Install
$ agentstack add skill-arvinrong-agent-skills-project-skill-finder ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Project Skill Finder
This skill should only be used for tasks related to project development, including debugging, design, and implementation.
When This Skill Must Fire
Invoke this skill before the first codebase exploration action (e.g., searching, reading, or scanning source files using tools such as Glob or Grep)** when:
- The task involves writing, changing, or reviewing project code or tests
- The user asks "how does X work", "what should I add", or "help me implement Y"
- Any task that would otherwise start with codebase exploration
Do NOT:
- Start reading source files to understand the domain without checking skill docs first
Workflow
- If an
skills/INDEX.mdordocs/skills/INDEX.mdexists, read it first. - Then read only the most relevant 1-2 project skill docs from
docs/skillsorskillsfolder for the task. - Prefer docs that expose stable YAML frontmatter such as
id,description, andwhen_to_use. - Do not bulk-load all project skill docs.
- If no
INDEX.mdexists, enumerate candidate.mdfiles in that directory, exclude control docs, and choose the most relevant 1-2. - If no project skill docs exist, continue normally without error.
- If there are no helpful relevant skill docs, then continue with the task as usual.
Project-Local Rules
- Treat project-local docs as the source of truth.
- Project-local skill docs should ideally carry stable YAML frontmatter such as
id,title,description, andwhen_to_use. - If project skill docs were actually read and used, update the usage tracking file in the same skill directory.
- If a bundled usage script is available, prefer running it instead of editing tracking files by hand.
- On Windows or PowerShell-first environments, prefer
scripts/update_skill_usage.ps1. - On macOS, Linux, or WSL, prefer
scripts/update_skill_usage.sh. scripts/update_skill_usage.pyremains available as an optional fallback.- After writing
SKILL_USAGE.json, the updater should refreshSKILL_USAGE.mdautomatically. - Prefer
SKILL_USAGE.jsonas the structured source of truth for usage tracking. SKILL_USAGE.mdis the human-readable report derived from the JSON data.- Count
used_countonly when a project skill doc was clearly read and referenced. - Count
helpful_countonly when that project skill materially helped the task. - Count
not_useful_countwhen the project skill doc was read and referenced but did not materially help. - Use the stable skill
idwhen available; otherwise fall back to the filename. - Keep
not_useful_reasonsshort and stable when possible. Prefer labels such asdescription_unclear,wrong_trigger,outdated_content,missing_key_files,too_shallow,too_broad, orpoor_examples. - Update
last_used_atusingyyyy-MM-dd HH:mm:ssand refreshnoteswhen useful. - Mentioning a project skill by name without reading it does not count as usage.
- In multi-agent tasks, prefer having the main agent perform the shared data update.
- If a task used a project skill doc and also changed code, tests, entrypoints, or behavior in that same problem area, review whether the skill doc should be refreshed before closing the task.
- If the doc is clearly outdated, update it; if the need is plausible but uncertain, explicitly prompt whether the project skill doc should be updated.
- Do not pre-approve broad shell access for this skill by default. This router can auto-trigger, so shell execution should still follow the host's normal approval flow unless a team intentionally narrows and enables it.
Context Budget
- Read the index first when present.
- Load the minimum relevant project docs.
- Avoid unrelated project skill docs unless the task expands.
Skill Growth
If the task reveals a repeated problem area, a missing onboarding path, or a module cluster that would benefit from its own project skill doc, explicitly suggest adding one or splitting an overloaded one.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ArvinRong
- Source: ArvinRong/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.