Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 12 hours ago
10,066 skills
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- gradient-methodsparcadei/Continuous-Claude-v3Problem-solving strategies for gradient methods in optimizationOtherNo warnings★ 3.9K↓ —Also in 1 other repo
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- pm-feedbackkonglong87/superPMUse when: 需要分析用户反馈和评论、评估用户满意度、收集产品改进建议、进行情感分析 Do NOT use when: 用户反馈数据极少、仅需收集无需分析OtherNo warnings★ 84↓ —
- pm-competitorkonglong87/superPMUse when: 需要持续监控竞品动态、建立竞品情报预警、定期输出竞品监控月报、追踪竞品版本/定价/功能/舆情/融资异动 Do NOT use when: 仅需一次性竞品调研（用 pm-market / pm-search --type=competitor）；产品尚无明确竞品OtherNo warnings★ 84↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- ca-small-claimscxcscmu/SkillLearnBenchCalifornia Small Claims Court SC-100 form field mapping and filling guide. Use this skill when filling out California SC-100 Plaintiff's Claim forms, understanding small claims court procedures, or mapping case details to SC-100 form fields.OtherNo warnings★ 91↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- data-visualization-expertroedyrustam/vibes-plugExpert guide for data visualization, charts, and dashboards using D3.js, Recharts, Chart.js, Nivo, and Tremor / Panduan ahli visualisasi data, chart, dan dashboard menggunakan D3.js, Recharts, Chart.js, Nivo, dan Tremor.OtherNo warnings★ 115↓ —
- pm-reportkonglong87/superPMUse when: 需要生成数据报告、收集整理用户反馈、进行数据驱动的分析汇报 Do NOT use when: 数据已由BI系统自动生成、无需人工分析OtherNo warnings★ 84↓ —
- to-docsGulajavaMinistudio/awesome-copilot-idPhase 6 of the Pólya Heuristic Coder: Technical Documentation via Diátaxis Framework (Tutorials, How-To Guides, Reference, Explanation).OtherNo warnings★ 91↓ —
- passkeys-webauthn-identity-expertNewroedyrustam/vibes-plugFIDO2 / WebAuthn Passkeys, SimpleWebAuthn, and passwordless auth / Autentikasi tanpa kata sandi Passkeys FIDO2 dan SimpleWebAuthn.OtherNo warnings★ 115↓ —
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 837↓ —
- run3_skill-1cxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- kubesphere-fluidkubesphere/kubesphereKubeSphere Fluid management Skill. Use when user asks to install or enable Fluid, check Fluid status, view Fluid pods/logs/CRDs, create or update Dataset, AlluxioRuntime, JuiceFSRuntime, or ThinRuntime, perform DataLoad or cache warming, scale runtime, or troubleshoot Fluid issues in KubeSphere.OtherNo warnings★ 17.1K↓ —
- pm-business-modelkonglong87/superPMUse when: 需要设计商业模式画布、规划盈利模式、制定定价策略、设计收入模型 Do NOT use when: 商业模式已确定且已验证、仅需简单定价调整而非全面设计OtherNo warnings★ 84↓ —
- mcp-sampling-criticroedyrustam/vibes-plugExpert guide for MCP client sampling (sampling/createMessage), Critic-in-the-Loop agentic quality gates, autonomous human-in-the-loop emulation, and multi-model consensus verification / Panduan ahli sampling MCP client, quality gate agen Critic-in-the-Loop, dan verifikasi konsensus multi-model.OtherNo warnings★ 115↓ —
- reverse-engineer-anythingNewroedyrustam/vibes-plugReverse-engineer binaries, firmware, and web apps with REA AgentEnv / Rekayasa balik biner, firmware, dan web apps dengan REA AgentEnv.OtherNo warnings★ 115↓ —
- web-fetchrunxhq/runxFetch and extract one public web source, optionally restrict its hosts, and return the content by digest with full provenance.OtherNo warnings★ 104↓ —
- swiftdatarshankras/claude-code-apple-skillsSwiftData skills — class inheritance patterns for hierarchical models, type-based querying, polymorphic relationships, and inheritance-vs-enum decisions. Use when designing SwiftData model hierarchies.OtherNo warnings★ 837↓ —
pm-competitor
konglong87/superPM
OtherUpdated 3 days ago
From the author
Use when: 需要持续监控竞品动态、建立竞品情报预警、定期输出竞品监控月报、追踪竞品版本/定价/功能/舆情/融资异动 Do NOT use when: 仅需一次性竞品调研（用 pm-market / pm-search --type=competitor）；产品尚无明确竞品
Install
npx skills add konglong87/superPM --skill pm-competitor -a claude-code
Installs to .claude/skills/pm-competitor/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance63
Maintenance100
Licence100
Adoption34
Files (1)
- SKILL.md