Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 1 hour ago
10,066 skills
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 837↓ —
- kubesphere-network-extension-operationskubesphere/kubesphereOperate the KubeSphere network extension. Use when Codex needs to install, upgrade, configure, enable, disable, or inspect the `network` extension; manage Calico `IPPool` resources, namespace bindings, migrations, or network isolation flows; or consult the bundled network extension references in this skill.OtherNo warnings★ 17.1K↓ —
- schreibcanvasThomasMoreAI/legal-skills-openFür Schreib-Canvas: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 336↓ —
- runbook-creationBagelHole/DevOps-Security-Agent-SkillsCreate operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.OtherNo warnings★ 1.2K↓ —
- disk-cleanupmoonlight-lupin/agent-skillsUse when df says disk is above 80% full or the user wants to reclaim storage space on a VM.OtherNo warnings★ 113↓ —
- kaltstart-3ThomasMoreAI/legal-skills-openFür Deal-Kaltstart: routet Rolle, Frist, Unterlagen und Fachschritt; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Mittelstands-Corporate/M&A.OtherNo warnings★ 95↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- object-storageBagelHole/DevOps-Security-Agent-SkillsConfigure object storage with S3, GCS, and MinIO. Implement lifecycle policies and access controls. Use when managing object storage.OtherNo warnings★ 1.2K↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- hand-painted-stylearjun988/blender-skillsHand-painted texture art direction for Blender with brushwork albedo, soft value transitions, and stylized PBR restraint.OtherNo warnings★ 1.2K↓ —Also in 1 other repo
- fangpian-brand-kitYiShu5/claude-skills方片新媒体（FANG PIAN / 方片，含方片母婴、方片时尚、方片家居等子品牌）官方品牌视觉规范与素材库。当需要为方片制作或修改任何视觉物料时使用——海报、小红书封面、PPT/幻灯片、公众号头图、数字人/短视频包装、头像、Banner、易拉宝、灯箱、水印、邀请函、培训课件等；也用于判断该用哪个 logo、配色、字体、IP 老虎姿势和部门海报模板，或需要统一品牌视觉、检查成品是否符合品牌规范时。目标是让所有 AI 产出的物料开箱即符合方片品牌识别，不再每次重做。OtherNo warnings★ 131↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- california-sc100-formcxcscmu/SkillLearnBenchUnderstand the structure and fields of the California Small Claims Court Form SC-100OtherNo warnings★ 91↓ —
- thinking-dhhaAAaqwq/AGI-Super-TeamDHH's thinking framework — convention over configuration, ship fast, perfect is the enemyOtherNo warnings★ 111↓ —
- chatbot-messaging-expertroedyrustam/vibes-plugExpert guide for chatbot and messaging platform integration (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) and conversational AI / Panduan ahli integrasi chatbot dan platform messaging (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) dan AI percakapan.OtherNo warnings★ 115↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- ssl-tls-managementBagelHole/DevOps-Security-Agent-SkillsManage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.OtherNo warnings★ 1.2K↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
disk-cleanup
moonlight-lupin/agent-skills
OtherUpdated 20 hours ago
From the author
Use when df says disk is above 80% full or the user wants to reclaim storage space on a VM.
Install
npx skills add moonlight-lupin/agent-skills --skill disk-cleanup -a claude-code
Installs to .claude/skills/disk-cleanup/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance65
Maintenance100
Licence100
Adoption35
Files (2)
- SKILL.md
- evals/routing-fixtures.json