> ## Documentation Index
> Fetch the complete documentation index at: https://community.rifteo.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Find Skills
> Discover and install specialized Rifteo skills from the community ecosystem when users need extended audit capabilities. Trigger when the user asks "how do I audit X" or "find a skill for X", says "is there a skill for X", asks "can you check X" for a specialized audit capability, expresses interest in extending Rifteo capabilities, wants to search for audit templates or compliance workflows, or mentions wishing they had help with a specific compliance domain.
**Status:** Stable
**Version:** 1.0.0
**Author:** Rifteo
**Tags:** workflow
**Installation**
```bash theme={"system"}
rifteo-skills add find-skills
```
***
## Summary
Discover and install specialized agent skills from the open Rifteo ecosystem when users need extended audit capabilities.
* Helps identify relevant skills by compliance domain and task when users ask "how do I audit X" or "find a skill for X"
* Integrates with the Skills CLI (`npx skills find`, `npx skills add`) to search, verify, and install packages from the community directory
* Recommends skills based on install count, source reputation, and GitHub stars to ensure quality before suggesting installation
* Presents skill options with install commands and links to the community hub for user review and one-click installation
***
## SKILL.md file
### Find Skills
This skill helps you discover and install skills from the open Rifteo community ecosystem.
#### What is the Skills CLI?
The Skills CLI (`npx skills`) is the package manager for the open Rifteo community ecosystem. Skills are modular packages that extend audit capabilities with specialized knowledge, compliance workflows, and domain-specific checks.
Key commands:
```bash theme={"system"}
npx skills find [query] # Search for skills interactively or by keyword
npx skills add # Install a skill from GitHub or other sources
npx skills check # Check for skill updates
npx skills update # Update all installed skills
```
Browse skills at the [Rifteo Community Hub](https://community.rifteo.fr/).
#### How to Help Users Find Skills
**Step 1: Understand What They Need**
When a user asks for help with an audit task, identify:
* The compliance domain (e.g., access control, data retention, infrastructure, SOC 2)
* The specific check (e.g., verifying MFA, checking encryption at rest, reviewing IAM policies)
* Whether this is a common enough requirement that a community skill likely exists
**Step 2: Check the Community Hub First**
Before running a CLI search, check the Rifteo community hub to see if a well-known skill already exists for the domain. The hub ranks skills by total installs, surfacing the most popular and battle-tested options.
**Step 3: Search for Skills**
If the hub doesn't cover the user's need, run the find command:
```bash theme={"system"}
npx skills find [query]
```
Examples:
```bash theme={"system"}
# User asks "how do I check MFA is enabled?"
npx skills find mfa access-control
# User asks "can you audit our S3 bucket policies?"
npx skills find s3 data exposure
# User asks "I need to verify our logging setup"
npx skills find audit-logs compliance
```
**Step 4: Verify Quality Before Recommending**
Do not recommend a skill based solely on search results. Always verify:
* **Install count**: prefer skills with 1K+ installs. Be cautious with anything under 100.
* **Source reputation** Official org sources are more trustworthy than unknown authors.
* **GitHub stars** Check the source repository. A skill from a repo with fewer than 100 stars should be treated with skepticism.
**Step 5: Present Options to the User**
When you find relevant skills, present them with:
* The skill name and what it checks
* The install count and source
* The install command they can run
* A link to learn more on the community hub
Example response:
```
I found a skill that might help! The "check-mfa-enforcement" skill verifies
that all IAM users have MFA enabled, aligned with SOC 2 CC6.1.
(12K installs)
To install it:
npx skills add your-org/rifteo@check-mfa-enforcement
Learn more: https://community.rifteo.fr/skills/check-mfa-enforcement
```
**Step 6: Offer to Install**
If the user wants to proceed, you can install the skill for them:
```bash theme={"system"}
npx skills add -g -y
```
The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts.
#### Common Skill Categories
| Category | Example Queries |
| -------------------- | --------------------------------------------- |
| Access Control | `mfa`, `iam`, `permissions`, `rbac` |
| Data Security | `encryption`, `s3`, `storage`, `retention` |
| Infrastructure | `network`, `firewall`, `kubernetes`, `docker` |
| Logging & Monitoring | `audit-logs`, `cloudtrail`, `siem` |
| Code & CI | `secrets`, `sast`, `dependency-scan` |
| Process & Governance | `approval`, `change-management`, `policy` |
#### When No Skills Are Found
If no relevant skills exist:
* Acknowledge that no existing skill was found
* Offer to help with the audit task directly using general Rifteo capabilities
* Suggest the user could create their own skill with `npx skills init`
Example:
```
I searched for skills related to "xyz" but didn't find any matches in the
Rifteo community hub.
I can still help you run this check manually! Would you like me to proceed?
If this is something your team audits regularly, you could publish your own skill:
npx skills init my-xyz-skill
```
#### Known Limitations
* Skills CLI requires Node.js 18+ to run
* Search quality depends on how skills are tagged by their authors
* Skills from unknown sources have not been reviewed by the Rifteo core team
***
## Benchmark Results
Tested on claude-sonnet-4-6 via Claude Code CLI. Same prompt, same model, same target. The only variable is whether the skill is loaded.
| Metric | Without Skill | With Skill |
| ----------------- | ------------- | ---------- |
| Turns to complete | 2 | 1 |
| Response tokens | \~4,831 | \~233 |
| Total time | 185s | 5s |
| Output quality | Incomplete | Complete |
***
## Related skills
Score any SKILL.md across 5 quality dimensions and run a 54-agent compatibility check
Aggregate findings into a gap report across ISO 27001, NIST CSF, PCI-DSS, and OWASP
Look up any control ID with cross-framework mappings and testing hints