Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 13 hours ago
10,066 skills
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- passkeys-webauthn-identity-expertNewroedyrustam/vibes-plugFIDO2 / WebAuthn Passkeys, SimpleWebAuthn, and passwordless auth / Autentikasi tanpa kata sandi Passkeys FIDO2 dan SimpleWebAuthn.OtherNo warnings★ 115↓ —
- pillow-grayscalecxcscmu/SkillLearnBenchConvert images to grayscale in-place using Pillow (PIL), overwriting original RGB files.OtherNo warnings★ 91↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- pm-reportkonglong87/superPMUse when: 需要生成数据报告、收集整理用户反馈、进行数据驱动的分析汇报 Do NOT use when: 数据已由BI系统自动生成、无需人工分析OtherNo warnings★ 84↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- ca-small-claimscxcscmu/SkillLearnBenchCalifornia Small Claims Court SC-100 form field mapping and filling guide. Use this skill when filling out California SC-100 Plaintiff's Claim forms, understanding small claims court procedures, or mapping case details to SC-100 form fields.OtherNo warnings★ 91↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- glm-calibrationcxcscmu/SkillLearnBenchCalibrating GLM parameters (Kw, coef_mix_hyp, wind_factor, lw_factor, ch) to minimize RMSE against field observations.OtherNo warnings★ 91↓ —
- run3_skill-1cxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- simpo-losscxcscmu/SkillLearnBenchGuide on understanding and implementing the SimPO (Simple Preference Optimization) loss function for language models.OtherNo warnings★ 91↓ —
- scheduling-enginecxcscmu/SkillLearnBenchAlgorithm to find earliest available meeting slots given constraints and existing appointments.OtherNo warnings★ 91↓ —
- pm-releasekonglong87/superPMUse when: 风险管控完成后准备上线发布、需要制定上线检查清单与回滚方案、正式发版流程 Do NOT use when: 上线流程已标准化且由运维自动化执行、仅需简单发布无需检查清单OtherNo warnings★ 84↓ —
- add-i18nJoviDeCroock/prachtWire `@pracht/i18n`: locale-detection middleware (URL prefix, cookie, `Accept-Language`), lazy typed dictionaries, and either strategy — locale-prefixed route groups with hreflang, or one URL per page with a cookie-backed switcher. Use for "add i18n", "set up translations", "make my app multilingual", "add locale routing", "switch language without changing URLs", "extract strings".OtherNo warnings★ 105↓ —
- data-visualization-expertroedyrustam/vibes-plugExpert guide for data visualization, charts, and dashboards using D3.js, Recharts, Chart.js, Nivo, and Tremor / Panduan ahli visualisasi data, chart, dan dashboard menggunakan D3.js, Recharts, Chart.js, Nivo, dan Tremor.OtherNo warnings★ 115↓ —
- kubesphere-fluidkubesphere/kubesphereKubeSphere Fluid management Skill. Use when user asks to install or enable Fluid, check Fluid status, view Fluid pods/logs/CRDs, create or update Dataset, AlluxioRuntime, JuiceFSRuntime, or ThinRuntime, perform DataLoad or cache warming, scale runtime, or troubleshoot Fluid issues in KubeSphere.OtherNo warnings★ 17.1K↓ —
- parallel-agent-contractsparcadei/Continuous-Claude-v3Parallel Agent Type ContractsOtherNo warnings★ 3.9K↓ —Also in 1 other repo
- pm-featurekonglong87/superPMUse when: 需要细化功能实现细节、拆解复杂功能、为开发准备详细任务、功能点需多维度描述 Do NOT use when: 功能已足够简单可直接进入开发、仅需功能列表无需深度拆解OtherNo warnings★ 84↓ —
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 837↓ —
pm-report
konglong87/superPM
OtherUpdated 3 days ago
From the author
Use when: 需要生成数据报告、收集整理用户反馈、进行数据驱动的分析汇报 Do NOT use when: 数据已由BI系统自动生成、无需人工分析
Install
npx skills add konglong87/superPM --skill pm-report -a claude-code
Installs to .claude/skills/pm-report/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance63
Maintenance100
Licence100
Adoption34
Files (1)
- SKILL.md