Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,966 skills from 2,309 repositories · updated 13 hours ago
10,103 skills
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- bounty-recon26zl/cybersec-toolkitUse at the start of a bug bounty engagement. Provides scope-aware recon methodology — passive enumeration, subdomain discovery, asset attribution, tech stack fingerprinting, content discovery. Respects scope and program rules. Triggers on "bounty recon", "subdomain enum", "attack surface map", "h1 recon", "bug bounty start".OtherNo warnings★ 87↓ —
- traceability-matrixChenxingJi-Innovate/Cheatcode_Skills and tools for your AI apps, added in one click. The open source parts of cheatcodehq.com: Mac installer, package format, skill packs.OtherNo warnings★ 81↓ —
- json-parsercxcscmu/SkillLearnBenchParsing JSON input files for structured data extraction.OtherNo warnings★ 91↓ —
- finop-audittonone-ai/tononeAudit cloud spend — identify waste, rightsizing opportunities, and reservation gaps. Use when asked "our cloud bill is too high", "find cloud waste", or "where can we rightsize".OtherNo warnings★ 77↓ —
- chaos-recontonone-ai/tononeAudit existing resilience — identify untested failure modes and chaos engineering gaps. Use when asked "how resilient are we", "what failure modes are untested", or "find our chaos engineering gaps".OtherNo warnings★ 77↓ —
- audit-agent-surfaceJoviDeCroock/prachtInventory what agents can reach in a pracht app — capability exposure (HTTP, WebMCP, remote MCP), `agents` trust config, the destructive-confirmation gate, `llms.txt`, Markdown negotiation, OpenAPI — and report where the surface is wider than intended, or confirm an opt-out app ships none. Use for "audit the agent surface", "what can agents do on my site", "is my MCP endpoint safe", "did this PR widen what agents can reach".OtherNo warnings★ 105↓ —
- cortex-evaltonone-ai/tononeEvaluate model performance — check for accuracy drops, data drift, and error patterns. Use when asked about "model accuracy dropped", "evaluate the model", "check for drift", or "model performance".OtherNo warnings★ 77↓ —
- ai-safety-governance-expertroedyrustam/vibes-plugAI safety, guardrails (NeMo, Llama Guard), bias audit, EU AI Act / Keamanan AI, guardrail (NeMo, Llama Guard), dan tata kelola AI.OtherNo warnings★ 116↓ —
- finop-recontonone-ai/tononeSurvey existing cloud cost controls — tagging coverage, alerting, and FinOps maturity. Use when asked to "audit our cost controls", "is our tagging complete", or "assess our FinOps maturity".OtherNo warnings★ 77↓ —
- frame-recontonone-ai/tononeSurvey corporate documents — articles, bylaws, cap table, board resolutions. Use when asked to "survey our corporate documents", "check cap table hygiene", or "what governance docs exist".OtherNo warnings★ 77↓ —
- ctf-pwn26zl/cybersec-toolkitUse when solving binary exploitation / pwn CTF challenges — buffer overflows, ROP, format strings, heap, kernel pwn. Provides a decision tree, exploit primitive catalog, and uses pwntools via the run_script(venv="pwntools") MCP path. Triggers on "ctf pwn", "binary exploit", "rop", "buffer overflow", "format string", "heap challenge".OtherNo warnings★ 87↓ —
- batch-organizercxcscmu/SkillLearnBenchEfficiently organizes large numbers of files into directories.OtherNo warnings★ 91↓ —
- parallel-processingcxcscmu/SkillLearnBenchParallel processing with joblib for grid search and batch computations across multiple CPU cores.OtherNo warnings★ 91↓ —
- ralph-ceo-loopaAAaqwq/AGI-Super-Team以持续计划-执行-检查-重试循环驱动项目推进，直到开发、部署与验收目标完成。OtherNo warnings★ 112↓ —
- brief-recontonone-ai/tononeSurvey the project's existing contracts and policy docs. Use when asked "what contracts do we have", "survey our policy docs", or "inventory our agreements".OtherNo warnings★ 77↓ —
- wiki-arsenalEncod3d-Sec/TORCHFast PARALLEL wiki lookup engine over wiki/techniques + wiki/payloads + wiki/tools + wiki/cheatsheets for a surface/service/vuln-class. Two modes - quick (one qmd search, cheap, fire constantly) and deep (4 parallel subagents, one per area, merged ready-to-use arsenal card, cached). This is the fast path arsenal that `arsenal` delegates to; the hunt-* skills each inline their own qmd_query and can hand off here for a parallel lookup. Use for "what do I use against <surface>", "arsenal for <X>", "deep/full arsenal", "tool + payload + technique + cheatsheet for <X>", "fast wiki lookup", "parallel wiki search", any "how do I attack/exploit <service|vuln-class>" where you want the documented tooling + payloads before hand-rolling.OtherNo warnings★ 337↓ —
- warden-iamtonone-ai/tononeBuild IAM from scratch — roles, policies, service accounts with least privilege. Use when asked to "set up IAM", "create roles", "service accounts", or "access control".OtherNo warnings★ 77↓ —
- template-processingcxcscmu/SkillLearnBenchProcess templates with placeholder substitution and conditional sectionsOtherNo warnings★ 91↓ —
- pareto-optimizationcxcscmu/SkillLearnBenchMulti-objective optimization with Pareto frontiers for finding trade-off solutions between conflicting objectives.OtherNo warnings★ 91↓ —
- pruefenThomasMoreAI/legal-skills-openFür Phishing-Vorfall Prüfen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- atlas-recontonone-ai/tononeDocumentation reconnaissance for takeover — find all docs, assess accuracy, freshness, coverage, and discoverability, and identify critical knowledge gaps. Use when asked "what docs exist", "documentation assessment", or "knowledge gaps".OtherNo warnings★ 77↓ —
- drift-recontonone-ai/tononeAudit existing ML monitoring — find gaps in drift coverage and missing alerts. Use when asked to "audit our ML monitoring", "are our models monitored", or "find drift coverage gaps".OtherNo warnings★ 77↓ —
- scope-recontonone-ai/tononeSurvey project IP assets — trademarks, patents, OSS licenses, assignments. Use when asked to "survey our IP assets", "what trademarks do we hold", or "inventory our IP".OtherNo warnings★ 77↓ —