find-skills

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
2
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: find-skills description: Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities.

scripts/install-skill.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/install-skill.sh Description: #!/bin/bash # Install a skill and link it to the project's skills/custom directory # Usage: ./skills/install-skill.sh <owner/repo@skill-name> # Example: ./skills/install-skill.sh vercel-labs/agent-skills@vercel-react-best-practices set -e if [[ -z "$1" ]]; then echo "Usage: $0 <owner/repo@skill-name>" echo "Example: $0 vercel-labs/agent-skills@vercel-react-best-practices" exit 1 fi FULL_SKILL_NAME="$1" # Extract skill name (the part after @) SKILL_NAME

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
2
Analyzed
Feb 21, 2026, 02:56 AM
Security Audit — runlayer — find-skills