The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill facilitates downloading packages and metadata from the external skills.sh ecosystem and the npm registry.
[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the npx skills CLI tool. This includes searching for packages (npx skills find), adding new skills (npx skills add), and managing updates (npx skills update). The instructions specifically include the -y flag to bypass user confirmation during the installation process.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external search results. While this presents an attack surface where an attacker could inject instructions via skill metadata in the registry, the skill includes explicit verification steps requiring the agent to check install counts, GitHub stars, and source reputation before recommending or installing a package.

find-skills