Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,186 skills from 2,196 repositories · updated 11 minutes ago
2,566 skills
- alert-correlationgensecaihq/Wazuh-AutopilotFind related Wazuh activity around a case by time window and entity pivots, detect kill-chain progression and campaigns across hosts; use after triage when a case needs its surrounding context.ProductivityNo warnings★ 60↓ —
- ir-playbook-suspicious-powershellgensecaihq/Wazuh-AutopilotIncident-response playbook for malicious PowerShell — encoded commands, download cradles, Office-spawned scripts, in-memory execution, credential dumping, Defender tampering and registry persistence; use when Wazuh raises PowerShell or Sysmon detections (e.g. rules 92057, 91809, 92047, 92008, 91844, 92024) on Windows hosts.ProductivityNo warnings★ 60↓ —
- context-managementkangarooking/system-prompt-skills当系统提示词需要设计 token 预算分配、上下文压缩策略、延迟加载机制、记忆持久化方案时调用此 Skill。适用于长对话 AI 助手、代码编辑器集成、研究型 Agent、多会话系统等需要精细管理上下文窗口的场景。不适用于：单轮交互系统（无上下文管理需求）、纯无状态 API（无对话历史）、简单的 prompt 模板设计。当需求聚焦于"如何搜索外部信息"而非"如何管理已有信息"时，应该用 search-integration 而非本 Skill。ProductivityNo warnings★ 214↓ —
- eni-software-workflowalicewe1/alice_skill[DOCUMENTATION ONLY] [仅文档] Software implementation, debugging, refactoring, testing, and delivery workflow. Automatically route matching coding tasks here without requiring an activation phrase.ProductivityNo warnings★ 54↓ —
- summarizationRylaispirit/rylai-codex-hermes-skillsCreate accurate summaries of documents, articles, meetings, research, code changes, or multiple sources as briefs, key points, actions, or catch-up notes.ProductivityNo warnings★ 63↓ —
- ir-playbook-lateral-movementgensecaihq/Wazuh-AutopilotIncident-response playbook for lateral movement — SMB/admin shares, WinRM/PowerShell remoting, RDP, SSH, PsExec/WMI remote execution, pass-the-hash and remote services/tasks; use when Wazuh shows internal-to-internal authentication or remote-execution chains (e.g. rules 92652, 92653, 92650, 92068, 91823, or SSH success rule 5715 from an internal source).ProductivityNo warnings★ 60↓ —
- ir-playbook-ransomwaregensecaihq/Wazuh-AutopilotIncident-response playbook for ransomware — mass file modification/encryption, ransom notes, shadow-copy and backup deletion, service stopping and log clearing; use when Wazuh shows FIM bursts (rules 550, 553, 554), antimalware detections (rules 62113, 87105), audit-log clearing (rule 60117) or recovery-inhibition commands. Containment within minutes.ProductivityNo warnings★ 60↓ —
- soc-metricsgensecaihq/Wazuh-AutopilotCalculate and interpret SOC performance metrics — MTTD, MTTA, MTTR, MTTC, alert-to-incident ratio, false-positive and automation rates, and agent cost/latency — with maturity context; use for KPI reporting and SOC performance questions.ProductivityNo warnings★ 60↓ —
- memory-systemkangarooking/system-prompt-skills当需要为 AI 设计记忆存储、检索、应用和更新机制时调用此 skill。典型场景包括：设计持久化记忆架构（用户偏好、历史上下文、项目知识）、定义记忆的创建/读取/更新/删除生命周期、实现静默记忆应用（不在回复中透露记忆内容）、管理敏感记忆边界。 不适用于：定义工具接口（tool-specification）、定义安全规则（safety-guardrails）、定义人格风格（personality-system）。 关键 trigger 信号：AI 需要跨会话记住用户信息、记忆内容可能敏感、需要在回复中隐式应用记忆而非显式引用、用户要求"记住这个"。ProductivityNo warnings★ 214↓ —
- colleague-distillationZhixiangLuo/10xProductivityDistill a colleague into a reusable AI skill (work + persona) using tool connections — Slack, Slack AI, Jira, GHE, Bitbucket, Confluence, SharePoint, Teams, Outlook, Notion, Linear, Google Docs, and more — without manual paste. Use when the user wants a colleague skill, digital twin of a coworker, or capture of someone's technical voice from workplace systems. Requires tool_connections + 10xProductivity verified_connections (or equivalent .env).ProductivityNo warnings★ 483↓ —
- ollvm-recovery-workflowalicewe1/alice_skillAlice 集成技能包 · 放进去就能用 · Drop-in skill suite for AI coding agentsProductivityNo warnings★ 54↓ —
