Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 6 hours ago
47,305 skills
- guidanceOrchestra-Research/AI-Research-SKILLsControl LLM output with regex and grammars, guarantee valid JSON/XML/code generation, enforce structured formats, and build multi-step workflows with Guidance - Microsoft Research's constrained generation frameworkScienceNo warnings★ 14K↓ —
- mamba-architectureOrchestra-Research/AI-Research-SKILLsState-space model with O(n) complexity vs Transformers' O(n²). 5× faster inference, million-token sequences, no KV cache. Selective SSM with hardware-aware design. Mamba-1 (d_state=16) and Mamba-2 (d_state=128, multi-head). Models 130M-2.8B on HuggingFace.PlanningNo warnings★ 14K↓ —
- create-skillCherryHQ/cherry-studioCreate a new skill in the current repository. Use when the user wants to create/add a new skill, or mentions creating a skill from scratch. This skill follows the workflow defined in .agents/skills/README.md and helps scaffold, validate, and sync new skills.ProductivityNo warnings★ 53K↓ —
- expo-dev-clientUpdatedexpo/skillsBuild and distribute Expo development clients locally or via TestFlight for internal testing. For production TestFlight releases and store submission, use the eas-app-stores skill.OfficialTestingNo warnings★ 3.4K↓ —
- pineconeOrchestra-Research/AI-Research-SKILLsManaged vector database for production AI applications. Fully managed, auto-scaling, with hybrid search (dense + sparse), metadata filtering, and namespaces. Low latency (<100ms p95). Use for production RAG, recommendation systems, or semantic search at scale. Best for serverless, managed infrastructure.DevOpsNo warnings★ 14K↓ —Also in 1 other repo
- application-integration-authoringNewgoogle/skillsBuilds, versions, publishes, tests, and executes Google Cloud Application Integration workflows through the REST API and Python discovery client, and promotes versions across environments. Use when listing integrations, downloading or uploading integration versions as JSON, configuring API triggers or config variables, publishing drafts, invoking integrations, or automating CI/CD promotion. Do not use for initial region provisioning and IAM setup (use application-integration-basics) or diagnosing failed runs and logs (use application-integration-troubleshooting).OfficialTestingNo warnings★ 21.6K↓ —
- evolving-ai-agentsOrchestra-Research/AI-Research-SKILLsProvides guidance for automatically evolving and optimizing AI agents across any domain using LLM-driven evolution algorithms. Use when building self-improving agents, optimizing agent prompts and skills against benchmarks, or implementing automated agent evaluation loops.OtherNo warnings★ 14K↓ —
- eas-updateUpdatedexpo/skillsConfigure and use EAS Update for over-the-air JavaScript and asset updates with expo-updates and EAS CLI. Use when setting up OTA updates, running eas update:configure or eas update, publishing to preview/staging/production channels, explaining branches/channels/runtime versions, testing updates, or debugging why an installed build still shows old code. Load for TestFlight, preview, or production updates that do not appear, including questions about cold launches or reopening the app. Not for update health metrics; use eas-update-insights for adoption, crashes, and rollout monitoring.OfficialTestingNo warnings★ 3.4K↓ —
- gitlab-cisickn33/agentic-awesome-skillsConfigure GitLab CI/CD pipelines and runners for automated building, testing, and deployment.TestingNo warnings★ 48.7K↓ —
- k2cloudflare/skillsBuild and troubleshoot Cloudflare K2 or K2 Streams durable logs. Use for stream setup, producing from Workers or HTTP, configuring retention and inputs, and consuming through subscriptions.OfficialDevOpsNo warnings★ 3.2K↓ —
- clipOrchestra-Research/AI-Research-SKILLsOpenAI's model connecting vision and language. Enables zero-shot image classification, image-text matching, and cross-modal retrieval. Trained on 400M image-text pairs. Use for image search, content moderation, or vision-language tasks without fine-tuning. Best for general-purpose image understanding.MediaNo warnings★ 14K↓ —
