Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,303 skills from 2,272 repositories · updated 7 minutes ago
47,303 skills
- miles-rl-trainingOrchestra-Research/AI-Research-SKILLsProvides guidance for enterprise-grade RL training using miles, a production-ready fork of slime. Use when training large MoE models with FP8/INT4, needing train-inference alignment, or requiring speculative RL for maximum throughput.PlanningNo warnings★ 14K↓ —
- verl-rl-trainingOrchestra-Research/AI-Research-SKILLsProvides guidance for training LLMs with reinforcement learning using verl (Volcano Engine RL). Use when implementing RLHF, GRPO, PPO, or other RL algorithms for LLM post-training at scale with flexible infrastructure backends.DevOpsNo warnings★ 14K↓ —
- phoenix-observabilityOrchestra-Research/AI-Research-SKILLsOpen-source AI observability platform for LLM tracing, evaluation, and monitoring. Use when debugging LLM applications with detailed traces, running evaluations on datasets, or monitoring production AI systems with real-time insights.DevOpsNo warnings★ 14K↓ —
- expo-domexpo/skillsUse Expo DOM components to run web code in a webview on native and as-is on web. Migrate web code to native incrementally. For the end-to-end migration of a whole web app, use the expo-web-to-native skill.OfficialEngineeringNo warnings★ 3.4K↓ —
- altoranksickn33/agentic-awesome-skillsRun AltoRank through its hosted MCP server: readiness audits, Search Console, keyword research, and SEO drafts into a review queue.ScienceNo warnings★ 48.7K↓ —
- fine-tuning-serving-openpiOrchestra-Research/AI-Research-SKILLsFine-tune and serve Physical Intelligence OpenPI models (pi0, pi0-fast, pi0.5) using JAX or PyTorch backends for robot policy inference across ALOHA, DROID, and LIBERO environments. Use when adapting pi0 models to custom datasets, converting JAX checkpoints to PyTorch, running policy inference servers, or debugging norm stats and GPU memory issues.EngineeringNo warnings★ 14K↓ —
- redis-clisickn33/agentic-awesome-skillsRedis command-line interface (redis-cli) reference and usage guide. Use this skill whenever the user mentions redis-cli, Redis CLI, or any task involving querying, inspecting, debugging, or managing Redis from the command line.EngineeringNo warnings★ 48.7K↓ —
- new-relicsickn33/agentic-awesome-skillsConfigure New Relic observability platform for infrastructure and application monitoring.DevOpsNo warnings★ 48.7K↓ —
- mongodbsickn33/agentic-awesome-skillsAdminister MongoDB databases. Configure replica sets, sharding, and backups. Use when managing MongoDB deployments.DevOpsNo warnings★ 48.7K↓ —
- prompt-guardOrchestra-Research/AI-Research-SKILLsMeta's 86M prompt injection and jailbreak detector. Filters malicious prompts and third-party data for LLM apps. 99%+ TPR, <1% FPR. Fast (<2ms GPU). Multilingual (8 languages). Deploy with HuggingFace or batch processing for RAG security.SecurityNo warnings★ 14K↓ —
- eas-updateexpo/skillsConfigure and use EAS Update for over-the-air JavaScript and asset updates with expo-updates and EAS CLI. Use when setting up OTA updates, running eas update:configure or eas update, publishing to preview/staging/production channels, explaining branches/channels/runtime versions, testing updates, or debugging why an installed build still shows old code. Load for TestFlight, preview, or production updates that do not appear, including questions about cold launches or reopening the app. Not for update health metrics; use eas-update-insights for adoption, crashes, and rollout monitoring.OfficialTestingNo warnings★ 3.4K↓ —
- faviconsickn33/agentic-awesome-skillsGenerate favicons from a source imageMediaNo warnings★ 48.7K↓ —
- nemo-guardrailsOrchestra-Research/AI-Research-SKILLsNVIDIA's runtime safety framework for LLM applications. Features jailbreak detection, input/output validation, fact-checking, hallucination detection, PII filtering, toxicity detection. Uses Colang 2.0 DSL for programmable rails. Production-ready, runs on T4 GPU.OtherNo warnings★ 14K↓ —
- model-mergingOrchestra-Research/AI-Research-SKILLsMerge multiple fine-tuned models using mergekit to combine capabilities without retraining. Use when creating specialized models by blending domain-specific expertise (math + coding + chat), improving performance beyond single models, or experimenting rapidly with model variants. Covers SLERP, TIES-Merging, DARE, Task Arithmetic, linear merging, and production deployment strategies.DevOpsNo warnings★ 14K↓ —
- cloudflare-email-servicecloudflare/skillsImplement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.OfficialDevOpsNo warnings★ 3.2K↓ —
- mysqlsickn33/agentic-awesome-skillsAdminister MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.DataNo warnings★ 48.7K↓ —
- moe-trainingOrchestra-Research/AI-Research-SKILLsTrain Mixture of Experts (MoE) models using DeepSpeed or HuggingFace. Use when training large-scale models with limited compute (5× cost reduction vs dense models), implementing sparse architectures like Mixtral 8x7B or DeepSeek-V3, or scaling model capacity without proportional compute increase. Covers MoE architectures, routing mechanisms, load balancing, expert parallelism, and inference optimization.PlanningNo warnings★ 14K↓ —
- cf-clicloudflare/skillsCloudflare's official cf CLI (beta) for the public Cloudflare API and Workers projects. Use for finding and running Cloudflare commands from the terminal — sign-in and profiles, cf cli search, cf schema, cf deploy/dev/build, resource commands for DNS, zones, D1, KV, and R2 — and for choosing between cf and Wrangler in a project.OfficialEngineeringNo warnings★ 3.2K↓ —
- sandbox-nextcloudflare/skillsBuild or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.OfficialDevOpsNo warnings★ 3.2K↓ —
- huggingface-accelerateOrchestra-Research/AI-Research-SKILLsSimplest distributed training API. 4 lines to add distributed support to any PyTorch script. Unified API for DeepSpeed/FSDP/Megatron/DDP. Automatic device placement, mixed precision (FP16/BF16/FP8). Interactive config, single launch command. HuggingFace ecosystem standard.EngineeringNo warnings★ 14K↓ —Also in 1 other repo
- constitutional-aiOrchestra-Research/AI-Research-SKILLsAnthropic's method for training harmless AI through self-improvement. Two-phase approach - supervised learning with self-critique/revision, then RLAIF (RL from AI Feedback). Use for safety alignment, reducing harmful outputs without human labels. Powers Claude's safety system.OtherNo warnings★ 14K↓ —
- prompt-masternidhinjs/prompt-masterGenerates optimized prompts for AI tools. Activates only when the user explicitly asks to write, fix, improve, or adapt a prompt for a specific AI tool (LLM, Cursor, Midjourney, image AI, video AI, coding agents, etc.). Does not activate for general conversation, coding tasks, document writing, or other non-prompt-engineering work.MediaNo warnings★ 15.2K↓ —
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 14K↓ —
- proof-writerwanshuiyin/Auto-claude-code-research-in-sleepWrites rigorous mathematical proofs for ML/AI theory. Use when asked to prove a theorem, lemma, proposition, or corollary, fill in missing proof steps, formalize a proof sketch, 补全证明, 写证明, 证明某个命题, or determine whether a claimed proof can actually be completed under the stated assumptions.WritingNo warnings★ 18.2K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more