Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 17 hours ago
5,805 skills
- testany-import-gitTestAny-io/testany-agent-skillsTestany Git 导入：把 Git 仓库里的测试脚本批量注册成 Testany platform cases，并持续同步、切 commit、演化 binding、配 webhookEngineeringNo warnings★ 82↓ —
- guardrails-reviewerTestAny-io/testany-agent-skillsReview Project Guardrails, 工程规范评审。Use when: Guardrails 创建或更新后需要作为项目级治理基线做准出，检查触发判定、生成模式、事实标准、下游工作流钩子与规则可执行性。EngineeringNo warnings★ 82↓ —
- api-reviewerTestAny-io/testany-agent-skillsAPI contract review, 接口契约评审。Use when: PRD 完成后、HLD/LLD/实现前需要审查完整契约或既有批准范围内的契约增量，包括 OpenAPI/AsyncAPI/GraphQL/gRPC/WebSocket/SSE/Webhook/SDK/文件格式/IPC-CLI 契约。EngineeringNo warnings★ 82↓ —
- competitive-pricing-packaging-reviewLMTYdotcom/skillsAnalyze or pressure-test the home product's own pricing and packaging using current competitor offers, recent pricing changes, customer and deal evidence, and company context. Use when the deliverable is a monetization decision - reviewing a pricing change, planning packaging, deciding whether the company should respond to a competitor price move, or asking what market evidence should inform pricing. Not for a live buyer price objection, a pricing-news briefing, or profiling a competitor whose pricing moved.EngineeringNo warnings★ 83↓ —
- open-prpolyai/adkPrepare and open a pull request on the polyai-adk repo, with checks run, the right conventional-commit title, the repo's PR template filled in and no internal references. Use when asked to open, create or raise a PR for ADK changes.EngineeringNo warnings★ 83↓ —
- testany-executionTestAny-io/testany-agent-skillsTestany execution 观测与管理 - 查看进度、查询历史、刷新状态、取消未开始执行、将失败执行交给 debugEngineeringNo warnings★ 82↓ —
- summer-apiNewSummerEngine/summerSummer API game assets: models, estimate, one job or a batch, download the files.EngineeringNo warnings★ 88↓ —
- github-repo-statscxcscmu/SkillLearnBenchHow to gather GitHub repository statistics (PRs, issues, contributors) using the GitHub REST API via curl and Python. Use this skill whenever the user asks for a community pulse, activity summary, monthly report, or repository metrics for any GitHub repo — even if they don't explicitly mention the API.EngineeringNo warnings★ 91↓ —
- testany-sync-case-env-from-sourceTestAny-io/testany-agent-skills从 OpenAPI 生成的 Testany case 源代码中自动识别入参和出参，并同步到 case 的环境变量列表中。适用于源代码存储在需要认证的 Git 仓库（如 Bitbucket）的场景。EngineeringNo warnings★ 82↓ —
- hylo-recallskoowoo/hyloGets things back out of the user's notes and knowledge base: finds resources, topics, views and every note touching something (old and forgotten ones included), digs up ideas and material, reviews a past week or month or a random slice of history, and maps their knowledge as a whole. Use for 'find my notes on X', 'what do I know/think about X', 'what relates to this', 'give me material for X', 'inspire me', 'weekly review', 'show me something I've forgotten', 'what's in my knowledge base', '找一下关于 X 的笔记', '我对 X 怎么看', '找点素材/灵感', '周回顾', '随便翻翻', '我的知识库都有什么'.EngineeringNo warnings★ 101↓ —
- gazeborobium-ai/robiumBuild and debug modern Gazebo simulations and their ROS 2 boundary.EngineeringNo warnings★ 100↓ —
- python-to-lean4-translatorArabelaTso/Skills-4-SETranslate Python programs to equivalent Lean4 code while preserving semantics and ensuring type safety. Use when users ask to convert, translate, or port Python code to Lean4, or when they need to verify Python algorithms using Lean4's theorem proving capabilities. Handles functions, classes, data structures, control flow, and ensures the generated Lean4 code is well-typed, executable, and can successfully run.EngineeringNo warnings★ 259↓ —
- audit-redirectsJoviDeCroock/prachtFind open redirects in pracht loaders, middleware, and navigation. The framework rejects unsafe schemes and CRLF at both ends, but a hand-rolled 3xx Response bypasses every guard, and even a guarded redirect to an attacker-chosen origin can phish. Use for "audit redirects", "check for open redirects", "is my ?redirect= param safe", "review login redirect handling".EngineeringNo warnings★ 105↓ —
