What problem does it solve? Finding reusable agent skills often means trusting unverified search results or running package commands that mutate your environment. This Skill performs read-only skill discovery, verifies upstream quality and overlap, and never installs anything without separate authorization. ## Core Features & Use Cases - Read-Only Discovery: Runs the skills CLI find command through a hardened PowerShell 7 wrapper that validates the cached npm package before invoking Node. - Security Validation: Confirms the cached package is named skills, its bin points to bin/cli.mjs, and the entrypoint stays inside the npm cache with no reparse-point escapes. - Evidence-Based Recommendations: Checks upstream repository, maintenance, license, permissions, and overlap with native, plugin, MCP, or installed-skill capabilities before returning recommend, do_not_install, or needs_more_evidence. - Use Case: A user asks whether a reusable skill exists for a task. The Skill searches read-only, inspects the candidate's upstream repo and install count, and reports a fit verdict without running skills add or any mutating command. ## Quick Start Ask the assistant to search for installable skills matching a specific task, for example to find skills for changelog generation, and review the returned candidate with its source URL and fit verdict.
