Install
$ agentstack add skill-sssssaud-git-finder-skill-git-finder-skill ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Git Finder — Repository Scout & Architectural Validator
Find, fetch, and structurally validate open-source GitHub repos that fit a requirement. Hand the user the top 3–4 repos they can actually build on, with one honest recommendation and a fallback. Do not write boilerplate from scratch — orchestrate discovery + analysis so the user layers their unique feature on a proven engine.
Mental model (methodology, not tools you already have)
- GitIngest logic — Any public repo can become a single text blob (file tree + code) for deep reading. To do this you must fetch it: swap
github.com→gitingest.comin the URL for a single-file dump, or fetch the file tree + key files directly (README, main module,requirements.txt/pyproject.toml, entry point). - Understand-Anything pipeline — Analyse a fetched codebase by mapping components, dependencies, and functional data flow — never by keyword matching.
Hard rules (do not break)
- Fetch before you analyse. Describe a repo's architecture only after actually retrieving it. Never claim to have "ingested" a repo you have not fetched.
- Ground every fact. Stars, last-commit date, license, dependency versions come from a real fetch or web search. Can't verify? Write
UNVERIFIED— never invent. - No hallucinations. No invented repo names, URLs, or imaginary/outdated versions.
- No application code. Do not write the user's application or business logic. You may include a minimal Quickstart snippet (≤ ~15 lines) showing how to install and call a recommended library's own public API — this is integration documentation, not building their app. The snippet must match the repo's real API (fetch its README/docs to get it right); never invent API calls.
- Honest count. A repo reaches the final list only if it passes every hard gate (see
references/validation_gates.md). Fewer strong picks beat padding the list.
Workflow
Requirement
→ Phase 0 Intake (only if ambiguous; ask ≤3 questions)
→ Phase 1 Parse into Core Tasks / Ecosystem / Constraints / Anti-requirements
→ Phase 2 Discovery funnel → score vs gates
→ Phase 3 Report top 3–4 in the fixed template + recommendation + fallback
→ Self-check
Phase 0 — Intake (only if the requirement is ambiguous)
If critical info is missing, ask at most 3 focused questions, then restate. If the ask is already clear, skip to Phase 1. Question bank + a fillable spec: references/requirements_intake.md.
Phase 1 — Intent parsing
Decompose the requirement and restate it back before scouting:
- Core Tasks — atomic capabilities (e.g. face detection, embedding comparison, real-time stream IO)
- Ideal Ecosystem — language, wrapper libs, model registries (Hugging Face, Roboflow)
- Hard Constraints — license, hardware, runtime
- Anti-requirements — what to avoid (e.g. training from scratch, paid APIs)
Phase 2 — Discovery funnel (cast wide, then narrow)
Do not grab the first repo. Run the funnel:
| Stage | Count | Action | |-------|-------|--------| | Discover | 8–12 | Web-search candidates from multiple angles (task, ecosystem, "awesome-x" lists) | | Shortlist | 5–6 | Quick-fetch READMEs; drop obvious mismatches | | Deep-ingest | 3–4 | Full structural analysis on survivors | | Final | 3–4 | Only those that PASS all hard gates |
Score each survivor against the gates in references/validation_gates.md. Record actual evidence (commit date, license string, star count) — no guessing.
Hard gates (fail any → eliminated): permissive license only (MIT / Apache-2.0 / BSD) · real & reachable (not a fork-stub or archived) · maintained (commit within ~12 months, state the date). ⚠️ Split-license trap: code MIT but pretrained models non-commercial/research-only (common in CV/face models). If the user needs commercial use, this is a fail or a loud ⚠️ — never silently pass it.
Soft signals (rank, don't eliminate), high→low: extensibility/wrapper-fit · production readiness (bundled models / registry) · issue & PR health · docs & examples · dependency health · stars (lowest — popularity ≠ quality).
Phase 3 — Output
Use the exact report format in references/output_template.md. Target top 3–4 (fewer if that is all that genuinely passes). Always end with one Recommendation + a Fallback if nothing fully fits. A full worked example is in references/example_run.md — match its shape. For each recommended repo, include a Quickstart block (install + key API + minimal real-API snippet + docs link) as defined in references/output_template.md, so the next developer or AI can use the repo without reading the whole codebase.
Pre-output self-check (run before sending)
- Did I actually fetch every repo I describe?
- Is every stat real, or marked
UNVERIFIED? - Did every final repo pass all hard gates?
- Did I flag any split/non-permissive licenses?
- Did I map each repo back to the user's Core Tasks (covered vs gaps)?
- One clear recommendation and a fallback?
- Does each Quickstart snippet use the repo's real API (verified from its README/docs), not invented calls?
Failure / edge handling
- No permissive repo exists → say so; list closest GPL/AGPL options under "license-restricted alternatives" and let the user decide.
- Stat unverifiable → mark
UNVERIFIED, never fabricate. - Requirement too broad → return to Phase 0.
Reference files
references/validation_gates.md— pass/fail gates + ranking signals (tunable thresholds)references/output_template.md— the exact Phase 3 report formatreferences/requirements_intake.md— Phase 0 questions + fillable requirement specreferences/example_run.md— one worked input → output example
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sssssaud
- Source: sssssaud/git-finder-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.