Find SkillsSAFE
Continuously sync your AI setups with one command. Codebase tailor suited agent skills, MCPs and config files for Claude Code, Cursor, and Codex.
Overview
Continuously sync your AI setups with one command. Codebase tailor suited agent skills, MCPs and config files for Claude Code, Cursor, and Codex.
b38062d63a05OBSERVED · 2026-10-10What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: find-skills description: Discovers and installs community skills from the public registry. Use when the user mentions a technology, framework, or task that could benefit from specialized skills not yet installed, asks 'how do I do X', 'find a skill for X', or starts work in a new technology area. Proactively suggest when the user's task involves tools or frameworks without existing skills. --- # Find Skills Search the public skill registry for community-contributed skills relevant to the user's current task and install them into this project. ## Instructions 1. Identify the key technologies, frameworks, or task types from the user's request that might have community skills available 2. Ask the user: "Would you like me to search for community skills for [identified technologies]?" 3. If the user agrees, run: ```bash caliber skills --query "<relevant terms>" ``` This outputs the top 5 matching skills with scores and descriptions. 4. Present the results to the user and ask which ones to install 5. Install the selected skills: ```bash caliber skills --install <slug1>,<slug2> ``` 6. Read the installed SKILL.md files to load them into your current context so you can use them immediately in this session 7. Summarize what was installed and continue with the user's task ## Examples User: "let's build a web app using React" -> "I notice you want to work with React. Would you like me to search for community skills that could help with React development?" -> If yes: run `caliber skills --query "react frontend"` -> Show the user the results, ask which to install -> Run `caliber skills --install <selected-slugs>` -> Read the installed files and continue User: "help me set up Docker for this project" -> "Would you like me to search for Docker-related skills?" -> If yes: run `caliber skills --query "docker deployment"` User: "I need to write tests for this Python ML pipeline" -> "Would you like me to find skills for Python ML testing?" -> If yes: run `caliber skills --query "python machine-learning testing"` ## When NOT to trigger - The user is working within an already well-configured area - You already suggested skills for this technology in this session - The user is in the middle of urgent debugging or time-sensitive work - The technology is too generic (e.g. just "code" or "programming")
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
b38062d63a05full audit observations/trust-audit/skill/caliber-ai-org__find-skills.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | b38062d63a05 | SAFE | B | 89 | first audit |
Questions
What does the Find Skills skill do?
Continuously sync your AI setups with one command. Codebase tailor suited agent skills, MCPs and config files for Claude Code, Cursor, and Codex.
Is Find Skills safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Find Skills access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (b38062d63a05), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.