AgentStack
SKILL verified MIT Self-run

Git Finder

skill-sssssaud-git-finder-skill-git-finder-skill · by sssssaud

Find, fetch, and structurally validate open-source GitHub repositories that fit a development requirement, so the user builds on a proven foundation instead of writing boilerplate from scratch. Use this whenever the user wants to find, pick, or evaluate an existing repo, library, framework, wrapper, model, or project to build on — e.g. "find me a repo for face recognition", "what library should I…

No reviews yet
0 installs
3 views
0.0% view→install

Install

$ agentstack add skill-sssssaud-git-finder-skill-git-finder-skill

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Git Finder? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Git Finder — Repository Scout & Architectural Validator

Find, fetch, and structurally validate open-source GitHub repos that fit a requirement. Hand the user the top 3–4 repos they can actually build on, with one honest recommendation and a fallback. Do not write boilerplate from scratch — orchestrate discovery + analysis so the user layers their unique feature on a proven engine.

Mental model (methodology, not tools you already have)

  • GitIngest logic — Any public repo can become a single text blob (file tree + code) for deep reading. To do this you must fetch it: swap github.comgitingest.com in the URL for a single-file dump, or fetch the file tree + key files directly (README, main module, requirements.txt / pyproject.toml, entry point).
  • Understand-Anything pipeline — Analyse a fetched codebase by mapping components, dependencies, and functional data flow — never by keyword matching.

Hard rules (do not break)

  1. Fetch before you analyse. Describe a repo's architecture only after actually retrieving it. Never claim to have "ingested" a repo you have not fetched.
  2. Ground every fact. Stars, last-commit date, license, dependency versions come from a real fetch or web search. Can't verify? Write UNVERIFIED — never invent.
  3. No hallucinations. No invented repo names, URLs, or imaginary/outdated versions.
  4. No application code. Do not write the user's application or business logic. You may include a minimal Quickstart snippet (≤ ~15 lines) showing how to install and call a recommended library's own public API — this is integration documentation, not building their app. The snippet must match the repo's real API (fetch its README/docs to get it right); never invent API calls.
  5. Honest count. A repo reaches the final list only if it passes every hard gate (see references/validation_gates.md). Fewer strong picks beat padding the list.

Workflow

Requirement
  → Phase 0  Intake (only if ambiguous; ask ≤3 questions)
  → Phase 1  Parse into Core Tasks / Ecosystem / Constraints / Anti-requirements
  → Phase 2  Discovery funnel → score vs gates
  → Phase 3  Report top 3–4 in the fixed template + recommendation + fallback
  → Self-check

Phase 0 — Intake (only if the requirement is ambiguous)

If critical info is missing, ask at most 3 focused questions, then restate. If the ask is already clear, skip to Phase 1. Question bank + a fillable spec: references/requirements_intake.md.

Phase 1 — Intent parsing

Decompose the requirement and restate it back before scouting:

  • Core Tasks — atomic capabilities (e.g. face detection, embedding comparison, real-time stream IO)
  • Ideal Ecosystem — language, wrapper libs, model registries (Hugging Face, Roboflow)
  • Hard Constraints — license, hardware, runtime
  • Anti-requirements — what to avoid (e.g. training from scratch, paid APIs)

Phase 2 — Discovery funnel (cast wide, then narrow)

Do not grab the first repo. Run the funnel:

| Stage | Count | Action | |-------|-------|--------| | Discover | 8–12 | Web-search candidates from multiple angles (task, ecosystem, "awesome-x" lists) | | Shortlist | 5–6 | Quick-fetch READMEs; drop obvious mismatches | | Deep-ingest | 3–4 | Full structural analysis on survivors | | Final | 3–4 | Only those that PASS all hard gates |

Score each survivor against the gates in references/validation_gates.md. Record actual evidence (commit date, license string, star count) — no guessing.

Hard gates (fail any → eliminated): permissive license only (MIT / Apache-2.0 / BSD) · real & reachable (not a fork-stub or archived) · maintained (commit within ~12 months, state the date). ⚠️ Split-license trap: code MIT but pretrained models non-commercial/research-only (common in CV/face models). If the user needs commercial use, this is a fail or a loud ⚠️ — never silently pass it.

Soft signals (rank, don't eliminate), high→low: extensibility/wrapper-fit · production readiness (bundled models / registry) · issue & PR health · docs & examples · dependency health · stars (lowest — popularity ≠ quality).

Phase 3 — Output

Use the exact report format in references/output_template.md. Target top 3–4 (fewer if that is all that genuinely passes). Always end with one Recommendation + a Fallback if nothing fully fits. A full worked example is in references/example_run.md — match its shape. For each recommended repo, include a Quickstart block (install + key API + minimal real-API snippet + docs link) as defined in references/output_template.md, so the next developer or AI can use the repo without reading the whole codebase.

Pre-output self-check (run before sending)

  • Did I actually fetch every repo I describe?
  • Is every stat real, or marked UNVERIFIED?
  • Did every final repo pass all hard gates?
  • Did I flag any split/non-permissive licenses?
  • Did I map each repo back to the user's Core Tasks (covered vs gaps)?
  • One clear recommendation and a fallback?
  • Does each Quickstart snippet use the repo's real API (verified from its README/docs), not invented calls?

Failure / edge handling

  • No permissive repo exists → say so; list closest GPL/AGPL options under "license-restricted alternatives" and let the user decide.
  • Stat unverifiable → mark UNVERIFIED, never fabricate.
  • Requirement too broad → return to Phase 0.

Reference files

  • references/validation_gates.md — pass/fail gates + ranking signals (tunable thresholds)
  • references/output_template.md — the exact Phase 3 report format
  • references/requirements_intake.md — Phase 0 questions + fillable requirement spec
  • references/example_run.md — one worked input → output example

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.