Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 12 hours ago
10,031 skills
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 335↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- decision-journalitseffi/agentic-osCreate structured records of decisions with expected outcomes, probabilities, and quit conditions. Use for important decisions.OtherNo warnings★ 117↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 335↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 335↓ —
- release-change-analyzerArabelaTso/Skills-4-SECompares HEAD with the latest published version to analyze real changes, group by type, and recommend version bumps. Use before publishing a release to understand what actually changed.OtherNo warnings★ 259↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 335↓ —
- huggingface-trlcxcscmu/SkillLearnBenchUsing Hugging Face TRL library for building custom trainers for Preference Optimization methods like DPO, SimPO, etc.OtherNo warnings★ 91↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 335↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 335↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 834↓ —
- manga-full-stackSwotAtmk/infinite-creationAI漫剧全栈技能包：基于19份专业资料整合的AI漫剧全流程制作技能，覆盖分镜提示词（14要素公式）、角色一致性控制（五维框架+参考图锁定+参数固化）、剧本结构设计（三段式+万能故事公式）、多风格体系（3D动漫/古风玄幻/赛博朋克/暗黑悬疑）与50+运镜提示词模板。OtherNo warnings★ 130↓ —
- junior-mentorThomasMoreAI/legal-skills-openFür Junior Mentor Training Loop: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Großkanzlei Corporate/M&A. Route: junior-mentor.OtherNo warnings★ 95↓ —
- agb-abtretungThomasMoreAI/legal-skills-openFür Abtretung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: agb-abtretung.OtherNo warnings★ 95↓ —
- eeat-auditinhouseseo/superseo-skillsUse when auditing a page for E-E-A-T signals. The agent reads the page and scores Experience, Expertise, Authoritativeness, and Trustworthiness — then tells you exactly what to add to each dimension.OtherNo warnings★ 372↓ —
- improve-contentinhouseseo/superseo-skillsUse when rewriting or refreshing an existing page that's underperforming. The agent fetches the URL, analyzes the current content, researches the SERP, and rewrites using the full anti-AI-slop ruleset — no data exports needed.OtherNo warnings★ 372↓ —
- charts-3drshankras/claude-code-apple-skills3D chart visualization with Swift Charts using Chart3D, SurfacePlot, interactive pose control, and surface styling — plus a 2D Swift Charts construction reference (marks, axes, selection, SectorMark, scrollable charts). Use when creating data visualizations with Swift Charts.OtherNo warnings★ 834↓ —
- agent-ready-personal-agent-protocolfabricioctelles/skillsSub-skill: Implement Personal Agent Protocol (Poppy) discovery. Publish /.well-known/poppy.json (draft 0.1) and validate its OAuth issuer binding. Informational check; does not affect level or score.OtherNo warnings★ 122↓ —
- parallel-tool-orchestratorroedyrustam/vibes-plugParallel tool calling, MCP batching, and async subagent fan-out / Eksekusi tool paralel, batching MCP, dan subagent async fan-out.OtherNo warnings★ 115↓ —
- janitor-fixkhendzel/skills-janitorAutomatically fix skill problems (safe preview first). Also use with --prune to find and remove broken symlinks, empty directories, and orphaned skills. Trigger with '/janitor-fix'.OtherNo warnings★ 122↓ —
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 834↓ —
- run2_ca-small-claimscxcscmu/SkillLearnBenchComprehensive field mapping for California SC-100 Small Claims Court form with field IDs and filling guidance.OtherNo warnings★ 91↓ —
hunt-upload
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
File upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-upload -a claude-code
Installs to .claude/skills/hunt-upload/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md