discover

Name: discover
Availability: InStock
Author: Unclejobs

Discover external skills from registries and inspect candidates before approval.

37|7|Updated Mar 19, 2026

Search Tags:#skill discovery #package evaluation #version pinning #security checks #GitHub skills #pipeline planning #npm skills

Ready to run

npx skills add https://github.com/unclejobs-ai/second-claude-code --skill discover-unclejobs-ai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: discover
Source: https://github.com/unclejobs-ai/second-claude-code/tree/main/skills/discover
Command: npx skills add https://github.com/unclejobs-ai/second-claude-code --skill discover-unclejobs-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It prevents wasted time and risky changes by helping you discover existing local or trusted external skills when the current toolset cannot handle your task.

Core Features & Use Cases

Registry-first discovery: Scans local skills/ first, then uses GitHub and npm sources only as needed.
Candidate inspection for the top results: Reads the candidate README/SKILL.md, performs scoring with transparent criteria, and flags when inspection is blocked.
Safety-focused install gating: Avoids auto-installation, enforces an approval step, and rejects low-scoring or suspicious candidates (including lifecycle-script checks for npm packages).

Quick Start

Use the discover skill to find a safe, compatible skill package when your current pipeline lacks the needed capability.

Frequently Asked Questions about discover

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find and evaluate external GitHub or npm skills for my pipeline?▼

Skill discovery prioritizes local skills directories first, then queries GitHub and npm registries as needed. It inspects top-3 candidate packages by reading their documentation, applies transparent weighted scoring, and recommends the best fit without triggering automatic installation.

Can I automatically install third-party npm packages during pipeline planning?▼

No, automatic installation is strictly blocked to ensure safety. The discovery process enforces an explicit approval step before installing any external package, rejects low-scoring candidates, and blocks suspicious npm packages by checking their lifecycle scripts.

What is the best way to decide between building a custom pipeline versus installing an existing skill?▼

The best way to decide is to inspect the top-3 candidate packages and review their transparent weighted scores. If trusted external skills match the required capabilities and pass security checks, installing them saves development time compared to building a custom pipeline manually.

How does version pinning work when selecting external skills for a software project?▼

Version pinning locks the selected external skill to a specific package release during installation. This deterministic discovery requirement ensures pipeline stability by preventing unexpected updates from external GitHub or npm sources after the explicit approval step.

Does package evaluation include security checks for npm lifecycle scripts?▼

Yes, package evaluation includes security checks for npm lifecycle scripts. The discovery process flags suspicious candidates, blocks low-scoring packages, and enforces strict safety gating to prevent risky changes before any explicit installation approval is granted.