- anarlog-workflowmodem-dev/ossrulesExecute Anarlog work immediately while recording issues, decisions, progress, and lessons in Linear. Use for Anarlog repository or Anarlog desktop, web, mobile, and API work, including related worktrees and ANLG issues. Explicit brainstorming stays discussion-first. Do not use for unrelated repositories or meeting-data queries.ProductivityNo warnings★ 64↓ —
- okf-wikijamditis/claude-skills-journalismBuilds an Open Knowledge Format (OKF) knowledge base from existing docs, notes, or a repo. Use to scaffold an OKF wiki.ProductivityNo warnings★ 434↓ —
- ai-newsdannote/dot-piFetch and curate AI news from X/Twitter list. Use when user asks for AI news, AI digest, what's happening in AI, or wants a summary of AI announcements, papers, and releases.ProductivityNo warnings★ 57↓ —
- competition-ios-runtimealicewe1/alice_skillInternal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for IPA runtime analysis, Frida hooks, Objective-C or Swift method tracing, Keychain inspection, SSL pinning bypass, URL scheme handling, and iOS request-signing recovery. Use when the user asks to hook an IPA, trace Objective-C or Swift runtime behavior, inspect Keychain or plist state, bypass pinning, analyze deeplinks or universal links, or replay accepted iOS requests. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.ProductivityNo warnings★ 54↓ —
- advai-handoffadvai-x/advai-skillsPersists session handoff notes in `.advai/HANDOFF.md` and restores prior context from that file. Invoke when user wants to record current session progress or resume work in a new session.ProductivityNo warnings★ 78↓ —
- advai-distilladvai-x/advai-skillsConverts a completed conversation and its verified outcome into a reusable minimal skill. Invoke when user asks to extract, distill, formalize, or generate a skill from a finished task or prior workflow.ProductivityNo warnings★ 78↓ —
- notion-infographicRylaispirit/rylai-codex-hermes-skillsTurn articles, notes, transcripts, or research into a consistent series of clean hand-drawn infographics with concise text and visual verification.ProductivityNo warnings★ 63↓ —
- eni-firmware-workflowalicewe1/alice_skill[DOCUMENTATION ONLY] [仅文档] Firmware and IoT extraction, filesystem, service, emulation, reverse engineering, validation, and reporting workflow.ProductivityNo warnings★ 54↓ —
- eni-fuzzing-workflowalicewe1/alice_skill[DOCUMENTATION ONLY] [仅文档] Coverage-guided fuzzing workflow for local or authorized targets, including harnesses, corpus design, sanitizers, campaigns, minimization, triage, and regression.ProductivityNo warnings★ 54↓ —
- agent-first-screenshotsDevin-AXIS/iPolloWorkAgent-first screenshots — an agent drives the real app via CDP and produces clean, defect-free product screenshots (newsletters, landing pages, social, decks, PR). Dual-channel verification (DOM + pixels + vision) in a capture loop. Use for any "take/redo screenshots of the app" task.ProductivityNo warnings★ 7.3K↓ —
- sentencepieceKalarisLabs/research-agent-skillsLanguage-independent tokenizer treating text as raw Unicode. Supports BPE and Unigram algorithms. Fast (50k sentences/sec), lightweight (6MB memory), deterministic vocabulary. Used by T5, ALBERT, XLNet, mBART. Train on raw text without pre-tokenization. Use when you need multilingual support, CJK languages, or reproducible tokenization.ProductivityNo warnings★ 65↓ —
- xcode-build-benchmarkAvdLee/Xcode-Build-Optimization-Agent-SkillBenchmark Xcode clean and incremental builds with repeatable inputs, timing summaries, and timestamped `.build-benchmark/` artifacts. Use when a developer wants a baseline, wants to compare before and after changes, asks to measure build performance, mentions build times, build duration, how long builds take, or wants to know if builds got faster or slower.ProductivityNo warnings★ 1.3K↓ —
- summarise-ecosystem-resultsmodem-dev/ossrulesUse when a user says "summarise ecosystem results", "summarize this ty ecosystem report", "what changed in this ecosystem run?", or asks to summarise or summarize ty ecosystem results for a Ruff PR from a PR number, PR URL, GitHub ecosystem-results comment, or detailed HTML report.ProductivityNo warnings★ 64↓ —