Is it safe to install community-created skills?

This skill provides a detailed security audit checklist and sandboxing strategies—such as restricting tool access—to help you evaluate and test the safety of third-party code before full implementation.

What is the difference between skills-discovery and skills-dev?

Skills-discovery is used for finding and auditing existing tools, while skills-dev is designed for building, testing, and validating your own custom skills from scratch.

Can I use this to find official Anthropic plugins?

Yes, it includes references to official sources like the Anthropic official plugin repository and trusted community-maintained marketplaces.

How do I find new Claude Code skills?

You can use this skill to search GitHub topics like 'claude-code-skills' and 'claude-code-plugin' or perform targeted code searches for SKILL.md files and plugin manifests.

Skills Discovery & Audit

Name: Skills Discovery & Audit
Author: outfitter-dev

byoutfitter-dev

•

开发者工具

Finds, evaluates, and security-audits community-created Claude Code skills and plugins to extend agent capabilities safely.

Skills Discovery empowers developers to find existing Claude Code skills and plugins through targeted GitHub searches and community marketplaces, preventing the need to build functionality from scratch. It provides a robust framework for evaluating the quality, recency, and security of third-party extensions, including specific audit checklists for bash scripts, hooks, and tool permissions. By offering sandboxing strategies and pattern extraction workflows, this skill ensures that users can enhance their AI agent's performance while maintaining a high security posture and avoiding untrusted code execution.

主要功能

01Targeted GitHub discovery via specialized topic and code search patterns

02Comprehensive security audit checklists for skills, plugins, and hooks

03Sandboxing strategies to test untrusted skills with restricted tool access

0418 GitHub stars

05Quality heuristic filtering based on maintenance, usage signals, and documentation

06Pattern extraction workflow to adapt community logic into custom implementations

使用场景

01Finding existing skill design patterns before starting a new development project

02Exploring community-maintained marketplaces for specialized domain capabilities

03Auditing third-party Claude plugins for security vulnerabilities before installation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add outfitter-dev/agents skills-discovery

For use in Claude.ai and ChatGPT

Download Skill