Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 9 hours ago
6,268 skills
- detecting-shadow-api-endpoints26zl/cybersec-toolkitDiscover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms.EngineeringNo warnings★ 87↓ —
- iterate0xDarkMatter/claude-modsAutonomous single-metric improvement loop - modify, measure, keep or discard, repeat (Karpathy autoresearch). One session, git as memory, bisect-on-regression. Triggers: iterate, improve autonomously, run overnight, keep improving, improvement loop, iterate until done.EngineeringNo warnings★ 80↓ —
- pypi-ops0xDarkMatter/claude-modsPublish Python packages to PyPI via OIDC Trusted Publishing (PEP 740 attestations, gh-action-pypi-publish) instead of stored tokens. Use for: invalid-publisher errors, pending-publisher 404s, uv publish/twine, TestPyPI, environment approval gates, and rotating/auditing publish tokens.EngineeringNo warnings★ 80↓ —
- react-ops0xDarkMatter/claude-modsReact development patterns, hooks, state management, Server Components, and performance optimization. Use for: react, hooks, useState, useEffect, jsx, tsx, server components, RSC, zustand, react query, component patterns, react testing library, error boundary, suspense, react 19.EngineeringNo warnings★ 80↓ —
- migrate-ops0xDarkMatter/claude-modsFramework and language migration patterns - version upgrades, breaking changes, dependency audit, safe rollback. Use for: migrate, migration, upgrade, version bump, breaking changes, deprecation, dependency audit, npm audit, pip-audit, codemod, jscodeshift, rector, rollback, semver, changelog, framework upgrade, language upgrade, React 19, Vue 3, Next.js App Router, Laravel 13, Angular, Python 3.14, Node 26, TypeScript 6, Go 1.26, Rust 2024, PHP 8.5.EngineeringNo warnings★ 80↓ —
- hibob-webhookshookdeck/webhook-skillsReceive and verify HiBob (Bob) webhooks. Use when setting up Hibob webhook handlers, debugging Bob-Signature HMAC-SHA512 verification, or handling HR events like employee.created, employee.joined, employee.left, or timeoff.request.requested.EngineeringNo warnings★ 97↓ —
- yoco-webhookshookdeck/webhook-skillsReceive and verify Yoco webhooks (South African payments). Use when setting up Yoco webhook handlers for the Yoco API or Checkout API, debugging Standard Webhooks signature verification (webhook-id, webhook-timestamp, webhook-signature, whsec_ secret), or handling events like payment.created, payment.refunded, order.completed, payment.succeeded, and refund.succeeded.EngineeringNo warnings★ 97↓ —
- unoplat-code-confluence-cliunoplat/unoplat-code-confluenceUse the Unoplat Code Confluence CLI to run the local app, configure providers, add repositories, and generate AGENTS.md artifacts with automatic PR publication. Trigger when users mention Unoplat, Code Confluence, repository setup, AGENTS.md generation, or agent-md workflows.EngineeringNo warnings★ 94↓ —
- quo-webhookshookdeck/webhook-skillsReceive and verify Quo webhooks (quo.com — the business phone / VoIP platform formerly known as OpenPhone). Use when setting up a Quo webhook handler, debugging signature verification, or handling call and message events like message.received, call.completed, call.summary.completed, call.transcript.completed, contact.updated or task.created. Quo has TWO signature schemes: the current versioned API (Quo-Api-Version 2026-03-30) uses Standard Webhooks / Svix-style webhook-id + webhook-timestamp + webhook-signature headers, while the legacy v1 API still sends the OpenPhone-era openphone-signature header (hmac;1;timestamp;signature). Not Quoter (CPQ, MD5 `hash` form field), not Quora, not Twilio.EngineeringNo warnings★ 97↓ —
- luma-webhookshookdeck/webhook-skillsReceive and verify Luma (lu.ma events platform, not Luma AI) webhooks. Use when setting up Luma webhook handlers, debugging Webhook-Signature verification, or handling events like guest.registered, ticket.registered, event.created, or calendar.person.unsubscribed.EngineeringNo warnings★ 97↓ —
- attio-webhookshookdeck/webhook-skillsReceive and verify Attio CRM webhooks. Use when setting up Attio webhook handlers, debugging Attio-Signature verification, deduplicating with the Idempotency-Key header, or handling Attio events like record.created, record.updated, list-entry.created, note.created, and task.created.EngineeringNo warnings★ 97↓ —
- circle-webhookshookdeck/webhook-skillsReceive and verify Circle Payments Network (CPN) v2 webhooks. Use when setting up Circle webhook handlers, debugging ECDSA signature verification (X-Circle-Signature, X-Circle-Key-Id), or handling notifications like cpn.payment.*, cpn.transaction.*, and cpn.rfi.*.EngineeringNo warnings★ 97↓ —
