skill-finder

技能查找器

从 skills.sh 发现并安装技能的最智能方式。

触发短语

• /skill-finder
• /skill-finder [description]
• “查找一个用于……的技能”
• “有没有用于……的技能？”
• “我应该使用什么技能来……？”

流程概览

User Request
     │
     ▼
┌─────────────────────────┐
│ 0. Check Installed      │ ← Don't recommend what user already has
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 1. Detect Agent         │ ← Auto-detect Claude Code, Cursor, etc.
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 2. Parse Intent         │ ← Extract keywords, map to search terms
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 3. Targeted Search      │ ← Search with specific keywords + categories
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 4. Context Check        │ ← Only if needed for disambiguation
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 5. Rank & Compare       │ ← Quality signals + comparison mode
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 6. Recommend            │ ← Present with quality badges
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 7. Install              │ ← Global or project, auto-detect agent
└─────────────────────────┘
     │
     ▼
┌─────────────────────────┐
│ 8. Related Skills       │ ← Suggest complementary skills
└─────────────────────────┘

---

步骤 0：检查已安装的技能

搜索前，先检查已安装的技能：

# Check common skill locations
ls -la .claude/skills/ 2>/dev/null
ls -la .cursor/rules/ 2>/dev/null
ls -la .agents/skills/ 2>/dev/null
ls -la ~/.claude/skills/ 2>/dev/null  # Global

如果用户需要的技能已安装：

You already have **{skill-name}** installed at `{path}`.

→ Want me to invoke it now, or find alternatives?

如果安装的是过时版本：

You have **{skill-name}** installed, but there may be updates.

→ Want me to check for updates, or use the current version?

---

步骤 1：检测 Agent

自动检测用户正在使用的 AI Agent：

检查项	Agent	安装标记
.claude/ 目录或 CLAUDE.md	Claude Code	-a claude-code
.cursor/ 目录	Cursor	-a cursor
.github/copilot/ 目录	GitHub Copilot	-a copilot
.cline/ 目录	Cline	-a cline
.codex/ 目录	Codex	-a codex
.continue/ 目录	Continue	-a continue

保存检测到的 Agent，以便在安装步骤中使用。

如果检测到多个 Agent 或未检测到任何 Agent：

• 在 Claude Code 上下文中默认使用 claude-code
• 或询问用户正在使用哪个 Agent

---

步骤 2：解析意图并提取关键词

从用户请求中提取：

• 主要主题（例如，“支付”“身份验证”“测试”）
• 提及的具体技术（例如，“Stripe”“Supabase”“Playwright”）
• 操作类型（例如，“添加”“构建”“改进”“调试”）

映射为搜索关键词：

用户说法	搜索关键词
支付、账单、结账	stripe, payment, billing, checkout, subscription
身份验证、登录、登入	auth, authentication, login, oauth, jwt, session, clerk, better-auth
测试、测试流程、TDD	test, testing, playwright, jest, vitest, e2e, tdd, qa
数据库、DB、数据	postgres, supabase, prisma, mongodb, sql, database, migration
AI、LLM、RAG、嵌入	rag, llm, embedding, ai-sdk, mcp, vector, openai, anthropic
前端、UI、React	react, nextjs, vue, svelte, frontend, tailwind, ui, component
后端、API、服务	fastapi, express, nestjs, backend, api, server, node
DevOps、CI/CD、部署	docker, k8s, kubernetes, github-actions, terraform, deploy, ci
电子邮件、通知	email, resend, notification, messaging, smtp
文档、PDF、Excel	pdf, docx, xlsx, pptx, document, report
视频、动画	remotion, video, animation, threejs, canvas, webgl
抓取、自动化	browser, scrape, automation, crawl, puppeteer, playwright
营销、SEO、增长	seo, marketing, cro, copywriting, analytics, conversion
移动端、React Native、iOS	react-native, ios, android, swiftui, mobile, flutter, expo
安全	security, auth, encryption, vulnerability, audit, secrets

