Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,966 skills from 2,309 repositories · updated 6 hours ago
47,964 skills
- k12-lesson-prepanthropics/k12-teacher-skillsHelps a teacher prepare to teach an existing K-12 lesson (math / ELA / science / social studies) — a prep partner that thinks through the lesson's key student task with the teacher and leaves a short teacher-only prep note. Triggers on asks to internalize, prepare for, get ready to teach, or understand a lesson, including implicit ones ("help me get ready for tomorrow's lesson"), and right after another skill built a lesson, which it can follow. Not for building or adapting a lesson, grading, rubrics, assessment feedback, or generating quizzes or student-facing material, and not for single-fact lookups a sentence would answer ("what standard is this?", "how long is this lesson?").OfficialScienceNo warnings★ 605↓ —
- ads-amazonAgriciDaniel/claude-adsAudit Amazon Ads profiles, regions, Sponsored Products, Sponsored Brands, Sponsored Display, DSP, portfolios, targeting, search terms, retail readiness, creative, budgets, ACOS, TACOS, reporting, and policy. Use for Amazon Ads, sponsored ads, Amazon PPC, ACOS, TACOS, ASIN advertising, Amazon DSP, or retail-media optimization.MarketingNo warnings★ 10.6K↓ —
- gentle-ai-collab-perfectGentleman-Programming/gentle-aiTrigger: contributing to Gentleman-Programming/gentle-ai as an external collaborator. Strict issue-first workflow, honest PR bodies, contributor-vs-maintainer scope, chained-PR strategy, verification protocol, docstring coverage. Load whenever the active repo is Gentleman-Programming/gentle-ai and any part of the contribution flow is in scope: opening an issue, drafting or editing a PR body, splitting a change into chained/stacked PRs, or auditing a PR before requesting review.WritingNo warnings★ 8.1K↓ —
- chained-prGentleman-Programming/gentle-aiTrigger: PRs over 400 lines, stacked PRs, review slices. Split oversized changes into chained PRs that protect review focus.EngineeringNo warnings★ 8.1K↓ —
- add-resendnanocoai/nanoclawAdd Resend (email) channel integration via Chat SDK.ProductivityNo warnings★ 31.1K↓ —
- offensive-request-smugglingSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.9K↓ —
- offensive-race-conditionSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.9K↓ —
- orienting-to-an-inherited-seatmvschwarz/openrigUse when you have just been primed into an EXISTING seat through a planned handover — a different agent retired and handed you the seat plus its earned context — and you need a world model of what just happened to you. Covers how a handover differs from compaction and from a fresh launch, the inherit-the-seat-not-the-identity rule, treating the handover packet as testimony you verify (and refusing stale ghost prompts, and verifying your OWN identity surfaces), why a seat is a COMPOUNDING LINEAGE (inherit the state, acquire the predecessor's epistemology, then improve and re-deposit so the next generation is better), how to query your predecessor, your duty to stream feedback and re-deposit your earned wisdom, and how to route to role-specific onboarding. NOT the driver-side handover mechanic (retiring-and-inheriting-a-seat) and NOT unplanned compaction/crash recovery (claude-compaction-restore / session-compaction-and-restore).PlanningNo warnings★ 8.3K↓ —
- offensive-osint-methodologySnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.9K↓ —
- skill-registryGentleman-Programming/gentle-aiTrigger: update skills, skill registry, actualizar skills, after skill changes. Index available skills by trigger and path.OtherNo warnings★ 8.1K↓ —
