Skills Search (find-skills)

Reviewed 2026-10-14agentsPrompt / Rule# skills # search # discovery # npx-skills # agents

Vercel's find-skills skill: your AI agent searches the open skills ecosystem with npx skills find, vets results and installs the one you pick.

Security Reviewed

Instruction-only skill; it drives the skills CLI, which downloads and installs third-party skills and sends anonymous telemetry unless disabled.

Install Skills Search (find-skills) in Google Antigravity

Antigravity loads skills from .agents/skills/ in your project or ~/.gemini/config/skills/ for all projects (official docs). Full guide

EasiestOption 1: paste this to your Antigravity agent

Install the "Skills Search (find-skills)" skill for Google Antigravity.
Follow the steps at https://www.antigravityskills.org/install/skills-search.md (source: https://github.com/vercel-labs/skills/tree/main/skills/find-skills).
Before running anything, show me what you will download and whether it includes scripts, and wait for my OK.
Install it into this project (.agents/skills/) unless I say global. When done, check that Antigravity lists it as an installed skill.

The agent reads the install file, shows you what it will download and waits for your OK.

Option 2: install it yourself

1. Option A: the skills CLI (documented)
```
npx skills add vercel-labs/skills --skill find-skills -a antigravity
```
From your project root. The README's agent table maps antigravity to .agents/skills/ (project) and ~/.gemini/antigravity/skills/ with -g; use -a antigravity-cli for the Antigravity CLI. By default the CLI symlinks; add --copy to copy files.

2. Option B: copy the folder into this workspace

git clone --depth 1 https://github.com/vercel-labs/skills /tmp/vercel-skills && mkdir -p .agents/skills && cp -r /tmp/vercel-skills/skills/find-skills .agents/skills/

Antigravity reads workspace skills from <project>/.agents/skills/<folder>/.

3. Or copy it for all projects
```
mkdir -p ~/.gemini/config/skills && cp -r /tmp/vercel-skills/skills/find-skills ~/.gemini/config/skills/
```
After the clone above. Global skills folder from Antigravity's docs (antigravity.google/docs/skills).
4. Check that Antigravity sees it
Antigravity 2.0 app: start a new conversation and ask "What skills do you have?" (the app has no /skills command; typing / and the skill name also finds it, sometimes only after your first message). Antigravity CLI: run /skills; in a session that was already open, run /skills reload first. find-skills should be listed.

The vercel-labs/skills README does document Antigravity: antigravity and antigravity-cli are agent IDs, and it links Antigravity's skills docs. The skill runs npx skills, so Node.js 22.20+ must be on PATH.

Using Claude Code, Cursor or Codex? See other assistants below.

What is Skills Search (find-skills)?

find-skills is the skill-finder from Vercel's vercel-labs/skills repository, the home of the skills CLI (npx skills). When you ask "is there a skill for X" or "how do I do X", it tells the agent to check the skills.sh leaderboard, search with npx skills find, vet the results by install count, source and GitHub stars, and then show or run the install command. It is for people who want their agent to pull in new skills on demand instead of browsing directories by hand. What we counted at commit 13e4063 (2026-10-09, HEAD on 2026-10-14; SKILL.md unchanged since our earlier review at 14cf84a): one SKILL.md, 141 lines and 5,472 bytes, no scripts, with 6 steps and a table of 7 search categories. The CLI it calls (npm package skills, version 1.7.2) needs Node.js 22.20.0 or newer and has 2 runtime dependencies (tar, yaml); the README's supported-agents table lists 78 agent IDs, including antigravity and antigravity-cli.

How to use Skills Search (find-skills)?

Install the skill (the README's npx skills add command supports Antigravity directly), then ask for a capability in plain words. The agent checks the skills.sh leaderboard, runs npx skills find <query>, and presents the skill name, install count, source, install command and a skills.sh link. If you agree it installs with npx skills add <owner/repo@skill>. Step 6 of the skill suggests -g -y (global, no prompts); say "project only, ask first" if you want it installed into this workspace with confirmation.

