[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-skill-vercel-labs-find-skills-hi":3,"guides-for-vercel-labs-find-skills":216},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":20,"identity":189,"isFallback":184,"parentExtension":193,"providers":194,"relations":199,"repo":201,"workflow":213},1778003221656.724,"k17b0qsgp2zzjv0n87p5qgtsc5865hch",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":13,"sourceUrl":14,"tags":15},"Helps users discover and install agent skills when they ask questions like \"how do I do X\", \"find a skill for X\", \"is there a skill that can...\", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.",{"npm":12},"skills","Skills CLI","https://github.com/vercel-labs/skills/tree/HEAD/skills/find-skills",[16,12,17,18,19],"cli","agent-management","discovery","installation",{"_creationTime":21,"_id":22,"extensionId":5,"locale":23,"result":24,"trustSignals":177,"workflow":187},1778007125066.6685,"kn70yc11gx9spm2han96dv4gc5865zbj","en",{"checks":25,"evaluatedAt":167,"extensionSummary":168,"promptVersionExtension":169,"promptVersionScoring":170,"rationale":171,"score":172,"summary":173,"tags":174,"targetMarket":175,"tier":176},[26,31,34,37,41,44,48,52,55,58,62,67,71,75,78,81,84,87,90,93,96,100,104,109,113,116,119,122,126,129,132,135,138,141,145,148,151,154,157,160,164],{"category":27,"check":28,"severity":29,"summary":30},"Practical Utility","Problem relevance","pass","The description clearly states that the skill helps users discover and install agent skills when they are looking for functionality to perform specific tasks.",{"category":27,"check":32,"severity":29,"summary":33},"Unique selling proposition","The skill provides a unique value by offering a dedicated command-line interface for managing agent skills, including finding, installing, and updating them, which goes beyond basic LLM capabilities.",{"category":27,"check":35,"severity":29,"summary":36},"Production readiness","The skill is production-ready, providing a complete CLI tool for managing agent skills, including installation, listing, finding, and updating, with clear installation instructions and examples.",{"category":38,"check":39,"severity":29,"summary":40},"Scope","Single responsibility principle","The skill focuses solely on the management and discovery of agent skills, aligning with the single responsibility principle.",{"category":38,"check":42,"severity":29,"summary":43},"Description quality","The description accurately reflects the skill's functionality, which is to help users discover and install agent skills.",{"category":45,"check":46,"severity":29,"summary":47},"Invocation","Scoped tools","The skill exposes narrow, well-defined tools for managing agent skills, such as `find`, `add`, `list`, and `update`, rather than a single generalist command.",{"category":49,"check":50,"severity":29,"summary":51},"Documentation","Configuration & parameter reference","All command-line options and parameters for the `npx skills` command are clearly documented in the README, including their descriptions and usage.",{"category":38,"check":53,"severity":29,"summary":54},"Tool naming","Tool names like `find`, `add`, `list`, `update`, and `remove` are descriptive and follow kebab-case conventions.",{"category":38,"check":56,"severity":29,"summary":57},"Minimal I/O surface","The skill's CLI commands accept specific, documented flags and arguments, and their output is structured and informative, avoiding unnecessary verbosity.",{"category":59,"check":60,"severity":29,"summary":61},"License","License usability","The extension is licensed under the MIT license, which is a permissive open-source license.",{"category":63,"check":64,"severity":65,"summary":66},"Maintenance","Commit recency","critical","There are no commits on the default branch in the last 12 months (pushedAt is n/a), indicating the project is likely unmaintained and poses a risk.",{"category":63,"check":68,"severity":69,"summary":70},"Dependency Management","not_applicable","No third-party dependencies are explicitly listed or managed in the provided repository files.",{"category":72,"check":73,"severity":69,"summary":74},"Security","Secret Management","The skill is a CLI tool for managing other skills and does not handle any secrets directly.",{"category":72,"check":76,"severity":69,"summary":77},"Injection","The skill does not load or process any third-party data that could be a vector for injection attacks.",{"category":72,"check":79,"severity":29,"summary":80},"Transitive Supply-Chain Grenades","The skill is a self-contained CLI tool and does not fetch external code or data at runtime.",{"category":72,"check":82,"severity":29,"summary":83},"Sandbox Isolation","The skill is a CLI tool and operates within the standard execution environment without attempting to modify files outside its designated scope.",{"category":72,"check":85,"severity":29,"summary":86},"Sandbox escape primitives","No sandbox-escape primitives like detached processes or retry loops are present in the skill's implementation.",{"category":72,"check":88,"severity":29,"summary":89},"Data Exfiltration","The skill does not perform any outbound calls that could exfiltrate data; it primarily interacts with the local file system and the 'skills.sh' registry implicitly.",{"category":72,"check":91,"severity":29,"summary":92},"Hidden Text Tricks","The bundled files do not contain any hidden text tricks or obfuscated instructions.",{"category":72,"check":94,"severity":29,"summary":95},"Opaque code execution","The skill's code is plain JavaScript and not obfuscated, base64-encoded, or dynamically fetched.",{"category":97,"check":98,"severity":29,"summary":99},"Portability","Structural Assumption","The skill's commands assume standard CLI and project structures, with clear documentation on installation paths and no OS-specific assumptions.",{"category":101,"check":102,"severity":69,"summary":103},"Trust","Issues Attention","No issues are open or closed in the last 90 days, making it impossible to assess maintainer engagement.",{"category":105,"check":106,"severity":107,"summary":108},"Versioning","Release Management","warning","There is no version information present in