Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 15 hours ago
10,066 skills
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- brd-draftChenxingJi-Innovate/Cheatcode_Skills and tools for your AI apps, added in one click. The open source parts of cheatcodehq.com: Mac installer, package format, skill packs.OtherNo warnings★ 81↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 336↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 336↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- frontier-ai-models-expertroedyrustam/vibes-plugFrontier AI models orchestration (Grok 4.7, Gemini 4, Claude 5.5) / Orkestrasi model AI frontier (Grok 4.7, Gemini 4, Claude 5.5).OtherNo warnings★ 115↓ —
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- redteamleadEncod3d-Sec/TORCHOn-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".OtherNo warnings★ 336↓ —
- next-moveEncod3d-Sec/TORCHRanked next offensive moves from engagement state. Reads state/loot/Killchain, runs the deterministic analyzer, elaborates the top move. Use when asked "what next", "where to focus", "prioritize", or at the start of an engagement session.OtherNo warnings★ 336↓ —
- d3-data-tablecxcscmu/SkillLearnBenchHow to build an interactive HTML data table driven by D3.js v6 with sortable columns, row highlighting, cross-component selection, and formatted values. Use this skill when building tabular displays alongside D3 charts, especially when the table needs to stay in sync with chart interactions.OtherNo warnings★ 91↓ —
- skillsclaude-world/director-mode-liteList all available skills grouped by category. Use when the user asks what skills are available or runs /skills.OtherNo warnings★ 80↓ —
- hunt-cacheEncod3d-Sec/TORCHWeb cache poisoning + cache deception hunting - unkeyed input poisoning, cache-key analysis, path-confusion deception, header/parameter cloaking. Wiki-first, FIND schema output.OtherNo warnings★ 336↓ —
- math-intuition-builderparcadei/Continuous-Claude-v3Develops mathematical understanding through examples, visualization, and analogyOtherNo warnings★ 3.9K↓ —Also in 1 other repo
- deckungsklageThomasMoreAI/legal-skills-openFür Deckungsklage: erstellt Entwurf mit Antrag, Beweis und Anlagen; Ergebnis: Schriftsatz mit Begründungs- und Anlagenlogik. Fachgebiet: Fachanwalt Versicherungsrecht. Route: deckungsklage.OtherNo warnings★ 95↓ —
- cartaThomasMoreAI/legal-skills-openRedacta correspondencia rutinaria de la clínica jurídica: citaciones, solicitudes de documentos, actualizaciones de estado del asunto. Toda carta requiere revisión y aprobación del supervisor antes del envío. Usar cuando el usuario dice "carta al cliente", "citación", "pide documentos", "actualización", o necesita comunicarse con el cliente por escrito.OtherNo warnings★ 95↓ —
- challenging-stakeholder-questionsitseffi/agentic-osGenerate rigorous stakeholder challenge questions for proposal or meeting preparation.OtherNo warnings★ 117↓ —
- apple-intelligencershankras/claude-code-apple-skillsApple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants. Use when implementing AI-powered features.OtherNo warnings★ 837↓ —
- verwirkungThomasMoreAI/legal-skills-openFür Verwirkung von Handelsvertreter-Ansprüchen nach Paragraf 242 BGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 95↓ —
- polya-docsGulajavaMinistudio/awesome-copilot-idPhase 6 of the Pólya Heuristic Coder: Technical Documentation via Diátaxis Framework (Tutorials, How-To Guides, Reference, Explanation).OtherNo warnings★ 91↓ —
- swiftdatarshankras/claude-code-apple-skillsSwiftData skills — class inheritance patterns for hierarchical models, type-based querying, polymorphic relationships, and inheritance-vs-enum decisions. Use when designing SwiftData model hierarchies.OtherNo warnings★ 837↓ —
- app-namerrshankras/claude-code-apple-skillsTurn an app idea into validated, App-Store-ready name candidates. Use when the user says "name my app", "what should I call it", "app name ideas", "help me name this app", "is this name available", or needs to pick a brandable, ownable name before reserving it in App Store Connect.OtherNo warnings★ 837↓ —
- startup-ideafabricioctelles/skillsAnalyze startups with Paul Graham mindset (pressure, founder-market fit, brutal validation), Dan Koe discipline (monetization, offer, distribution, sales), and Seth Godin principles (differentiation, narrative, smallest viable audience). Triggers on startup idea, business validation, MVP, first customers, revenue model, GTM, product-market fit, "I have an idea".OtherNo warnings★ 123↓ —
- sharpenjoetawil7/first-passRewrites the prompt typed after the command before any work starts, then works from the rewrite. Splits a mixed-up message into a numbered list of asks, turns words like "be 100% sure", "cover all cases" or "don't break anything" into the checks they stand for, keeps every name, path, number and quote exactly, and stops to ask only where it would have to guess. Runs only when the user types it.OtherNo warnings★ 125↓ —
- problem-structuringitseffi/agentic-osBreak down complex problems into actionable recommendations using deductive and inductive analysis.OtherNo warnings★ 117↓ —
rvg-steuerstreit
ThomasMoreAI/legal-skills-open
From the author
Für Anwaltsgebühren im Steuerstreit — RVG StBVV Verhältnis: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Schnittstellenkarte mit Zuständigkeits- und Nachweisfragen. Fachgebiet: Steuerrecht – Steuerberater und Anwälte. Route: rvg-steuerstreit.
Install
npx skills add ThomasMoreAI/legal-skills-open --skill rvg-steuerstreit -a claude-code
Installs to .claude/skills/rvg-steuerstreit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 83
Files (3)
- SKILL.md
- references/quellenhygiene.md
- references/zitierweise.md