Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 10 hours ago
10,066 skills
- section-layout-systemsTheGoat395/Codex-SkillsChoose section forms from content shape.OtherNo warnings★ 134↓ —
- discoverkonglong87/superPM专为产品经理设计的 AI工具 Skills技能，一键实现全生命周期的产品管理工作流。skills frame for superPM！OtherNo warnings★ 84↓ —
- hand-painted-stylearjun988/blender-skillsHand-painted texture art direction for Blender with brushwork albedo, soft value transitions, and stylized PBR restraint.OtherNo warnings★ 1.2K↓ —Also in 1 other repo
- radix-accessible-primitivesTheGoat395/Codex-SkillsRepair Radix parts, portals and focus mechanics.OtherNo warnings★ 134↓ —
- chatbot-messaging-expertroedyrustam/vibes-plugChatbots & messaging APIs: WhatsApp Business, Telegram, Discord, Slack / Integrasi chatbot & messaging: WhatsApp, Telegram, Discord, Slack.OtherNo warnings★ 115↓ —
- passkeys-webauthn-identity-expertNewroedyrustam/vibes-plugFIDO2 / WebAuthn Passkeys, SimpleWebAuthn, and passwordless auth / Autentikasi tanpa kata sandi Passkeys FIDO2 dan SimpleWebAuthn.OtherNo warnings★ 115↓ —
- pm-reportkonglong87/superPMUse when: 需要生成数据报告、收集整理用户反馈、进行数据驱动的分析汇报 Do NOT use when: 数据已由BI系统自动生成、无需人工分析OtherNo warnings★ 84↓ —
- press-mediarshankras/claude-code-apple-skillsGet press coverage and media attention for your indie app. Covers press kit preparation, finding journalists/bloggers/YouTubers, pitch timing, embargo strategy, and story angles that get coverage. Use when user wants press coverage, is preparing for a launch, or wants to build a media kit.OtherNo warnings★ 837↓ —
- search-engine-expertroedyrustam/vibes-plugFull-text search engines: Typesense, Meilisearch, and Elasticsearch / Mesin pencarian full-text: Typesense, Meilisearch, Elasticsearch.OtherNo warnings★ 115↓ —
- wiki-arsenalEncod3d-Sec/TORCHFast PARALLEL wiki lookup engine over wiki/techniques + wiki/payloads + wiki/tools + wiki/cheatsheets for a surface/service/vuln-class. Two modes - quick (one qmd search, cheap, fire constantly) and deep (4 parallel subagents, one per area, merged ready-to-use arsenal card, cached). This is the fast path arsenal that `arsenal` delegates to; the hunt-* skills each inline their own qmd_query and can hand off here for a parallel lookup. Use for "what do I use against <surface>", "arsenal for <X>", "deep/full arsenal", "tool + payload + technique + cheatsheet for <X>", "fast wiki lookup", "parallel wiki search", any "how do I attack/exploit <service|vuln-class>" where you want the documented tooling + payloads before hand-rolling.OtherNo warnings★ 336↓ —
- claude-env-setupDesko77/claude-code-skills-1cУстановка и обновление рабочего окружения агента: скилы, правила и команды этого набора плюс связанные инструменты (MCP-серверы, плагин EDT, локальная транскрибация, конвертеры документов, утилиты 1С). Работает и на чистой машине, и на уже настроенной - сначала снимает опись того, что стоит, потом показывает план и ставит ТОЛЬКО выбранное. Используй когда пользователь просит поставить или обновить скилы, настроить окружение с нуля, перенести набор на новую машину, доставить недостающие инструменты, проверить что из окружения отвалилось. Триггеры: установить скилы, настроить окружение, поставить на новой машине, обновить набор, доставить недостающее, что у меня стоит, проверить окружение, перенести конфигурацию агента.OtherNo warnings★ 86↓ —
- crystallizeavelikiy/great_ctoDistils repeating patterns from session logs and lessons.md into draft skill files. Run after ≥10 sessions to extract durable knowledge. Output: draft skills/ files + promotion report.OtherNo warnings★ 108↓ —
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- whizard-telemetry-rulerkubesphere/kubesphereUse when working with WizTelemetry Ruler extension for KubeSphere, including installation, configuration, alerting rules managementOtherNo warnings★ 17.1K↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 837↓ —
- 1c-bsp-commandDesko77/claude-code-skills-1cДобавить команду в дополнительную обработку БСПOtherNo warnings★ 86↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 336↓ —
- whizard-notificationkubesphere/kubesphereUse when working with WizTelemetry Notification extension for KubeSphere, including installation, configuration, troubleshooting, notification channel setup, alert routing, and silence management.OtherNo warnings★ 17.1K↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- adaptive-model-cascaderoedyrustam/vibes-plugModel cascading & complexity-scored routing (Grok, Gemini, Claude) / Routing kaskade model & scoring kompleksitas (Grok, Gemini, Claude).OtherNo warnings★ 115↓ —
prompt-injection-firewall
roedyrustam/vibes-plug
OtherUpdated 2 days ago
From the author
Runtime defenses against prompt injection, jailbreaks, and SSRF / Pertahanan runtime terhadap prompt injection, jailbreak, dan SSRF.
Install
npx skills add roedyrustam/vibes-plug --skill prompt-injection-firewall -a claude-code
Installs to .claude/skills/prompt-injection-firewall/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance65
Maintenance100
Licence100
Adoption36
Files (1)
- SKILL.md