Find Skills

Discover published Agent Skills before writing one, and install them only after their provenance survives inspection. The npx skills CLI resolves a name against the public skills.sh registry, which is a different surface from the local jeo-skills catalog — mixing the two is the most common routing mistake here.

Third-party skills run with full agent permissions. Treat every search result as untrusted input until its source is verified: an install is a code-execution decision, not a bookmark.

Adapted from vercel-labs/skills commit 435076e78988e1e6ec40d00b0b1d76bdbbc5419a (2026-08-18), MIT, © 2026 Vercel, Inc. The upstream notice ships as LICENSE.upstream.txt.

When to use this skill