Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 48 minutes ago
10,619 skills
- detecting-kerberoasting-attacks26zl/cybersec-toolkitDetect Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests targeting service accounts with SPNs for offline password cracking.OtherNo warnings★ 87↓ —
- detecting-pass-the-hash-attacks26zl/cybersec-toolkitDetect Pass-the-Hash attacks by analyzing NTLM authentication patterns, identifying Type 3 logons with NTLM where Kerberos is expected, and correlating with credential dumping.OtherNo warnings★ 87↓ —
- implementing-saml-sso-with-okta26zl/cybersec-toolkitImplement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, aOtherNo warnings★ 87↓ —
- performing-kerberoasting-attack26zl/cybersec-toolkitKerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal NamesOtherNo warnings★ 87↓ —
- conducting-pass-the-ticket-attack26zl/cybersec-toolkitPass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate to services without knowing the user's password. By extracting Kerberos tickets froOtherNo warnings★ 87↓ —
- detecting-dll-sideloading-attacks26zl/cybersec-toolkitDetect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack execution flow for defense evasion.OtherNo warnings★ 87↓ —
- hunting-for-dns-tunneling-with-zeek26zl/cybersec-toolkitDetect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.OtherNo warnings★ 87↓ —
- detecting-pass-the-ticket-attacks26zl/cybersec-toolkitDetect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEMOtherNo warnings★ 87↓ —
- 1c-db-load-xmlDesko77/claude-code-skills-1cЗагрузка конфигурации 1С из XML-файлов. Используй когда пользователь просит загрузить конфигурацию из файлов, XML, исходников, LoadConfigFromFilesOtherNo warnings★ 88↓ —
- hpc-runtime-doctorHeshamFS/materials-simulation-skillsDiagnose HPC runtime and scheduler problems for materials simulations, including MPI/OpenMP/GPU layout, modules, CUDA/Kokkos hints, scratch paths, walltime, job arrays, restart strategy, scheduler portability, and resource mismatch. Use when an ALREADY-SUBMITTED job failed, ran slowly, got killed, or behaved differently on a cluster than on a workstation. To author or vet a NEW submission script before running, use slurm-job-script-generator instead.OtherNo warnings★ 83↓ —
- numerical-stabilityHeshamFS/materials-simulation-skillsAnalyze numerical stability for time-dependent PDE simulations — check CFL and Fourier criteria, perform von Neumann stability analysis, detect stiffness, evaluate matrix conditioning, and recommend explicit vs implicit time-stepping schemes. Use when selecting time steps, diagnosing numerical blow-up or solver divergence, checking convergence criteria, or evaluating scheme stability for advection, diffusion, or reaction problems, even if the user doesn't explicitly mention "stability" or "CFL."OtherNo warnings★ 83↓ —
- process-compose-ops0xDarkMatter/claude-modsProcess Compose orchestration for non-containerized local services: process-compose.yaml schema, health checks, restart policies, dependencies, TUI/REST/MCP control, scheduling, and boot persistence. Use as a PM2/supervisord/Foreman replacement for local dev service management.OtherNo warnings★ 80↓ —
- optimizingOdradekAI/bundles-forgeUse when optimizing a bundle-plugin or single skill — improving descriptions, reducing tokens, fixing audit findings, restructuring workflows, adding skills to fill gaps, or iterating on user feedbackOtherNo warnings★ 227↓ —
- xhs-publisheraAAaqwq/AGI-Super-Team将 Markdown 文章自动发布到小红书（XHS）草稿箱。支持多图上传（封面+素材）。OtherNo warnings★ 112↓ —
- hearthgeekjourneyx/agoraHearth (火炉边) — Relationships & family deliberation room. Convene Fromm, Adler, Zhuangzi, Kant, Aurelius, and Watts for relationship dynamics, parenting, family conflict, and workplace politics.OtherNo warnings★ 170↓ —
