Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,399 skills from 2,375 repositories · updated 20 seconds ago
10,617 skills
- ai-storyboard-director62656456/ai-film-skills根据剧本与已定导演方案设计观看顺序、人物调度、电影摄影和剪辑，编写或修订分镜与视频提示词；支持创意镜头思路、打戏和运镜诊断。创意思路可单独交付或并列于主分镜，采用后才纳入；分镜、提示词与实际生成按当前阶段分别执行。OtherNo warnings★ 103↓ —
- 1c-meta-decompileDesko77/claude-code-skills-1cДекомпиляция объекта метаданных 1С в JSON-заготовку формата meta-compile. Используй когда нужно получить черновик DSL-описания нового объекта по образцу другого. Не сохраняет UUID/модули/формы.OtherNo warnings★ 88↓ —
- d-official-market-analysis62656456/ai-film-skills基于可验证的官方和权威来源分析影视、微短剧、漫剧、AI影视、网络动画与剧情短视频市场。用于“调用D”“用D分析”、题材趋势、平台对比、指标解释、项目市场评估与完整市场研究；按本次问题确定范围与交付，不把单项咨询自动扩成全市场报告。OtherNo warnings★ 103↓ —
- implementing-saml-sso-with-okta26zl/cybersec-toolkitImplement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, aOtherNo warnings★ 87↓ —
- npcs-ai-studio-zhkoronto11/ludo-npc-ai配合 NPCs AI Studio 将故事、游戏世界和场景设想整理成可展示的本地工程，创作人物、NPC 组、条件对白和剧情事件；为已有工程提交待审核草稿并验证预演。适用于作者使用自己的 AI 协同创作，不用于开发游戏模型或引擎。OtherNo warnings★ 101↓ —
- luisbunuel-perspectivemomozi1996/DirectorAgents路易斯·布努埃尔导演风格顾问——荒诞梦境的社会异化。 核心特征：超现实、社会解构 代表作品：《资产阶级的审慎魅力》 触发词：「路易斯·布努埃尔风格」「像路易斯·布努埃尔那样拍」「路易斯·布努埃尔视角」 适用场景：剧本创作、影像设计、叙事决策、风格参考OtherNo warnings★ 64↓ —
- 1c-config-indexDesko77/claude-code-skills-1cИндекс XML-выгрузки конфигурации 1С в один JSON - какие объекты есть, их реквизиты, табличные части, измерения и ресурсы регистров, экспортные методы общих модулей. Нужен другим навыкам для проверок, где объект сверяется с остальной конфигурациейOtherNo warnings★ 88↓ —
- bmad-advanced-elicitationalvin-reyes/better-agentic-idePush the LLM to reconsider, refine, and improve its recent output. Use when user asks for deeper critique or mentions a known deeper critique method, e.g. socratic, first principles, pre-mortem, red teamOtherNo warnings★ 85↓ —Also in 1 other repo
- show-your-work-kleonsimbajigege/book2skillsApply Austin Kleon's sharing framework. Trigger on: "what should I share?", "build an audience", "document my creative process".OtherNo warnings★ 200↓ —
- qiskitKalarisLabs/research-agent-skillsBuild, simulate, transpile, and execute quantum circuits with Qiskit and IBM Quantum Runtime. Use for Qiskit 2.x circuits and operators, V2 Sampler or Estimator primitives, target-aware transpilation, local or noisy simulation, IBM QPU execution, Runtime sessions or batches, error mitigation, and Qiskit ecosystem packages.OtherNo warnings★ 95↓ —
- perennial-seller-holidaysimbajigege/book2skillsApply Ryan Holiday's perennial seller framework. Trigger on: "will this work last?", "position my book/product", "build an enduring launch".OtherNo warnings★ 200↓ —
- cachebeatARahim3/cachebeatKeep the Anthropic prompt cache warm by firing a tiny heartbeat only after N minutes of true session inactivity (any exchange resets the clock), so the next real turn reads the conversation at cached price / cached quota instead of a full uncached re-read. The heartbeat is a background Stop hook this skill registers (asyncRewake) - it re-arms itself after every turn, with no tool calls and no permission prompts. Use when the session may sit idle (training runs, CI, downloads, the user stepping away) longer than the cache TTL. Args - idle threshold in minutes (default 50), optional max hours (default 8), or "stop".OtherNo warnings★ 85↓ —
- spring-ai-integrationrrezartprebreza/spring-boot-skillsUse when integrating LLMs, chat clients, embeddings, RAG pipelines, or AI agents into Spring Boot. Covers Spring AI ChatClient, prompt templates, embeddings, vector stores, and structured output. Use when user mentions Spring AI, LLM, ChatGPT, Claude, RAG, embeddings.OtherReview first★ 338↓ —
- plugin-creatorEvannZhongg/NosisCreate and validate Nosis Plugin packages containing Skills, Agent roles, MCP servers and command hooks. Use when scaffolding a plugin, adding components or checking its manifest.OtherNo warnings★ 118↓ —
