skills-discovery — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skills-discovery (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You can extend your capabilities by discovering and installing portable AI skills from a registry or repository. Skills provide specialized knowledge, tools, and techniques for specific technologies, frameworks, and domains.
First, check if an installed skill matches the task. If not, search the registry—specialized skills may exist that you haven't installed yet.
Before starting any non-trivial task, ask yourself:
Search proactively when:
Also search when users explicitly ask to find, install, or manage skills.
Use the registry API for search when one is available:
curl "<registry-url>/api/skills?q=QUERY&limit=20&offset=0"Parameters:
q: Search query (e.g., "frontend", "python", "pdf")limit: Results per page (max 100)offset: Pagination offsetResponse structure:
{
"skills": [
{
"id": "...",
"name": "skill-name",
"namespace": "@owner/repo/skill-name",
"sourceUrl": "https://github.com/...",
"description": "...",
"author": "...",
"installs": 123,
"stars": 45
}
],
"total": 100,
"limit": 10,
"offset": 0
}The registry indexes skill names, descriptions, and tags. Construct queries that match how skill authors describe their work.
Query construction:
Determine which host environment the user is working in before installing. If unclear, ask.
Capture these variables before installation:
If the registry exposes a host selector, use the value that matches the user's environment.
Example host-aware installation command:
npx skills-installer install @owner/repo/skill-name --client <host-id>Example scope selection:
npx skills-installer install @owner/repo/skill-name # global (default)
npx skills-installer install @owner/repo/skill-name --local # project-specificCombined example:
npx skills-installer install @owner/repo/skill-name --client <host-id> --local# List installed skills
npx skills-installer list
# Uninstall a skill
npx skills-installer uninstall @owner/repo/skill-nameWhen you find relevant skills:
Example: Proactive suggestion
User: "I need to create a Django REST API"
curl "<registry-url>/api/skills?q=django&limit=10"Present suggestion:
I found some skills that could help:
1. django-rest-framework-expert (@vendor/framework/django-rest-framework-expert)
Description: Django REST API development with best practices
⭐ 234 stars • 1,567 installs
Would you like me to install this, or help you directly without installing a skill?Example: Explicit search request
User: "find skills for Python"
curl "<registry-url>/api/skills?q=python&limit=10"Present results and ask which to install.
| Endpoint | Description |
|---|---|
GET /api/skills/search?q=QUERY | Search skills |
GET /api/skills/@owner/repo/skill-name | Get skill details |
Registry example: <registry-url>/skills
No results found:
<registry-url>/skillsInstallation fails:
@owner/repo/skill-nameSkill not activating:
Use this skill for the capability described in this document.
Follow the primary workflow, commands, and decision points documented in the sections below.
Follow the constraints, conventions, and cautions documented below, and prefer the documented path over improvisation.
Use any linked scripts, assets, reference files, and companion resources mentioned in this document.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.