- pricing-pagenexu-io/html-anything三档定价 + 特性对比表 + FAQOtherNo warnings★ 9.3K↓ —
- kibana-workflowselastic/agent-skillsAuthor, validate, test, run, and inspect Elastic Workflow YAML definitions. Use when the user wants to turn natural language into a Kibana workflow, fix workflow YAML, understand triggers or steps, or run a quick test loop against a real Kibana.OfficialTestingNo warnings★ 603↓ —Also in 1 other repo
- frame-glitch-titlenexu-io/html-anything数字故障 / 像散偏移 / 数据腐败标题, 适合视频转场 / cyberpunk heroOtherNo warnings★ 9.3K↓ —
- social-reddit-cardnexu-io/html-anything拟真 Reddit 帖子卡 + 上下投票 + 评论数, 适合视频叠加 / 故事分享OtherNo warnings★ 9.3K↓ —
- deck-course-modulenexu-io/html-anything暖纸背景 + Playfair, 左侧学习目标常驻, 含 MCQ 自测页DocumentsNo warnings★ 9.3K↓ —
- video-hyperframesnexu-io/html-anythingHyperframes / Remotion 兼容的连续帧动画, 可自动播放MediaNo warnings★ 9.3K↓ —
- deck-tech-sharingnexu-io/html-anythingGitHub-dark + JetBrains Mono + 终端代码块, 含 agenda + Q&ADocumentsNo warnings★ 9.3K↓ —
- deck-hermes-cybernexu-io/html-anything黑底 + CRT 网格扫描线 + $ 命令行标题 + 薄荷绿大字 + 三档 tagDocumentsNo warnings★ 9.3K↓ —
- ads-dnaAgriciDaniel/claude-adsExtract a public-safe brand and offer profile for paid advertising from an authorized website and operator input. Triggers on: brand DNA, brand profile, brand identity, brand style, brand colors, brand voice, visual identity, style guide, website brand analysis.MarketingNo warnings★ 10.6K↓ —Also in 1 other repo
- frame-logo-outronexu-io/html-anythingLogo 分块组装入场 + glow bloom + tagline 揭示, 适合视频片尾 / 品牌闭幕OtherNo warnings★ 9.3K↓ —
- email-marketingnexu-io/html-anything产品发布邮件, 含 masthead、hero、CTA、规格表, table-fallbackMarketingNo warnings★ 9.3K↓ —Also in 1 other repo
- live-dashboardnexu-io/html-anythingNotion 风团队仪表板, KPI + 7 日 sparkline + activity feed + 任务表ProductivityNo warnings★ 9.3K↓ —
- deck-xhs-pastelnexu-io/html-anything奶油底 + 柔光 blob + 马卡龙圆角卡片 + Playfair 斜体序号DocumentsNo warnings★ 9.3K↓ —
- ads-landingAgriciDaniel/claude-adsAudit paid-ad landing pages for message match, mobile experience, performance, accessibility, trust, forms, consent, tracking, security, and conversion friction. Use for landing-page audit, post-click experience, LP audit, conversion-rate optimization, form optimization, ad-to-page message match, redirects, blocked navigation, or requests involving private, loopback, link-local, or metadata IP destinations.MarketingNo warnings★ 10.6K↓ —
offensive-toctou
SnailSploit/Claude-Red
DevOpsUpdated Oct 12, 2026
From the author
Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web, and container layers. Covers symbolic-link races (open/access/stat split), file-descriptor races, fopen/realpath traversal races, /proc and procfs races, FUSE-backed slow-fs races to widen the window, ptrace and signal races, kernel double-fetch / userspace pointer races, container/runc/symlink escape primitives, kubernetes admission/authz TOCTOU, web auth-vs-authz TOCTOU, JWT-claim TOCTOU at gateway vs service, payment/idempotency races, and modern race-amplification techniques (single-packet attack, slow loris, FUSE pause, cgroup freeze, scheduler shaping). Use when you've identified a 'check then act' pattern in code, when fuzzing for race conditions, or when exploiting concurrency bugs in privileged binaries / kernel / orchestrators.
Install
npx skills add SnailSploit/Claude-Red --skill offensive-toctou -a claude-code
Installs to .claude/skills/offensive-toctou/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 92
Security100
Provenance87
Maintenance100
Licence100
Adoption61
Files (1)
- SKILL.md