Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 18 minutes ago
47,307 skills
- grant-proposalwanshuiyin/Auto-claude-code-research-in-sleepDraft a structured grant proposal from research ideas and literature. Supports KAKENHI (Japan), NSF (US), NSFC (China, including 面上/青年/优青/杰青/海外优青/重点), ERC (EU), DFG (Germany), SNSF (Switzerland), ARC (Australia), NWO (Netherlands), and generic formats. Use when user says "write grant", "grant proposal", "申請書", "write KAKENHI", "科研費", "基金申请", "写基金", "NSF proposal", or wants to turn research ideas into a funding application.ScienceNo warnings★ 18.2K↓ —
- mysqlsickn33/agentic-awesome-skillsAdminister MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.DataNo warnings★ 48.7K↓ —
- azure-mgmt-botservice-dotnetmicrosoft/skillsAzure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".OfficialDevOpsNo warnings★ 3.2K↓ —
- yeetopenai/skillsUse only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (`gh`).OfficialEngineeringNo warnings★ 28.4K↓ —Also in 1 other repo
- pytorch-lightningOrchestra-Research/AI-Research-SKILLsHigh-level PyTorch framework with Trainer class, automatic distributed training (DDP/FSDP/DeepSpeed), callbacks system, and minimal boilerplate. Scales from laptop to supercomputer with same code. Use when you want clean training loops with built-in best practices.EngineeringNo warnings★ 14K↓ —
- azure-advisor-actionabilitymicrosoft/skillsRemediate Azure Advisor recommendations. WHEN: "fix Advisor recommendation".OfficialDevOpsNo warnings★ 3.2K↓ —Also in 1 other repo
- azure-storage-file-share-tsmicrosoft/skillsAzure File Share JavaScript/TypeScript SDK (@azure/storage-file-share) for SMB file share operations. Use for creating shares, managing directories, uploading/downloading files, and handling file metadata. Supports Azure Files SMB protocol scenarios. Triggers: "file share", "@azure/storage-file-share", "ShareServiceClient", "ShareClient", "SMB", "Azure Files".OfficialDevOpsNo warnings★ 3.2K↓ —
- sparse-autoencoder-trainingOrchestra-Research/AI-Research-SKILLsProvides guidance for training and analyzing Sparse Autoencoders (SAEs) using SAELens to decompose neural network activations into interpretable features. Use when discovering interpretable features, analyzing superposition, or studying monosemantic representations in language models.OtherNo warnings★ 14K↓ —Also in 1 other repo
- ara-rigor-reviewerOrchestra-Research/AI-Research-SKILLsPerforms ARA Seal Level 2 semantic epistemic review on Agent-Native Research Artifacts, scoring six dimensions (evidence relevance, falsifiability, scope calibration, argument coherence, exploration integrity, methodological rigor) and producing a constructive, severity-ranked report with a Strong Accept-to-Reject recommendation. Use after Level 1 structural validation passes, when an ARA needs an objective epistemic critique before publication or release.ScienceNo warnings★ 14K↓ —
- transformer-lens-interpretabilityOrchestra-Research/AI-Research-SKILLsProvides guidance for mechanistic interpretability research using TransformerLens to inspect and manipulate transformer internals via HookPoints and activation caching. Use when reverse-engineering model algorithms, studying attention patterns, or performing activation patching experiments.ScienceNo warnings★ 14K↓ —Also in 1 other repo
- azure-eventhub-dotnetmicrosoft/skillsAzure Event Hubs SDK for .NET. Use for high-throughput event streaming: sending events (EventHubProducerClient, EventHubBufferedProducerClient), receiving events (EventProcessorClient with checkpointing), partition management, and real-time data ingestion. Triggers: "Event Hubs", "event streaming", "EventHubProducerClient", "EventProcessorClient", "send events", "receive events", "checkpointing", "partition".OfficialDevOpsNo warnings★ 3.2K↓ —
- azure-ai-translation-text-pymicrosoft/skillsAzure AI Text Translation SDK for real-time text translation, transliteration, language detection, and dictionary lookup. Use for translating text content in applications. Triggers: "text translation", "translator", "translate text", "transliterate", "TextTranslationClient".OfficialDevOpsNo warnings★ 3.2K↓ —