- building-incident-response-dashboard26zl/cybersec-toolkitBuilds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active incidents, tracking affected systems, containment status, IOC spread, and response timeline. Use when IR teams need unified visibility during incident coordination and post-incident reporting.OtherNo warnings★ 87↓ —
- clinicgeekjourneyx/agoraClinic (诊疗室) — Psychological resilience deliberation room. Convene Skinner, Frankl, Aurelius, Kahneman, Zhuangzi, and Jung for anxiety, procrastination, burnout, and loss recovery.OtherNo warnings★ 170↓ —
- analyzing-windows-shellbag-artifacts26zl/cybersec-toolkitAnalyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.OtherNo warnings★ 87↓ —
- prompt-refineApeironics/prompt-refine-skillSilently restructures the user's natural-language prompt into the format the model CURRENTLY running this skill handles best, then answers. On activation it identifies which model family is executing it (Claude, GPT, Gemini, Llama, DeepSeek, Mistral, Qwen, Grok, Perplexity, Kimi, GLM, Command, Nova, or Phi) and loads that one model's official strategy — so the optimization always matches the model that actually runs it. Activate with /prompt-refine. Use when users want better answers without learning prompt engineering.OtherNo warnings★ 53↓ —
- analyzing-malicious-url-with-urlscan26zl/cybersec-toolkitURLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolatOtherNo warnings★ 87↓ —
- detecting-container-escape-attempts26zl/cybersec-toolkitContainer escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicatorsOtherNo warnings★ 87↓ —
- alterlab-pytdcAlterLab-IEU/AlterLab-Academic-SkillsLoads Therapeutics Data Commons (TDC, PyTDC) AI-ready drug-discovery datasets and benchmarks — ADME, toxicity, drug-target interaction (DTI), scaffold splits, and molecular oracles for therapeutic ML and pharmacological prediction. Use when fetching a standardized benchmark dataset, applying scaffold or cold-split evaluation, or sourcing labeled molecules for ADMET, toxicity, or DTI modeling. Sources data, splits, and oracles only — defer molecular featurization (ECFP/fingerprints), model training, and transformers to alterlab-deepchem or alterlab-molfeat. Part of the AlterLab Academic Skills suite.OtherNo warnings★ 84↓ —
- githubrunxhq/runxRead or synchronize bounded GitHub issues, threads, and pull requests through the GitHub connector, with scoped authority and readback.OtherNo warnings★ 105↓ —
- fair-simulation-packagerHeshamFS/materials-simulation-skillsCreate FAIR-minded reproducibility bundles for materials simulations by collecting input/output file inventories, hashes, units, engine versions, structure identifiers, provenance, and NOMAD/OPTIMADE/Materials Project friendly metadata. Use before publishing, sharing, archiving, or handing simulation results to another agent.OtherNo warnings★ 83↓ —
binance-square
aAAaqwq/AGI-Super-Team
OtherUpdated 17 hours ago
From the author
币安广场合约投机雷达 v5：以最近24小时专业交易帖为主要证据，回源核验帖子， 联合币安公共合约行情、4周期K线、布林带、ATR、量能和RR，生成可审计的本地影子报告。 触发词：币安广场、扫描币安、binance square、合约机会、交易信号雷达、4小时雷达
Install
npx skills add aAAaqwq/AGI-Super-Team --skill binance-square -a claude-code
Installs to .claude/skills/binance-square/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 77
Security85
Provenance65
Maintenance100
Licence100
Adoption35
Files (95)
- AUTHORIZATION_RECEIPT.md
- GRILL_DECISIONS.md
- OPTIMIZATION_VERIFICATION.md
- PRE_OPTIMIZATION_AUDIT.md
- PROVENANCE.md
- SKILL.md
- V4_IMPLEMENTATION_PLAN.md
- migrations/001_v4.sql
- migrations/002_contract_freeze.sql
- migrations/003_production_cutoff.sql
- migrations/004_smart_money_leaderboards.sql
- migrations/005_run_namespace_and_lineage.sql
- +83 more