- pylon-webhookshookdeck/webhook-skillsReceive and verify Pylon webhooks. Use when setting up Pylon webhook handlers, debugging Pylon signature verification (Pylon-Webhook-Signature, hs256= HMAC-SHA256 over timestamp.body), or handling B2B support events such as issue lifecycle changes (Pylon's event-type catalog is not public — confirm the exact names in your own destination configuration).EngineeringNo warnings★ 97↓ —
- tebex-webhookshookdeck/webhook-skillsReceive and verify Tebex webhooks. Use when setting up Tebex webhook handlers, debugging X-Signature verification, completing the validation.webhook handshake, or handling events like payment.completed, payment.refunded, and recurring-payment.renewed.EngineeringNo warnings★ 97↓ —
- webex-webhookshookdeck/webhook-skillsReceive and verify Webex webhooks (formerly Cisco Spark). Use when setting up Webex webhook handlers, debugging X-Spark-Signature verification, or handling events like messages.created, memberships.created, rooms.updated, meetings.started, or attachmentActions.created.EngineeringNo warnings★ 97↓ —
- tikkie-webhookshookdeck/webhook-skillsReceive Tikkie (ABN AMRO) API v2 notifications. Use when setting up a Tikkie payment request, refund or transaction bundle webhook handler, subscribing via POST /paymentrequestssubscription or /transactionssubscription, or asking how to verify a Tikkie webhook signature. Tikkie notifications are UNSIGNED (no signature header, no secret, no HMAC), so this skill teaches the subscriptionId check plus re-fetching the record from the Tikkie API, and dispatching on notificationType PAYMENT, REFUND and BUNDLE.EngineeringNo warnings★ 97↓ —
- stitch-webhookshookdeck/webhook-skillsReceive and verify Stitch (stitch.money) payment webhooks delivered via Svix. Use when setting up a Stitch webhook handler, debugging svix-id / svix-timestamp / svix-signature verification, or handling Stitch payment, payment.confirmation, transaction, payment-consent-request, collection, refund, and disbursement status events.EngineeringNo warnings★ 97↓ —
- veriff-webhookshookdeck/webhook-skillsReceive and verify Veriff webhooks. Use when setting up Veriff identity verification webhook handlers, debugging X-HMAC-SIGNATURE verification, or handling decision webhooks (approved, declined, resubmission_requested, expired, abandoned) and event webhooks (started, submitted).EngineeringNo warnings★ 97↓ —
- linear-webhookshookdeck/webhook-skillsReceive and verify Linear webhooks. Use when setting up Linear webhook handlers, debugging Linear signature verification, or handling Linear issue tracking events like Issue, Comment, Project, Cycle, IssueLabel, and IssueSLA create/update/remove actions.EngineeringNo warnings★ 97↓ —
- pusher-webhookshookdeck/webhook-skillsReceive and verify Pusher Channels webhooks. Use when setting up Pusher webhook handlers, debugging X-Pusher-Signature verification, or handling channel_occupied, channel_vacated, member_added, member_removed, client_event, cache_miss, and subscription_count events.EngineeringNo warnings★ 97↓ —
- peer-reviewKalarisLabs/research-agent-skillsPrepare evidence-bounded, constructive peer-review drafts and structured manuscript assessments. Use for authorized review of scientific manuscripts, protocols, preprints, or research proposals; reporting-guideline selection; claim–evidence checks; methods, statistics, reproducibility, ethics, figure/table, and citation critique; or revision-response planning.EngineeringNo warnings★ 84↓ —
- vendor-managementw95/awesome-claude-corporate-skillsEvaluate, compare, and manage vendor relationships. Trigger with "evaluate this vendor", "compare vendors", "vendor review", "should we renew", "RFP", or when the user is making procurement or vendor decisions.EngineeringNo warnings★ 293↓ —Also in 1 other repo
- fleet-worker0xDarkMatter/claude-modsOne cheap headless Claude Code worker on a cheaper brain (GLM via z.ai, or Sonnet/Haiku) - full tool harness, isolated git worktree + CLAUDE_CONFIG_DIR - fanned out and gated by an Opus orchestrator. Triggers: fleet-worker, GLM worker, grunt worker, cheap parallel agent, offload to GLM, sonnet worker, haiku worker.EngineeringNo warnings★ 80↓ —
- typescript-ops0xDarkMatter/claude-modsTypeScript type system, generics, utility types, strict mode, and ecosystem patterns. Use for: typescript, ts, type, generic, utility type, Partial, Pick, Omit, Record, Exclude, Extract, ReturnType, Parameters, keyof, typeof, infer, mapped type, conditional type, template literal type, discriminated union, type guard, type assertion, type narrowing, tsconfig, strict mode, declaration file, zod, valibot, typescript 7, tsgo, native compiler.EngineeringNo warnings★ 80↓ —