Atlas / Skills / dannyw618 / What-skills-am-i-using

What-skills-am-i-usingSAFE

skills/dannyw618/what-skills-am-i-using

Claude Code mod: see which skills, plugins, subagents and MCP tools your conversation is using

Verdict
SAFE
Grade
B
Trust score
89 /100
Version
—
Hosts
1 documented
License
MIT
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

What-skills-am-i-using

A Claude Code mod that shows which skills, plugins, subagents and MCP tools the current conversation has used.

Install

Type this at the prompt of a terminal claude session:

/plugin install what-skills-am-i-using --marketplace DannyW618/What-skills-am-i-using

Answer y to add the marketplace, then pick a scope. There is nothing to configure.

What you see

One line above the prompt, once the conversation has used something:

◢◤ humanizer → ponytail → navigate → read_page → Explore :.   3 skills · 1 subagent · 2 MCP tools  [ Show ] ×

Press × to close the band for this conversation (it keeps counting). Press Show for the full order and one row per plugin or MCP server:

╭──────────────────────────────────────────────────────────────────────────╮
│ order: humanizer → ponytail → navigate → read_page → Explore             │
│ Built-in subagents           :. Explore ×2                               │
│ claude-in-chrome  MCP server ✗ read_page ×2 (1 failed)  ✓ navigate ×4    │
│ ponytail          plugin     ✓ ponytail ×3                               │
╰──────────────────────────────────────────────────────────────────────────╯

Long sessions stay compact: the first line keeps the last 8 names, the open box keeps the last 30, and each row shows its 10 most recent entries. /what-skills prints everything.

What it counts

Read from source at commit 3947b8c8157fOBSERVED · 2026-10-13
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (1)

MEDIUMInventory / provenance · skill.no_skill_md · CWE-1104
Why it matters. no SKILL.md at the audited path
Fix. a skill without its instruction file cannot be reviewed as one

Gates applied: no_behavioural_pass.

Audited 2026-10-13 · audit v0.4.1 · source sha 3947b8c8157ffull audit observations/trust-audit/skill/dannyw618__what-skills-am-i-using.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-133947b8c8157fSAFEB89first audit
05

Questions

What does the What-skills-am-i-using skill do?

Claude Code mod: see which skills, plugins, subagents and MCP tools your conversation is using

Is What-skills-am-i-using safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can What-skills-am-i-using access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does What-skills-am-i-using work with?

Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (3947b8c8157f), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement