Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 11 hours ago
10,031 skills
- ctf-pwn26zl/cybersec-toolkitUse when solving binary exploitation / pwn CTF challenges — buffer overflows, ROP, format strings, heap, kernel pwn. Provides a decision tree, exploit primitive catalog, and uses pwntools via the run_script(venv="pwntools") MCP path. Triggers on "ctf pwn", "binary exploit", "rop", "buffer overflow", "format string", "heap challenge".OtherNo warnings★ 84↓ —
- rank-evaltonone-ai/tononeBuild ranking evaluation — NDCG/MRR measurement, human relevance labeling, offline eval harness. Use when asked to "measure ranking quality", "compute NDCG for our search", or "set up human relevance labeling".OtherNo warnings★ 76↓ —
- alterlab-umapAlterLab-IEU/AlterLab-Academic-SkillsNonlinear dimensionality reduction with UMAP — fast manifold learning for 2D/3D visualization, clustering preprocessing (e.g., HDBSCAN), and supervised or parametric UMAP. Use when projecting high-dimensional data to low dimensions for visualization, embedding generation, or as a preprocessing step before clustering. Part of the AlterLab Academic Skills suite.OtherNo warnings★ 78↓ —
- edge-recontonone-ai/tononeAudit existing CDN and edge configuration — find cache misses, missing headers, and performance gaps. Use when asked to "audit our CDN", "why is our cache hit rate low", or "find edge config gaps".OtherNo warnings★ 76↓ —
- maui-themingdotnet/skillsGuide for theming .NET MAUI apps — light/dark mode via AppThemeBinding, ResourceDictionary theme switching, DynamicResource bindings, system theme detection, and user theme preferences. Use when: "dark mode", "light mode", "theming", "AppThemeBinding", "theme switching", "ResourceDictionary theme", "dynamic resources", "system theme detection", "color scheme", "app theme", "DynamicResource". Do not use for: localization or language switching (see .NET MAUI localization documentation), accessibility visual adjustments (see .NET MAUI accessibility documentation), app icons or splash screens (see .NET MAUI app icons documentation), or Bootstrap-style class theming (see Plugin.Maui.BootstrapTheme NuGet package).OtherReview first★ 5.7K↓ —
- agent-ready-auth-mdfabricioctelles/skillsSub-skill: Implement Auth.md for agent registration discovery. Serve /auth.md with OAuth metadata at /.well-known/oauth-protected-resource and authorization server endpoints.OtherNo warnings★ 122↓ —
- lodge-dmcatonone-ai/tononeDraft DMCA takedown notice or counter-notice. Use when asked to "file a DMCA takedown", "respond to a DMCA notice", or "draft a counter-notice".OtherNo warnings★ 76↓ —
- exam-forecastThomasMoreAI/legal-skills-openAnalyze past exams from the same professor to surface patterns — subject weighting, recurring issue-spot traps, favored hypo types, policy-vs-doctrine mix — and forecast likely emphases for the upcoming exam. Use when the user says "what's on the exam", "analyze past exams", "predict the exam", or shares past exams.OtherNo warnings★ 95↓ —
- grace-refreshosovv/grace-marketplaceDetect drift between observed repository state and durable GRACE 4 .grace current state, then help create reconciliation changes.OtherNo warnings★ 254↓ —Also in 1 other repo
- pave-recontonone-ai/tononePlatform reconnaissance — inventory all developer tooling, environments, build systems, and developer workflows for project takeover. Use when asked to "understand the dev setup", "developer tooling assessment", "platform assessment", or "how do developers work here".OtherNo warnings★ 76↓ —
- bounty-recon26zl/cybersec-toolkitUse at the start of a bug bounty engagement. Provides scope-aware recon methodology — passive enumeration, subdomain discovery, asset attribution, tech stack fingerprinting, content discovery. Respects scope and program rules. Triggers on "bounty recon", "subdomain enum", "attack surface map", "h1 recon", "bug bounty start".OtherNo warnings★ 84↓ —
- bafoegThomasMoreAI/legal-skills-openFür BAföG: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- go-programming-expertroedyrustam/vibes-plugGo 1.24+ microservices, sqlc, net/http, and concurrency patterns / Pemrograman Go 1.24+, microservices, sqlc, dan pola konkuren.OtherNo warnings★ 115↓ —
- creativityTheGoat395/Codex-SkillsGenerate original ideas or escape fixation.OtherNo warnings★ 133↓ —
- tune-recontonone-ai/tononeAudit existing fine-tuning or prompt engineering work — find quality gaps and optimization opportunities. Use when asked to "audit our fine-tuning work", "find prompt engineering gaps", or "look for optimization opportunities".OtherNo warnings★ 76↓ —
- 06-positioninggilgameshcc/ai-native-jobhunt一套写给 agent 读的求职方法论。不是投递脚本，是每个决策点上的判断纪律。OtherNo warnings★ 103↓ —
- d3-fundamentalscxcscmu/SkillLearnBenchEssential D3.js v6 concepts including selections, scales, SVG basics, and data binding for building interactive visualizationsOtherNo warnings★ 91↓ —
- netcdf-processingcxcscmu/SkillLearnBenchReading, processing, and analyzing NetCDF output from lake simulation modelsOtherNo warnings★ 91↓ —
- llm-wiki-lintKerberosClaw/kc_ai_skillsUse when the user wants to lint a repo following the Karpathy LLM Wiki pattern (raw/ + wiki/ + SCHEMA.md / index.md / log.md). The skill detects path, scans wiki pages + schema layer, reports frontmatter gaps, broken in-body links, source traceability breaks, stale claims, orphan pages, index synopsis contradictions, and SCHEMA-vs-reality drift. Phase 1 is read-only report; Phase 2 (fix + log.md LINT entry) only runs after the user explicitly approves.OtherNo warnings★ 79↓ —
- california-sc100-formcxcscmu/SkillLearnBenchUnderstand the structure and fields of the California Small Claims Court Form SC-100OtherNo warnings★ 91↓ —
- source-verificationHezaoHezao/poirot验证信源可信度的研究过程知识，指导 agent 在涉及事实声明时交叉核验信源OtherNo warnings★ 256↓ —
- 02-applygilgameshcc/ai-native-jobhunt一套写给 agent 读的求职方法论。不是投递脚本，是每个决策点上的判断纪律。OtherNo warnings★ 103↓ —
- greeting-helperclaude-world/claude-skill-antivirusA simple skill that helps with greeting messagesOtherNo warnings★ 80↓ —
- disk-cleanupmoonlight-lupin/agent-skillsUse when df says disk is above 80% full or the user wants to reclaim storage space on a VM.OtherNo warnings★ 112↓ —
spike
HezaoHezao/poirot
OtherUpdated Jul 28, 2026
From the author
Throwaway experiments to validate an idea before build.
Install
npx skills add HezaoHezao/poirot --skill spike -a claude-code
Installs to .claude/skills/spike/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance69
Maintenance85
Licence100
Adoption40
Files (1)
- SKILL.md