Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 2 hours ago
10,031 skills
- pm-aarrrkonglong87/superPMUse when: 产品上线后需要分析用户增长、制定增长策略、诊断产品健康度、优化AARRR各环节 Do NOT use when: 产品未上线、仅需单一指标分析无需全链路OtherNo warnings★ 84↓ —
- thinking-budget-orchestratorUpdatedroedyrustam/vibes-plugDynamic thinking budget orchestrator across late-2026 frontier models / Alokasi budget penalaran dinamis pada model frontier 2026.OtherNo warnings★ 115↓ —
- computer-use-os-agent-expertNewroedyrustam/vibes-plugComputer-using agents (CUA), desktop GUI automation, and VM sandbox / Agen CUA pengguna komputer, otomasi GUI desktop, dan sandbox VM.OtherNo warnings★ 115↓ —
- fuzzy-fund-searchcxcscmu/SkillLearnBenchFuzzy search SEC 13-F COVERPAGE.tsv to find fund names and accession numbers by approximate name matching.OtherNo warnings★ 91↓ —
- flow-designerserac-labs/seracBuild ServiceNow Flow Designer flows via the dedicated tool — triggers, IF/ELSE/TRY/CATCH placement rules, subflows, script actions with inputs/outputs, and REST step configuration. Never use background scripts on sys_hub_* tables.OtherNo warnings★ 78↓ —
- bounded-engine-runsSummerEngine/summerRun Summer headless or offscreen safely: time limits, one engine per project, import passes, crash checks.OtherNo warnings★ 88↓ —Also in 1 other repo
- authentication-identity-expertUpdatedroedyrustam/vibes-plugAuthentication, authorization (RBAC/ABAC), OAuth2, Clerk, and Auth.js / Autentikasi, otorisasi (RBAC/ABAC), OAuth2, Clerk, dan Auth.js.OtherNo warnings★ 115↓ —
- lueckenThomasMoreAI/legal-skills-openFür Aufsichtsrechtlichen Gap-Tracker führen: ordnet Akte, Belege und Lücken; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- neuheit-pruefenThomasMoreAI/legal-skills-openFür neuheit-prüfen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Schnittstellenkarte mit Zuständigkeits- und Nachweisfragen.OtherNo warnings★ 95↓ —
- domain-separationserac-labs/seracConfigure ServiceNow multi-tenant domain separation — domain hierarchy, sys_user_has_domain membership, domain-aware vs cross-domain queries, MSP tenant onboarding, and domain picker logic.OtherNo warnings★ 78↓ —
- bom-diaThomasMoreAI/legal-skills-openO cockpit da manhã do advogado brasileiro. Um comando: puxa as intimações novas do DJEN pela sua OAB, checa se houve movimentação nova nos processos que você acompanha (DataJud), calcula os prazos em dias úteis (CPC art. 219) e entrega o resumo priorizado do dia — o que vence hoje, o que vence esta semana, o que só é ciência — com a peça que cada prazo exige e a oferta de já minutar. Requer os conectores DJEN e DataJud (`connectors/`). Não dá ciência nem protocola — só surface e calcula.OtherNo warnings★ 95↓ —
- anpassenThomasMoreAI/legal-skills-openFür Praxisprofil anpassen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Gesellschaftsrecht.OtherNo warnings★ 95↓ —
- oncall-schedulingserac-labs/seracRead and change ServiceNow on-call rotations — the cmn_rota → cmn_rota_roster → cmn_rota_member chain, how "who is on call right now" is resolved from a member window plus the schedule's time zone, and how escalation from an incident reaches it.OtherNo warnings★ 78↓ —
- convex-optimizationparcadei/Continuous-Claude-v3Problem-solving strategies for convex optimization in optimizationOtherNo warnings★ 3.9K↓ —
- open-ladenpreisThomasMoreAI/legal-skills-openFür Verl-008 · Open Access, Creative Commons und Verlagspolitik: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- affective-computing-emotion-aiUpdatedroedyrustam/vibes-plugAffective computing, emotion AI, and multimodal sentiment analysis / Komputasi afektif, AI emosional, dan analisis sentimen multimodal.OtherNo warnings★ 115↓ —
- self-healing-cloud-orchestratorUpdatedroedyrustam/vibes-plugReal-time log monitoring, crash detection, and auto-hotfixing / Pemantauan log real-time, deteksi crash, dan auto-hotfix kode.OtherNo warnings★ 115↓ —
- pillow-grayscalecxcscmu/SkillLearnBenchConvert images to grayscale in-place using Pillow (PIL), overwriting original RGB files.OtherNo warnings★ 91↓ —
- markenanmeldungThomasMoreAI/legal-skills-openFür Markenanmeldung beim DPMA oder EUIPO vorbereiten und stratgisch gestalten: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- cartaThomasMoreAI/legal-skills-openRedacta correspondencia rutinaria de la clínica jurídica: citaciones, solicitudes de documentos, actualizaciones de estado del asunto. Toda carta requiere revisión y aprobación del supervisor antes del envío. Usar cuando el usuario dice "carta al cliente", "citación", "pide documentos", "actualización", o necesita comunicarse con el cliente por escrito.OtherNo warnings★ 95↓ —
- kaltstartThomasMoreAI/legal-skills-openFür Deal-Kaltstart: routet Rolle, Frist, Unterlagen und Fachschritt; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Großkanzlei Corporate/M&A.OtherNo warnings★ 95↓ —
- pm-okrkonglong87/superPMUse when: 需要制定 OKR（目标与关键结果）、拆解公司/产品级目标、做目标对齐与 cascading、设定复盘节奏 Do NOT use when: 仅需简单待办清单（用 pm-iteration）；目标已由上级完全锁定且无需拆解OtherNo warnings★ 84↓ —
- nextjs-app-router-expertUpdatedroedyrustam/vibes-plugNext.js 15 App Router: RSC, Server Actions, PPR, and caching / Panduan Next.js 15 App Router: RSC, Server Actions, PPR, dan cache.OtherNo warnings★ 115↓ —
- ctf-pwn26zl/cybersec-toolkitUse when solving binary exploitation / pwn CTF challenges — buffer overflows, ROP, format strings, heap, kernel pwn. Provides a decision tree, exploit primitive catalog, and uses pwntools via the run_script(venv="pwntools") MCP path. Triggers on "ctf pwn", "binary exploit", "rop", "buffer overflow", "format string", "heap challenge".OtherNo warnings★ 84↓ —
bounty-mobile
26zl/cybersec-toolkit
OtherUpdated yesterday
From the author
Use when bug-bountying an Android (APK) or iOS (IPA) app. Covers static + dynamic analysis, Frida hooking, certificate pinning bypass, deep link / intent abuse, IPC, secrets in bundles. Triggers on "bounty mobile", "android app", "ios app", "apk analysis", "frida".
Install
npx skills add 26zl/cybersec-toolkit --skill bounty-mobile -a claude-code
Installs to .claude/skills/bounty-mobile/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance63
Maintenance100
Licence100
Adoption33
Files (1)
- SKILL.md