- jiazhangke-perspectivemomozi1996/DirectorAgents贾樟柯导演风格顾问——社会变迁的纪实凝视。 核心特征：底层小人物、时代变迁 代表作品：《小武》《山河故人》 触发词：「贾樟柯风格」「像贾樟柯那样拍」「贾樟柯视角」 适用场景：剧本创作、影像设计、叙事决策、风格参考OtherNo warnings★ 64↓ —
- 13c-metabolic-fluxKalarisLabs/research-agent-skillsEstimates intracellular metabolic fluxes from steady-state carbon-13 isotope-tracing measurements using validated atom maps, mfapy isotope simulation, constrained multistart fitting, and flux-profile diagnostics. Use for 13C-MFA, carbon tracing, mass isotopomer distributions (MDVs/MIDs), positional isotopomers, parallel tracer experiments, and determining whether labeling data constrain a pathway flux. Distinguishes measured-label inference from COBRA flux balance analysis and flags experiments requiring nonstationary MFA.OtherNo warnings★ 95↓ —
- 1c-meta-compileDesko77/claude-code-skills-1cСоздать объект метаданных 1С. Используй когда пользователь просит создать или добавить справочник, документ, регистр, перечисление, константу, общий модуль, обработку, отчет и др.OtherNo warnings★ 88↓ —
- customers-yachts-wall-street-schwedsimbajigege/book2skillsAnalyze Wall Street conflicts. Trigger on: "can I trust this advisor?", "is this forecast reliable?", "whose interest does this serve?".OtherNo warnings★ 200↓ —
- hunting-for-ntlm-relay-attacks26zl/cybersec-toolkitDetect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.OtherNo warnings★ 87↓ —
- cidamizzlelover/cida辞达 · 现代中文高质量对话型表达与平台内容设计引擎。用于中文写作、重写、润色、诊断、 口述/访谈成文、书面自然化、公众号/小红书/知乎/微博/视频口播/播客/社群等场景适配， 以及按用户真实文本校准个人风格。先确定事实与立场边界，再建立平台任务契约、比较表达策略、 设计读者价值兑现，最后完成文本质量与平台适配双自检。不做去AI味检测对抗、虚假钩子、 平台流量承诺或任何在世作者的个人风格模仿。OtherNo warnings★ 110↓ —
- detecting-golden-ticket-forgery26zl/cybersec-toolkitDetect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEMOtherNo warnings★ 87↓ —
- detecting-dnp3-protocol-anomalies26zl/cybersec-toolkitDetect anomalies in DNP3 (Distributed Network Protocol 3) communications used in SCADA systems by monitoring for unauthorized control commands, firmware update attempts, protocol violations, and deviations from baseline traffic patterns using deep packet inspection and machine learning approaches.OtherNo warnings★ 87↓ —
- hunting-for-dns-tunneling-with-zeek26zl/cybersec-toolkitDetect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.OtherNo warnings★ 87↓ —
- 1c77-devDesko77/claude-code-skills-1cРазработка и доработка под 1С:Предприятие 7.7 (она же "77", "семерка"): правка и создание модулей кода (.1s, кодировка CP1251), форм (.frm), объектов конфигурации (1Cv7.MD), внешних обработок и отчетов (.ert), плюс разбор и сборка .ert / 1Cv7.MD через GComp. Используй ВСЕГДА, когда задача касается 1С 7.7: файлы .1s / .ert / .frm / .mdp / 1Cv7.MD; глобальный модуль, модули проведения и формы 7.7; синтаксис 7.7 (нет типа Булево; ПустаяСтрока; СоздатьОбъект; тернарник ?(); ошибка компиляции "Выражение должно иметь логический тип"); обход справочников и документов 7.7, выгрузка через ТаблицаЗначений или FileSystemObject; сборка или разбор внешних обработок 7.7 (gcomp); миграция данных с 7.7; поиск и правка кириллицы в .1s (обычный grep ее не находит из-за CP1251). Применяй даже без явного "7.7", если речь о старой конфигурации с файлами .1s/.ert/.md или о ТиС / Торговле / Бухгалтерии 7.7 / УПП 7.7. НЕ использовать для 1С 8.x: EDT, .bsl, .mdo, .epf, .erf, .cf, .cfe, управляемые формы, расширения конфигурации (CFE)OtherNo warnings★ 88↓ —
detecting-insider-threat-behaviors
26zl/cybersec-toolkit
OtherUpdated yesterday
From the author
Detect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads, privilege abuse, and resignation-correlated data theft.
Install
npx skills add 26zl/cybersec-toolkit --skill detecting-insider-threat-behaviors -a claude-code
Installs to .claude/skills/detecting-insider-threat-behaviors/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 77
Security85
Provenance63
Maintenance100
Licence100
Adoption34
Files (8)
- LICENSE
- SKILL.md
- assets/template.md
- references/api-reference.md
- references/standards.md
- references/workflows.md
- scripts/agent.py
- scripts/process.py