Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 2 hours ago
47,307 skills
- deck-graphify-darknexu-io/html-anything深夜渐变 + 漂浮 orbs + SVG 力导向图谱 + JetBrains MonoDocumentsNo warnings★ 9.3K↓ —
- hive.x-automationaden-hive/hiveRead before automating X / Twitter with browser_* tools. Verified flows for post, reply, delete, search-and-engage, plus the Draft.js compose quirks that silently disable the send button. Includes the daily-reply and job-market-reply playbooks. Requires hive.browser-automation for the underlying screenshot + coordinate workflow. Verified 2026-04-11.BrowserNo warnings★ 11.1K↓ —
- deck-tech-sharingnexu-io/html-anythingGitHub-dark + JetBrains Mono + 终端代码块, 含 agenda + Q&ADocumentsNo warnings★ 9.3K↓ —
- diagnosing-superpowersjnMetaCode/superpowers-zh当一次 superpowers 会话出了问题、你的人类伙伴想知道原因时使用——重复劳动、无视计划、磕磕绊绊、结果质量差、某个技能没触发、"太慢了"、"为什么这么贵"、"它到底在干什么"——或者想给 superpowers 维护者整理一份 bug 报告；适用于当前会话，或按 id / 路径指定的过往会话，任何工具均可OtherNo warnings★ 8.4K↓ —
- social-media-matrixnexu-io/html-anything电影感多平台社媒分析: 互动图、悬浮洞察、区间对比、明暗主题MarketingNo warnings★ 9.3K↓ —
- sql-proJeffallan/claude-skillsOptimizes SQL queries, designs database schemas, and troubleshoots performance issues. Use when a user asks why their query is slow, needs help writing complex joins or aggregations, mentions database performance issues, or wants to design or migrate a schema. Invoke for complex queries, window functions, CTEs, indexing strategies, query plan analysis, covering index creation, recursive queries, EXPLAIN/ANALYZE interpretation, before/after query benchmarking, or migrating queries between database dialects (PostgreSQL, MySQL, SQL Server, Oracle).DataNo warnings★ 12.1K↓ —
- doc-kami-parchmentnexu-io/html-anything暖羊皮纸底 (#f5f4ed) + 墨蓝单色 accent (#1B365D) + 单一衬线字体, 编辑级排印OtherNo warnings★ 9.3K↓ —
- deck-xhs-pastelnexu-io/html-anything奶油底 + 柔光 blob + 马卡龙圆角卡片 + Playfair 斜体序号DocumentsNo warnings★ 9.3K↓ —
- document-api-endpointgetsentry/skillsDocument and type a Sentry API endpoint. Write or fix @extend_schema decorators, specify response TypedDicts, type request parameters, correct type drift between the declared schema and the runtime response, and validate the generated spec. Use when asked to "document an endpoint", "add OpenAPI docs", "add/fix @extend_schema", "type an endpoint response", "fix the response type", "fix type drift", "reuse a response type", "split an overloaded endpoint", "specify the response schema", "add a TypedDict response", "migrate a legacy api-docs path", "fix a parameter type", or "make an endpoint public" / "promote an endpoint" (promotion is one section here).OfficialEngineeringNo warnings★ 1.1K↓ —
- musicelevenlabs/skillsGenerate music using ElevenLabs Music API. Use when creating instrumental tracks, songs with lyrics, background music, jingles, or any AI-generated music composition. Supports prompt-based generation, composition plans for granular control, and detailed output with metadata.OfficialMediaNo warnings★ 515↓ —
- offensive-parameter-pollutionSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.7K↓ —
- ml-pipelineJeffallan/claude-skillsDesigns and implements production-grade ML pipeline infrastructure: configures experiment tracking with MLflow or Weights & Biases, creates Kubeflow or Airflow DAGs for training orchestration, builds feature store schemas with Feast, deploys model registries, and automates retraining and validation workflows. Use when building ML pipelines, orchestrating training workflows, automating model lifecycle, implementing feature stores, managing experiment tracking systems, setting up DVC for data versioning, tuning hyperparameters, or configuring MLOps tooling like Kubeflow, Airflow, MLflow, or Prefect.DevOpsNo warnings★ 12.1K↓ —
- article-magazinenexu-io/html-anythingSubstack / Medium 高级感长文排版, 适合公众号、博客发布WritingNo warnings★ 9.3K↓ —
- dotnet-core-expertJeffallan/claude-skillsUse when building .NET 8 applications with minimal APIs, clean architecture, or cloud-native microservices. Invoke for Entity Framework Core, CQRS with MediatR, JWT authentication, AOT compilation.PlanningNo warnings★ 12.1K↓ —
