Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 14 hours ago
10,031 skills
- run2_ca-small-claimscxcscmu/SkillLearnBenchComprehensive field mapping for California SC-100 Small Claims Court form with field IDs and filling guidance.OtherNo warnings★ 91↓ —
- rss-automationaAAaqwq/AGI-Super-TeamRSS feed aggregation and monitoring. Parse RSS/Atom feeds, filter entries, track new items, and integrate with notification channels for automated content monitoring.OtherNo warnings★ 111↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 335↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 335↓ —
- inbox-sweepBevel-Software/HexisBatch-process unread customer emails - classify, prioritize, and draft replies. Use when the user asks "sweep my inbox", "what customer emails need a reply", "draft replies to my customer emails", or "what needs a response".OtherNo warnings★ 120↓ —
- macos-capabilitiesrshankras/claude-code-apple-skillsExpert guidance on macOS platform capabilities. Covers sandboxing, app extensions, menu bar apps, and background execution. Use when implementing system integration features.OtherNo warnings★ 834↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 335↓ —
- press-mediarshankras/claude-code-apple-skillsGet press coverage and media attention for your indie app. Covers press kit preparation, finding journalists/bloggers/YouTubers, pitch timing, embargo strategy, and story angles that get coverage. Use when user wants press coverage, is preparing for a launch, or wants to build a media kit.OtherNo warnings★ 834↓ —
- root-cause-analysisitseffi/agentic-osUncover root causes through recursive Why questioning and consequence exploration. Use before acting on problems.OtherNo warnings★ 117↓ —
- run2_schedulercxcscmu/SkillLearnBenchAn improved scheduling algorithm to find the earliest compatible free slots under time constraints.OtherNo warnings★ 91↓ —
- patent-digestThomasMoreAI/legal-skills-open专利文档智能解析与结构化摘要生成。支持提取基本信息、摘要、权利要求、创新点及技术方案，并输出标准化 Markdown 报告。适用于 OpenClaw、OpenCode、Hermes 等通用 Agent 。OtherNo warnings★ 95↓ —
- bmod-core-toolsalvin-reyes/better-agentic-ideRequired bmod metadata. Never invoke this skill.OtherNo warnings★ 85↓ —Also in 1 other repo
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 834↓ —
- bmod-orphanalvin-reyes/better-agentic-ideBetter Agentic Development EnvironmentOtherNo warnings★ 85↓ —
- agent-ready-personal-agent-protocolfabricioctelles/skillsSub-skill: Implement Personal Agent Protocol (Poppy) discovery. Publish /.well-known/poppy.json (draft 0.1) and validate its OAuth issuer binding. Informational check; does not affect level or score.OtherNo warnings★ 122↓ —
- eeat-auditinhouseseo/superseo-skillsUse when auditing a page for E-E-A-T signals. The agent reads the page and scores Experience, Expertise, Authoritativeness, and Trustworthiness — then tells you exactly what to add to each dimension.OtherNo warnings★ 372↓ —
- box-automationaAAaqwq/AGI-Super-TeamAutomate Box cloud storage operations including file upload/download, search, folder management, sharing, collaborations, and metadata queries via Rube MCP (Composio). Always search tools first for current schemas.OtherNo warnings★ 111↓ —
- example-vueBintzGavin/heliosPatterns for using Helios with Vue. Use when building compositions in a Vue environment.OtherNo warnings★ 123↓ —
- janitor-fixkhendzel/skills-janitorAutomatically fix skill problems (safe preview first). Also use with --prune to find and remove broken symlinks, empty directories, and orphaned skills. Trigger with '/janitor-fix'.OtherNo warnings★ 122↓ —
- bmod-alphaalvin-reyes/better-agentic-ideBetter Agentic Development EnvironmentOtherNo warnings★ 85↓ —
- run2_time-formattingcxcscmu/SkillLearnBenchFormat dates and times with strict adherence to required formatsOtherNo warnings★ 91↓ —
hunt-sqli
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
SQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-sqli -a claude-code
Installs to .claude/skills/hunt-sqli/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md