- paper-figurewanshuiyin/Auto-claude-code-research-in-sleepGenerate publication-quality figures and tables from experiment results. Use when user says \"画图\", \"作图\", \"generate figures\", \"paper figures\", or needs plots for a paper.ScienceNo warnings★ 18.2K↓ —
- autogpt-agentsOrchestra-Research/AI-Research-SKILLsAutonomous AI agent platform for building and deploying continuous agents. Use when creating visual workflow agents, deploying persistent autonomous agents, or building complex multi-step AI automation systems.DevOpsNo warnings★ 14K↓ —
- expo-domUpdatedexpo/skillsUse Expo DOM components to run web code in a webview on native and as-is on web. Migrate web code to native incrementally. For the end-to-end migration of a whole web app, use the expo-web-to-native skill.OfficialEngineeringNo warnings★ 3.4K↓ —
- auto-review-loopwanshuiyin/Auto-claude-code-research-in-sleepAutonomous multi-round research review loop. Repeatedly reviews using Claude Code via claude-review MCP, implements fixes, and re-reviews until positive assessment or max rounds reached. Use when user says "auto review loop", "review until it passes", or wants autonomous iterative improvement.EngineeringNo warnings★ 18.2K↓ —
- awq-quantizationOrchestra-Research/AI-Research-SKILLsActivation-aware weight quantization for 4-bit LLM compression with 3x speedup and minimal accuracy loss. Use when deploying large models (7B-70B) on limited GPU memory, when you need faster inference than GPTQ with better accuracy preservation, or for instruction-tuned and multimodal models. MLSys 2024 Best Paper Award winner.DevOpsNo warnings★ 14K↓ —
- peft-fine-tuningOrchestra-Research/AI-Research-SKILLsParameter-efficient fine-tuning for LLMs using LoRA, QLoRA, and 25+ methods. Use when fine-tuning large models (7B-70B) with limited GPU memory, when you need to train <1% of parameters with minimal accuracy loss, or for multi-adapter serving. HuggingFace's official library integrated with transformers ecosystem.ProductivityNo warnings★ 14K↓ —
- dart-resolve-package-conflictsflutter/agent-pluginsWorkflow for fixing package version conflicts. Use this when `pub get` fails due to incompatible package versions.OfficialProductivityNo warnings★ 3.1K↓ —
- azure-mgmt-weightsandbiases-dotnetmicrosoft/skillsAzure Weights & Biases SDK for .NET. ML experiment tracking and model management via Azure Marketplace. Use for creating W&B instances, managing SSO, marketplace integration, and ML observability. Triggers: "Weights and Biases", "W&B", "WeightsAndBiases", "ML experiment tracking", "model registry", "experiment management", "wandb".OfficialDevOpsNo warnings★ 3.2K↓ —
- wranglercloudflare/skillsRun or troubleshoot Wrangler CLI commands in projects that have a wrangler.jsonc, wrangler.json, or wrangler.toml file, including local development, Previews, deployment, and resource management. For new projects and projects without a Wrangler configuration file, use the cf CLI instead.OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-monitor-opentelemetry-pymicrosoft/skillsAzure Monitor OpenTelemetry Distro for Python. Use for one-line Application Insights setup with auto-instrumentation. Triggers: "azure-monitor-opentelemetry", "configure_azure_monitor", "Application Insights", "OpenTelemetry distro", "auto-instrumentation".OfficialDevOpsNo warnings★ 3.2K↓ —
- idea-creatorwanshuiyin/Auto-claude-code-research-in-sleepGenerate and rank research ideas given a broad direction. Use when user says "找idea", "brainstorm ideas", "generate research ideas", "what can we work on", or wants to explore a research area for publishable directions.ScienceNo warnings★ 18.2K↓ —
- paper-posterwanshuiyin/Auto-claude-code-research-in-sleepDEPRECATED — superseded by /paper-poster-html. Kept only as a redirect for muscle memory; do not use for new posters.ScienceNo warnings★ 18.2K↓ —
- paper-slideswanshuiyin/Auto-claude-code-research-in-sleepGenerate conference presentation slides (beamer LaTeX → PDF + editable PPTX) from a compiled paper, with speaker notes and full talk script. Use when user says "做PPT", "做幻灯片", "make slides", "conference talk", "presentation slides", "生成slides", "写演讲稿", or wants beamer slides for a conference talk.DocumentsNo warnings★ 18.2K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more