Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,268 skills from 2,272 repositories · updated 19 minutes ago
47,268 skills
- cli-creatoropenai/skillsBuild a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script. Use when the user wants Codex to create a command-line tool that can run from any repo, expose composable read/write commands, return stable JSON, manage auth, and pair with a companion skill.OfficialEngineeringNo warnings★ 28.4K↓ —Also in 1 other repo
- ablation-plannerwanshuiyin/Auto-claude-code-research-in-sleepUse when main results pass result-to-claim (claim_supported=yes or partial) and ablation studies are needed for paper submission.PlanningNo warnings★ 18.2K↓ —
- fine-tuning-openvla-oftOrchestra-Research/AI-Research-SKILLsFine-tunes and evaluates OpenVLA-OFT and OpenVLA-OFT+ policies for robot action generation with continuous action heads, LoRA adaptation, and FiLM conditioning on LIBERO simulation and ALOHA real-world setups. Use when reproducing OpenVLA-OFT paper results, training custom VLA action heads (L1 or diffusion), deploying server-client inference for ALOHA, or debugging normalization, LoRA merge, and cross-GPU issues.DevOpsNo warnings★ 14K↓ —
- golden-html-multiyusufkaraaslan/Skill_SeekersUse when testing the multi-file html buildTestingNo warnings★ 15.2K↓ —
- research-refinewanshuiyin/Auto-claude-code-research-in-sleepTurn a vague research direction into a problem-anchored, elegant, frontier-aware, implementation-oriented method plan via iterative GPT-6-Astra review. Use when the user says "refine my approach", "帮我细化方案", "decompose this problem", "打磨idea", "refine research plan", "细化研究方案", or wants a concrete research method that stays simple, focused, and top-venue ready instead of a vague or overbuilt idea.ScienceNo warnings★ 18.2K↓ —
- golden-jupyter-kwyusufkaraaslan/Skill_SeekersUse when testing the golden_jupyter_kw golden buildTestingNo warnings★ 15.2K↓ —
- cherry-electron-devCherryHQ/cherry-studioDevelop, fix, profile, and test PRs in a tracked Cherry Studio Electron instance. Use for implementation, UI and interaction work, runtime debugging, DevTools inspection, performance analysis, and interactive PR verification with a test report. Reuse a verified workspace instance and manage its lifetime according to the selected workflow.TestingNo warnings★ 53K↓ —
- resubmit-pipelinewanshuiyin/Auto-claude-code-research-in-sleepWorkflow 5: orchestrate a text-only resubmit of a polished paper to a different venue under hard constraints (no new experiments, no bib edits, no framework changes, never overwrite prior submissions). Use when user says "resubmit pipeline", "重投流程", "port paper to <new venue>", "resubmit to <venue>", "tighten paper for resubmission", or has a rejected/withdrawn paper to move to a different top venue under tight time budget.ScienceNo warnings★ 18.2K↓ —
- golden-pptxyusufkaraaslan/Skill_SeekersUse when testing the pptx golden buildDocumentsNo warnings★ 15.2K↓ —
- golden-man-kwyusufkaraaslan/Skill_SeekersUse when testing the man golden buildTestingNo warnings★ 15.2K↓ —
- patent-reviewwanshuiyin/Auto-claude-code-research-in-sleepGet an external patent examiner review of a patent application. Use when user says "专利审查", "patent review", "审查意见", "examiner review", or wants critical feedback on patent claims and specification.EngineeringNo warnings★ 18.2K↓ —
- code-documentationflutter/agent-pluginsGuide for writing effective code documentation, including docstrings, JSDoc, dartdoc, and implementation comments. Use this skill when writing new code, adding features, or improving existing documentation in Dart, Python, or TypeScript to ensure clarity and maintainability.OfficialEngineeringNo warnings★ 3.1K↓ —
- upgrade-stripeUpdatedstripe/aiGuide for upgrading Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKsOfficialEngineeringNo warnings★ 2K↓ —Also in 4 other repos
- azure-storage-file-share-tsmicrosoft/skillsAzure File Share JavaScript/TypeScript SDK (@azure/storage-file-share) for SMB file share operations. Use for creating shares, managing directories, uploading/downloading files, and handling file metadata. Supports Azure Files SMB protocol scenarios. Triggers: "file share", "@azure/storage-file-share", "ShareServiceClient", "ShareClient", "SMB", "Azure Files".OfficialDevOpsNo warnings★ 3.2K↓ —
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 14K↓ —
- outlinesOrchestra-Research/AI-Research-SKILLsGuarantee valid JSON/XML/code structure during generation, use Pydantic models for type-safe outputs, support local models (Transformers, vLLM), and maximize inference speed with Outlines - dottxt.ai's structured generation libraryEngineeringNo warnings★ 14K↓ —
- research-reviewwanshuiyin/Auto-claude-code-research-in-sleepGet a deep critical review of research from Gemini via gemini-review MCP. Use when user says "review my research", "help me review", "get external review", or wants critical feedback on research ideas, papers, or experimental results.ScienceNo warnings★ 18.2K↓ —
- azure-cosmos-pymicrosoft/skillsAzure Cosmos DB SDK for Python (NoSQL API). Use for document CRUD, queries, containers, and globally distributed data. Triggers: "cosmos db", "CosmosClient", "container", "document", "NoSQL", "partition key".OfficialDevOpsNo warnings★ 3.2K↓ —
- gdb-clisickn33/agentic-awesome-skillsGDB debugging assistant for AI agents - analyze core dumps, debug live processes, investigate crashes and deadlocks with source code correlationEngineeringNo warnings★ 48.7K↓ —
- google-ads-api-quickstartgoogle/skillsGuides developers through Google Ads API quickstart: credential setup, choosing from 6 client libraries/REST, configuring environments, and running a "retrieve campaigns" script. Troubleshoots common setup errors: USER_PERMISSION_DENIED, login_customer_id issues, and DEVELOPER_TOKEN_NOT_APPROVED. Use this skill when: - The user asks how to get started with the Google Ads API. - The user needs to set up Google Ads credentials or developer tokens. - The user wants to write a quickstart/example script for Google Ads. - The user encounters errors like USER_PERMISSION_DENIED or DEVELOPER_TOKEN_NOT_APPROVED.OfficialMarketingNo warnings★ 21.6K↓ —
- azure-servicebus-tsmicrosoft/skillsBuild messaging applications using Azure Service Bus SDK for JavaScript (@azure/service-bus). Use when implementing queues, topics/subscriptions, message sessions, dead-letter handling, or enterprise messaging patterns.OfficialDevOpsNo warnings★ 3.2K↓ —
- cherry-studio-feedbackCherryHQ/cherry-studioUse when Cherry Studio 用户希望报告、提交或整理 BUG、UI/UX 问题或功能建议，但未明确要求创建 GitHub Issue。DesignNo warnings★ 53K↓ —
- golden-epub-kwyusufkaraaslan/Skill_SeekersUse when testing keyword categorizationTestingNo warnings★ 15.2K↓ —
- research-refinewanshuiyin/Auto-claude-code-research-in-sleepTurn a vague research direction into a problem-anchored, elegant, frontier-aware, implementation-oriented method plan via iterative Gemini review. Use when the user says "refine my approach", "帮我细化方案", "decompose this problem", "打磨idea", "refine research plan", "细化研究方案", or wants a concrete research method that stays simple, focused, and top-venue ready instead of a vague or overbuilt idea.ScienceNo warnings★ 18.2K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more