Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
4,645 skills from 115 repositories · updated 24 minutes ago
180 skills
- ponytail-auditDietrichGebert/ponytailQuality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most important first.SecurityNo warnings★ 170.7K↓ —
- doubt-driven-developmentaddyosmani/agent-skillsSubjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceeding, when stress-testing a plan for hidden failure modes, when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production auth, security-sensitive logic, a high-stakes migration, irreversible operations), or any time a confident output would be cheaper to verify now than to debug later.SecurityNo warnings★ 109.1K↓ —
- ponytail-auditDietrichGebert/ponytailQuality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to delete, merge or split. Ranked, each finding explained in plain English. One-shot report, changes nothing. Use for "audit this codebase", "review the whole repo", "find bloat", "what can I delete", /ponytail-audit.SecurityNo warnings★ 170.7K↓ —
- brandkitnexu-io/open-designPremium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, gaming, developer-tool, and consumer-app brand systems. Optimized for intentional logo concepting, refined composition, sparse typography, strong symbolic meaning, premium mockups, art-directed imagery, and flexible grid layouts.SecurityNo warnings★ 102.9K↓ —
- security-and-hardeningaddyosmani/agent-skillsHardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.SecurityNo warnings★ 109.1K↓ —
- setup-zoom-websocketsanthropics/knowledge-work-pluginsReference skill for Zoom WebSockets. Use after routing to a low-latency event workflow when persistent connections, faster event delivery, or security constraints make WebSockets preferable to webhooks.OfficialSecurityNo warnings★ 31K↓ —
- deal-with-security-advisorypaperclipai/paperclipHandle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.SecurityNo warnings★ 105.4K↓ —
- wordpresssickn33/agentic-awesome-skillsComplete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.SecurityNo warnings★ 48.2K↓ —
- sast-configurationwshobson/agentsConfigure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.SecurityNo warnings★ 41.4K↓ —
- team-composition-patternswshobson/agentsDesign optimal agent team compositions with sizing heuristics, preset configurations, and agent type selection. Use this skill when deciding how many agents to spawn for a task, when choosing between a review team versus a feature team versus a debug team, when selecting the correct subagent_type for each role to ensure agents have the tools they need, when configuring display modes (tmux, iTerm2, in-process) for a CI or local environment, or when building a custom team composition for a non-standard workflow such as a migration or security audit.SecurityNo warnings★ 41.4K↓ —
- hunt-sqlisickn33/agentic-awesome-skillsHunting skill for sqli vulnerabilities.SecurityNo warnings★ 48.2K↓ —
- hunt-idorsickn33/agentic-awesome-skillsHunting skill for idor vulnerabilities. Built from 26 public bug bounty reports. Use when hunting idor on any target.SecurityNo warnings★ 48.2K↓ —
- hunt-csrfsickn33/agentic-awesome-skillsHunting skill for csrf vulnerabilities.SecurityNo warnings★ 48.2K↓ —
- firebasesickn33/agentic-awesome-skillsFirebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong.SecurityNo warnings★ 48.2K↓ —
- hunt-grpcsickn33/agentic-awesome-skillsHunt gRPC vulnerabilitiesSecurityNo warnings★ 48.2K↓ —
- wp-guardsickn33/agentic-awesome-skillsReview generated or changed WordPress plugins, themes, and blocks for security, internationalization, performance, and API correctness.SecurityNo warnings★ 48.2K↓ —
- hunt-ssrfsickn33/agentic-awesome-skillsHunting skill for ssrf vulnerabilities.SecurityNo warnings★ 48.2K↓ —
- ot-icssickn33/agentic-awesome-skillsAuthorized OT/ICS security assessment: Purdue-model zoning review, PLC/SCADA exposure, industrial protocol discovery, and passive-first evaluation discipline.SecurityNo warnings★ 48.2K↓ —
- radio-sdrsickn33/agentic-awesome-skillsAuthorized RF/SDR security research: signal identification, replay-feasibility study in shielded labs, and wireless protocol analysis outside regulated bands.SecurityNo warnings★ 48.2K↓ —
- find-bugssickn33/agentic-awesome-skillsFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.SecurityNo warnings★ 48.2K↓ —
- hunt-cicdsickn33/agentic-awesome-skillsHunt CI/CD pipeline vulnerabilitiesSecurityNo warnings★ 48.2K↓ —
- hunt-miscsickn33/agentic-awesome-skillsHunting skill for misc vulnerabilities. Built from 225 public bug bounty reports. Use when hunting misc on any target.SecurityNo warnings★ 48.2K↓ —
- waf-setupsickn33/agentic-awesome-skillsDeploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.SecurityNo warnings★ 48.2K↓ —
- solidity-securitywshobson/agentsMaster smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.SecurityNo warnings★ 41.4K↓ —
firebase
sickn33/agentic-awesome-skills
SecurityUpdated 10 hours ago
From the author
Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong.
Install
npx skills add sickn33/agentic-awesome-skills --skill firebase -a claude-code
Installs to .claude/skills/firebase/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption72
Files (2)
- SKILL.md
- references/detailed-guide.md