- concept-fandanium/lateral-thinkingEdward de Bono's Concept Fan — climb from the current solution to the concept it serves by asking "what is this a way of doing?", then fan out alternative concepts and concrete implementations for each. Use when the current solution might be answering the wrong question, when all options look like variations of one idea, or to widen a decision before committing. Triggers include "concept fan", "zoom out", "what is this a way of doing", "wrong problem", "widen the options", "abstraction ladder". Do NOT use for analytical work like debugging, code review, or implementation tasks.EngineeringNo warnings★ 328↓ —
- analogydanium/lateral-thinkingForced Analogy / Structural Transplant — map the problem onto a structurally similar system from a distant domain (immune system, air-traffic control, restaurant kitchen, jazz ensemble) and transfer its mechanisms back. Use when a solution works but feels derivative, when the industry playbook is exhausted, or when a system in nature or another trade already solves this shape of problem. Triggers include "analogy", "forced analogy", "how would a hospital/kitchen/airport handle this", "transplant from another industry", "structurally similar system". Do NOT use for analytical work like debugging, code review, or implementation tasks.EngineeringNo warnings★ 328↓ —
- pracht-debugJoviDeCroock/prachtFramework-aware debugging for pracht: route matching, loader and API errors, rendering and hydration, middleware, HMR, and build failures — root cause first. Use for "debug this", "fix this bug", "why is this broken", "blank page", "hydration mismatch", "404 on my route"; suggest it when the user reports unexpected pracht behavior.EngineeringNo warnings★ 105↓ —
- audit-secretsJoviDeCroock/prachtDetect environment variables and secrets reaching the client bundle via loader return values, hydration state, or server-only modules imported from client code paths. Use for "audit secrets", "find leaked env vars", "is my API key exposed", "scan for credential leaks".EngineeringNo warnings★ 105↓ —
- agent-ready-ardfabricioctelles/skillsSub-skill: Implement ARD (Agentic Resource Discovery). Publish /.well-known/ai-catalog.json so agents can discover MCP servers, A2A agents, skills and API tools (agenticresourcediscovery.org / ai-catalog).EngineeringNo warnings★ 122↓ —
- credential-leak-detectorJKHeadley/instarPersistent Claude Code agents with scheduling, sessions, memory, and Telegram.EngineeringNo warnings★ 84↓ —
- alterlab-qutipAlterLab-IEU/AlterLab-Academic-SkillsSimulates open quantum systems with QuTiP, the Quantum Toolbox in Python, solving Lindblad master equations (mesolve), Monte Carlo trajectories (mcsolve), and unitary dynamics (sesolve). Use when studying master-equation or Lindblad dynamics, decoherence, dissipation, quantum optics, cavity QED, or open-system time evolution. NOT for circuit-based quantum computing or hardware execution — for IBM Quantum circuits prefer alterlab-qiskit, for Google Quantum AI or NISQ circuits prefer alterlab-cirq, and for gradient-trained quantum ML prefer alterlab-pennylane. Part of the AlterLab Academic Skills suite.EngineeringNo warnings★ 78↓ —
- hunt-apiEncod3d-Sec/TORCHAPI attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse. OWASP API Top 10. Wiki-first, FIND schema output.EngineeringNo warnings★ 335↓ —
- hunt-macosEncod3d-Sec/TORCHmacOS attack hunting - foothold to root/persistence on a macOS host. TCC/Gatekeeper/SIP bypass, keychain + credential loot, code-signing/entitlements abuse, XPC/dylib/library injection, launch-constraint evasion, MDM/installer abuse. Wiki-first, FIND schema output.EngineeringNo warnings★ 335↓ —
- hunt-m365Encod3d-Sec/TORCHMicrosoft 365 / Entra ID attack - tenant discovery, user enumeration via OneDrive differential (2026 verified), AADSTS code reference, Smart Lockout math (hard cap 1-2 attempts/user), ROPC validation, Conditional Access mapping. Wiki-first, FIND schema output.EngineeringNo warnings★ 335↓ —
- systematic-debuggingJKHeadley/instarPersistent Claude Code agents with scheduling, sessions, memory, and Telegram.EngineeringNo warnings★ 84↓ —