Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,307 skills from 2,272 repositories · updated 7 hours ago
47,307 skills
- offensive-oauthSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.7K↓ —
- issue-creationGentleman-Programming/gentle-aiTrigger: issue creation, bug reports, feature requests, or issue approval. Create and triage GitHub issues from repository evidence.OtherNo warnings★ 8.1K↓ —
- dispatching-parallel-agentsjnMetaCode/superpowers-zh当面对 2 个以上可以独立进行、无共享状态或顺序依赖的任务时使用OtherNo warnings★ 8.4K↓ —
- firestore-rules-creationfirebase/agent-skillsDesigns, authors, refactors, and hardens production-grade Cloud Firestore Security Rules (firestore.rules). IMPORTANT: If subagent delegation AND the firestore-rules-author subagent are available in your environment, delegate authoring firestore.rules to the firestore-rules-author subagent. If subagent delegation is unavailable (e.g. not enabled in the IDE), firestore-rules-author is not installed, or you are running inside firestore-rules-author, follow this skill directly.OfficialSecurityNo warnings★ 491↓ —
- ppt-keynotenexu-io/html-anything苹果 Keynote 级别幻灯片, 一屏一卡, 键盘左右切换OtherNo warnings★ 9.3K↓ —
- offensive-vuln-classesSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.7K↓ —
- eng-runbooknexu-io/html-anything服务概述 + alerts 表 + dashboards + 操作命令 + on-call + 事故清单OtherNo warnings★ 9.3K↓ —
- queue-handoffmvschwarz/openrigUse when ending a turn, finishing a slice, blocked on another agent's work, or escalating to a human — durable work handoff via queue items so the system keeps moving across compactions, missed messages, and interruptions. Covers the hot-potato terminal-turn-rule (active work ends by passing the ball, not by going idle), default-nudge semantics, and when `--no-nudge` is appropriate for intentional cold park or human gate.OtherNo warnings★ 8.3K↓ —
- chinese-code-reviewjnMetaCode/superpowers-zh中文 review 沟通参考——话术模板、分级标注（必须修复/建议修改/仅供参考）、国内团队常见反模式应对。仅在用户显式 /chinese-code-review 时调用，不要根据上下文自动触发。EngineeringNo warnings★ 8.4K↓ —
- extension-to-functions-codebasefirebase/agent-skillsSkill for converting an installed Firebase Extension (or extension source) into a standalone Cloud Functions for Firebase codebase or publishable npm package, including V1 to V2 trigger upgrades, lifecycle hooks, and declarative securityOfficialSecurityNo warnings★ 491↓ —
- offensive-zigbee-thread-matterSnailSploit/Claude-RedZigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.DevOpsNo warnings★ 9.7K↓ —
- requirements-writermvschwarz/openrigUse when converting PM intake into a slice SPEC.md with observable acceptance outcomes, explicit scope, and advisory sibling build dependencies.WritingNo warnings★ 8.3K↓ —Also in 1 other repo
- development-teammvschwarz/openrigUse when a development pod begins or hands off implementation, QA, or design work.TestingNo warnings★ 8.3K↓ —Also in 1 other repo
- human-in-the-loopmvschwarz/openrigUse when classifying a slice closeout (auto-continue / human gate / park), routing a real decision to a human, or designing a human queue/dashboard surface. Treats humans as durable network participants with attention surfaces, queues, and decision records — escalation lands as a durable attention item, not a chat message. Approval is NOT required for every clean closeout; the default RSI conveyor continues unless an explicit human gate is reached.OtherNo warnings★ 8.3K↓ —Also in 1 other repo
- web-proto-brutalistnexu-io/html-anythingSwiss industrial-print 风: 单字 grotesque、巨数字、ASCII 装饰OtherNo warnings★ 9.3K↓ —
- deck-xhs-whitenexu-io/html-anything纯白 + 顶部彩虹 bar + 渐变文字 + 马卡龙软卡片 + 黑底 pillDocumentsNo warnings★ 9.3K↓ —
- frame-macos-notificationnexu-io/html-anything拟真 macOS 通知 banner + app icon + 标题正文, 适合 video overlay / 产品发布预告MediaNo warnings★ 9.3K↓ —
- social-carouselnexu-io/html-anything三张方形卡片轮播, 标题串联, 品牌 mark + 编号OtherNo warnings★ 9.3K↓ —
- frame-glitch-titlenexu-io/html-anything数字故障 / 像散偏移 / 数据腐败标题, 适合视频转场 / cyberpunk heroOtherNo warnings★ 9.3K↓ —
- oversight-teammvschwarz/openrigUse when you are a seat on the oversight pod (a standing monitor-mode rig that keeps OTHER rigs healthy), configuring or running the drift detectors, or choosing whether to intervene vs escalate. Covers the pull-not-poll posture, the v0 detectors (premature-park, process-drift, off-task, token-burn), the intervention ladder (orchestrator-ping -> refocus -> human escalation), and the cheap+deep model economics. NOT for orchestrating your OWN rig (orchestration-team) and NOT the intervention primitive mechanics (watchdog).ProductivityNo warnings★ 8.3K↓ —Also in 1 other repo
- firebase-data-connectfirebase/agent-skillsBuilds and deploys Firebase SQL Connect (aka Firebase Data Connect) backends with PostgreSQL securely. Use when designing schemas with tables and relations, writing authorized queries and mutations, configuring real-time data updates, or generating type-safe SDKs. Use when you need a relational database with Firebase, or when the user mentions SQL Connect or Data Connect.OfficialDevOpsNo warnings★ 491↓ —
- ads-metaAgriciDaniel/claude-adsAudit Meta Ads measurement, Pixel and Events Manager, attribution, Facebook and Instagram creative, audiences, placements, automation, budgets, account structure, and policy. Use for Meta Ads, Facebook Ads, Instagram Ads, Advantage+, Pixel, Events Manager, or Meta account structure. Read-only; use ads-server-side-tracking for server-side events and ads-optimize to change campaigns.MarketingNo warnings★ 10.5K↓ —
- ads-xAgriciDaniel/claude-adsAudit X Ads measurement, X Pixel and Conversions API, campaign objectives, keyword and conversation targeting, creative, budgets, brand safety, app measurement, and reporting. Use for X Ads, Twitter Ads, promoted posts, X Pixel, X Conversions API, conversation targeting, or paid campaigns on X.MarketingNo warnings★ 10.5K↓ —
- openrig-herdrmvschwarz/openrigUse when opening OpenRig fleet terminals as a herdr wall — turning a rig, pod, mission, slice, or saved view into live interactive agent tiles via `rig terminal`, watching another rig read-only, or driving herdr on an agent's request ("open all my rigs + a mission as views"). Covers the `rig terminal open|views|status` verbs, the honest-partial/degrade reading of the result, the read-only-by-construction rail for cross-rig views, scroll/copy out of the box, and the same-size-only duplicate-pane limit. herdr is the default, proof-gated provider.OtherNo warnings★ 8.3K↓ —Also in 1 other repo
elasticsearch-anomaly-detection-explainer
elastic/agent-skills
OfficialOtherUpdated yesterday
From the author
Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation. Use when the user asks why a score is high or low, how the model learns, what the numbers mean, or how to troubleshoot unexpected anomaly scores.
Install
npx skills add elastic/agent-skills --skill elasticsearch-anomaly-detection-explainer -a claude-code
Installs to .claude/skills/elasticsearch-anomaly-detection-explainer/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 92
Security100
Provenance100
Maintenance100
Licence100
Adoption46
Files (2)
- SKILL.md
- references/explainer-reference.md