---

步骤 3：定向搜索

重要：首先使用 CLI 搜索命令，以获取正确格式的技能引用：

npx skills search {keyword} --limit 10

该命令会以正确格式返回技能：author/repo@skill-name

了解格式：

• author/repo@skill-name - 搜索结果中的完整技能引用
• author/repo - 传递给 npx skills add 的内容（会安装该仓库中的所有技能）

使用 WebFetch 作为备用方案（CLI 不可用时）：

WebFetch: https://skills.sh/?search={primary_keyword}
Prompt: List matching skills with:
        - Full reference (author/repo@skill-name format)
        - Install count
        - Description
        Focus on skills matching: {specific_technologies_mentioned}

如果用户请求含糊不清（只有“/skill-finder”）：

• 询问：“你想要实现什么？”
• 等待用户回复后再搜索

---

步骤 4：上下文检查（仅在需要时）

以下情况可跳过上下文收集：

• 用户指定了确切的技术（例如“Stripe”“Playwright”）
• 搜索结果中有一个明确的最佳选项
• 用户的请求没有歧义

以下情况需收集上下文：

• 找到了多个相似的技能（需要了解技术栈以进行区分）
• 用户的请求较为笼统（例如“数据库最佳实践”）
• 需要验证兼容性

快速检查上下文：

文件	提取内容
package.json	框架（react、next、vue）、关键依赖项、是否包含 supabase/stripe 等
pyproject.toml	Python 框架（fastapi、django、flask）
go.mod	Go 项目确认
Cargo.toml	Rust 项目确认
.env.example	集成的服务（Stripe、Supabase 等）

总结为： Stack: {framework}, {language}, {key_dependencies}

---

步骤 5：根据信号评定质量并排序

排序时需考虑的质量指标：

信号	识别方法	权重
官方/已验证	作者为 stripe/、anthropics/、vercel/、supabase/、resend/	高
安装量高	安装量达到 1000+	中
技术栈匹配	技能符合用户检测到的技术栈	高
具体匹配	技能名称包含用户的确切查询内容	高

官方/已验证作者（显示 ⭐ 徽章）：

• stripe/ - Stripe 官方
• anthropics/ - Anthropic 官方
• vercel/ 或 vercel-labs/ - Vercel 官方
• supabase/ - Supabase 官方
• resend/ - Resend 官方
• remotion-dev/ - Remotion 官方
• better-auth/ - Better Auth 官方
• callstackincubator/ - Callstack（React Native 专家）
• cloudai-x/ - Three.js 技能
• trailofbits/ - 安全专家

---

步骤 5b：比较模式

当多个技能的相关性相近时，显示比较：

## Comparing {Category} Skills

| Feature | {skill-1} | {skill-2} | {skill-3} |
|---------|-----------|-----------|-----------|
| Installs | {count} | {count} | {count} |
| Official | ⭐ Yes | No | No |
| Your Stack | ✅ Match | ✅ Match | ❌ Different |
| Focus | {focus} | {focus} | {focus} |

**Recommendation:** {skill-name} ({reason})

→ Want details on any of these, or should I install the recommendation?

以下情况启用比较模式：

• 排名靠前的 2-3 个技能相关性得分相近
• 用户询问“……有什么区别”
• 技能用途相同，但采用不同的方法

---

安全检查

推荐任何技能前，务必确认：

1. 作者验证

✅ TRUSTED - Official/Verified authors (install without warning):
   stripe/, anthropics/, vercel/, vercel-labs/, supabase/, resend/,
   remotion-dev/, better-auth/, callstackincubator/, trailofbits/

⚠️ COMMUNITY - Other authors (show warning before install):
   "This skill is from a community author. Review before installing."

2. 仿冒名称检查

推荐前，确认技能名称看起来不像是热门技能名称的拼写错误：

• stripe-best-pracitces → 可疑（stripe-best-practices 的拼写错误）
• react-best-prctices → 可疑
• supabase-postgers → 可疑

如果存在可疑之处： 不要推荐，或明确提醒用户。

3. 安装确认

安装前务必显示：

**About to install:** {skill-name}
**Author:** {author}
**Source:** https://github.com/{author}/{repo}

⚠️ Installing skills runs code on your machine.
   Review the source if you don't trust the author.

