Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,928 skills from 2,309 repositories · updated 17 minutes ago
47,926 skills
- aspnet-coreopenai/skillsBuild, review, refactor, or architect ASP.NET Core web applications using current official guidance for .NET web development. Use when working on Blazor Web Apps, Razor Pages, MVC, Minimal APIs, controller-based Web APIs, SignalR, gRPC, middleware, dependency injection, configuration, authentication, authorization, testing, performance, deployment, or ASP.NET Core upgrades.OfficialTestingNo warnings★ 28.4K↓ —Also in 1 other repo
- wiki-vitepressmicrosoft/skillsPackages generated wiki Markdown into a VitePress static site with dark theme, dark-mode Mermaid diagrams with click-to-zoom, and production build output. Use when the user wants to create a browsable website from generated wiki pages.OfficialOtherNo warnings★ 3.2K↓ —
- tiktok-uploaddreammis/social-auto-upload使用仓库现有 Patchright/Playwright Chrome 上传器登录并发布 TikTok 视频。Use when 用户要发布 TikTok 视频,且当前环境可访问本仓库及其本地 Chrome 配置。TestingNo warnings★ 15.9K↓ —
- youtube-uploaddreammis/social-auto-upload使用 social-auto-upload 的 `sau youtube` 登录 YouTube 并上传、安排定时或设置视频可见范围。Use when 用户要向 YouTube 发布或定时发布视频,或检查 Google/YouTube 登录状态。OtherNo warnings★ 15.9K↓ —
- baijiahao-uploaddreammis/social-auto-upload使用 social-auto-upload 的 `sau baijiahao` 登录百家号、检查账号并发布视频。Use when 用户要向百家号发布视频或核验百家号登录状态。OtherNo warnings★ 15.9K↓ —
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 14K↓ —
- tencent-uploaddreammis/social-auto-upload使用 social-auto-upload 的 `sau tencent` 登录视频号并发布或定时发布视频、保存草稿。Use when 用户要向微信视频号发布视频或检查视频号账号状态。OtherNo warnings★ 15.9K↓ —
- supabasesupabase/agent-skillsUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); debugging and troubleshooting errors or unexpected behavior on Supabase projects (HTTP errors, Postgres errors, RLS surprises, permission denied, schema cache issues, timeouts, Edge Function crashes, Realtime drops, Storage failures) and reading or querying logs (Logs Explorer, ClickHouse).OfficialSecurityNo warnings★ 3K↓ —
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 14K↓ —
- llama-cppOrchestra-Research/AI-Research-SKILLsRuns LLM inference on CPU, Apple Silicon, and consumer GPUs without NVIDIA hardware. Use for edge deployment, M1/M2/M3 Macs, AMD/Intel GPUs, or when CUDA is unavailable. Supports GGUF quantization (1.5-8 bit) for reduced memory and 4-10× speedup vs PyTorch on CPU.DevOpsNo warnings★ 14.1K↓ —
- hunt-lfisickn33/agentic-awesome-skillsHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path TraversalOtherNo warnings★ 48.8K↓ —
- google-ads-api-quickstartgoogle/skillsGuides developers through Google Ads API quickstart: credential setup, choosing from 6 client libraries/REST, configuring environments, and running a "retrieve campaigns" script. Troubleshoots common setup errors: USER_PERMISSION_DENIED, login_customer_id issues, and DEVELOPER_TOKEN_NOT_APPROVED. Use this skill when: - The user asks how to get started with the Google Ads API. - The user needs to set up Google Ads credentials or developer tokens. - The user wants to write a quickstart/example script for Google Ads. - The user encounters errors like USER_PERMISSION_DENIED or DEVELOPER_TOKEN_NOT_APPROVED.OfficialMarketingNo warnings★ 21.7K↓ —
- durable-objectsUpdatedcloudflare/skillsBuild, debug, or review Cloudflare Durable Objects code for persistent state and coordination.OfficialDevOpsNo warnings★ 3.2K↓ —
- gdb-clisickn33/agentic-awesome-skillsGDB debugging assistant for AI agents - analyze core dumps, debug live processes, investigate crashes and deadlocks with source code correlationEngineeringNo warnings★ 48.8K↓ —
- mysqlsickn33/agentic-awesome-skillsAdminister MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.DataNo warnings★ 48.8K↓ —
- azure-kusto-irql-graphmicrosoft/skillsApply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 1 other repo
