Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 14 hours ago
10,066 skills
- dengguang-zhaoming-bikeng-zhinanzx029w/zhuangxiu-skills灯光照明避坑指南专用 Skill。覆盖无主灯设计、灯带与氛围光、主灯与吸顶灯、色温显色与选灯、分区照明、灯光综合等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的灯光照明避坑。OtherNo warnings★ 86↓ —
- crystallizeavelikiy/great_ctoDistils repeating patterns from session logs and lessons.md into draft skill files. Run after ≥10 sessions to extract durable knowledge. Output: draft skills/ files + promotion report.OtherNo warnings★ 108↓ —
- netcdf-processingcxcscmu/SkillLearnBenchReading, processing, and analyzing NetCDF output from lake simulation modelsOtherNo warnings★ 91↓ —
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 837↓ —
- meeting-request-parsingcxcscmu/SkillLearnBenchParse meeting request emails from JSON format and extract duration and time constraintsOtherNo warnings★ 91↓ —
- jingzhuangxiu-gaizao-bikeng-zhinanzx029w/zhuangxiu-skills精装修改造避坑指南专用 Skill。覆盖老房旧房改造、厨房卫生间改造、墙地面翻新、拆改项目与顺序、预算报价与维权、精装修微改等全流程，倒序整合西安装修课堂会员版知识库精华，帮用户装出更省心、不踩坑的精装修改造避坑。OtherNo warnings★ 86↓ —
- sign-receiptrunxhq/runxBind an off-runtime action claim to opaque evidence locators in a signed Runx receipt without pretending Runx verified the external action.OtherNo warnings★ 104↓ —
- kubesphere-fluidkubesphere/kubesphereKubeSphere Fluid management Skill. Use when user asks to install or enable Fluid, check Fluid status, view Fluid pods/logs/CRDs, create or update Dataset, AlluxioRuntime, JuiceFSRuntime, or ThinRuntime, perform DataLoad or cache warming, scale runtime, or troubleshoot Fluid issues in KubeSphere.OtherNo warnings★ 17.1K↓ —
- d3-color-legendcxcscmu/SkillLearnBenchAdd a categorical color legend to a D3 chart using colored rectangles or circles with text labels, supporting both SVG-inline and HTML overlay styles.OtherNo warnings★ 91↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 336↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- california-sc100-formcxcscmu/SkillLearnBenchUnderstand the structure and fields of the California Small Claims Court Form SC-100OtherNo warnings★ 91↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- disk-cleanupmoonlight-lupin/agent-skillsUse when df says disk is above 80% full or the user wants to reclaim storage space on a VM.OtherNo warnings★ 113↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- limits-colimitsparcadei/Continuous-Claude-v3Problem-solving strategies for limits colimits in category theoryOtherNo warnings★ 3.9K↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- simpo-losscxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- add-leadaAAaqwq/AGI-Super-TeamAdd company/person/relationship to CRMOtherNo warnings★ 111↓ —
- aldescriptionpaleo/alignfirstExecute the AlignFirst description protocol.OtherNo warnings★ 87↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
hunt-mcp
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
MCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.
Install
npx skills add Encod3d-Sec/TORCH --skill hunt-mcp -a claude-code
Installs to .claude/skills/hunt-mcp/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md