Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,700 skills from 2,243 repositories · updated 20 hours ago
46,700 skills
- faviconsickn33/agentic-awesome-skillsGenerate favicons from a source imageMediaNo warnings★ 48.6K↓ —
- web-perfcloudflare/skillsAudit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.OfficialOtherNo warnings★ 3.2K↓ —
- nemo-evaluator-sdkOrchestra-Research/AI-Research-SKILLsEvaluates LLMs across 100+ benchmarks from 18+ harnesses (MMLU, HumanEval, GSM8K, safety, VLM) with multi-backend execution. Use when needing scalable evaluation on local Docker, Slurm HPC, or cloud platforms. NVIDIA's enterprise-grade platform with container-first architecture for reproducible benchmarking.DevOpsNo warnings★ 14K↓ —
- research-pipelinewanshuiyin/Auto-claude-code-research-in-sleepFull end-to-end research pipeline: from a broad research direction through idea discovery, experiments, and review all the way to a polished paper PDF. Use when user says "全流程", "full pipeline", "从找idea到投稿", "end-to-end research", or wants the complete autonomous research lifecycle.ScienceNo warnings★ 18.2K↓ —
- azure-ai-anomalydetector-javamicrosoft/skillsBuild anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-projects-javamicrosoft/skillsAzure AI Projects SDK for Java. High-level SDK for Azure AI Foundry project management including connections, datasets, indexes, and evaluations. Triggers: "AIProjectClient java", "azure ai projects java", "Foundry project java", "ConnectionsClient", "DatasetsClient", "IndexesClient".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-microsoft-playwright-testing-tsmicrosoft/skillsRun Playwright tests at scale using Azure Playwright Workspaces (formerly Microsoft Playwright Testing). Use when scaling browser tests across cloud-hosted browsers, integrating with CI/CD pipelines, or publishing test results to the Azure portal.OfficialTestingNo warnings★ 3.1K↓ —
- azure-storage-queue-tsmicrosoft/skillsAzure Queue Storage JavaScript/TypeScript SDK (@azure/storage-queue) for message queue operations. Use for sending, receiving, peeking, and deleting messages in queues. Supports visibility timeout, message encoding, and batch operations. Triggers: "queue storage", "@azure/storage-queue", "QueueServiceClient", "QueueClient", "send message", "receive message", "dequeue", "visibility timeout".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-security-keyvault-keys-dotnetmicrosoft/skillsAzure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification. Triggers: "Key Vault keys", "KeyClient", "CryptographyClient", "RSA key", "EC key", "encrypt decrypt .NET", "key rotation", "HSM".OfficialSecurityNo warnings★ 3.1K↓ —
- azure-communication-sms-javamicrosoft/skillsSend SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.OfficialDevOpsNo warnings★ 3.1K↓ —
- flutter-setup-localizationflutter/agent-pluginsAdd `flutter_localizations` and `intl` dependencies, enable "generate true" in `pubspec.yaml`, and create an `l10n.yaml` configuration file. Use when initializing localization support for a new Flutter project.OfficialOtherNo warnings★ 3.1K↓ —
- basincloudflare/skillsBuild and troubleshoot Cloudflare Basin analytics workflows with Basin Pipelines, Basin Catalog, and Basin SQL. Use for streaming data into R2 Iceberg tables, managing catalogs, or querying those tables; also use for requests using the former Data Platform, Pipelines, R2 Data Catalog, or R2 SQL names.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 1 other repo
