Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,893 skills from 2,309 repositories · updated 10 minutes ago
10,097 skills
- bug-fix-briefgiuseppe-trisciuoglio/developer-kitGenerates a structured Bug Fix Brief (BFB) to document issue corrections. Includes root cause analysis, repro steps, fix options, and fix checklist. Use when user asks to create a BFB, document a bug fix, or generate a bug correction document.OtherNo warnings★ 366↓ —
- incident-managementBagelHole/DevOps-Security-Agent-SkillsImplement incident management processes and escalation procedures. Configure on-call schedules and post-incident reviews. Use when managing production incidents.OtherNo warnings★ 1.2K↓ —
- macos-capabilitiesrshankras/claude-code-apple-skillsExpert guidance on macOS platform capabilities. Covers sandboxing, app extensions, menu bar apps, and background execution. Use when implementing system integration features.OtherNo warnings★ 842↓ —
- streak-trackerrshankras/claude-code-apple-skillsGenerates a streak tracking system with timezone-aware day boundaries, streak freeze protection, and streak-at-risk push notifications. Use when user wants daily/weekly engagement streaks, consecutive day tracking, or habit tracking.OtherNo warnings★ 842↓ —
- mccosmosayingQAQ/McCosmosCompare McDonald's food nutrition, find calorie-constrained alternatives, and explain nutrition similarities using real McDonald's MCP data or an explicitly dated McCosmos snapshot. Use for meal comparisons, food searches and nutrition maps.OtherNo warnings★ 114↓ —
- competitive-market-shift-analysisLMTYdotcom/skillsDetermine whether a pattern of competitor, category, technology, buyer, pricing, or positioning signals represents noise, an isolated move, an emerging market shift, or an established change in expectations. Use when a PMM asks what a cluster of changes means, whether a trend is real, how much attention it deserves, or what evidence should trigger a response.OtherNo warnings★ 83↓ —
- hue-recontonone-ai/tononeAudit existing color usage in a codebase — find inconsistencies, hardcoded values, and contrast failures. Use when asked to "audit our color usage", "find hardcoded hex values", or "check for contrast failures".OtherNo warnings★ 77↓ —
- featured-snippet-optimizerinhouseseo/superseo-skillsUse when you want to win a featured snippet for a keyword you already rank for. The agent checks the current snippet format, analyzes your content, and rewrites the relevant section to match what Google wants.OtherNo warnings★ 375↓ —
- geospatial-maps-expertroedyrustam/vibes-plugMaps and geospatial data: Mapbox GL JS, Leaflet, and PostGIS / Peta dan data geospasial: Mapbox GL JS, Leaflet, dan PostGIS.OtherNo warnings★ 116↓ —
- chatbot-messaging-expertroedyrustam/vibes-plugExpert guide for chatbot and messaging platform integration (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) and conversational AI / Panduan ahli integrasi chatbot dan platform messaging (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) dan AI percakapan.OtherNo warnings★ 116↓ —
- run2_simpo-losscxcscmu/SkillLearnBenchComplete implementation of the SimPO (NeurIPS 2024) loss function with all variants and edge cases - use when reproducing SimPO or implementing reference-free preference optimization.OtherNo warnings★ 91↓ —
- hunt-samlelementalsouls/Claude-BugHunterHunt SAML / SSO attacks. Patterns: XML Signature Wrapping (XSW) — modify Assertion while keeping Signature valid by relocating signed element, comment injection in NameID ([email protected]<!--evil-->@attacker.com → some parsers see [email protected]), signature stripping (remove Signature element entirely, server should reject but doesn't), key confusion (signed by attacker's IdP, accepted by SP), audience-restriction not validated, replay attack (same Assertion accepted twice within validity window). Tools: SAML Raider Burp extension, samlmagic, manual XML manipulation. Detection: any /saml endpoint, /Shibboleth.sso, /sso/saml/, Microsoft ADFS endpoints. Validate: account takeover via altered NameID, admin role injection via altered AttributeStatement. Use when hunting SSO flows, when SAML AssertionConsumerService is reachable, when chaining IdP-trust to SP-impersonation.OtherReview first★ 5.4K↓ —
- daily-trendingaAAaqwq/AGI-Super-Team获取今日热榜，从tophub.today抓取各平台热搜榜单。当用户询问"今天有什么热搜"、"热榜"、"微博热搜"时触发。OtherNo warnings★ 112↓ —
- deinstallierenThomasMoreAI/legal-skills-openFür Deinstallation: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- eeat-auditinhouseseo/superseo-skillsUse when auditing a page for E-E-A-T signals. The agent reads the page and scores Experience, Expertise, Authoritativeness, and Trustworthiness — then tells you exactly what to add to each dimension.OtherNo warnings★ 375↓ —
- runbook-creationBagelHole/DevOps-Security-Agent-SkillsCreate operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.OtherNo warnings★ 1.2K↓ —
- object-storageBagelHole/DevOps-Security-Agent-SkillsConfigure object storage with S3, GCS, and MinIO. Implement lifecycle policies and access controls. Use when managing object storage.OtherNo warnings★ 1.2K↓ —
- payment-gateway-expertroedyrustam/vibes-plugPayment gateways integration (Stripe, Midtrans) and secure webhooks / Integrasi payment gateway (Stripe, Midtrans) dan webhook aman.OtherNo warnings★ 116↓ —
- search-engine-expertroedyrustam/vibes-plugFull-text search engines: Typesense, Meilisearch, and Elasticsearch / Mesin pencarian full-text: Typesense, Meilisearch, Elasticsearch.OtherNo warnings★ 116↓ —
- improve-contentinhouseseo/superseo-skillsUse when rewriting or refreshing an existing page that's underperforming. The agent fetches the URL, analyzes the current content, researches the SERP, and rewrites using the full anti-AI-slop ruleset — no data exports needed.OtherNo warnings★ 375↓ —
- testany-caseTestAny-io/testany-agent-skillsTestany platform case 注册与 CRUD - 将已准备好的 platform case package 注册到平台，并管理 metadata、脚本与生命周期OtherNo warnings★ 82↓ —
- huggingface-trlcxcscmu/SkillLearnBenchUsing Hugging Face TRL library for building custom trainers for Preference Optimization methods like DPO, SimPO, etc.OtherNo warnings★ 91↓ —
- reading-payment-statementkazukinagata/shinkoku支払調書の画像を読み取り構造化データを返す。 他のスキルから呼び出されるほか、直接ユーザーが呼び出すことも可能。OtherNo warnings★ 366↓ —
- ssl-tls-managementBagelHole/DevOps-Security-Agent-SkillsManage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.OtherNo warnings★ 1.2K↓ —
migrate-pipeline
harness/harness-skills
OtherUpdated 2 days ago
From the author
Migrate Harness pipelines from v0 to v1 simplified format via MCP tools. Converts expressions from angle-bracket to ${{ }} syntax, lowercases type names, simplifies structure, and preserves variables, failure strategies, and conditional logic. Use when asked to migrate a pipeline, convert v0 to v1, upgrade pipeline format, modernize pipeline syntax, or compare v0 vs v1. Trigger phrases: migrate pipeline, convert to v1, upgrade pipeline, v0 to v1, modernize pipeline, simplified format.
Install
npx skills add harness/harness-skills --skill migrate-pipeline -a claude-code
Installs to .claude/skills/migrate-pipeline/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance65
Maintenance100
Licence100
Adoption36
Files (1)
- SKILL.md