{"id":"girofu-skill-fetch","name":"skill-fetch","af_score":53.0,"security_score":48.0,"reliability_score":36.2,"what_it_does":"skill-fetch is a cross-platform tool/skill that searches multiple registries for AI coding agent skills, scores and ranks results, applies security scanning/integrity hashing, and installs selected skills into supported agent environments (e.g., Claude Code, Cursor, Codex, Gemini CLI, Windsurf, Amp).","best_when":"You want an agent workflow to discover and install third-party skills quickly, with built-in scoring, security labeling, and integrity hash tracking across several registries.","avoid_when":"You have strict requirements for supply-chain security evidence beyond static scanning/integrity hashes (e.g., formal verification, signed artifacts), or you cannot tolerate that the tool will rely on external registries/APIs.","last_evaluated":"2026-03-30T15:33:37.641220+00:00","has_mcp":false,"has_api":false,"auth_methods":["MCP-based API key setup for SkillsMP (via Claude mcp add --scope user skillsmp ...)","Optional API-key configuration via ~/.claude/skills/.fetch-config.json for SkillHub/Skills Directory"],"has_free_tier":false,"known_gotchas":["Install/update behavior differs by agent integration path (Claude Code plugin vs npx vs curl/sh vs Python vs manual copy).","Some sources require API keys (SkillsMP MCP for Sources 1-2; Skills Directory for Source 9); without keys, fewer results are available.","Security scan and hash verification occur around installation/loading, but behavior of scan failures or false positives is not detailed in the README excerpt.","Interactive install requires mandatory prompt for local vs global installation; non-interactive environments may require alternative flows."],"error_quality":0.0}