sampx/skills-research
skills/backup/skills-research/SKILL.md
Search and download AI agent skills from the skills.sh ecosystem. Use when user wants to find skills, download skills to INBOX for evaluation, or explore available skills from GitHub repositories.
$ install --global
skillsauthnpx skillsauth add sampx/agent-tools skills-researchInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:46 PM1.9s1 file scanned
SKILL.md
- name:
- skills-research
- description:
- Search and download AI agent skills from the skills.sh ecosystem. Use when user wants to find skills, download skills to INBOX for evaluation, or explore available skills from GitHub repositories.
Skills Research
Search and download AI agent skills from the skills.sh ecosystem.
When to Use This Skill
Use this skill when the user:
- Asks "how do I do X" where X might be a common task with an existing skill
- Says "find a skill for X" or "is there a skill for X"
- Wants to download skills for evaluation before deployment
- Wants to search for tools, templates, or workflows
- Mentions they wish they had help with a specific domain (design, testing, deployment, etc.)
Scripts
search-skills.py
Search for skills from the skills.sh ecosystem.
# Basic search
./scripts/search-skills.py "react testing"
# JSON output (for programmatic use)
./scripts/search-skills.py "install skill" --json
Options:
query- Search keywords (required)--json, -j- Output as JSON format
download-skill.py
Download skills from GitHub to local INBOX directory.
# Download by skill identifier
./scripts/download-skill.py vercel-labs/agent-skills@vercel-react-best-practices
# Download from GitHub URL
./scripts/download-skill.py https://github.com/vercel-labs/agent-skills/tree/main/skills/vercel-react-best-practices
# Specify destination
./scripts/download-skill.py owner/repo@skill --dest ~/my-skills
# Overwrite existing
./scripts/download-skill.py owner/repo@skill --force
Options:
source- Skill identifier (owner/repo@skill) or GitHub URL (required)--dest, -d- Destination directory (default: projects/ontology/skills/download/INBOX)--force, -f- Overwrite existing skill--verbose, -v- Show detailed output
Workflow
Recommended Flow
1. Search for skills
./scripts/search-skills.py "react performance"
↓
2. Download to INBOX
./scripts/download-skill.py owner/repo@skill
↓
3. Security scan (use skill-security-scanner)
../skill-security-scanner/scripts/scan.sh INBOX/skill-name
↓
4. Evaluate and test the skill
↓
5. Deploy using skill-deployer
../skill-deployer/scripts/deploy-skill.py -s INBOX/skill -d .agents/skills/
Security Scanning
After downloading, use skill-security-scanner to scan for security risks:
../skill-security-scanner/scripts/scan.sh INBOX/skill-name
The scanner checks for:
- C2 infrastructure patterns
- Reverse shell attempts
- Data exfiltration code
- Malware characteristics
- Dynamic code execution risks
Common Skill Categories
| Category | Example Queries | | --------------- | ---------------------------------------- | | Web Development | react, nextjs, typescript, css, tailwind | | Testing | testing, jest, playwright, e2e | | DevOps | deploy, docker, kubernetes, ci-cd | | Documentation | docs, readme, changelog, api-docs | | Code Quality | review, lint, refactor, best-practices | | Design | ui, ux, design-system, accessibility | | Productivity | workflow, automation, git |
Direct CLI Usage
You can also use npx skills directly:
# Search
npx skills find react performance
# Install directly to agent directory
npx skills add vercel-labs/agent-skills@vercel-react-best-practices -g -y
# List installed skills
npx skills list
Browse skills at: https://skills.sh/
Tips for Effective Searches
- Use specific keywords: "react testing" is better than just "testing"
- Try alternative terms: If "deploy" doesn't work, try "deployment" or "ci-cd"
- Check popular sources: Many skills come from
vercel-labs/agent-skillsorComposioHQ/awesome-claude-skills
When No Skills Are Found
If no relevant skills exist:
- Acknowledge that no existing skill was found
- Offer to help with the task directly using your general capabilities
- Suggest the user could create their own skill with
npx skills init
Related Skills
sampx/agent-browser
tools
VerifiedTrustedCommunity
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.
3SKILL.mdUpdated Jul 29, 2026
sampx/space-master
testing
VerifiedTrustedCommunity
Master specification for WopalSpace. [MUST LOAD FIRST] — Load this skill when Wopal is uncertain how to proceed, task intent is ambiguous, or performing ontology/space maintenance. Triggers: Ambiguous task intent, "what workflow to use", "what skill to load", skill management (install/remove/search), space maintenance (worktrees, sync, PR contribution, promote), multi-space management. [CRITICAL] MUST LOAD whenever interacting with ontology repo operations (update/sync/contribute/promote/PR), even if the user does not explicitly say "upstream sync".
3SKILL.mdUpdated May 11, 2026
sampx/git-worktrees
development
VerifiedTrustedCommunity
Workspace-level Git worktree management — create, list, remove, and prune isolated development environments. Use this skill whenever the user needs to create a worktree, set up an isolated workspace, work on multiple features in parallel, list existing worktrees, check what worktrees exist, remove or delete a worktree, clean up stale worktrees, or manage git working trees in any way. Triggers include "create worktree", "new worktree", "list worktrees", "show worktrees", "remove worktree", "delete worktree", "clean up worktree", "prune worktree", "isolated environment", "parallel development", "worktree for <project>", or any request involving git worktree operations.
3SKILL.mdUpdated Apr 30, 2026
sampx/dev-flow
development
VerifiedTrustedCommunity
Issue/Plan-driven development workflow. Tasks must be backed by a GitHub Issue or Plan. Trigger: issue references like #14, creating issues, creating plans, implementing plans, executing plans, checking plans, verifying plans, Plan lifecycle transitions (approve/complete/verify/archive), decomposing PRDs into Issues. Skip: spec-driven workflows, research/discussion/explanation only, small ad-hoc changes that don't need an Issue or Plan.
3SKILL.mdUpdated Apr 30, 2026