Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
38,957 skills from 1,786 repositories · updated 9 minutes ago
38,348 skills
- offensive-ssrfSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 8.8K↓ —
- offensive-oauthSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 8.8K↓ —
- offensive-idorSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 8.8K↓ —
- offensive-osintSnailSploit/Claude-RedComprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, GitHub/code leaks, Shodan/Censys enumeration, breach data lookup, employee profiling, infrastructure mapping, cryptocurrency tracing, geospatial intelligence, and AI-assisted analysis workflows. Use when performing reconnaissance against a target domain or organization, investigating a person or entity, tracing cryptocurrency flows, geolocating images or events, or building an attack-surface map.SecurityNo warnings★ 8.8K↓ —
- offensive-graphqlSnailSploit/Claude-RedOffensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full attack lifecycle: endpoint discovery, introspection abuse and blind schema reconstruction when introspection is disabled, authentication and authorization bypass through Relay node IDs and nested object traversal, injection via variables and directives, query batching for brute force and OTP bypass, denial of service through depth bombs and alias amplification, WebSocket subscription hijacking, information disclosure through verbose errors and field suggestion oracles, and file upload abuse via the multipart GraphQL specification. Includes tool-specific guidance for InQL, graphql-cop, CrackQL, BatchQL, Altair, GraphQL Voyager, and clairvoyance. Trigger on: GraphQL, graphql, introspection query, batching attack, query depth, GraphQL injection, GraphQL IDOR, field suggestion, GraphQL auth bypass, GraphQL DoS, GraphQL security, graphql-cop, InQL, CrackQL, BatchQL, Relay node, alias amplification,SecurityNo warnings★ 8.8K↓ —
- ads-creativeAgriciDaniel/claude-adsAudit paid-ad copy, images, video, hooks, concepts, format coverage, platform-native fit, message match, creative fatigue, accessibility, and policy across supported platforms. Use for creative audit, ad creative, creative fatigue, creative diversity, ad copy review, video review, image review, or production priorities.MarketingNo warnings★ 10.4K↓ —Also in 1 other repo
- ads-launchAgriciDaniel/claude-adsDraft or explicitly apply a paid-ad campaign launch through Claude Ads capability-gated adapters. Use for campaign creation, launch plans, publishing ads, activating campaigns, uploading creative, or requests to push a campaign live.MarketingNo warnings★ 10.4K↓ —Also in 1 other repo
- ads-optimizeAgriciDaniel/claude-adsDiagnose and draft or explicitly apply paid-ad optimizations using evidence, financial constraints, experiments, and capability-gated adapters. Use for campaign optimization, budget reallocation, bid changes, pausing or archiving ads, requests to delete campaigns, search-term or negative-keyword actions, creative rotation, or improving CPA and ROAS.MarketingNo warnings★ 10.4K↓ —Also in 1 other repo
- flowai-team-dashboardnexu-io/html-anything三个 tab 的团队管理后台: 成员、详情、活动日志, 含图表 + CSV 导出DataNo warnings★ 9.2K↓ —Also in 1 other repo
- comment-writerGentleman-Programming/gentle-aiWrite warm, direct collaboration comments. Trigger: PR feedback, issue replies, reviews, Slack messages, or GitHub comments.WritingNo warnings★ 8K↓ —Also in 1 other repo
- waitlist-pagenexu-io/html-anything极简产品预发布落地页, 含邮箱捕获、logo、装饰图层OtherNo warnings★ 9.2K↓ —Also in 1 other repo
- ads-testAgriciDaniel/claude-adsDesign and evaluate paid-ad experiments with hypotheses, randomization units, sample-size and duration assumptions, guardrails, platform experiment tools, analysis, and decision rules. Use for A/B test, split test, experiment design, hypothesis, statistical significance, sample size, test duration, or experiment readout.TestingNo warnings★ 10.4K↓ —Also in 2 other repos
- skill-registryGentleman-Programming/gentle-aiTrigger: update skills, skill registry, actualizar skills, after skill changes. Index available skills by trigger and path.OtherNo warnings★ 8K↓ —
- work-unit-commitsGentleman-Programming/gentle-aiPlan commits as reviewable work units. Trigger: implementation, commit splitting, chained PRs, or keeping tests and docs with code.TestingNo warnings★ 8K↓ —
- deck-blueprintnexu-io/html-anything奶油纸 + 锈红 + 蓝图网格 mask + 黑边硬卡片 + pipeline 盒DocumentsNo warnings★ 9.2K↓ —Also in 1 other repo
- hermes-ephemeral-delegationGentleman-Programming/gentle-aiTrigger: a mapping need, parallel units, context backstop, high-risk verify, fresh review, or multi-step debug. Delegate via delegate_task for a named reason.EngineeringNo warnings★ 8K↓ —
- ads-dnaAgriciDaniel/claude-adsExtract a public-safe brand and offer profile for paid advertising from an authorized website and operator input. Triggers on: brand DNA, brand profile, brand identity, brand style, brand colors, brand voice, visual identity, style guide, website brand analysis.MarketingNo warnings★ 10.4K↓ —Also in 1 other repo
- poster-heronexu-io/html-anything竖版海报 / 朋友圈分享图, 强视觉冲击OtherNo warnings★ 9.2K↓ —Also in 1 other repo
- skill-creatorGentleman-Programming/gentle-aiTrigger: new skills, agent instructions, documenting AI usage patterns. Create LLM-first skills with valid frontmatter.OtherNo warnings★ 8K↓ —
- judgment-dayGentleman-Programming/gentle-aiTrigger: judgment day, dual review, adversarial review, juzgar. Run explicit blind dual review with at most two scoped fix/re-judgment rounds.EngineeringNo warnings★ 8K↓ —
- issue-creationGentleman-Programming/gentle-aiTrigger: issue creation, bug reports, feature requests, or issue approval. Create and triage GitHub issues from repository evidence.OtherNo warnings★ 8K↓ —
- go-testingGentleman-Programming/gentle-aiTrigger: Go tests, go test coverage, Bubbletea teatest, golden files. Apply focused Go testing patterns.TestingNo warnings★ 8K↓ —
- skill-improverGentleman-Programming/gentle-aiTrigger: improve skills, audit skills, refactor skills, skill quality. Audit and upgrade existing LLM-first skills.EngineeringNo warnings★ 8K↓ —
- docs-pagenexu-io/html-anything三栏文档页: 侧导航 + 正文 + 右 TOCOtherNo warnings★ 9.2K↓ —Also in 1 other repo
review-team
mvschwarz/openrig
EngineeringUpdated 17 hours ago
From the author
Use when assigned a review or when an authored review boundary is reached.
Install
npx skills add mvschwarz/openrig --skill review-team -a claude-code
Installs to .claude/skills/review-team/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 92
Security100
Provenance87
Maintenance100
Licence100
Adoption61
Files (1)
- SKILL.md