Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,966 skills from 2,309 repositories · updated 31 minutes ago
10,104 skills
- bildrechte-kiThomasMoreAI/legal-skills-openKlärt Bildrechte, Karten, Tabellen und Drittmaterial für Print, E-Book, Plattform und Werbung; baut eine belegte Rechtekette mit Schutzgegenstand, Rechteinhaber, Nutzungsart, Gebiet, Dauer, Quellenangabe und Freigabestatus.OtherNo warnings★ 97↓ —
- encoded-tag-markercisco-ai-defense/skill-scannerContain an encoded Unicode Tag Block marker used for hidden instructionsOtherNo warnings★ 2.7K↓ —
- remote-accessaAAaqwq/AGI-Super-Teamttyd + Tailscale for mobile terminal accessOtherNo warnings★ 112↓ —
- run3_skill-1cxcscmu/SkillLearnBench[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.OtherNo warnings★ 91↓ —
- kundenschutzThomasMoreAI/legal-skills-openFür Kundenschutz im Handelsvertretervertrag — Abwerbeverbote und Rechtsfolgen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- ressort-bmiThomasMoreAI/legal-skills-openFür Ressort-Heranführung BMI: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 97↓ —
- press-mediarshankras/claude-code-apple-skillsGet press coverage and media attention for your indie app. Covers press kit preparation, finding journalists/bloggers/YouTubers, pitch timing, embargo strategy, and story angles that get coverage. Use when user wants press coverage, is preparing for a launch, or wants to build a media kit.OtherNo warnings★ 842↓ —
- wiki-arsenalEncod3d-Sec/TORCHFast PARALLEL wiki lookup engine over wiki/techniques + wiki/payloads + wiki/tools + wiki/cheatsheets for a surface/service/vuln-class. Two modes - quick (one qmd search, cheap, fire constantly) and deep (4 parallel subagents, one per area, merged ready-to-use arsenal card, cached). This is the fast path arsenal that `arsenal` delegates to; the hunt-* skills each inline their own qmd_query and can hand off here for a parallel lookup. Use for "what do I use against <surface>", "arsenal for <X>", "deep/full arsenal", "tool + payload + technique + cheatsheet for <X>", "fast wiki lookup", "parallel wiki search", any "how do I attack/exploit <service|vuln-class>" where you want the documented tooling + payloads before hand-rolling.OtherNo warnings★ 337↓ —
- pm-changekonglong87/superPMUse when: 项目进行中出现需求变更、需要评估变更影响范围和风险、记录变更历史 Do NOT use when: 变更极小无需正式评估、变更已有明确决策无需分析OtherNo warnings★ 84↓ —
- hunt-sqliEncod3d-Sec/TORCHSQLi and NoSQLi hunting - error-based, boolean-blind, time-based, UNION, NoSQL operator injection. sqlmap automation after manual confirmation. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- app-cliprshankras/claude-code-apple-skillsGenerates App Clip targets with invocation URL handling, lightweight experiences, and full app upgrade prompts. Use when user wants NFC/QR/Safari banner invocation, instant app experiences, or App Clip Card setup.OtherNo warnings★ 842↓ —
- keep-recontonone-ai/tononeCustomer success reconnaissance — audit current onboarding completion, health signals, NRR, churn patterns, and CS motion. Use when asked to "audit our customer success", "why are customers churning", "what's our NRR", or before designing any CS playbook.OtherNo warnings★ 77↓ —
- wikiEncod3d-Sec/TORCHSearch, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.OtherNo warnings★ 337↓ —
- verificationitseffi/agentic-osVerify before claiming completion. No claims without fresh verification evidence. Use before marking work done.OtherNo warnings★ 117↓ —
- sandler-systemaAAaqwq/AGI-Super-TeamApply Sandler Selling System principles for consultative sales with pain discovery, budget qualification, and mutual decision frameworksOtherNo warnings★ 112↓ —
- hunt-mcpEncod3d-Sec/TORCHMCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- chatbot-messaging-expertroedyrustam/vibes-plugExpert guide for chatbot and messaging platform integration (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) and conversational AI / Panduan ahli integrasi chatbot dan platform messaging (WhatsApp Business, Telegram Bot, Discord.js, Slack Bolt) dan AI percakapan.OtherNo warnings★ 116↓ —
- resp-recontonone-ai/tononeAudit existing incident response capability — playbook coverage, tooling gaps, and readiness. Use when asked to "audit our incident response", "assess IR readiness", or "find playbook coverage gaps".OtherNo warnings★ 77↓ —
- hunt-authEncod3d-Sec/TORCHAuth bypass and ATO hunting - legacy protocol matrix (XMLRPC, SharePoint /_vti_bin/, EWS, Citrix, etc.), JWT manipulation, password reset poisoning, SAML auth bypass, session fixation. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- claude-md-improverEncod3d-Sec/TORCHOFFLINE FALLBACK for the claude-md-management plugin - prefer that plugin when it is installed. Audit and improve CLAUDE.md files - scan for CLAUDE.md files, evaluate quality against templates, output a report, then make targeted updates. Invoke explicitly (/claude-md-improver) when the plugin is unavailable.OtherNo warnings★ 337↓ —
- evidenceEncod3d-Sec/TORCHEvidence hygiene before any FIND moves to Completed or enters a report. Cookie redaction, PII black-bar, HAR sanitization, screenshot metadata strip. Run after /triage passes and before final report assembly.OtherNo warnings★ 337↓ —
- to-clarifyGulajavaMinistudio/awesome-copilot-idRecurring Checkpoint of the Pólya Heuristic Coder: Condition Sanity Check, 5-Axis Assumptions Interrogation, Epistemic Doubt, Grill-Me Protocol with concrete A/B options, and Readiness Scoring (0-100) (docs/audit/{slug}-{phase}-clarification.md).OtherNo warnings★ 91↓ —
- hunt-smugglingEncod3d-Sec/TORCHHTTP request smuggling / desync hunting - CL.TE, TE.CL, TE.TE, CL.0, and HTTP/2 downgrade. Timing-based detection, differential confirmation, no-blind-claims. Wiki-first, FIND schema output.OtherNo warnings★ 337↓ —
- riglet-creatorYPares/rigup.nixAI agents and Nix: parametrable skills/instructions and tools, packaged together in a reproducible and modular fashionOtherNo warnings★ 96↓ —
redteamlead
Encod3d-Sec/TORCH
OtherUpdated Sep 1, 2026
From the author
On-demand senior red-team lead advisor. Call at a decision point or obstacle to get wiki-grounded direction instead of hammering blindly. Dispatches a fresh RTL subagent that reads the engagement state + evidence + wiki and returns ranked directions with an explicit STOP. Use for "redteamlead", "RTL", "I'm stuck", "where do I go", "what next", "which vector", "should I keep hammering this".
Install
npx skills add Encod3d-Sec/TORCH --skill redteamlead -a claude-code
Installs to .claude/skills/redteamlead/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance70
Maintenance85
Licence100
Adoption42
Files (1)
- SKILL.md