skills-search
Finds Skills in configured local repositories before searching CCPM. Use when discovering or reusing a Skill, finding PDF/code-review tools, inspecting a Skill, listing installed/popular/recent Skills, or installing/updating/removing Claude Code Skills/plugins.
How do I install this agent skill?
npx skills add https://github.com/daymade/claude-code-skills --skill skills-searchIs this agent skill safe to install?
- Gen Agent Trust Hubwarn
This skill acts as a package manager for AI agent skills. It uses shell commands to search for and install external code. A security risk is identified because it instructs the agent to execute these shell commands automatically without requesting user confirmation, while directly including user-provided input in those commands. This creates a surface for command injection and reduces human oversight of potentially dangerous system actions.
- Socketwarn
1 alert: gptAnomaly
- Snykwarn
Risk: MEDIUM · 1 issue
- Runlayerwarn
2/2 files flagged
- ZeroLeakswarn
1 finding · Score: 78/100
What does this agent skill do?
Skills Search — Agent Behavioral Directives
Local repositories first
For capability discovery or experience reuse, read local repository search and execute its helper. Resolve the Skill directory from this loaded bundle, not an installed path guessed from memory.
uv run --script <skill-dir>/scripts/local_sources.py list
uv run --script <skill-dir>/scripts/local_sources.py search '<capability>' --tier owned
Search every enabled repository in the owned tier before choosing a candidate.
Read the returned coverage, examined counts and exact commit. A missing source,
bad configuration or interrupted scan is incomplete coverage, not "no Skill".
The default installation directory is an inventory, not the user's complete
source catalog. Configure all repositories the user named; do not stop after a
hit in the first one or silently infer paths for another machine.
Use progressive disclosure: catalog name/description → selected SKILL.md at
its returned commit → only the relevant linked reference/script. Metadata scores
rank candidates; read the capability, inputs, ownership and verification before
deciding it fits. Update a suitable existing Skill; create a new Skill when none
fits, rather than stuffing the workflow into an unrelated owner.
If this layer cannot resolve the remaining task, search configured trusted
repositories, then use the existing CCPM search below. Record why expansion was
needed; do not send private paths, repository names or contents to the registry.
Do not use an external hit to hide a failed local scan.
CCPM preparation (only when needed)
For external registry discovery or an explicitly requested install/update/manage
operation, check command -v ccpm. If unavailable, npx @daymade/ccpm is the
existing CLI fallback. Local lookup needs neither CCPM nor registry credentials.
Use npx @daymade/ccpm setup only when the user requests ecosystem setup: it
also configures integrations and is not a prerequisite for an offline search.
Core Behavior
Execute the selected local helper or ccpm command yourself through the shell.
Do not ask the user to copy-paste a command you can run within the task's authorization.
If ccpm is not globally installed, use npx @daymade/ccpm as a drop-in replacement for all commands below.
Intent Mapping
Match the user's intent to the correct action:
| User Intent | Action |
|---|---|
| "find skills for X" / "search X skills" / reuse before writing a Skill | Owned repositories → configured trusted repositories → ccpm search <query> if still needed |
| "what skills are popular" / "top skills" | ccpm popular |
| "what's new" / "latest skills" | ccpm recent |
| "install X" / "add X skill" | ccpm install <skill-name> |
| "what does X do" / "tell me about X" | Read the local candidate first; ccpm info <skill-name> for registry candidates |
| "what skills do I have" / "list skills" | ccpm list |
| "remove X" / "uninstall X" | ccpm uninstall <skill-name> |
| "update X" / "update all skills" | ccpm update [name] [--all] |
| "I need help with PDF/Excel/..." | Local discovery first; expand to ccpm search <topic> if needed, then inspect fit before suggesting installation |
Execution Rules
- Always execute directly — run the selected local helper or
ccpmcommand, never ask the user to run it manually. - Summarize results — after executing, present the output in a clear, readable format.
- Choose from the result — a local Skill may already be installed. Verify that separately; do not reinstall merely because it was found. If installation is needed, retain the existing opt-in installation flow. After install, remind the user to restart Claude Code.
- Handle errors gracefully — if
ccpmis not found, fall back tonpx @daymade/ccpm. If the registry is unreachable, say so clearly. - Namespaced skills — support
@org/skill-nameformat (e.g.,ccpm install @daymade/skill-creator).
Command Reference
Search
ccpm search <query> [--limit <n>] [--tags <t1,t2>] [--author <name>] [--smart]
Discovery
ccpm popular [--limit <n>] # Most downloaded
ccpm recent [--limit <n>] # Recently published/updated
Install & Manage
ccpm install <skill-name> # Install (user-level, default)
ccpm install <name> --project # Install to current project only
ccpm install <name> --force # Force reinstall
ccpm list # List installed skills
ccpm info <skill-name> # Detailed skill information
ccpm update [name] # Update a skill
ccpm update --all # Update all skills
ccpm uninstall <skill-name> # Remove a skill
Post-Install Reminder
After any successful install, always tell the user:
Skill installed successfully. Please restart Claude Code (or start a new conversation) for the skill to become available.
MCP Server Alternative
For Claude Desktop users who want native tool integration (no Bash needed), the same functionality is available as an MCP server:
{
"mcpServers": {
"skill-search": {
"command": "npx",
"args": ["-y", "skills-search-mcp"]
}
}
}
The MCP server wraps the external ccpm CLI. It does not search this Skill's
configured local repositories; local discovery remains with the bundled helper.
Troubleshooting
"ccpm: command not found"
Use npx @daymade/ccpm instead, or install globally: npm install -g @daymade/ccpm.
Skill not available after install
Restart Claude Code — skills are loaded at startup.
Permission errors
Check write permissions to ~/.claude/skills/. Try installing with --project for project-level scope.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/daymade/claude-code-skills/skills-search">View skills-search on skillZs</a>