the manifest files (package.json, SKILL.md), no GitHub releases, and no CHANGELOG. The installation instructions reference 'main', making it difficult to pin or track versions.",{"category":110,"check":111,"severity":69,"summary":112},"Code Execution","Validation","As a CLI tool primarily orchestrating other commands and file operations, explicit schema validation for all inputs is not applicable in the same way as a tool processing arbitrary external data.",{"category":72,"check":114,"severity":29,"summary":115},"Unguarded Destructive Operations","The skill provides confirmation prompts for potentially destructive operations like installing or removing skills, and offers a non-interactive flag for automation.",{"category":110,"check":117,"severity":29,"summary":118},"Error Handling","The CLI tool provides clear error messages for various scenarios, such as missing arguments, invalid commands, or installation failures, allowing users to understand and resolve issues.",{"category":110,"check":120,"severity":69,"summary":121},"Logging","The skill is a CLI tool; detailed logging is typically handled by the underlying shell or agent environment, and the skill itself does not require explicit audit logging of its operations.",{"category":123,"check":124,"severity":69,"summary":125},"Compliance","GDPR","The skill does not handle personal data; it manages skill installations and metadata.",{"category":123,"check":127,"severity":29,"summary":128},"Target market","The extension is a general-purpose CLI tool for managing agent skills and has no regional or jurisdictional logic, thus its target market is global.",{"category":97,"check":130,"severity":29,"summary":131},"Runtime stability","The skill is a Node.js CLI tool and relies on standard Node.js execution, with clear installation instructions and no specific OS or shell assumptions beyond Node.js compatibility.",{"category":45,"check":133,"severity":29,"summary":134},"Precise Purpose","The description clearly defines the skill's purpose as helping users discover and install agent skills and lists specific trigger phrases and use cases.",{"category":45,"check":136,"severity":29,"summary":137},"Concise Frontmatter","The frontmatter in `skills/find-skills/SKILL.md` is concise and effectively summarizes the skill's core capability.",{"category":49,"check":139,"severity":29,"summary":140},"Concise Body","The skill's body content in `skills/find-skills/SKILL.md` is concise, providing essential instructions and delegating deeper material to the README.",{"category":142,"check":143,"severity":29,"summary":144},"Context","Progressive Disclosure","The skill utilizes the README for detailed explanations, examples, and command references, demonstrating progressive disclosure.",{"category":142,"check":146,"severity":69,"summary":147},"Forked exploration","This skill is a CLI tool and does not involve deep exploration or code review that would necessitate a `context: fork` setting.",{"category":27,"check":149,"severity":29,"summary":150},"Usage examples","The README provides numerous comprehensive examples for installing, listing, finding, and updating skills, demonstrating their usage and expected outcomes.",{"category":27,"check":152,"severity":29,"summary":153},"Edge cases","The README addresses potential issues like 'No skills found' or 'Permission errors' and provides guidance on troubleshooting and recovery.",{"category":110,"check":155,"severity":69,"summary":156},"Tool Fallback","This skill is a CLI tool and does not rely on external tools like an MCP server that would require a fallback.",{"category":97,"check":158,"severity":29,"summary":159},"Stack assumptions","The README clearly states the installation method (`npx skills`) and implies a Node.js runtime, and the installation instructions are platform-agnostic.",{"category":161,"check":162,"severity":29,"summary":163},"Safety","Halt on unexpected state","The CLI provides clear error messages for unexpected states, such as invalid commands or missing skills, halting execution gracefully.",{"category":97,"check":165,"severity":29,"summary":166},"Cross-skill coupling","The skill is self-contained and focuses solely on managing skills; it does not implicitly rely on other skills being loaded and provides explicit cross-links where relevant (e.g., to skills.sh).",1778006945868,"This skill provides the `npx skills` CLI tool, which acts as a package manager for agent skills. It allows users to search for, add, list, update, and remove skills from various sources like GitHub and local paths, supporting multiple coding agents and installation methods.","2.0.0","3.4.0","The extension is a well-documented and functional CLI tool for managing agent skills. However, the critical finding for 'Commit recency' due to the lack of recent commits significantly impacts its trust score, suggesting potential maintenance issues.",85,"A comprehensive command-line interface for discovering, installing, and managing agent skills.",[16,12,17,18,19],"global","flagged",{"codeQuality":178,"collectedAt":179,"documentation":180,"maintenance":182,"security":183,"testCoverage":186},{},1778006928376,{"descriptionLength":181,"readmeSize":8},303,{},{"hasNpmPackage":184,"smitheryVerified":185},true,false,{"hasCi":185,"hasTests":185},{"invalidatedAt":188,"updatedAt":188},1778008076651,{"githubOwner":190,"githubRepo":12,"locale":23,"slug":191,"type":192},"vercel-labs","find-skills","skill",null,{"extract":195,"smithery":198},{"commitSha":196,"license":197,"npmPackage":12},"f2c4b4265fe426330b79fbc775446236de191609","MIT",{"qualityScore":8,"totalActivations":8,"uniqueUsers":8,"useCount":8,"verified":185},{"repoId":200},"kd7bacs8s7rn6xkzmqxs4ynm2h8648cq",{"_creationTime":202,"_id":200,"identity":203,"providers":205,"workflow":210},1777995558409.8115,{"githubOwner":190,"githubRepo":12,"sourceUrl":204},"https://github.com/vercel-labs/skills",{"discover":206},{"sources":207},[208,209],"skills-sh","smithery",{"discoverAt":211,"extractAt":212,"updatedAt":212},1777995558409,1778003221656,{"anyEnrichmentAt":188,"extractAt":212,"githubAt":214,"invalidatedAt":188,"llmAt":215,"smitheryAt":188,"updatedAt":188},1778003222420,1778007125066,[]]