- elasticsearch-query-optimizationelastic/agent-skillsDiagnose slow Elasticsearch Query DSL searches and propose measured fixes. Use when a search is slow, profile output shows an expensive clause, exact-match filters sit in scoring context, or leading wildcards dominate latency. Ground every recommendation in search profiling — move non-scoring clauses to filter context, eliminate leading wildcards, and re-profile to confirm improvement.OfficialProductivityNo warnings★ 602↓ —Also in 1 other repo
- using-dbt-statedbt-labs/dbt-agent-skillsUse when a user is enabling, configuring, optimizing, or debugging dbt State (the server-backed reuse mechanism that clones or skips nodes instead of rebuilding them). Use when they conflate dbt State with the `state:modified` selector or `--state` deferral. Use when asked about models rebuilding unexpectedly, views with `select *` rebuilding, volatile SQL (`current_timestamp()`, `random()`) rebuilding or not, cross-developer cloning, lag_tolerance.OfficialDataNo warnings★ 747↓ —
- configuring-dbt-mcp-serverdbt-labs/dbt-agent-skillsGenerates MCP server configuration JSON, resolves authentication setup, and validates server connectivity for dbt. Use when setting up, configuring, or troubleshooting the dbt MCP server for AI tools like Claude Desktop, Claude Code, Cursor, or VS Code.OfficialDataNo warnings★ 747↓ —
- creating-mermaid-dbt-dagdbt-labs/dbt-agent-skillsGenerates a Mermaid flowchart diagram of dbt model lineage using MCP tools, manifest.json, or direct code parsing as fallbacks. Use when visualizing dbt model lineage and dependencies as a Mermaid diagram in markdown format.OfficialDataNo warnings★ 747↓ —
- ads-auditAgriciDaniel/claude-adsRun a source-grounded paid-advertising audit for one or more of Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X. Use for full ad checks, account health reviews, paid-media diagnostics, partial audits after authentication or worker failure, missing-platform weighting, beta-feature eligibility and scoring, spend audits, tracking audits, or prioritized opportunities and risks.MarketingNo warnings★ 10.5K↓ —
- sred-work-summarygetsentry/skillsGo back through the previous year of work and create a Notion doc that groups relevant links into projects that can then be documented as SRED projects.OfficialProductivityNo warnings★ 1.1K↓ —
- verification-before-completionjnMetaCode/superpowers-zh在宣称工作完成、已修复或测试通过之前使用，在提交或创建 PR 之前——必须运行验证命令并确认输出后才能声称成功；始终用证据支撑断言OtherNo warnings★ 8.4K↓ —
- spec-minerJeffallan/claude-skillsReverse-engineering specialist that extracts specifications from existing codebases. Use when working with legacy or undocumented systems, inherited projects, or old codebases with no documentation. Invoke to map code dependencies, generate API documentation from source, identify undocumented business logic, figure out what code does, or create architecture documentation from implementation. Trigger phrases: reverse engineer, old codebase, no docs, no documentation, figure out how this works, inherited project, legacy analysis, code archaeology, undocumented features.PlanningNo warnings★ 12.1K↓ —
- firebase-security-rules-auditorfirebase/agent-skillsAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.OfficialSecurityNo warnings★ 491↓ —
- waitlist-pagenexu-io/html-anything极简产品预发布落地页, 含邮箱捕获、logo、装饰图层OtherNo warnings★ 9.3K↓ —Also in 1 other repo
- ads-linkedinAgriciDaniel/claude-adsAudit LinkedIn Ads measurement, Insight Tag and conversions, professional audiences, lead generation, ABM, creative, bidding, budgets, pacing, automation, and policy. Use for LinkedIn Ads, Campaign Manager, Insight Tag, Lead Gen Forms, Thought Leader Ads, ABM campaigns, or B2B paid media.MarketingNo warnings★ 10.5K↓ —
- applying-a-permission-policymvschwarz/openrigUse before launching a team during agent-guided setup, or when a user asks to configure OpenRig command permissions, reduce repeated native approval prompts, or apply a selected rig/seat permission policy.OtherNo warnings★ 8.3K↓ —
offensive-waf-bypass
SnailSploit/Claude-Red
SecurityUpdated Oct 12, 2026
From the author
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
The frontmatter could not be read (no frontmatter); the folder name is shown instead.
Install
npx skills add SnailSploit/Claude-Red --skill offensive-waf-bypass -a claude-code
Installs to .claude/skills/offensive-waf-bypass/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 92
Security100
Provenance87
Maintenance100
Licence100
Adoption61
Files (1)
- SKILL.md