Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
46,095 skills from 2,198 repositories · updated 4 minutes ago
46,095 skills
- offensive-jwtSnailSploit/Claude-RedJWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi, path traversal), jku/x5u/jwk header injection, JWKS cache poisoning, JWS/JWE confusion, timing attacks, and mobile JWT storage extraction. Use when testing JWT-based authentication, hunting auth bypass via token manipulation, or evaluating JWT implementation security in web or mobile apps.SecurityNo warnings★ 9.8K↓ —
- offensive-business-logicSnailSploit/Claude-RedBusiness logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity/discount manipulation, currency confusion, coupon stacking, refund/chargeback abuse, race conditions on logic boundaries, parameter tampering for hidden flows, role/tenant boundary violations, time-of-check vs use, anti-automation defeat, fraud-detection evasion, and subscription/quota abuse. Use when scoping an application after surface-level OWASP Top 10 has been covered, or when the asset is a transactional/marketplace/fintech/e-commerce/SaaS app where logic flaws produce direct financial impact.SecurityNo warnings★ 9.8K↓ —
- hive.linkedin-automationaden-hive/hiveRead before automating LinkedIn with browser_* tools. LinkedIn combines shadow DOM (#interop-outlet), strict Trusted Types CSP that silently drops innerHTML, Lexical composer, native beforeunload dialogs that hang the bridge, and aggressive spam filters — each has bitten us at least once. Verified flows for profile messaging, connection-request acceptance, feed composition, and search. Requires hive.browser-automation. Verified against logged-in production 2026-04-11.MarketingNo warnings★ 11.1K↓ —
- security-alert-triageelastic/agent-skillsPrioritize and rank the Elastic Security alert queue by weighted risk — base risk score, MITRE tactic boost, entity risk, and asset criticality — then cluster alerts into entity groups. Use when an analyst asks what to focus on, which alerts are most urgent, or wants a ranked starting point across the queue before deeper investigation begins.OfficialSecurityNo warnings★ 603↓ —Also in 1 other repo
- deck-safety-alertnexu-io/html-anything红琥珀警示色 + hazard 条纹 + L1/L2/L3 tier 卡片 + 删除线标题DocumentsNo warnings★ 9.3K↓ —
- poster-heronexu-io/html-anything竖版海报 / 朋友圈分享图, 强视觉冲击OtherNo warnings★ 9.3K↓ —Also in 1 other repo
- test-reportingaden-hive/hiveMulti-Agent Harness for Production AITestingNo warnings★ 11.1K↓ —
- weekly-updatenexu-io/html-anything6-8 页横向滑动周报: 已发布 / 进行中 / 阻塞 / 指标 / 求助OtherNo warnings★ 9.3K↓ —
- legacy-modernizerJeffallan/claude-skillsDesigns incremental migration strategies, identifies service boundaries, produces dependency maps and migration roadmaps, and generates API facade designs for aging codebases. Use when modernizing legacy systems, implementing strangler fig pattern or branch by abstraction, decomposing monoliths, upgrading frameworks or languages, or reducing technical debt without disrupting business operations.EngineeringNo warnings★ 12.1K↓ —
- email-marketingnexu-io/html-anything产品发布邮件, 含 masthead、hero、CTA、规格表, table-fallbackMarketingNo warnings★ 9.3K↓ —Also in 1 other repo
- digital-eguidenexu-io/html-anything两页跨页电子指南, 封面 + 课程页 + pull-quote + 步骤列表OtherNo warnings★ 9.3K↓ —
- magazine-posternexu-io/html-anythingSunday-paper 风格, 大字 serif headline + 双栏正文 + 编号 sectionsScienceNo warnings★ 9.3K↓ —
- vfx-text-cursornexu-io/html-anything光标拖光 + 彩色像散射线 + 定向光斑, 适合视频片头逐字揭示金句OtherNo warnings★ 9.3K↓ —
- sprite-animationnexu-io/html-anything像素美术 + kinetic 字体的解说帧, 纯 CSS 循环, 可录视频MediaNo warnings★ 9.3K↓ —
- wireframe-sketchnexu-io/html-anything网格背景 + marker 笔触 + 多 tab + sticky note + scribble 图表ProductivityNo warnings★ 9.3K↓ —
- exec-summarymvschwarz/openrigGenerate a 1-2 page executive summary for a feature — orients sales, leadership, and engineering from a single document.ProductivityNo warnings★ 8.3K↓ —Also in 1 other repo
- video-hyperframesnexu-io/html-anythingHyperframes / Remotion 兼容的连续帧动画, 可自动播放MediaNo warnings★ 9.3K↓ —
- frame-logo-outronexu-io/html-anythingLogo 分块组装入场 + glow bloom + tagline 揭示, 适合视频片尾 / 品牌闭幕OtherNo warnings★ 9.3K↓ —
- deck-product-launchnexu-io/html-anything暗 hero + 亮内容, 橙→桃 accent, 特性卡 + 定价 + CTADocumentsNo warnings★ 9.3K↓ —
- learntigerless-labs/autoharnessUse when users /learn, save, remember, or distill lessons.OtherNo warnings★ 10.6K↓ —
- deck-magazine-webnexu-io/html-anything电子杂志 × 电子墨水风, WebGL 流体背景 + 衬线 displayDocumentsNo warnings★ 9.3K↓ —
- offensive-xssSnailSploit/Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.SecurityNo warnings★ 9.8K↓ —
- slack-gif-creatoranthropics/skillsKnowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack."OfficialMediaNo warnings★ 184.7K↓ —Also in 3 other repos
- sn-updateOpenSenseNova/SenseNova-SkillsUpdate SenseNova Skills (the sn-* bundle) inside an OpenClaw or hermes-agent install. ALWAYS use this skill when the user says any of: "update SenseNova skills", "update SN skills", "更新 sensenova skills", "更新 sn skills", "刷新 sn-*", "升级 sn-* skills", or names a specific sn-* skill to update (e.g. "更新 sn-ppt-standard", "refresh sn-image-base"). Default scope is the whole sn-* bundle; if the user names specific skills, update ONLY those.MediaNo warnings★ 6K↓ —
migrate-static-to-wrapper
dotnet/skills
TestingUpdated 3 hours ago
From the author
ALWAYS USE when asked to migrate, replace, or make testable existing C# static calls with a named wrapper or built-in abstraction: DateTime.UtcNow/Now or DateTimeOffset.UtcNow to TimeProvider/IClock, File.* to IFileSystem or an existing store such as ITextFileStore, and Environment.* to an existing reader such as IEnvironmentReader. Covers scoped files/projects, constructor injection, replacing temp-file or process-environment tests with fakes, "already registered" abstractions, and static classes whose callers/signatures must stay unchanged. Preserves DateTimeKind and call count. DO NOT USE for finding statics (detect-static-dependencies), choosing/designing a new wrapper (generate-testability-wrappers), behavior tests with no chosen seam (testability-obstacle), or test-framework migration.
Install
npx skills add dotnet/skills --skill migrate-static-to-wrapper -a claude-code
Installs to .claude/skills/migrate-static-to-wrapper/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 91
Security100
Provenance85
Maintenance100
Licence100
Adoption59
Files (1)
- SKILL.md