Privacy

When the open-source skills CLI installs a skill, it sends an install event to our ingestion endpoint containing:

• The skill identifier (owner / repo / skill name)
• The agent name (e.g. claude-code, cursor, gemini-cli)
• A coarse timestamp
• A short fingerprint (IP-derived hash and JA4) used only for hourly deduplication so a single install can't be replayed to inflate counts

We do not collect personal information, session content, prompts, tool calls, or anything else from your agent.

We use install events only to compute aggregate counts surfaced on this site (leaderboard rank, install totals, per-agent breakdowns, and trending tabs). The deduplication fingerprint is discarded after the hourly aggregation runs and never appears in any public data.

This site uses Google Analytics to measure page performance and visitor counts. Visit data is aggregated and does not include the content of your conversations with findaskill.

Skill listings, install counts, and security audit results displayed on this site are public. Anything visible on a skill page is also available through the public API.

The skills CLI can be run with telemetry disabled. See the CLI documentation for the relevant flag and environment variable. Disabling telemetry has no effect on functionality; install counts simply will not include your installs.

Privacy questions and data deletion requests: contact@findaskill.tech.