Install
$ agentstack add skill-hatch3r-hatch3r-hatch3r-cli-fd ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
fd
User-friendly find replacement, gitignore-aware
§0 — Ambiguity & Safety Gate (P8 B1)
Before invoking fd, resolve these via agents/shared/user-question-protocol.md (default behavior, not exception-driven):
- Scope: when the search root or pattern matches more files than intended (a bare glob over the repo root,
-Hincluding dotfiles), confirm the target path before running. - Irreversibility:
fdis read-only on its own, butfd … -x/-Xruns an arbitrary command per match.fd -x rmor any mutating--execis destructive and fan-out-wide — confirm the command and the match set before running, and prefer printing the list first. - Ambiguity: when the request maps to two or more matchers with materially different result sets (regex vs
-gglob,-e extvs path regex), ask which one.
Fan-out Discipline (P8 B2)
Tier 1 reference card — no fan-out. This skill is a single-tool usage reference an agent consults inline; it spawns no sub-agents. Fan-out is owned by the calling workflow per its own Fan-out Discipline block. Source: rules/hatch3r-fan-out-discipline.md (P8 B2).
When to Use
Reach for fd when the task is in the search category and the agent would otherwise call an MCP tool or read large outputs into context.
Token Cost
CLI tools return structured stdout that fits in <1KB for typical queries; equivalent MCP calls regularly exceed 10KB. Reference: Anthropic engineering (Nov 4 2025) — code-execution-over-MCP yields 98.7% token reduction.
Recipes
fd '\.test\.ts$' src/
Regex match against the path tail — locates every test file under src/ without traversing node_modules or .git (gitignore-aware by default).
fd -e ts -e tsx --exec wc -l
Extension filter plus parallel --exec — one process per match, returns line counts for sizing audits.
fd -H -E .git -E node_modules 'config'
Includes hidden files (-H) and explicitly excludes vendor trees — useful when scanning dotfiles for stale config.
fd --changed-within 7d -e md
Time-windowed query for recent edits — pairs with gh pr list to spot undocumented changes.
fd 'SKILL\.md$' skills/ -x rg -l 'placeholder'
Pipeline: locate every SKILL.md, then rg-search each for a marker string in one parallel batch.
Wrong Choice When
- Don't reach for
fdwhen the recursive predicate needs POSIXfindfeatures like-mtime +N -delete,-pathwith mixed Boolean operators, or NFS-mount handling. Reach for systemfind. - Don't use
fdas a content searcher — it matches paths, not file bodies. Reach forripgrep(hatch3r-cli-ripgrep), optionally piped afterfdfor filename pre-filtering. - Don't use
fdagainst a system-wide indexed search ("which package owns this file?"); it walks the live filesystem each call. Reach forlocate/mlocate.
Alternatives
| Tool | When to prefer | |------|----------------| | find (POSIX) | Mixed predicates with -and/-or, -mtime, -prune, or actions like -delete and -execdir. | | locate | Pre-indexed lookups across the entire filesystem (no live walk). | | ripgrep (hatch3r-cli-ripgrep) | When you want content matches, not path matches — fd ... -x rg if both. | | git ls-files | Restrict to tracked files only; ignores untracked even if not in .gitignore. |
Detection / Install
Verify with:
command -v fd
Install (macOS — default for this machine):
# brew
brew install fd
Install (Linux):
# apt
sudo apt install fd-find
Install (Windows):
# scoop
scoop install fd
Homepage: https://github.com/sharkdp/fd
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hatch3r
- Source: hatch3r/hatch3r
- License: MIT
- Homepage: https://docs.hatch3r.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.