Cli Discover

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

assistant/CLAUDE.md

assistant/src/approvals/CLAUDE.md

assistant/src/notifications/CLAUDE.md

assistant/src/runtime/CLAUDE.md

gateway/CLAUDE.md

Audit 0.4.1 · source sha 19bc86343b63 · 14 Oct 2026Report an issue or request a re-scan

• Publishervellum-ai GitHub organizationOwner of the repository this skill is read from
• Source foldervellum-ai/vellum-assistant/skills/cli-discoverThe exact folder we audited
• LicenceMITAs the repository states it
• Commit pinned for this verdict19bc86343b63A new audit runs when the source changes
• Repository statusNot archivedLast push 1 day ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Discover which CLI tools are installed, their versions, and authentication status

---
name: cli-discover
description: Discover which CLI tools are installed, their versions, and authentication status
compatibility: "Designed for Vellum personal assistants"
metadata:
  emoji: "🔍"
  vellum:
    category: "development"
    display-name: "CLI Discovery"
---

# CLI Discovery

When you need to discover what CLI tools are available on the system, use `host_bash` to check directly. Do not use sandboxed `bash` for discovery - it may not see host-installed CLIs or auth state, leading to false negatives.

## Checking if a CLI exists

```bash
which <name>        # returns path if found, exits non-zero if missing
command -v <name>   # alternative, works in all POSIX shells
```

## Getting version info

```bash
<name> --version    # most CLIs support this flag
```

Use a 5-second timeout to avoid hanging on unresponsive CLIs.

## Auth-check commands

For CLIs that support authentication, check whether the user is logged in:

| CLI       | Auth check command                                                |
| --------- | ----------------------------------------------------------------- |
| `gh`      | `gh auth status`                                                  |
| `aws`     | `aws sts get-caller-identity`                                     |
| `gcloud`  | `gcloud auth list --filter=status:ACTIVE --format=value(account)` |
| `az`      | `az account show`                                                 |
| `vercel`  | `vercel whoami`                                                   |
| `netlify` | `netlify status`                                                  |
| `fly`     | `fly auth whoami`                                                 |
| `heroku`  | `heroku auth:whoami`                                              |
| `railway` | `railway whoami`                                                  |

## Common CLIs worth checking

When doing a broad discovery, check these categories:

- **Version control & code hosting:** `gh`, `git`, `gitlab`
- **Project management:** `linear`, `jira`
- **Communication:** `slack`
- **Cloud providers:** `aws`, `gcloud`, `az`
- **Containers & infra:** `docker`, `kubectl`, `terraform`
- **Runtimes & package managers:** `node`, `bun`, `deno`, `python3`, `pip3`
- **HTTP clients:** `curl`, `httpie`
- **Hosting & deploy:** `vercel`, `netlify`, `fly`, `heroku`, `railway`

## Output format

Report findings in markdown:

```markdown
## Available CLIs

- **git** (/usr/bin/git) - git version 2.x.x
- **gh** (/usr/bin/gh) - gh version 2.x.x [authenticated: [email protected]]
- **bun** (~/.bun/bin/bun) - 1.x.x

## Not found: jira, linear, slack
```

Excerpt, first 2,630 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/vellum-ai/vellum-assistant
git -C vellum-assistant checkout 19bc86343b63

Works in

1. 2026-10-14
   ✓SAFE B 89 / 100

   first audit · source 19bc86343b63

Questions about Cli Discover

• github.com/vellum-ai/vellum-assistant/tree/main/skills/cli-disco — the audited source at commit 19bc86343b63 and every finding aboveObserved · 14 Oct 2026

Spotted something wrong? Report a correction · Methodology