Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,966 skills from 2,309 repositories · updated 1 hour ago
10,104 skills
- website-operating-rulesTheGoat395/Codex-SkillsCoordinate cross-phase web execution/evidence.OtherNo warnings★ 135↓ —
- bmad-gammaalvin-reyes/better-agentic-ideA fixture skill with every path defect. Use when a golden needs findings.OtherNo warnings★ 85↓ —
- ai-sre-incident-responseBagelHole/DevOps-Security-Agent-SkillsBuild AI-focused SRE incident response practices for LLM outages, degraded quality, runaway cost events, and safety regressions.OtherNo warnings★ 1.2K↓ —
- logical-thinkingTheGoat395/Codex-SkillsDetermine what premises and evidence warrant.OtherNo warnings★ 135↓ —
- prompt-optimizerTestAny-io/testany-agent-skills撰写提示词、优化提示词、改写 Prompt、Prompt 优化。Use when: 用户需要创建或修改可执行提示词；按任务、调用方输出契约与实际工具能力优化，不按模型品牌强制格式。OtherNo warnings★ 82↓ —
- ai-red-teamingBagelHole/DevOps-Security-Agent-SkillsRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.OtherNo warnings★ 1.2K↓ —
- mcdonaldsLemon177777/mcd-omni-assistant麦当劳中国官方 MCP 全能助手。当用户提到麦当劳、麦乐送、开心乐园餐、麦麦省优惠券、领券、点麦当劳、外送到家、得来速、麦当劳积分、积分抽奖、积分商城兑换、麦当劳餐品热量/营养、麦当劳订单查询或取消、麦当劳周边玩具与活动时使用。覆盖官方 35 个工具的全部能力，内置领券、到店点餐、外送、玩具雷达、积分抽奖、热量计算、优惠计算器七大工作流。OtherNo warnings★ 99↓ —
- d3-interactive-tablecxcscmu/SkillLearnBenchBuild a sortable, highlightable HTML data table linked to a D3 chart so clicking a chart element highlights the matching table row and vice versa.OtherNo warnings★ 91↓ —
- otel-rubyollygarden/opentelemetry-agent-skillsOpenTelemetry in Ruby — SDK setup, manual tracing, experimental metrics and logs, Bundler integration, contrib instrumentation for Rails/Rack/Sinatra/Sidekiq and other gems, propagation, performance, and upgrades. Use when adding, reviewing, configuring, or troubleshooting OpenTelemetry in a Ruby or Rails service. Triggers on "setup otel in ruby", "ruby telemetry", "Rails OpenTelemetry", "OpenTelemetry::SDK.configure", "opentelemetry-instrumentation-all", "Ruby tracing", "Rack otel", "Sidekiq otel", or any Ruby-related OTel question.OtherNo warnings★ 119↓ —
- claude-md-templateclaude-world/director-mode-liteGenerate CLAUDE.md template for current projectOtherNo warnings★ 80↓ —
- js-backend-expertroedyrustam/vibes-plugExpert-level skill for Node.js 24+ (LTS), Bun 1.2+, and Deno 2.x backend development. Covers Express 5, Fastify 5, Hono v4, NestJS, Prisma 6, Drizzle ORM, WebSockets, BullMQ, OpenTelemetry, and microservices in English and Indonesian.OtherNo warnings★ 116↓ —
- proof-theoryparcadei/Continuous-Claude-v3Problem-solving strategies for proof theory in mathematical logicOtherNo warnings★ 3.9K↓ —
- seekter-runselfishprimate/seekterRun a daily job search and auto-apply session for the candidate in profile/profile.md. Use when the user runs /seekter-run or asks to start applications, search for jobs, run today's scan, or apply to postings.OtherNo warnings★ 79↓ —
- global-a11y-i18n-expertroedyrustam/vibes-plugWeb accessibility (WCAG) and internationalization (i18n) / Aksesibilitas web (WCAG) dan internasionalisasi (i18n).OtherNo warnings★ 116↓ —
- sec-13f-analysiscxcscmu/SkillLearnBenchParse and analyze SEC 13-F filing TSV datasets to extract AUM, holdings count, and fund details by accession number.OtherNo warnings★ 91↓ —
- claude-md-checkclaude-world/director-mode-liteValidate CLAUDE.md structure and completenessOtherNo warnings★ 80↓ —
- performance-web-vitalsroedyrustam/vibes-plugWeb performance optimization: Core Web Vitals (LCP, INP, CLS) / Optimasi performa web dan metrik Core Web Vitals (LCP, INP, CLS).OtherNo warnings★ 116↓ —
- codex-backgroundamElnagdy/delegate-skillsKeep a Codex orchestrator's delegation to an installed delegate skill pending until its registered relay completes, without model-driven progress polling. Use with a selected implementer delegate skill when Codex is the orchestrator and the delegation should wait in the background; sets up its MCP server on first use.OtherNo warnings★ 2.5K↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- deinstallierenThomasMoreAI/legal-skills-openFür Deinstallation: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- helios-studioBintzGavin/heliosStudio tool for developing and previewing Helios compositions. Use when you want to launch the interactive development environment or manage assets.OtherNo warnings★ 123↓ —
- limits-colimitsparcadei/Continuous-Claude-v3Problem-solving strategies for limits colimits in category theoryOtherNo warnings★ 3.9K↓ —
- output-versandThomasMoreAI/legal-skills-openFür Output und Versandsteuerung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- testany-workspaceTestAny-io/testany-agent-skills管理 Testany 工作空间 - 成员管理、权限配置、团队组织OtherNo warnings★ 82↓ —
hunt-upload
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
File upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-upload -a claude-code
Installs to .claude/skills/hunt-upload/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md