Content & Media Creation · freestylefly/canghe-skills
find-skills
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
L4 High-Privilege · Graded auth & full auditV1 Commit-PinnedExecute CommandNetwork AccessWrite FileDual-pass Audit
Control levels describe skill capabilities and suggested control measures; they do not represent quality or safety certifications, nor do they dictate usability. Usage decisions rest entirely with users and administrators. Different agent hosts apply varying constraints; do not assume hosts provide automatic protection. Third-party skill copyrights belong to their original authors. Use at your own risk.
1How It Works & Mechanism
Essentially serves as a "discovery and installation guide for the open-source agent skill ecosystem": triggered when users ask "how do I do something with X" and that capability might already exist as a ready-made skill.
skills/find-skills/SKILL.md
This skill helps you discover and install skills from the open agent skills ecosystem.
What is happening here: Identifies a "capability gap" as a "potentially existing skill" and translates user intent into a search action.
Positions `npx skills` as the ecosystem's package manager, standardizing search, install, check, and update operations into unified actions.
skills/find-skills/SKILL.md
The Skills CLI (`npx skills`) is the package manager for the open agent skills ecosystem.
What is happening here: Uses an external CLI as the single execution entry point, while the skill itself only handles orchestration and interaction phrasing.
Search action: Extracts keywords from the user's task and runs `npx skills find [query]`.
skills/find-skills/SKILL.md
- `npx skills find [query]` - Search for skills interactively or by keyword
What is happening here: Provides a keyword-based retrieval interface, requiring the agent to condense natural language requirements into search terms.
Install action: Installs skills from sources such as GitHub using `npx skills add <package>`.
skills/find-skills/SKILL.md
- `npx skills add <package>` - Install a skill from GitHub or other sources
What is happening here: Provides immediately copyable installation commands after discovery, closing the loop from "found" to "installed"."
Provides a category-to-example query mapping table to guide the agent in constructing search terms across different domains.
skills/find-skills/SKILL.md
| Web Development | react, nextjs, typescript, css, tailwind |
What is happening here: Uses a reference table to reduce the guessing cost of "what keywords to search for".
Fixed result presentation format: skill name + function + installation command + skills.sh link, facilitating quick user decisions.
skills/find-skills/SKILL.md
2. The install command they can run
What is happening here: Standardizes the output structure to ensure users receive actionable next steps rather than vague descriptions.
Empty result fallback: If nothing is found, assists directly using general capabilities and guides the user to create their own skill via `npx skills init`.
skills/find-skills/SKILL.md
3. Suggest the user could create their own skill with `npx skills init`
What is happening here: Converts a "not found" scenario into an onboarding path for "custom creation", preventing workflow dead ends.
2Core Capabilities
01Search for installable skills in the ecosystem by keywords
02Install skills from sources like GitHub (`npx skills add`)
03Check and update installed skills
04Interactive discovery with standardized result presentation
05Domain-specific search guidance with example query keywords
06Empty result fallback and guidance for creating custom skills
07Links to the skills.sh ecosystem browsing portal
3External Dependencies
| Kind | Dependency / Endpoint |
|---|---|
| cli | npx（skills CLI 入口） |
| network | skills.sh 生态站点 |
| package | skills CLI（经 npm/npx 分发） |
4Recommended Governance & Evidence
Suggested Controls for Safe Operation
For Agent Runtime
Graded/per-use authorization, sandbox recommended
For Administrators
Approval workflow, rollback support, full audit
Evidence & Triggers (File Paths & Excerpts)
- scripts/: Executes local scripts or commands: `npx skills find [query]` (search)
- 网络端点: Declares external network access: https://skills.sh/ (ecosystem site, linked multiple times in the text)
- 本地工作目录: File read/write and artifact output: Installs skills to the global user-level directory (`-g`) or the current project directory.
Audit Notes: Yellow: This skill directory contains only a single Markdown file without bundled scripts or credential reading. However, its core behavior drives an official CLI (npx skills) to query a fixed public endpoint (skills.sh), check/update, and install third-party packages from GitHub/npm. This matches the tier "queries fixed public endpoints + official CLI update/check", and installing third-party code involves supply chain risks, warranting a Yellow rating.
5Second-Pass Verification
- [ok] 外部 CLI 命令真实存在 — find/add/check/update/init 均在正文命令表或示例中出现，与扫描 14 条执行命中一致。
- [ok] 网络端点 — 仅 skills.sh（浏览/示例链接）与 npx 拉包，无其它域名级调用。
- [ok] 凭据读取 — §3 凭据/环境变量 0 命中；正文无 env/keychain 读取。
- [ok] 写盘 — 扫描写盘 0 命中（正则为线索）；实际写盘由 `npx skills add` 安装行为产生，发生在外部 CLI 侧。
- [ok] 是否夸大能力 — description 与正文一致：仅做发现+安装引导，未声称自带任何领域能力。
- [ok] 兜底路径完整 — 空结果分支给出「直接帮忙 + npx skills init」两条出口，流程闭合。
6Verdict & Scenarios
Best for: Users or agents looking to quickly discover and install community agent skills in an environment with internet access and npx.
Not for: Offline scenarios, strict compliance environments (where installing third-party code is prohibited), or situations requiring auditing of every dependency source.
Install Agent-Ready
① Verified Mirror 2026-10-10
Option A · Direct DownloadDownload find-skills.tar.gz
sha256:
Option B · Copy Guide for Agent12643cd190009d1b…Agents automatically download and verify mirrors from this JSON guide.
② Upstream GitHub
GitHub Repo ↗
Pinned to commit dd0bf35595.