open agent skills ecosystem.

When to Use This Skill

Use this skill when the user:

  • Asks "how do I do X" where X might be a common task with an existing skill
  • Says "find a skill for X" or "is there a skill for X"
  • Asks "can you do X" where X is a specialized capability
  • Expresses interest in extending agent capabilities
  • Wants to search for tools, templates, or workflows
  • Mentions they wish they had help with a specific domain (design, testing, deployment, etc.)

What is the Skills CLI?

The Skills CLI (npx skills) is the package manager for the open agent skills ecosystem. Skills are modular packages that extend agent capabilities with specialized knowledge, workflows, and tools.

Key commands:

  • npx skills find [query] - Search for skills interactively or by keyword
  • npx skills add \x3Cpackage> - Install a skill from GitHub or other sources
  • npx skills check - Check for skill updates
  • npx skills update - Update all installed skills

Browse skills at: https://skills.sh/

How to Help Users Find Skills

Step 1: Understand What They Need

When a user asks for help with something, identify:

  1. The domain (e.g., React, testing, design, deployment)
  2. The specific task (e.g., writing tests, creating animations, reviewing PRs)
  3. Whether this is a common enough task that a skill likely exists

Step 2: Search for Skills

Run the find command with a relevant query:

npx skills find [query]

For example:

  • User asks "how do I make my React app faster?" → npx skills find react performance
  • User asks "can you help me with PR reviews?" → npx skills find pr review
  • User asks "I need to create a changelog" → npx skills find changelog

The command will return results like:

Install with npx skills add \x3Cowner/repo@skill>

vercel-labs/agent-skills@vercel-react-best-practices
└ https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices

Step 3: Present Options to the User

When you find relevant skills, present them to the user with:

  1. The skill name and what it does
  2. The install command they can run
  3. A link to learn more at skills.sh

Example response:

I found a skill that might help! The "vercel-react-best-practices" skill provides
React and Next.js performance optimization guidelines from Vercel Engineering.

To install it:
npx skills add vercel-labs/agent-skills@vercel-react-best-practices

Learn more: https://skills.sh/vercel-labs/agent-skills/vercel-react-best-practices

Step 4: Offer to Install

If the user wants to proceed, you can install the skill for them:

npx skills add \x3Cowner/repo@skill> -g -y

The -g flag installs globally (user-level) and -y skips confirmation prompts.

Common Skill Categories

When searching, consider these common categories:

Category Example Queries
Web Development react, nextjs, typescript, css, tailwind
Testing testing, jest, playwright, e2e
DevOps deploy, docker, kubernetes, ci-cd
Documentation docs, readme, changelog, api-docs
Code Quality review, lint, refactor, best-practices
Design ui, ux, design-system, accessibility
Productivity workflow, automation, git

Tips for Effective Searches

  1. Use specific keywords: "react testing" is better than just "testing"
  2. Try alternative terms: If "deploy" doesn't work, try "deployment" or "ci-cd"
  3. Check popular sources: Many skills come from vercel-labs/agent-skills or ComposioHQ/awesome-claude-skills

When No Skills Are Found

If no relevant skills exist:

  1. Acknowledge that no existing skill was found
  2. Offer to help with the task directly using your general capabilities
  3. Suggest the user could create their own skill with npx skills init

Example:

I searched for skills related to "xyz" but didn't find any matches.
I can still help you with this task directly! Would you like me to proceed?

If this is something you do often, you could create your own skill:
npx skills init my-xyz-skill
Usage Guidance
This skill appears to do what it says (help find/install skills), but it instructs the agent to run 'npx' commands that fetch and execute remote packages and recommends using '-g -y' to install globally without prompts — a combination that can install unvetted code with little oversight. Before installing or allowing the agent to run this skill: (1) ensure 'npx' / Node is present if you want it to work; (2) do not permit the agent to run install commands automatically or with '-y' — require explicit user confirmation; (3) verify any suggested skill's homepage/source (skills.sh/GitHub) before installing; (4) prefer local/user-scoped installs over global (-g) and avoid skipping confirmations; and (5) if you want stronger safety, restrict autonomous invocation of skills that perform installs. The metadata ownerId mismatch is a minor provenance red flag — confirm the skill author/publishing source before trusting installs.
Capability Analysis
Type: OpenClaw Skill Name: find-skill-v2 Version: 1.0.0 The skill provides a wrapper for the `npx skills` CLI, allowing the agent to search for and install third-party extensions. It is classified as suspicious because the instructions in SKILL.md explicitly direct the agent to use the `-y` flag during installation (`npx skills add <package> -g -y`), which bypasses user confirmation and enables the silent execution of arbitrary code from remote repositories. While this behavior is technically aligned with the skill's purpose as a package manager, the automated bypass of security prompts for code installation represents a high-risk capability.
Capability Assessment
Purpose & Capability
The skill's stated purpose is to discover and install skills, which justifies recommending a skills CLI. However the SKILL.md instructs use of the 'npx skills' CLI but the skill metadata declares no required binaries. Declaring 'npx' (or node/npm) as required would be expected. Also the _meta.json ownerId differs from the registry metadata owner shown in the provided header, which is an inconsistency in provenance.
Instruction Scope
The runtime instructions tell the agent to run 'npx skills find' and 'npx skills add', and explicitly recommend 'npx skills add <pkg> -g -y' which installs packages globally and skips confirmation prompts. While coherent with the skill's goal, these steps cause the agent to fetch and execute remote code (unvetted packages), and the advice to skip prompts reduces user control — both are scope-expanding and risky behaviors for an autonomous agent.
Install Mechanism
There is no install spec (instruction-only), so nothing is written by the skill itself. However the instructions direct use of npx to pull packages from the network (GitHub/npm) — a high-risk activity because it executes third-party code. The skill doesn't provide guidance about verifying package provenance or integrity.
Credentials
The skill requests no environment variables, credentials, or filesystem paths, and does not attempt to read unrelated data. The lack of requested secrets is appropriate for the described functionality.
Persistence & Privilege
always is false (good). The skill allows normal autonomous invocation (disable-model-invocation is false) which is expected; combined with instructions that enable installing arbitrary skills, this increases the agent's blast radius if it is allowed to act autonomously. The skill does not request to modify other skills or system-wide configs directly, but recommending global installs (-g) can affect user environment.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install find-skill-v2
  3. After installation, invoke the skill by name or use /find-skill-v2
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the "find-skills" skill. - Enables users to discover and install agent skills in response to queries about extending functionality. - Guides users in searching for skills by domain or task with the Skills CLI. - Provides step-by-step instructions for presenting, installing, and learning about relevant skills. - Includes tips for effective searching and handling scenarios when no matching skills are found. - Links users to the skills.sh marketplace for further exploration.
Metadata
Slug find-skill-v2
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Find Skill HEQI?

Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express... It is an AI Agent Skill for Claude Code / OpenClaw, with 242 downloads so far.

How do I install Find Skill HEQI?

Run "/install find-skill-v2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Find Skill HEQI free?

Yes, Find Skill HEQI is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Find Skill HEQI support?

Find Skill HEQI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Find Skill HEQI?

It is built and maintained by KylinJackson (@kylinjackson); the current version is v1.0.0.

💬 Comments