The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses npx skills commands to search (find), install (add), and update (update) modular extension packages.
[EXTERNAL_DOWNLOADS]: The skill facilitates downloading configuration and code from GitHub repositories and the skills.sh ecosystem. It references established sources such as Vercel Labs, Anthropics, and Microsoft as examples of reputable providers.
[REMOTE_CODE_EXECUTION]: Installation of skills via npx skills add involves downloading and potentially executing external code. The instructions provide a mitigation strategy by requiring the agent to verify quality metrics (install count, source reputation, and GitHub stars) before recommending any package to the user.
[PRIVILEGE_ESCALATION]: The skill suggests using the -g flag for global installation. While this modifies the user's global environment, it is used within the intended scope of a package manager and does not involve unauthorized privilege gain like sudo or system-level modifications.

find-skills