Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,259 skills from 2,272 repositories · updated 15 minutes ago
10,069 skills
- radix-accessible-primitivesTheGoat395/Codex-SkillsRepair Radix parts, portals and focus mechanics.OtherNo warnings★ 134↓ —
- vga-pruefrasterThomasMoreAI/legal-skills-openFür Verdeckte Gewinnausschüttung — Paragraf 8 Abs. 3 S. 2 KStG Prüfraster: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Steuerrecht – Steuerberater und Anwälte. Route: vga-pruefraster.OtherNo warnings★ 95↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 837↓ —
- distributed-loggingproyecto26/system-design-skillsThis skill should be used when the user designs "distributed logging", "log aggregation", "centralized logs", an "ELK" or "EFK" stack, "log shipping", "structured logging", a "correlation ID" or "trace ID" in logs, "log retention", or "high-volume log ingest". It gives the collect → buffer → ship → index → store → retain pipeline, sampling, ordering, and cold-storage tiering. Use it whenever many services emit logs that must be searched in one place under load, even if the user doesn't say "logging pipeline".OtherNo warnings★ 113↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 336↓ —
- guard-audittonone-ai/tononeAudit guardrail coverage — bypass vectors, false positive rates, policy gap analysis, red-team scenarios. Use when asked to "audit our AI guardrails", "can our filters be bypassed", or "check guardrail false positives".OtherNo warnings★ 76↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- ai-red-teamingBagelHole/DevOps-Security-Agent-SkillsRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.OtherNo warnings★ 1.2K↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- mint-runwaytonone-ai/tononeCalculate and extend runway — current cash, burn rate, runway months, and the levers available to extend it. Use when asked to "how long is our runway", "when do we run out of money", or "what cuts extend runway by 6 months".OtherNo warnings★ 76↓ —
- prepare-prompteai-org/agent-toolkitPrepare a prompt that hands this session's work to a fresh agent session — to continue it, check it, or pick up what was left open. Use when asked for a prompt or brief for the next session.OtherNo warnings★ 76↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- ratThomasMoreAI/legal-skills-openCrea o actualiza el Registro de Actividades de Tratamiento (RAT) conforme al art. 30 del RGPD, en el formato recomendado por la AEPD. Genera una ficha por cada actividad de tratamiento con todos los campos obligatorios. Usar cuando el usuario dice "registro de actividades", "RAT", "crea una ficha de tratamiento", "actualiza el registro", o necesita documentar tratamientos de datos personales.OtherNo warnings★ 95↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- skill-creatorfeiskyer/claude-code-settingsCreate, refine, and benchmark agent skills. Use when building a new skill, updating an existing one, running evals, checking trigger quality, or improving a skill description.OtherNo warnings★ 1.7K↓ —
- monte-carlo-proactive-monitoringmonte-carlo-data/mc-agent-toolkitGuide users from coverage analysis to monitor creation. USE WHEN user asks what should I monitor, where are my gaps, improve coverage, or wants a systematic approach to monitoring across their data estate.OtherNo warnings★ 93↓ —
- grace-setup-subagentsosovv/grace-marketplaceCreate GRACE 4 worker and reviewer subagent presets that understand .grace artifacts, scopes, assertions, and verification evidence.OtherNo warnings★ 256↓ —Also in 1 other repo
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 837↓ —
- agent-ready-dns-aidfabricioctelles/skillsSub-skill: Implement DNS-AID records so agents discover endpoints through DNS. Use SVCB/HTTPS records under _agents namespace with alpn and connection parameters.OtherNo warnings★ 123↓ —
vendor-due
ThomasMoreAI/legal-skills-open
OtherUpdated Oct 12, 2026
From the author
Für Vendor Due Diligence VDD: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
Install
npx skills add ThomasMoreAI/legal-skills-open --skill vendor-due -a claude-code
Installs to .claude/skills/vendor-due/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance64
Maintenance100
Licence100
Adoption34
Files (3)
- SKILL.md
- references/quellenhygiene.md
- references/zitierweise.md