Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,276 skills from 2,272 repositories · updated 28 minutes ago
47,276 skills
- azure-speech-to-text-rest-pymicrosoft/skillsAzure Speech to Text REST API for short audio (Python). Use for simple speech recognition of audio files up to 60 seconds without the Speech SDK. Triggers: "speech to text REST", "short audio transcription", "speech recognition REST API", "STT REST", "recognize speech REST". DO NOT USE FOR: Long audio (>60 seconds), real-time streaming, batch transcription, custom speech models, speech translation. Use Speech SDK or Batch Transcription API instead.OfficialDevOpsNo warnings★ 3.2K↓ —
- tencent-uploadNewdreammis/social-auto-upload使用 social-auto-upload 的 `sau tencent` 登录视频号并发布或定时发布视频、保存草稿。Use when 用户要向微信视频号发布视频或检查视频号账号状态。OtherNo warnings★ 15.9K↓ —
- experiment-bridgewanshuiyin/Auto-claude-code-research-in-sleepWorkflow 1.5: Bridge between idea discovery and auto review. Reads EXPERIMENT_PLAN.md, implements experiment code, deploys to GPU, collects initial results. Use when user says "实现实验", "implement experiments", "bridge", "从计划到跑实验", "deploy the plan", or has an experiment plan ready to execute.DevOpsNo warnings★ 18.2K↓ —
- auto-paper-improvement-loopwanshuiyin/Auto-claude-code-research-in-sleepAutonomously improve a generated paper via Claude review through claude-review MCP → implement fixes → recompile, for 2 rounds. Use when user says "改论文", "improve paper", "论文润色循环", "auto improve", or wants to iteratively polish a generated paper.ScienceNo warnings★ 18.2K↓ —
- azure-vmssickn33/agentic-awesome-skillsManage Azure Virtual Machines and scale sets. Configure availability sets and managed disks. Use when deploying compute resources on Azure.DevOpsNo warnings★ 48.7K↓ —
- golden-jupyteryusufkaraaslan/Skill_SeekersUse when testing the golden_jupyter golden buildTestingNo warnings★ 15.2K↓ —
- deepxivwanshuiyin/Auto-claude-code-research-in-sleepSearch and progressively read open-access academic papers through DeepXiv. Use when the user wants layered paper access, section-level reading, trending papers, or DeepXiv-backed literature retrieval.ScienceNo warnings★ 18.2K↓ —
- mlflowOrchestra-Research/AI-Research-SKILLsTrack ML experiments, manage model registry with versioning, deploy models to production, and reproduce experiments with MLflow - framework-agnostic ML lifecycle platformDevOpsNo warnings★ 14K↓ —
- cherry-computerCherryHQ/cherry-studioDrive native apps via Computer Use: open, inspect, type, click, screenshot. Needs OS permissions; respect user stop.OtherNo warnings★ 53K↓ —
- translate-docsCherryHQ/cherry-studioUse when explicitly asked to translate, backfill, reconcile, rename, or delete paired Cherry Studio repository documentation in English and Simplified Chinese, including Phase 3 domain-by-domain translation work.OtherNo warnings★ 53K↓ —
- azure-aigatewaymicrosoft/skillsConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 2 other repos
- find-simplificationsCherryHQ/cherry-studioUse when asked to find or plan Cherry Studio cleanup, simplification, refactoring, dead-code removal, duplicated state removal, unnecessary APIs, speculative generality, or library replacements, especially when the result should become evidence-backed proposed Agent Notes.PlanningNo warnings★ 53K↓ —
- azure-mgmt-applicationinsights-dotnetmicrosoft/skillsAzure Application Insights SDK for .NET. Application performance monitoring and observability resource management. Use for creating Application Insights components, web tests, workbooks, analytics items, and API keys. Triggers: "Application Insights", "ApplicationInsights", "App Insights", "APM", "application monitoring", "web tests", "availability tests", "workbooks".OfficialDevOpsNo warnings★ 3.2K↓ —
