Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,100 skills from 2,198 repositories · updated 8 hours ago
9,541 skills
- bonusThomasMoreAI/legal-skills-openFür Bonus und leistungsbezogene Vergütung im Handelsvertretervertrag: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 96↓ —
- alterlab-snaAlterLab-IEU/AlterLab-Academic-SkillsApplies social-network-analysis method discipline to relational data — degree/betweenness/closeness/eigenvector centrality and PageRank, community detection (Louvain, greedy-modularity, and — from networkx 3.7 — Leiden native in networkx; igraph/leidenalg for large graphs), and inferential network models (ERGM) — choosing the measure that matches the substantive question and the right dependence assumptions, then routing computation to the existing networkx (and igraph/R) tooling. Use when the request mentions social network analysis, centrality, key players/brokerage, community or cluster detection in a network, ERGM, or modeling ties between nodes. For general graph algorithms and plotting prefer alterlab-networkx; for graph neural networks prefer alterlab-torch-geometric. Part of the AlterLab Academic Skills suite.OtherNo warnings★ 78↓ —
- glm-calibrationcxcscmu/SkillLearnBenchCalibrating GLM parameters (Kw, coef_mix_hyp, wind_factor, lw_factor, ch) to minimize RMSE against field observations.OtherNo warnings★ 91↓ —
- simpo-losscxcscmu/SkillLearnBenchGuide on understanding and implementing the SimPO (Simple Preference Optimization) loss function for language models.OtherNo warnings★ 91↓ —
- 06-positioninggilgameshcc/ai-native-jobhunt一套写给 agent 读的求职方法论。不是投递脚本，是每个决策点上的判断纪律。OtherNo warnings★ 105↓ —
- bounty-recon26zl/cybersec-toolkitUse at the start of a bug bounty engagement. Provides scope-aware recon methodology — passive enumeration, subdomain discovery, asset attribution, tech stack fingerprinting, content discovery. Respects scope and program rules. Triggers on "bounty recon", "subdomain enum", "attack surface map", "h1 recon", "bug bounty start".OtherNo warnings★ 85↓ —
- 02-applygilgameshcc/ai-native-jobhunt一套写给 agent 读的求职方法论。不是投递脚本，是每个决策点上的判断纪律。OtherNo warnings★ 105↓ —
- pillow-grayscalecxcscmu/SkillLearnBenchConvert images to grayscale in-place using Pillow (PIL), overwriting original RGB files.OtherNo warnings★ 91↓ —
- cp-skill-validatezby/commonplaceRun deterministic validation on KB artifacts, collections, collection landings, and the published redirect map, including schemas, links, required sections, and batch signals.OtherNo warnings★ 92↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- glm-runnercxcscmu/SkillLearnBenchA skill to execute the GLM binary and manage its simulation output.OtherNo warnings★ 91↓ —
- orientierungThomasMoreAI/legal-skills-openOrdnet steuerrechtliche Mandate nach Steuerart, Verfahrensstand und Frist, weist die aktuellen Fachanwaltsanforderungen aus und führt zum passenden Prüf- oder Entwurfsworkflow.OtherNo warnings★ 96↓ —
- module-scaffold26zl/cybersec-toolkitUse when creating a brand new module file in modules/ for a new tool category. Generates the boilerplate with correct array prefix, install_module_<name>() function, and ensures it integrates with install.sh, profiles, and MCP server. Triggers on "new module", "add a module for X", "scaffold module".OtherNo warnings★ 85↓ —
- run3_skill-1cxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- data-visualization-expertroedyrustam/vibes-plugExpert guide for data visualization, charts, and dashboards using D3.js, Recharts, Chart.js, Nivo, and Tremor / Panduan ahli visualisasi data, chart, dan dashboard menggunakan D3.js, Recharts, Chart.js, Nivo, dan Tremor.OtherNo warnings★ 115↓ —
- support-ticket-triagecomposio-community/awesome-codex-skillsTriage customer support tickets/emails/chats into categories, priority, and next action; draft responses and create reproducible steps; use for Zendesk/Intercom/Help Scout exports or pasted threads.OtherNo warnings★ 17.1K↓ —
- ca-small-claimscxcscmu/SkillLearnBenchCalifornia Small Claims Court SC-100 form field mapping and filling guide. Use this skill when filling out California SC-100 Plaintiff's Claim forms, understanding small claims court procedures, or mapping case details to SC-100 form fields.OtherNo warnings★ 91↓ —
- gsap-performanceTheGoat395/Codex-SkillsDiagnose GSAP and ScrollTrigger performance.OtherNo warnings★ 135↓ —
- kubesphere-extension-managementkubesphere/kubesphereKubeSphere extension management Skill. Use when user requests to install, configure, upgrade, uninstall extensions, or query extension info/troubleshoot issues. Includes extension discovery, dependency management, install configuration, version management.OtherNo warnings★ 17.1K↓ —
- passkeys-webauthn-identity-expertNewroedyrustam/vibes-plugFIDO2 / WebAuthn Passkeys, SimpleWebAuthn, and passwordless auth / Autentikasi tanpa kata sandi Passkeys FIDO2 dan SimpleWebAuthn.OtherNo warnings★ 115↓ —
- slogan-markeThomasMoreAI/legal-skills-openFür Slogan-Marken für Luxus-Mode: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 96↓ —
- bug-fix-briefgiuseppe-trisciuoglio/developer-kitGenerates a structured Bug Fix Brief (BFB) to document issue corrections. Includes root cause analysis, repro steps, fix options, and fix checklist. Use when user asks to create a BFB, document a bug fix, or generate a bug correction document.OtherNo warnings★ 366↓ —
- global-a11y-i18n-expertroedyrustam/vibes-plugExpert guide for Web Accessibility (WCAG a11y) and Internationalization (i18n) / Panduan ahli untuk Aksesibilitas Web dan Internasionalisasi.OtherNo warnings★ 115↓ —
- self-healing-cloud-orchestratorroedyrustam/vibes-plugReal-time log monitoring, crash detection, and auto-hotfixing / Pemantauan log real-time, deteksi crash, dan auto-hotfix kode.OtherNo warnings★ 115↓ —
hunt-upload
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
File upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-upload -a claude-code
Installs to .claude/skills/hunt-upload/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md