Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 9 hours ago
9,668 skills
- tauri-updaterluochang212/skill-zooUse when adding software auto-update to a Tauri 2 desktop app, or when users ask about tauri-plugin-updater integration, app update checking, distinguishing installer vs portable builds for updates, or generating update manifests for GitHub Releases.OtherNo warnings★ 123↓ —
- app-releaseluochang212/skill-zooUse when the user asks to release a new version, ship a build, or publish a Skill Zoo release. Also use when a tag push results in Homebrew 404 errors or missing artifact failures.OtherNo warnings★ 123↓ —
- janitor-reportkhendzel/skills-janitorFull health check of all your skills in one report. Use when the user wants to check for errors, find duplicates, detect broken skills, or get a complete overview of skill health. Pass --brief for inventory only. Trigger with '/janitor-report'.OtherNo warnings★ 122↓ —
- incident-managementBagelHole/DevOps-Security-Agent-SkillsImplement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.OtherNo warnings★ 1.2K↓ —
- bmod-alphaalvin-reyes/better-agentic-ideBetter Agentic Development EnvironmentOtherNo warnings★ 85↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- gradient-methodsparcadei/Continuous-Claude-v3Problem-solving strategies for gradient methods in optimizationOtherNo warnings★ 3.9K↓ —Also in 1 other repo
- agent-ready-personal-agent-protocolfabricioctelles/skillsSub-skill: Implement Personal Agent Protocol (Poppy) discovery. Publish /.well-known/poppy.json (draft 0.1) and validate its OAuth issuer binding. Informational check; does not affect level or score.OtherNo warnings★ 121↓ —
- runbook-creationBagelHole/DevOps-Security-Agent-SkillsCreate operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.OtherNo warnings★ 1.2K↓ —
- object-storageBagelHole/DevOps-Security-Agent-SkillsConfigure object storage with S3, GCS, and MinIO. Implement lifecycle policies and access controls. Use when managing object storage.OtherNo warnings★ 1.2K↓ —
- bug-fix-briefgiuseppe-trisciuoglio/developer-kitGenerates a structured Bug Fix Brief (BFB) to document issue corrections. Includes root cause analysis, repro steps, fix options, and fix checklist. Use when user asks to create a BFB, document a bug fix, or generate a bug correction document.OtherNo warnings★ 364↓ —
- ssl-tls-managementBagelHole/DevOps-Security-Agent-SkillsManage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.OtherNo warnings★ 1.2K↓ —
- alerting-oncallBagelHole/DevOps-Security-Agent-SkillsSet up alerting rules, configure on-call rotations, and manage incident response workflows. Integrate with PagerDuty, Opsgenie, or Grafana OnCall for alert routing and escalation. Use when implementing alerting strategies and on-call management for production systems.OtherNo warnings★ 1.2K↓ —
- ai-pipeline-orchestrationBagelHole/DevOps-Security-Agent-SkillsOrchestrate AI/ML pipelines for data ingestion, model training, batch inference, and RAG indexing using Prefect, Airflow, or Dagster. Build reliable, observable, and retriable workflows for production AI systems.OtherNo warnings★ 1.2K↓ —
- example-chartjsBintzGavin/heliosChart.js integration patterns for Helios. Use when creating animated data visualizations with Chart.js.OtherNo warnings★ 123↓ —
- document-classifiercxcscmu/SkillLearnBenchLogic for categorizing documents into subjects based on keyword matching.OtherNo warnings★ 91↓ —
- texteThomasMoreAI/legal-skills-openFür Texte: Zahlen, Schwellenwerte und Berechnung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- ai-sre-incident-responseBagelHole/DevOps-Security-Agent-SkillsBuild AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.OtherNo warnings★ 1.2K↓ —
- visualizationrobium-ai/robiumChoose between RViz2, Foxglove, Lichtblick, and Rerun to inspect robot behavior.OtherNo warnings★ 100↓ —
- ai-red-teamingBagelHole/DevOps-Security-Agent-SkillsRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.OtherNo warnings★ 1.2K↓ —
- learning-looprobium-ai/robiumRun Robium's learning cycle when asked or when its session-start reminder is approved: consolidate captured signals, absorb ready guidance, refine skills, and inspect learning status.OtherNo warnings★ 100↓ —
- simulationrobium-ai/robiumChoose between Gazebo, Isaac Sim, and MuJoCo and define what the simulation must prove.OtherNo warnings★ 100↓ —
- skill-creatorfeiskyer/claude-code-settingsCreate, refine, and benchmark agent skills. Use when building a new skill, updating an existing one, running evals, checking trigger quality, or improving a skill description.OtherNo warnings★ 1.7K↓ —
- agent-ready-dns-aidfabricioctelles/skillsSub-skill: Implement DNS-AID records so agents discover endpoints through DNS. Use SVCB/HTTPS records under _agents namespace with alpn and connection parameters.OtherNo warnings★ 121↓ —
hunt-upload
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
File upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-upload -a claude-code
Installs to .claude/skills/hunt-upload/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md