- azure-ai-transcription-pymicrosoft/skillsAzure AI Transcription SDK for Python. Use for real-time and batch speech-to-text transcription with timestamps and diarization. Triggers: "transcription", "speech to text", "Azure AI Transcription", "TranscriptionClient".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-keyvault-secrets-rustmicrosoft/skillsAzure Key Vault Secrets library for Rust. Store and retrieve secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust", "list secrets rust".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-voicelive-dotnetmicrosoft/skillsAzure AI Voice Live SDK for .NET. Build real-time voice AI applications with bidirectional WebSocket communication. Use for voice assistants, conversational AI, real-time speech-to-speech, and voice-enabled chatbots. Triggers: "voice live", "real-time voice", "VoiceLiveClient", "VoiceLiveSession", "voice assistant .NET", "bidirectional audio", "speech-to-speech".OfficialDevOpsNo warnings★ 3.1K↓ —
- notion-meeting-intelligenceopenai/skillsPrepare meeting materials with Notion context and Codex research; use when gathering context, drafting agendas/pre-reads, and tailoring materials to attendees.OfficialProductivityNo warnings★ 28.3K↓ —Also in 1 other repo
- azure-keyvault-pymicrosoft/skillsAzure Key Vault SDK for Python. Use for secrets, keys, and certificates management with secure storage. Triggers: "key vault", "SecretClient", "KeyClient", "CertificateClient", "secrets", "encryption keys".OfficialDevOpsNo warnings★ 3.1K↓ —
- gh-stackCherryHQ/cherry-studioManage Cherry Studio stacked branches and pull requests with the GitHub gh-stack extension. Use for planning, creating, inspecting, rebasing, syncing, linking, or recovering a stack of dependent PRs.PlanningNo warnings★ 53K↓ —
- idea-creatorwanshuiyin/Auto-claude-code-research-in-sleepGenerate and rank research ideas given a broad direction. Use when user says "找idea", "brainstorm ideas", "generate research ideas", "what can we work on", or wants to explore a research area for publishable directions.ScienceNo warnings★ 18.2K↓ —
- azure-cosmos-pymicrosoft/skillsAzure Cosmos DB SDK for Python (NoSQL API). Use for document CRUD, queries, containers, and globally distributed data. Triggers: "cosmos db", "CosmosClient", "container", "document", "NoSQL", "partition key".OfficialDevOpsNo warnings★ 3.1K↓ —
- khazix-writerKKKKhazix/khazix-skills数字生命卡兹克（Khazix）的公众号长文写作skill。当用户需要撰写公众号文章、写稿子、续写文章、根据素材产出长文时使用。触发词包括但不限于：写文章、写稿子、帮我写、续写、扩写、公众号文章、长文、出稿、按我的风格写。即使用户只是说"帮我把这个写成文章"或"用我的风格写一下"，只要上下文涉及内容创作和公众号输出，都应该触发。也适用于用户丢过来一个PDF、brief、新闻链接、语音转文字或任何素材说"帮我写篇文章"的场景。不要用于短内容（小红书帖子、推特、朋友圈）或纯标题摘要生成（那个用wechat-title skill）。WritingNo warnings★ 21.7K↓ —
- k2cloudflare/skillsBuild and troubleshoot Cloudflare K2 or K2 Streams durable logs. Use for stream setup, producing from Workers or HTTP, configuring retention and inputs, and consuming through subscriptions.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 1 other repo
- azure-cosmos-javamicrosoft/skillsAzure Cosmos DB SDK for Java. NoSQL database operations with global distribution, multi-model support, and reactive patterns. Triggers: "CosmosClient java", "CosmosAsyncClient", "cosmos database java", "cosmosdb java", "document database java".OfficialDevOpsNo warnings★ 3.1K↓ —
- paper-talkwanshuiyin/Auto-claude-code-research-in-sleepEnd-to-end conference talk pipeline: paper → slide outline → Beamer + PPTX → per-page polish → assurance checks (claim / citation / anonymity) → final export and report. Default-good for academic conference talks (NeurIPS / ICML / ICLR / VALSE / 投稿 talks). Trigger phrases: "做 talk", "做 PPT 全流程", "talk pipeline", "end-to-end slides", "做演讲", "conference talk full workflow". Use when the user wants the complete talk artifact, not just a slide deck.ScienceNo warnings★ 18.2K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more