→ Proceed with installation? (y/n)

4. 提供源代码链接

务必提供 GitHub 链接，供用户查看：

📂 **View source:** https://github.com/{author}/{repo}/blob/main/skills/{skill}/SKILL.md

---

步骤 6：展示推荐结果

使用质量徽章格式：

## Recommended Skills

Based on your {stack} project and goal to {userIntent}:

1. **{skill-name}** by {author} ({installs} installs) ⭐ Official
   {Why this matches - be specific about the fit}

2. **{skill-name}** ({installs} installs)
   {Why this is relevant, any trade-offs vs #1}

3. **{skill-name}** ({installs} installs)
   {When you'd choose this instead}

→ Want me to install any of these?

质量徽章：

• ⭐ = 官方/已验证作者
• 🔥 = 热门趋势（安装量高）
• ✅ = 与技术栈完美匹配

---

步骤 7：安装

重要：CLI 使用 author/repo 格式，而不是 author/skill-name！

对于 jezweb/claude-skills@tanstack-query 这类搜索结果：

• jezweb/claude-skills = 仓库（安装时使用此项）
• tanstack-query = 该仓库中的特定技能名称

⚠️ 重要：安装仓库会安装其中的所有技能！

某些仓库包含许多技能：

• jezweb/claude-skills 有 90+ 个技能（可能太多）
• vercel-labs/next-skills 有 3 个技能（范围明确）

优先选择包含与用户需求相关的较少技能的仓库。

如果只有大型仓库可选：

1. 提醒用户：“此仓库包含 {N} 个技能。仍要安装吗？”
2. 建议浏览：https://skills.sh/{author}/{repo}，查看所有技能
3. 安装后，建议移除不需要的技能

询问安装范围：

Install **{skill-name}** from `{author}/{repo}` to:
1. **This project** (./agents/skills/) - Recommended
2. **Globally** (all your projects)

→ Which do you prefer? (default: this project)

⚠️ Note: This will install {N} skills from this repo.

安装命令：

# Project-level (default) - uses author/repo, NOT skill name
npx skills add {author}/{repo} -a {detected_agent} -y

# Global installation
npx skills add {author}/{repo} -a {detected_agent} -y -g

成功安装后：

✓ Installed skills from **{author}/{repo}** to {install_path}

Agent: {detected_agent}
Scope: {project|global}
Skills installed: {list of skill names}

---

步骤 8：推荐相关技能

安装后，推荐互补技能：

已安装技能	推荐的相关技能
stripe-*	webhook-patterns、subscription-management、billing-automation
*-auth、authentication	session-management、secrets-management、security-*
supabase-*	row-level-security、database-migration、sql-optimization
playwright-*、testing	test-driven-development、e2e-testing-patterns、qa-test-planner
react-*	react-testing、react-performance、react-state-management
nextjs-*	vercel-deployment、nextjs-app-router-patterns
fastapi-*	async-python-patterns、python-testing-patterns
docker-*	k8s-*、deployment-pipeline-design
ai-sdk、rag-*	embedding-strategies、mcp-builder、llm-evaluation
remotion-*	视频处理技能、动画技能

格式：

**You might also need:**
- **{related-skill-1}** - {why relevant to what they just installed}
- **{related-skill-2}** - {why relevant}

→ Want me to install any of these too?

---

步骤 9：检查更新（可选）

用户已安装技能时，提供更新检查：

npx skills check

如果有可用更新：

📦 **Updates Available**

| Skill | Current | Latest | Changes |
|-------|---------|--------|---------|
| stripe-integration | 1.0.0 | 1.2.0 | New webhook patterns |
| react-best-practices | 2.1.0 | 2.3.0 | React 19 support |

→ Want me to update these?

更新命令：

npx skills update

---

错误处理

未找到匹配项

I couldn't find skills that directly match "{user_request}".

**Suggestions:**
- Try different keywords (e.g., "auth" instead of "login system")
- Be more specific (e.g., "Supabase auth" instead of "auth")
- Browse skills.sh directly: https://skills.sh/

**Popular categories you might explore:**
- Authentication: `better-auth`, `clerk-auth`, `supabase-auth`
- Testing: `playwright-skill`, `webapp-testing`
- Payments: `stripe-best-practices`

What would you like to try?

