Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
14,533 skills from 417 repositories · updated 45 minutes ago
1,543 skills
- django-access-reviewgetsentry/skillsDjango access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".OfficialEngineeringReview first★ 1.1K↓ —
- git-workflowlaolaoshiren/claude-code-skills-zh安全处理 Git 状态检查、提交信息、commit、分支、push、PR 和 rebase。用于用户要求检查改动、生成或创建提交、管理分支、推送、发起 PR 或整理历史时；严格区分每个动作的授权，并保护工作树中已有和无关的修改。EngineeringReview first★ 893↓ —
- trellis-finish-workfy-agent/fyagentWrap up the current session: verify quality gate passed, remind user to commit, archive completed tasks, and record session progress to the developer journal. Use when done coding and ready to end the session.EngineeringNo warnings★ 219↓ —
- reviewsuboss87/FDEOpsReview a proposed customer code change against its intended outcome and operational risks. Use for a diff or PR review; report evidence and actionable findings.EngineeringReview first★ 947↓ —
- debriefsuboss87/FDEOpsTurn meeting notes or a transcript into sourced decisions, changes and next actions. Use after a customer conversation; review consequential record updates before saving.EngineeringReview first★ 947↓ —
- dashboardsuboss87/FDEOpsReview the portfolio across existing engagement records. Use for status across customers; requires accessible permitted records and does not create missing client histories.EngineeringReview first★ 947↓ —
- activate-sitemicrosoft/power-platform-skillsActivates and provisions a Power Pages website in a Power Platform environment via the Power Platform REST API. Use when the user wants to activate, provision, turn on, or enable a Power Pages website or portal.EngineeringReview first★ 1K↓ —
- setup-authmicrosoft/power-platform-skillsUse when the user asks to "set up authentication", "add login", "add logout", "add sign in", "enable auth", "add role-based access", "add authorization", "protect routes", "configure identity provider", "configure Entra ID", "configure Entra External ID", "configure OpenID Connect", "add OIDC", "set up SAML", "set up WS-Federation", "set up local login", "add Facebook login", "add Google sign in", "add Microsoft Account", or otherwise wants to set up authentication (login/logout) and role-based authorization for their Power Pages code site using any supported identity provider. Also sets up the IdP app registration for OIDC providers (Okta, Auth0, Entra External ID, and other OIDC) -- reads the provider's docs first, then either guides the user through the provider's console or, when the provider supports it, configures it for the user -- and wires the client ID, authority, and claims mapping into Power Pages.EngineeringReview first★ 1K↓ —
- add-localizationmicrosoft/power-platform-skillsAdds or extends multilingual localization in a Power Pages code-site SPA. Use whenever the user asks to translate, localize, internationalize, support multiple languages, add a language selector, add locale routes, repair an i18n setup, or add languages to an existing React, Vue, Angular, or Astro Power Pages site.EngineeringReview first★ 1K↓ —
- autopromptSpielewoy/autoprompt-skillRun explicitly requested Autoprompt v2 work through the private controller. Ordinary coding and review requests do not activate this skill.EngineeringReview first★ 1.2K↓ —
- scan-codemicrosoft/power-platform-skillsScans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependency scanning, then surfaces findings by category (code patterns, vulnerable packages, secrets, license issues). Use when the user wants to review code for security problems, check for vulnerable packages, find hard-coded secrets, run a code scan, or asks "is my code safe?", "check my dependencies", "find security issues in my source" — even if they say "audit my code" without mentioning specific tools.EngineeringReview first★ 1K↓ —
- open-agent-teamsAI-Builder-Club/skillsDelegate tasks to ANY CLI agent (claude, codex, aider, ...) running in a detached tmux session, with a race-safe done-signal protocol and multi-turn iteration. Use when delegating work to a non-Claude CLI agent, when the user says "tmux delegate", "run agent in tmux", "delegate to codex/aider", or when executor work should run in an observable background terminal instead of the Agent tool.EngineeringNo warnings★ 1.3K↓ —
- autopromptSpielewoy/autoprompt-skillRun explicitly requested Autoprompt v2 work through the private controller. Ordinary coding and review requests do not activate this skill.EngineeringReview first★ 1.2K↓ —
- pet-commerce-creatoranbeime/skill自媒体创作者与电商运营在需要批量制作萌宠带货短视频时，使用此技能可自动完成爆款解析、多智能体协同创作脚本分镜，并调用API一键合成15-30秒9:16竖屏成品视频，全流程自动化助力高效涨粉与商品转化。EngineeringNo warnings★ 8.5K↓ —
- baoyu-post-to-wechatanbeime/skill自媒体创作者与运营专员在需要将 Markdown 或 HTML 内容发布至微信公众号时，一键通过 API 或浏览器自动化完成文章与图文的排版及发布，彻底告别繁琐的手动排版与多步上传操作，大幅提升公众号日常发文与运营效率。EngineeringNo warnings★ 8.5K↓ —
- autopromptSpielewoy/autoprompt-skillRun explicitly requested Autoprompt v2 work through the private controller. Ordinary coding and review requests do not activate this skill.EngineeringReview first★ 1.2K↓ —
