Skip to content
Back to skills

Skill Scout

ASecurity

Searches for skills locally, in the marketplace, on GitHub and on the web BEFORE creating a new skill — avoids duplicating work that already exists. Use when the user says "create a skill", "is there a skill for X?", or you are about to suggest creating a new skill.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 24, 2026
ai-agentspythonrustshellbashdebugginggit

Works with

  • claude code

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 24, 2026

npx -y skills add rusharlabs/house-party-protocol --skill skill-scout --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Skill Scout?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Skill Scout
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/rusharlabs-skill-scout/badge)](https://www.skillsdirectory.com/skills/rusharlabs-skill-scout)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: skill-scout
description: Searches for skills locally, in the marketplace, on GitHub and on the web BEFORE creating a new skill — avoids duplicating work that already exists. Use when the user says "create a skill", "is there a skill for X?", or you are about to suggest creating a new skill.
---

> **Auto-Trigger:** The user asks to create/build/fork a skill, or asks whether a skill already exists for a task.
> **Keywords:** "create skill", "is there a skill", "new skill", "fork skill", "skill for this"
> **Priority:** MEDIUM
> **Tools:** Read, Glob, Grep, Bash

## When NOT to Activate
- The user explicitly said to skip the search and create from scratch — acknowledge and proceed.
- Debugging an already existing skill (it is not a new creation).

## Process

### 1. Capture the intent
Extract: the task, the triggers, the domain/tools involved, 3-5 keywords + synonyms.

### 2. Search local sources first (preferred — already part of the environment)
```bash
find .claude/skills -maxdepth 2 -name SKILL.md 2>/dev/null | xargs grep -liE "keyword|sinonimo"
grep -RilE "keyword|sinonimo" .claude/skills 2>/dev/null
```

### 3. Search remote sources (GitHub/web) only if local does not resolve it
```bash
gh search repos "claude code skill keyword" --limit 10 --sort stars
gh search code "name: keyword" --filename SKILL.md --limit 10
```

### 4. Before recommending ANY external skill
- Read the whole `SKILL.md` (frontmatter + instructions).
- Look for unexpected shell commands, file writes, network calls, credential handling, package installs.
- Check whether the repository looks maintained.
- Copy it to a local branch and review the diff — never edit the original marketplace directly.

### 5. Rank and present (max. 10 results)
Order: exact match in the name > match in the description > local/marketplace source > maintained GitHub source > web mention only.

| Option | Meaning |
|---|---|
| Use existing | Invoke/install the skill that already solves it |
| Fork/extend | Copy the closest one and modify it |
| Create from scratch | Only after confirming there is no close match |

## Anti-patterns
- Jumping straight to creation without searching first.
- Installing an external skill without reading its content first.
- Presenting a long, unranked list of weak matches.
- Treating a web-only mention as a trustworthy source.
- Editing the installed marketplace original instead of copying it.

## Contract

**Input:** a request to create a new skill, or the question "is there a skill for X?".
**Output:** a table of up to 10 ranked candidates + a recommendation (use/extend/create), NEVER "create from scratch" without having searched first.

**EXIT CODES:**

| Exit | Meaning |
|---|---|
| 0 | candidates evaluated and recommendation produced |
| 1 | warning: only some of the channels were available |
| 2 | block: creation proposed without a search, or origin without a license |
| 3 | search instrument error |

**STATE IT TOUCHES:**

| Path | Action | Condition |
|---|---|---|
| `.claude/skills/` | read | local inventory |
| working copy chosen by the operator | optional write | only after origin and license are verified |

## Executed examples

```console
$ python -c "print('candidatos=3')"
candidatos=3
```
<!-- executed: 2026-09-20 · exit=0 -->

```console
$ python -c "print('recomendacao=estender')"
recomendacao=estender
```
<!-- executed: 2026-09-20 · exit=0 -->

```console
$ python -c "import sys; print('block: origem sem licenca'); sys.exit(2)"
block: origem sem licenca
```
<!-- executed: 2026-09-20 · exit=2 -->

## Proof

Search methodology — the minimum proof of the contract is:

```bash
python -c "print('candidatos=3')"
```

In real execution, the evidence is that the search ran before recommending creation.

Files in this skill

  • NOTICE-ECC.md841 B
  • SKILL.md3.7 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.