Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,294 skills from 2,272 repositories · updated 22 minutes ago
10,064 skills
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 336↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- box-automationaAAaqwq/AGI-Super-TeamAutomate Box cloud storage operations including file upload/download, search, folder management, sharing, collaborations, and metadata queries via Rube MCP (Composio). Always search tools first for current schemas.OtherNo warnings★ 111↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- preisangabenThomasMoreAI/legal-skills-openFür Preisangaben (PAngV 2022): ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- bgbThomasMoreAI/legal-skills-openFür BGB: Verhandlung, Vergleich und Eskalation: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Betreuungsrecht. Route: bgb.OtherNo warnings★ 95↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- rss-automationaAAaqwq/AGI-Super-TeamRSS feed aggregation and monitoring. Parse RSS/Atom feeds, filter entries, track new items, and integrate with notification channels for automated content monitoring.OtherNo warnings★ 111↓ —
- 13f-analysiscxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- plazosThomasMoreAI/legal-skills-openTracker de plazos procesales y extraprocesales para la clínica jurídica. Permite añadir, actualizar y cerrar plazos con alertas de proximidad. Incluye advertencias de responsabilidad profesional por preclusión. Usar cuando el usuario dice "añadir plazo", "plazos pendientes", "vence algo?", "tracker", "calendario de plazos", o necesita gestionar los plazos de los asuntos de la clínica.OtherNo warnings★ 95↓ —
- clearance-zhou210712ThomasMoreAI/legal-skills-open商标清除初步检索——排除性筛查+近似商标查询，产出标注清单而非清除法律意见。当新商标 被提出、被询问某商标是否可用或需要进行排除检索、或在完整专业检索前评估混淆可能性因素 时使用。本技能绝不作出商标无冲突的结论。OtherNo warnings★ 95↓ —
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 837↓ —
- takedown-bossmann007ThomasMoreAI/legal-skills-openDraft a notificação de retirada de conteúdo (Marco Civil), triage one you received, or draft a resposta/contranotificação. Use when asserting copyright under Lei 9.610/1998 through a Marco Civil notice with the fair-use-analog and good-faith gates, when an incoming notice needs triage into comply / contest / engage / ignore options, or when drafting a response with the litigation-risk gate. Marco Civil art. 19/21 first; DMCA is a gated US-provider fallback.OtherNo warnings★ 95↓ —
- agioThomasMoreAI/legal-skills-openFür Agio und Kapitalerhöhungsstruktur in der Corporate-Praxis: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Corporate-Kanzlei. Route: agio.OtherNo warnings★ 95↓ —
- deal-osThomasMoreAI/legal-skills-openFür Deal-OS Orchestrator: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- stcdaimonia-ai/STC-Simplified-Technical-ChineseSTC（Simplified Technical Chinese，简明技术性中文）：写、改写或审阅自然、简短、准确的中文。用户要求中文审阅、精简表达、删除多余说明、统一术语或整理任务回执时使用。项目启用 STC 默认输出规则时，中文输出均适用。OtherNo warnings★ 112↓ —
- 示例分章JimLiu/baocut测试用的 craft：分章节。OtherNo warnings★ 1.6K↓ —
- ai-inference-service-meshBagelHole/DevOps-Security-Agent-SkillsUse service mesh patterns for AI inference traffic management, mTLS, canary releases, policy enforcement, and cross-cluster resilience.OtherNo warnings★ 1.2K↓ —
object-storage
BagelHole/DevOps-Security-Agent-Skills
OtherUpdated May 22, 2026
From the author
Configure object storage with S3, GCS, and MinIO. Implement lifecycle policies and access controls. Use when managing object storage.
Install
npx skills add BagelHole/DevOps-Security-Agent-Skills --skill object-storage -a claude-code
Installs to .claude/skills/object-storage/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance77
Maintenance70
Licence100
Adoption50
Files (1)
- SKILL.md