- azure-appconfiguration-pymicrosoft/skillsAzure App Configuration SDK for Python. Use for centralized configuration management, feature flags, and dynamic settings. Triggers: "azure-appconfiguration", "AzureAppConfigurationClient", "feature flags", "configuration", "key-value settings".OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-ai-vision-imageanalysis-pymicrosoft/skillsAzure AI Vision Image Analysis SDK for captions, tags, objects, OCR, people detection, and smart cropping. Use for computer vision and image understanding tasks. Triggers: "image analysis", "computer vision", "OCR", "object detection", "ImageAnalysisClient", "image caption".OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-enterprise-infra-plannermicrosoft/skillsArchitect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 2 other repos
- wiki-architectmicrosoft/skillsAnalyzes code repositories and generates hierarchical documentation structures with onboarding guides. Use when the user wants to create a wiki, generate documentation, map a codebase structure, or understand a project's architecture at a high level.OfficialPlanningNo warnings★ 3.2K↓ —
- pixel-artwanshuiyin/Auto-claude-code-research-in-sleepGenerate pixel art SVG illustrations for READMEs, docs, or slides. Use when user says "画像素图", "pixel art", "make an SVG illustration", "README hero image", or wants a cute visual.DocumentsNo warnings★ 18.3K↓ —Also in 1 other repo
- patent-pipelinewanshuiyin/Auto-claude-code-research-in-sleepFull patent drafting pipeline from invention description to jurisdiction-formatted filing documents. Supports CN (CNIPA), US (USPTO), EP (EPO). Supports invention patents and utility models. Use when user says "写专利", "patent pipeline", "专利申请", "draft patent", "写权利要求书", or wants to draft a complete patent application.OtherNo warnings★ 18.3K↓ —
- declarative-agent-developermicrosoft/skillsCreate, build, deploy, and localize declarative agents for M365 Copilot and Teams. USE THIS SKILL for ANY task involving a declarative agent — including localization, scaffolding, editing manifests, adding capabilities, and deploying. Localization requires tokenized manifests and language files that only this skill knows how to produce. Triggers: "create agent", "create a declarative agent", "new declarative agent", "scaffold an agent", "new agent project", "add a capability", "add a plugin", "configure my agent", "deploy my agent", "fix my agent manifest", "edit my agent", "localize my agent", "add localization", "translate my agent", "multi-language agent", "add an API plugin", "add an MCP plugin", "add OAuth to my plugin", "review instructions", "improve instructions", "fix my instructions"OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-messaging-webpubsubservice-pymicrosoft/skillsAzure Web PubSub Service SDK for Python. Use for real-time messaging, WebSocket connections, and pub/sub patterns. Triggers: "azure-messaging-webpubsubservice", "WebPubSubServiceClient", "real-time", "WebSocket", "pub/sub".OfficialDevOpsNo warnings★ 3.2K↓ —
offensive-windows-privesc
SnailSploit/Claude-Red
From the author
Comprehensive Windows privilege escalation methodology for offensive security engagements. Covers the full attack surface from a standard user shell to NT AUTHORITY\SYSTEM: token impersonation via SeImpersonate and SeAssignPrimaryToken privileges using JuicyPotato, PrintSpoofer, GodPotato, SweetPotato, and RoguePotato; service misconfigurations including unquoted service paths, weak service DACLs, writable service binaries, and insecure service creation permissions; AlwaysInstallElevated MSI exploitation; DLL hijacking through search order abuse, phantom DLL loading, and writable PATH directory injection; UAC bypass techniques via fodhelper.exe, eventvwr.exe, CMSTP, and environment variable manipulation; scheduled task abuse for writable task actions and new task creation; registry autorun exploitation for persistence and escalation; PrintNightmare (CVE-2021-34527) for remote and local privilege escalation; and credential harvesting from SAM database extraction, DPAPI blob decryption, LSA secret dumping, and
Install
npx skills add SnailSploit/Claude-Red --skill offensive-windows-privesc -a claude-code
Installs to .claude/skills/offensive-windows-privesc/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 92
Files (1)
- SKILL.md