- story-coverzenstory-ai/oh-story-claudecode小说封面生成。根据书名、作者名自动分析题材风格，调用 GPT-Image-2 生成含标题和署名的专业级网文封面；Codex CLI 优先使用内置 ImageGen，无需单独 API Key。触发方式：/story-cover、/封面、「帮我做个封面」「生成封面图」「做个小说封面」「封面设计」。MediaNo warnings★ 8.1K↓ —Also in 1 other repo
- kibana-anomaly-detectionelastic/agent-skillsElastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations. Use when answering "what broke?"/"which entity?"/RCA, "why is score high/low?"/renormalization, "datafeed stopped"/"memory limit"/hard_limit, or configuring ML anomaly detection jobs. Reads results from `.ml-anomalies-*` and job state from ML REST APIs.OfficialFinanceNo warnings★ 602↓ —Also in 1 other repo
- rdd-advisory-transportGentleman-Programming/gentle-aiTrigger: reviewer transport, advisory transport, review adapter, lens prompt/schema, OpenCode reviewer plugin, Codex reviewer, ReviewProviderContract. Enforce the shared Go advisory reviewer transport contract.LegalNo warnings★ 8.1K↓ —
- golang-proJeffallan/claude-skillsImplements concurrent Go patterns using goroutines and channels, designs and builds microservices with gRPC or REST, optimizes Go application performance with pprof, and enforces idiomatic Go with generics, interfaces, and robust error handling. Use when building Go applications requiring concurrent programming, microservices architecture, or high-performance systems. Invoke for goroutines, channels, Go generics, gRPC integration, CLI tools, benchmarks, or table-driven testing.TestingNo warnings★ 12.1K↓ —
- mysqlplanetscale/database-skillsPlan and review MySQL/InnoDB schema, indexing, query tuning, transactions, and operations. Use when creating or modifying MySQL tables, indexes, or queries; diagnosing slow/locking behavior; planning migrations; or troubleshooting replication and connection issues. Load when using a MySQL database.OfficialDataNo warnings★ 730↓ —
- executing-plansjnMetaCode/superpowers-zh当你要在当前会话里亲自担任实现者执行一份实现计划时使用——你的人类伙伴选择了内联执行，或者没有可用的子智能体工具PlanningNo warnings★ 8.4K↓ —
- agent-startup-and-context-ingestionmvschwarz/openrigUse when designing or auditing how an agent becomes useful after launch — AGENTS.md overlays, role files, skills, rig specs, workflow specs, startup checklists, refocus messages, "rig context" surface. Covers the 4 failure modes that make startup context fail (old rig spec misses current operating mode; current agents never told about new guidance; startup file as dumping ground; orchestrator transmits implementation without preserving product intent).ProductivityNo warnings★ 8.3K↓ —Also in 1 other repo
- deck-course-modulenexu-io/html-anything暖纸背景 + Playfair, 左侧学习目标常驻, 含 MCQ 自测页DocumentsNo warnings★ 9.3K↓ —
- security-ml-integrationsNewelastic/agent-skillsInstall and manage Elastic security ML integration packages (beaconing, ded, dga, lmd, pad, problemchild). Handles the full lifecycle: pre-flight checks, Fleet package install, component templates, ingest pipelines, transforms, data views, ML anomaly detection jobs, and detection rules. Use when a user asks to install, set up, check the status of, or troubleshoot a security ML integration package.OfficialSecurityNo warnings★ 602↓ —Also in 1 other repo
- deck-hermes-cybernexu-io/html-anything黑底 + CRT 网格扫描线 + $ 命令行标题 + 薄荷绿大字 + 三档 tagDocumentsNo warnings★ 9.3K↓ —
offensive-business-logic
SnailSploit/Claude-Red
SecurityUpdated Oct 12, 2026
From the author
Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking, refund/chargeback abuse, race conditions on logic boundaries, parameter tampering for hidden flows, role/tenant boundary violations, time-of-check vs use, anti-automation defeat, fraud-detection evasion, and subscription/quota abuse. Use when scoping an application after surface-level OWASP Top 10 has been covered, or when the asset is a transactional/marketplace/fintech/e-commerce/SaaS app where logic flaws produce direct financial impact.
Install
npx skills add SnailSploit/Claude-Red --skill offensive-business-logic -a claude-code
Installs to .claude/skills/offensive-business-logic/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 92
Security100
Provenance87
Maintenance100
Licence100
Adoption61
Files (1)
- SKILL.md