- cloudflare-onecloudflare/skillsDesign, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.OfficialDevOpsNo warnings★ 3.2K↓ —
- slides-polishwanshuiyin/Auto-claude-code-research-in-sleepPer-page Codex review + targeted python-pptx / Beamer fixes for academic talk slides. Use AFTER /paper-slides (or any externally generated PPTX/Beamer) when the deck looks 'mostly OK' but the user wants a final pass that aligns visual weight with a reference, bumps PPTX fonts to projector-readable size, kills italic style leaks, fixes text-frame overflow, and catches per-slide layout drift. Trigger phrases: "polish slides", "slides 排版不对", "PPTX 字体太小", "和 Beamer 比一下", "per-page review", "和 codex 一页一页过".DocumentsNo warnings★ 18.2K↓ —
- azure-kustomicrosoft/skillsQuery and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clusters, log analytics, time series data, IoT telemetry, anomaly detection.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 2 other repos
- entra-agent-idmicrosoft/skillsMicrosoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. Covers Agent Identity Blueprints, BlueprintPrincipals, Agent Identities, required permissions, sponsors, and Workload Identity Federation. Includes Microsoft Entra SDK for AgentID (containerized sidecar) for polyglot agent authentication (Docker/Kubernetes), 3P agent integration, autonomous and interactive agent patterns. Triggers: "agent identity", "agent id", "Agent Identity Blueprint", "BlueprintPrincipal", "entra agent", "agent identity provisioning", "Graph agent identity", "entra sidecar", "agent id sidecar", "auth sidecar", "3P agent", "third-party agent identity", "polyglot agent auth".OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-cosmos-rustmicrosoft/skillsAzure Cosmos DB library for Rust (NoSQL API). Document CRUD, containers, and globally distributed data. Triggers: "cosmos db rust", "CosmosClient rust", "document crud rust", "NoSQL rust", "partition key rust".OfficialDevOpsNo warnings★ 3.2K↓ —
- cherry-tool-guideCherryHQ/cherry-studioCherry tool routing: bun, uv, rg, knowledge, memory, schedules, skills, MCP, web. Read before shell workarounds.ProductivityNo warnings★ 53K↓ —
- wiki-vitepressmicrosoft/skillsPackages generated wiki Markdown into a VitePress static site with dark theme, dark-mode Mermaid diagrams with click-to-zoom, and production build output. Use when the user wants to create a browsable website from generated wiki pages.OfficialOtherNo warnings★ 3.2K↓ —
- azure-resource-manager-postgresql-dotnetmicrosoft/skillsAzure PostgreSQL Flexible Server SDK for .NET. Database management for PostgreSQL Flexible Server deployments. Use for creating servers, databases, firewall rules, configurations, backups, and high availability. Triggers: "PostgreSQL", "PostgreSqlFlexibleServer", "PostgreSQL Flexible Server", "Azure Database for PostgreSQL", "PostgreSQL database management", "PostgreSQL firewall", "PostgreSQL backup", "Postgres".OfficialDevOpsNo warnings★ 3.2K↓ —
- connect-recommendstripe/aiUse this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.OfficialOtherNo warnings★ 2K↓ —Also in 4 other repos
- azure-data-tables-pymicrosoft/skillsAzure Tables SDK for Python (Storage and Cosmos DB). Use for NoSQL key-value storage, entity CRUD, and batch operations. Triggers: "table storage", "TableServiceClient", "TableClient", "entities", "PartitionKey", "RowKey".OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-mgmt-fabric-pymicrosoft/skillsAzure Fabric Management SDK for Python. Use for managing Microsoft Fabric capacities and resources. Triggers: "azure-mgmt-fabric", "FabricMgmtClient", "Fabric capacity", "Microsoft Fabric", "Power BI capacity".OfficialDevOpsNo warnings★ 3.2K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more