无法访问 skills.sh

I'm having trouble reaching skills.sh right now.

**Options:**
1. Try again in a moment
2. Browse directly: https://skills.sh/
3. Tell me what you need and I'll help without a skill

What would you like to do?

安装失败

Installation failed: {error_message}

**Try manually:**
```bash
npx skills add {author}/{skill-name}

或者浏览技能： https://skills.sh/{author}/{skill-name}

常见解决方法：

• 运行 npm cache clean --force 并重试
• 检查网络连接
• 尝试使用 -g 标志进行全局安装

### Skill Already Installed

```markdown
**{skill-name}** is already installed at `{path}`.

**Options:**
1. Invoke it now for your current task
2. Check for updates
3. Find alternative skills
4. Reinstall (overwrite)

What would you like to do?

---

示例

快速路径（意图明确）

User: /skill-finder Stripe payments

Agent: Let me search for Stripe skills...
       [Runs: npx skills search stripe --limit 10]

       ## Recommended Skills

       Based on your goal to add Stripe payments:

       1. **stripe-best-practices** from `stripe/ai-skills` (354 installs) ⭐ Official
          Official Stripe patterns - checkout, webhooks, subscriptions
          Repo contains 2 skills (focused)

       2. **stripe-integration** from `wshobson/agents` (349 installs)
          End-to-end integration patterns
          ⚠️ Repo contains 15 skills

       → Want me to install any of these?

User: Install #1

Agent: Install from `stripe/ai-skills` to:
       1. This project (./agents/skills/) - Recommended
       2. Globally (all your projects)

       This repo contains 2 skills - both Stripe-related.

User: 1

Agent: [Runs: npx skills add stripe/ai-skills -a claude-code -y]

       ✓ Installed 2 skills from **stripe/ai-skills** to .agents/skills/

       Skills installed:
       - stripe-best-practices
       - stripe-webhooks

       → Want me to apply these to your current task?

使用比较模式

User: /skill-finder authentication

Agent: I found several auth skills. Here's a comparison:

       ## Comparing Authentication Skills

       | Feature | better-auth | clerk-auth | supabase-auth |
       |---------|-------------|------------|---------------|
       | Installs | 3,373 | 129 | 142 |
       | Official | ⭐ Yes | No | No |
       | Self-hosted | ✅ | ❌ Cloud | ✅ |
       | Social login | ✅ | ✅ | ✅ |
       | Your Stack | ✅ Next.js | ✅ Next.js | ⭐ You use Supabase |

       **Recommendation:** supabase-auth (best fit - you already use Supabase)

       → Want me to install supabase-auth, or details on another?

已安装

User: /skill-finder React testing

Agent: You already have **webapp-testing** installed at `.claude/skills/webapp-testing/`.

       **Options:**
       1. Invoke it now for your React testing needs
       2. Find additional/alternative testing skills
       3. Check for updates

       What would you like to do?

User: 2

Agent: ## Additional Testing Skills

       Since you have webapp-testing, here are complementary skills:

       1. **react-testing** (412 installs)
          React-specific testing patterns (RTL, hooks testing)

       2. **test-driven-development** (1,289 installs) ⭐ Popular
          TDD methodology and workflow

       → Want me to install any of these?

更新检查

User: /skill-finder --check-updates

Agent: 📦 **Checking your installed skills...**

       | Skill | Status |
       |-------|--------|
       | stripe-best-practices | ✅ Up to date |
       | webapp-testing | 🔄 Update available (1.2.0 → 1.3.0) |
       | react-best-practices | ✅ Up to date |

       → Want me to update webapp-testing?

---

性能提示

1. 描述具体——“Stripe checkout”比“payments”更容易找到合适的匹配项
2. 说明技术栈——“React Native auth”可缩小搜索范围
3. 一次搜索一个主题——将“auth and payments”拆分为两次搜索
4. 先检查已安装项——使用 /skill-finder --installed 避免重复
5. 使用官方技能——查找 ⭐ 徽章，确认技能质量