skill-discovery — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-discovery (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Find agent skills on GitHub using gh CLI. Skills work across multiple harnesses (Claude Code, Codex, Gemini CLI, Pi, etc.) as they follow the same SKILL.md format.
/tmp/skills-catalog.mdgh search repos --topic=claude-skills --sort=stars --limit=30 --json fullName,description
gh search repos --topic=codex-skills --sort=stars --limit=20 --json fullName,description
gh search repos --topic=gemini-skills --sort=stars --limit=20 --json fullName,description
gh search repos --topic=skill-md --sort=stars --limit=20 --json fullName,description
gh search repos --topic=agent-skills --sort=stars --limit=20 --json fullName,description
gh search repos --topic=claude-code-skills --sort=stars --limit=20 --json fullName,description
gh search repos --topic=gemini-cli-skills --sort=stars --limit=20 --json fullName,descriptionSearch GitHub code for actual SKILL.md files (finds repos not tagged with topics):
# Find repos containing SKILL.md files, then fetch stars via GraphQL (single query)
repos=$(gh search code "filename:SKILL.md" --limit=50 --json repository | jq -r '.[].repository.nameWithOwner' | sort -u)
# Build GraphQL query to get stars for all repos at once
query="{ "
i=0
for repo in $repos; do
owner="${repo%/*}"
name="${repo#*/}"
query+="r$i: repository(owner: \"$owner\", name: \"$name\") { nameWithOwner stargazerCount description } "
((i++))
done
query+="}"
gh api graphql -f query="$query" --jq '.data | to_entries[] | "\(.value.nameWithOwner) ★\(.value.stargazerCount) - \(.value.description // "no desc")"' | sort -t'★' -k2 -rnFor repos with "awesome" in name, fetch README:
gh api "repos/<owner>/<repo>/contents/README.md" --jq '.content' | base64 -d >> /tmp/skills-catalog.mdFor repos with skills directories:
# Find skills directory (skills/, scientific-skills/, etc.)
gh api repos/<owner>/<repo>/contents --jq '.[].name'
# List individual skills
gh api repos/<owner>/<repo>/contents/<skills-dir> --jq '.[].name'grep -i "<keyword>" /tmp/skills-catalog.md -B2 -A1gh api repos/<owner>/<repo>/contents/<path>/SKILL.md --jq '.content' | base64 -dgh repo clone <owner>/<repo> /tmp/<repo>
cp -r /tmp/<repo>/skills/<skill-name> ~/.pi/agent/skills/Show matching skills as table: | Repository | Description |
After results, offer:
~/.pi/agent/skills/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.