Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Ted0321/kotetsu-work-ai-skills --skill find-skills-jagit clone --depth 1 https://github.com/Ted0321/kotetsu-work-ai-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ted0321/kotetsu-work-ai-skills/find-skills-ja)<a href="https://agentmods.dev/skills/ted0321/kotetsu-work-ai-skills/find-skills-ja"><img src="https://agentmods.dev/badge/skills/ted0321/kotetsu-work-ai-skills/find-skills-ja/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ted0321/kotetsu-work-ai-skills/find-skills-ja"><img src="https://agentmods.dev/badge/skills/ted0321/kotetsu-work-ai-skills/find-skills-ja.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 68 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 135 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 138 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 142 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 149 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 156 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00113 | $0.02315 |
| Opus 5 | $0.00056 | $0.01157 |
| Sonnet 5 | $0.00023 | $0.00463 |
| Haiku 4.5 | $0.00011 | $0.00231 |
Grade A, and why
find-skills-ja scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **危険な指示がないか**: 外部への情報送信、不明なURLへの curl / fetch、 How it starts
The opening of the file, as written. The whole thing — 160 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Find Skills JA — スキル探索（日本語ユーザー向け改良版）
オープンなエージェントスキルのエコシステム（skills.sh）からスキルを探して インストールするためのスキル。
skills.sh の検索は日本語・自然文にヒットしない（実測済み・下表）。 このスキルは検索前に必ず「短い英語名詞キーワード」へ変換し、 インストール前に品質と安全を確認してから提案する。
| クエリの形 | 検索結果 |
|---|---|
| 日本語（「議事録」「テスト」） | 0件 |
| 英語の自然文（"how to write meeting notes"） | 0件 |
| 短い英語キーワード（"meeting minutes"） | ヒットする |
使う場面
- 「〜ってできる？」「〜のスキルない？」「〜を自動化したい」と聞かれたとき
- タスクに対して既存スキルが存在しそうなとき
- エージェントの機能拡張に興味を示されたとき
手順
Step 1: ニーズの特定
ユーザーの依頼から次を整理する。
- ドメイン（例: React、テスト、資料作成、業務効率化）
- 具体的なタスク（例: 議事録作成、PRレビュー、スライド生成）
- 一般的なタスクか（＝スキルが存在する可能性が高いか）
Step 2: 検索キーワード設計（最重要）
検索語は必ず次のルールで作る。
- 英語の名詞キーワード2〜3語に変換する（文章にしない・日本語を残さない）
- 同義語で2系統以上のクエリを用意し、両方検索して結果をマージする
- 例:
meeting minutesとmeeting notes/deployとdeploymentとci-cd
- 例:
- 迷ったら「そのタスクの成果物名」を英語にする（議事録→minutes、見積→estimate）
よく使う日本語→検索キーワード対訳表:
| 日本語の依頼 | 検索キーワード（第1候補 / 第2候補） |
|---|---|
| 議事録を作りたい | meeting minutes / meeting notes |
| 提案書・企画書 | proposal / proposal writer |
| スライド・パワポ作成 | slides / pptx presentation |
| 資料の図解 | diagram / visualization |
| PRレビュー | pr review / code review |
| テストを書く | testing / unit test |
| リファクタリング | refactor / code quality |
| デプロイ・公開 | deploy / deployment ci-cd |
| 文章校正・推敲 | writing / copyediting |
| SEO対策 | seo / seo optimization |
| データ分析 | data analysis / analytics |
| スクレイピング | scraping / web scraping |
| Excel作業 | xlsx / spreadsheet |
| ドキュメント整備 | docs / documentation readme |
Step 3: 検索の実行（候補は最低6件集める）
npx skills find <英語キーワード> [--owner <owner>]
- 用意した全キーワード系統で必ず検索する（1系統で終えない。各系統で最大6件返る）
- 結果をマージして重複を除き、合計6〜10件の候補リストを作る
- 6件に満たなければ、より広い第3のキーワードでも検索する
（例:
slidesで不足 →presentation/pptxでも検索） - 特定の企業・作者に絞りたい場合は
--owner（例:--owner anthropics）
候補が2〜3件しか集まっていない状態で提示に進まないこと。
Step 4: 品質・安全の検証（推奨候補に絞って行う)
検索結果だけでインストールを提案しない。 ただし詳細検証は、推奨しようとする上位1〜2件だけに行う （全候補にやると遅くなる。候補一覧には検索結果のメタデータをそのまま載せてよい）。 推奨候補には必ず次を確認する。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 160 lines · 113 tokens per session scan A 2828742a28f7
find-skills-ja is a skill published in the GitHub repository Ted0321/kotetsu-work-ai-skills (56 stars, last pushed 26d ago), licensed MIT. It adds 113 tokens to every session and 2,315 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dcf-model
Build discounted cash flow valuation workbooks in Excel.
hermes-agent-skill-authoring
Author in-repo SKILL.md files: frontmatter and structure.
flash-attention
Speed up long-sequence transformer training and inference.
subagent-driven-development
Execute plans via delegatetask subagents (2-stage review).
grounded-citations
Ground answers and documents in cited, verifiable sources.
openhands
Delegate coding to OpenHands CLI (model-agnostic, LiteLLM).