- create-webrolesmicrosoft/power-platform-skillsCreates and configures web roles for a Power Pages code site. Web roles control access and permissions for site users, including authenticated and anonymous roles. Use when the user wants to create, add, set up, or manage web roles for their site.EngineeringReview first★ 1K↓ —
- add-cloud-flowmicrosoft/power-platform-skillsIntegrates Power Automate cloud flows into a Power Pages site. Lists available flows, suggests relevant ones based on intent, identifies scenarios and web roles, creates metadata files, and generates client-side code to call flows. Handles both new flow registration and adding already-registered flows to additional pages without re-creating metadata. Use when the user wants to add, connect, register, or link a Power Automate cloud flow to their site.EngineeringReview first★ 1K↓ —
- add-ai-webapimicrosoft/power-platform-skillsIntegrates Power Pages generative-AI summarization APIs (PREVIEW) into a Single Page Application (SPA) site — the Search Summary API and the Data Summarization API — on any record-detail or list page. Generates per-target service code (CSRF-handled) and AI site settings; delegates Web API settings, table permissions, and web roles to `/integrate-webapi` and `/create-webroles`. Use whenever a user wants AI/Copilot output that condenses Dataverse content on a Power Pages site — an AI summary, AI-generated overview or "key insights" across a record or list, a search-results summary, a case/incident summary, or recommendation-chip refinement — even when phrased as "AI-generated paragraph", "insights", or "overview". Do NOT use for: generative pages in model-driven apps (use the model-apps `genpage` skill), Copilot Studio agents/chatbots, summarizing documents or PDFs, Power BI dashboards, plain keyword search with no AI summary, or plain Dataverse CRUD (use `/integrate-webapi`).EngineeringReview first★ 1K↓ —
- openserv-clientinternet-court/internet-court-skillComplete guide to using @openserv-labs/client for managing agents, workflows, triggers, and tasks on the OpenServ Platform. Covers provisioning, authentication, x402 payments, ERC-8004 on-chain identity, and the full Platform API. IMPORTANT - Always read the companion skill openserv-agent-sdk alongside this skill, as both packages are required to build any agent. Read reference.md for the full API reference.EngineeringNo warnings★ 6.9K↓ —
- openserv-ideaboard-apiinternet-court/internet-court-skillQuick-start guide and API overview for the OpenServ Ideaboard - a platform where AI agents can submit ideas, pick up work, collaborate with multiple agents, and deliver x402 payable services. Use when interacting with the Ideaboard or building agents that find and ship ideas. Read reference.md for the full API reference. Read openserv-agent-sdk and openserv-client for building and running agents.EngineeringNo warnings★ 6.9K↓ —
- peer-reviewbrycewang-stanford/Auto-Empirical-Research-SkillsSystematic peer review toolkit. Evaluate methodology, statistics, design, reproducibility, ethics, figure integrity, reporting standards, for manuscript and grant review across disciplines.EngineeringReview first★ 4.7K↓ —
- kubesphere-gateway-apikubesphere/kubesphereKubeSphere Gateway API extension management Skill (Traefik based, uses Kubernetes Gateway API + GatewayProxy CRD gatewayapi.kubesphere.io/v1alpha1). This is the newer Kubernetes Gateway API standard. For the older Ingress API based gateway (ingress-nginx + Gateway CRD gateway.kubesphere.io/v2alpha2), see the kubesphere-gateway skill instead. Covers installation, uninstallation, status checks, GatewayProxy status inspection, and troubleshooting.EngineeringNo warnings★ 17.1K↓ —
- batch-api-orchestratorborghei/Claude-SkillsThis skill should be used when the user asks to "batch LLM requests", "should I use the batch API", "estimate batch vs realtime cost", "design a bulk LLM job", or "process thousands of prompts cheaply".EngineeringNo warnings★ 962↓ —
scan-code
microsoft/power-platform-skills
EngineeringUpdated 2 hours ago
From the author
Scans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependency scanning, then surfaces findings by category (code patterns, vulnerable packages, secrets, license issues). Use when the user wants to review code for security problems, check for vulnerable packages, find hard-coded secrets, run a code scan, or asks "is my code safe?", "check my dependencies", "find security issues in my source" — even if they say "audit my code" without mentioning specific tools.
Install
npx skills add microsoft/power-platform-skills --skill scan-code -a claude-code
Installs to .claude/skills/scan-code/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Contains hidden text (invisible characters, long comments or encoded blobs)Medium
- Ships scripts we have not reviewedLow
Why 78
Security75
Provenance76
Maintenance100
Licence100
Adoption49
Files (6)
- SKILL.md
- references/commands.md
- scripts/check-tools.js
- scripts/run-opengrep.js
- scripts/run-trivy.js
- scripts/transform-scan-code.js