Key features of Skills Search (find-skills)

✓Keyword search with npx skills find [query] [--owner <owner>]
✓Checks the skills.sh leaderboard before running a CLI search
✓Vetting rules: prefer 1K+ installs, be careful under 100, prefer official sources, distrust repos under 100 stars
✓Presents name, install count, source, install command and a skills.sh link
✓Installs the chosen skill with npx skills add <owner/repo@skill>
✓Fallback: offers to do the task directly or scaffold your own skill with npx skills init

When to use Skills Search (find-skills)

1Finding a skill for a recurring task such as testing, deployment or docs
2Checking whether a skill already exists before writing your own
3Installing a skill from GitHub without leaving the agent chat

Installation & Setup Guide

Agent Rules / Prompt Setup

Follow these steps (taken from the project's own docs) to configure Skills Search (find-skills) in your development environment.

Step 1: Claude CodeClaude Code

npx skills add vercel-labs/skills --skill find-skills -a claude-code

README: the claude-code agent installs to .claude/skills/ (add -g for ~/.claude/skills/).

Step 2: CursorCursor

npx skills add vercel-labs/skills --skill find-skills -a cursor

README agent table: cursor installs to .agents/skills/ in the project or ~/.cursor/skills/ with -g.

Usage Example & Verification

Prompt / Request Example

1) README example (SKILL.md, Step 3): "I need to create a changelog."
-> What happens: the agent runs npx skills find changelog, checks install counts and sources, and shows one or two options with their npx skills add command and skills.sh link. It installs nothing until you agree.

2) README example (SKILL.md, Step 3): "How do I make my React app faster?"
-> What happens: npx skills find react performance. SKILL.md also names vercel-labs/agent-skills as a known source for React and Next.js, so the agent may suggest a skill from there.

3) Our example: "Find a Playwright testing skill and install it for Antigravity in this project only. Ask before installing."
-> What happens: npx skills find playwright, a short vetted list, and after your OK npx skills add <owner/repo@skill> -a antigravity (project scope, written to .agents/skills/) instead of the skill's default -g -y.

Installation Confirmation Method

In Antigravity: Antigravity 2.0 app: start a new conversation and ask "What skills do you have?" (the app has no /skills command; typing / and the skill name also finds it, sometimes only after your first message). Antigravity CLI: run /skills; in a session that was already open, run /skills reload first. find-skills should be listed. Then ask "is there a skill for writing changelogs?"; the agent should run npx skills find changelog and show options without installing anything.

Security Review

Static review

Reviewed Date

2026-10-14

Audited Ref / Commit

13e4063a1cf913f5606d57d42ab83a86f5001e04

Reviewer

antigravityskills.org (static code review)

Instruction-only skill; it drives the skills CLI, which downloads and installs third-party skills and sends anonymous telemetry unless disabled.

Full review: scope, findings, risks

Audit Scope:Static review of vercel-labs/skills at commit 13e4063 (2026-10-09, HEAD on 2026-10-14): skills/find-skills/SKILL.md (unchanged since our earlier review at 14cf84a), README.md (install options, supported agents, telemetry), package.json, src/agents.ts (antigravity entries), src/find.ts and src/telemetry.ts (endpoints), LICENSE. The rest of the CLI source was not reviewed.

Key Findings:Instruction-only skill. Runs npx skills find / add / update / init. Network access to skills.sh (search API, telemetry at www.skills.sh/tele/t, audit requests at /tele/audit) and GitHub. Step 6 documents global installs with -g -y. Telemetry is on by default and can be turned off with DISABLE_TELEMETRY=1 or DO_NOT_TRACK=1. No API key needed; GITHUB_TOKEN / GH_TOKEN are optional.

Identified Operational Risks & Permissions:Supply-chain risk from installing third-party skills; -y skips confirmation; npx downloads and runs the skills package; telemetry unless disabled. Static review only.

