Agentfinder

• Risk level: Low
• Analyzed: Apr 14, 2026, 11:03 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, runtime instructions, and install requirements are consistent with a local, read-only skill-registry aggregator — nothing requested or installed is disproportionate to its stated purpose.

This skill appears internally consistent and limited to running a local FastAPI server that searches a built-in skill index. Before installing: 1) be aware it will install Python packages from PyPI (fastapi, uvicorn, pydantic) — install in a virtualenv or container if you prefer isolation; 2) the index is local/static, so it won't fetch live registry data unless modified to do so — review agentfinder/registries.py if you expect live scraping or syncing; 3) there is no network exfiltration or secret access in the current code, but if the owner adds adapters that call external registries you should review any new network code and required credentials. If you want, I can point out the exact lines that are safe or highlight where to add live-registry connectors safely.