Find Skills

​

Find Skills

​

What is the Skills CLI?

npx skills find [query]   # Search for skills interactively or by keyword
npx skills add <package>  # Install a skill from GitHub or other sources
npx skills check      # Check for skill updates
npx skills update      # Update all installed skills

​

How to Help Users Find Skills

• The compliance domain (e.g., access control, data retention, infrastructure, SOC 2)
• The specific check (e.g., verifying MFA, checking encryption at rest, reviewing IAM policies)
• Whether this is a common enough requirement that a community skill likely exists

npx skills find [query]

# User asks "how do I check MFA is enabled?"
npx skills find mfa access-control

# User asks "can you audit our S3 bucket policies?"
npx skills find s3 data exposure

# User asks "I need to verify our logging setup"
npx skills find audit-logs compliance

• Install count: prefer skills with 1K+ installs. Be cautious with anything under 100.
• Source reputation Official org sources are more trustworthy than unknown authors.
• GitHub stars Check the source repository. A skill from a repo with fewer than 100 stars should be treated with skepticism.

• The skill name and what it checks
• The install count and source
• The install command they can run
• A link to learn more on the community hub

I found a skill that might help! The "check-mfa-enforcement" skill verifies
that all IAM users have MFA enabled, aligned with SOC 2 CC6.1.
(12K installs)

To install it:
npx skills add your-org/rifteo@check-mfa-enforcement

Learn more: https://community.rifteo.fr/skills/check-mfa-enforcement

npx skills add <owner/repo@skill> -g -y

​

Common Skill Categories

​

When No Skills Are Found

• Acknowledge that no existing skill was found
• Offer to help with the audit task directly using general Rifteo capabilities
• Suggest the user could create their own skill with npx skills init

I searched for skills related to "xyz" but didn't find any matches in the
Rifteo community hub.

I can still help you run this check manually! Would you like me to proceed?

If this is something your team audits regularly, you could publish your own skill:
npx skills init my-xyz-skill

​

Known Limitations

• Skills CLI requires Node.js 18+ to run
• Search quality depends on how skills are tagged by their authors
• Skills from unknown sources have not been reviewed by the Rifteo core team