Static review at commit 13e4063. skills/find-skills/SKILL.md has no scripts; it instructs the agent to run npx skills find [query], npx skills add <package>, npx skills update and npx skills init. Running npx downloads and executes the skills npm package (version 1.7.2, dependencies tar and yaml). Step 6 shows npx skills add <owner/repo@skill> -g -y, which installs at user level and skips confirmation prompts. Step 4 tells the agent to check install counts (prefer 1K+), source reputation and GitHub stars before recommending; that is a popularity check, not a code review. In the CLI source, src/find.ts queries https://skills.sh (overridable with SKILLS_API_URL) and src/telemetry.ts posts to https://www.skills.sh/tele/t and /tele/audit; the README says repository identifiers are sent only for repositories GitHub confirms are public, and DISABLE_TELEMETRY=1 or DO_NOT_TRACK=1 turns both off. src/agents.ts installs Antigravity skills to .agents/skills (project) or ~/.gemini/antigravity/skills (global).

Operational Notes & Known Limitations

Known Limitations

•Needs Node.js 22.20.0 or newer (package.json engines) and network access to skills.sh and GitHub
•Search results come from the skills.sh index; the skill itself says not to recommend on search results alone
•Step 6 suggests npx skills add <owner/repo@skill> -g -y, which installs globally and skips all prompts
•The install counts written into SKILL.md ("185K installs", "100K+ installs") are fixed example text, not live numbers
•The skills CLI sends anonymous usage telemetry to skills.sh unless DISABLE_TELEMETRY=1 or DO_NOT_TRACK=1 is set (README, Telemetry)
•npx skills add -g -a antigravity writes to ~/.gemini/antigravity/skills/ (README), a different global folder from ~/.gemini/config/skills/ in Antigravity's docs
•It installs third-party skills; a high install count is not a security review

Frequently Asked Questions

Is the find-skills skill safe?

The skill is one SKILL.md with no scripts. It runs npx skills, which downloads and executes the skills npm package, searches skills.sh and installs third-party skills, by default globally with -y. Review any skill before installing it, and set DISABLE_TELEMETRY=1 if you do not want usage data sent.

How do I install find-skills in Antigravity?

Run npx skills add vercel-labs/skills --skill find-skills -a antigravity in your project (or -a antigravity-cli), or copy skills/find-skills to .agents/skills/. Then ask "What skills do you have?" (Antigravity CLI: /skills).

Does it check skills for security?

Only by proxies: install count, source reputation and GitHub stars (Step 4). It does not read the skill's code. Our pages record a static review at a fixed commit instead.

Where does it search?

The skills.sh leaderboard and the skills.sh search API used by npx skills find (src/find.ts; SKILLS_API_URL can point elsewhere).

Supported Platforms

antigravityclaudecodexcursor

View Source on GitHub

Keep exploring this topic

Browse the full Antigravity skills directory for more source-linked skills with install steps and static safety reviews.

More agents skills #skills #search #discovery #npx-skills Use cases

Related Skills

🤖

Self-Reflect (claude-reflect)

@BayramAnnakov

claude-reflect: a self-learning skill and plugin that captures your corrections and turns them into CLAUDE.md / AGENTS.md rules after review.

Static reviewruns scriptswrites files

reflectionmemory

💻

DeepWiki

Cognition (Devin)

DeepWiki MCP server from Cognition (Devin): a free hosted endpoint with three tools to read and ask questions about public GitHub repositories' generated documentation. No install, no API key.

Static reviewnetwork access

mcpgithub

🤖

Everything Claude Code (ECC)

@affaan-m

A large open-source toolkit of agent definitions, slash commands, rules, hooks and skills for coding agents. Built for Claude Code; it also has a native Antigravity installer that copies rules, workflows, skills and agents into .agents/.

Static reviewruns scriptswrites filesinstalls packages

agentsclaude-code