Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
47,966 skills from 2,309 repositories · updated 15 hours ago
47,966 skills
- skill-audience-profilerZJU-REAL/Easel构建目标受众画像：分析粉丝人群特征、痛点需求、内容偏好和触达渠道，输出可执行的受众画像卡。 当用户说"受众画像""粉丝画像""我的用户是谁""目标人群""用户痛点""受众分析""谁在看我"时使用。 构建的是受众/粉丝画像，创作者自己的声音画像用 skill-voice-builder。OtherNo warnings★ 4.2K↓ —
- skill-strategy-advisorZJU-REAL/Easel基于现有内容数据和画像迭代优化内容策略。分析过去一段时间的内容表现、画像信息、 行业趋势，给出下一阶段的内容方向调整、新赛道建议、内容形式优化、发布节奏调整、 画像微调等策略建议。当用户说"下一步怎么做"、"策略建议"、"怎么调整"、"内容方向"、 "下个月策略"、"优化建议"、"迭代方向"时触发。 和 skill-content-strategy 的区别：content-strategy 从零制定策略， strategy-advisor 基于现有数据做迭代优化。OtherNo warnings★ 4.2K↓ —
- tao-finetune-cosmos-embedNVIDIA/skillsCosmos-Embed1 video-text embedding for text-to-video retrieval, video-to-video search, semantic deduplication, and fine-tuning. Use when the user asks to "fine-tune Cosmos-Embed1", "run cosmos-embed inference", "export Cosmos-Embed1", "embed videos", or "search videos with text".MediaNo warnings★ 3.8K↓ —
- message-system-architectaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "author our durable brand message hierarchy", "build the brand message house that seeds the canon", or "define the main narrative, three pillars, and tagline for the whole brand"; produces the DURABLE brand message system — main narrative, three value pillars, per-persona proof points (each labeled Measured / User-provided / '[needs source]'), and the tagline/one-liner — that seeds the narrative-registry canon and from which every per-launch house derives. Not for a single launch's message house or PR-FAQ — use message-house-builder; not for claim adjudication — use offer-claims-registry; not for the change-narrative arc itself — use strategic-narrative-designer. 品牌消息屋/主叙事/三支柱/标语/持久叙事 canonPlanningNo warnings★ 3K↓ —
- participation-warmup-planneraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "plan the participation ramp before we promote", "how much account history or karma do we need in this community", or "design entry incentives and member lifecycle for our own Discord"; produces the per-community pre-promotion warming plan — account-history/tenure expectations (Estimated, named sources), a give-before-ask ledger spec, a per-community etiquette + rule digest with last-verified dates, and the warming → active graduation criteria that channel-registry requires as state-transition evidence — plus the owned-community variant (entry paths + member lifecycle for your own Discord/Slack/forum/企业微信私域). Not for launch-day submissions or T-0 threads — use community-launch-runner. 社区预热/先给后取/账号养成/毕业标准PlanningNo warnings★ 3K↓ —
- skill-brand-onboardingZJU-REAL/Easel创作者/品牌入驻：通过结构化访谈收集视觉风格、内容调性、受众画像和运营目标，生成完整的账号画像档案。 当用户说"账号入驻""建档案""新账号建立画像""品牌入驻""从零建号""完善账号信息""onboarding"时使用。 产出覆盖多维度的完整账号档案；只建声音画像用 skill-voice-builder，只建受众画像用 skill-audience-profiler。OtherNo warnings★ 4.2K↓ —
- verify-paperclippaperclipai/paperclipVerify Paperclip from a source checkout, published npm install, or existing staging or production stack. Select the environment, data state, version, and platform; drive real UI or CLI journeys and capture evidence. Route deployment to the private Cloud skills.DevOpsNo warnings★ 108.9K↓ —
- ctf-malwareljagiello/ctf-skillsProvides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.SecurityNo warnings★ 3.6K↓ —
- lobsterdomainsdavepoon/buildwithclaudeRegister ICANN domains with crypto payments (USDC/USDT/ETH/BTC) via API — built for AI agentsFinanceNo warnings★ 3.7K↓ —
- scientific-data-preprocessingforyourhealth111-pixel/Vibe-Skills⚠️ CRITICAL USER EXPERIENCE-BASED SKILL - ALWAYS CONSULT BEFORE DATA PREPROCESSING ⚠️ Prevents catastrophic errors (88.9% error rate in V1.0 case study) through multi-level feature analysis, data leakage detection, and semantic validation. MANDATORY for: data preprocessing, feature engineering, standardization, normalization, interpolation, missing value handling, feature selection, or ANY data transformation task. Covers grouped time-series, cross-sectional, panel data. Detects: time travel leakage, causal inversion, ID misuse, semantic-numeric fallacies, distribution blindness. User's hard-won lessons from real project failures.ScienceNo warnings★ 3.8K↓ —
- copilot-history-ingestAr9av/obsidian-wikiIngest GitHub Copilot CLI/session history into Obsidian as distilled knowledge. Use for importing or mining Copilot history; not for general Copilot help, simple session search, or backup.EngineeringNo warnings★ 3.6K↓ —
- tag-taxonomyAr9av/obsidian-wikiApply and maintain the wiki's controlled tag vocabulary. Use for choosing, normalizing, auditing, or extending tags when creating or updating wiki pages; consult the taxonomy before assigning tags.OtherNo warnings★ 3.6K↓ —
- clerk-androidclerk/skillsImplement Clerk authentication for native Android apps using Kotlin and Jetpack Compose with clerk-android source-guided patterns. Use for prebuilt AuthView/UserButton or custom API-driven auth flows. Do not use for Expo or React Native projects.OfficialEngineeringNo warnings★ 89↓ —
- in-your-own-wordsbacknotprop/pstackRestate in your own words what you think the user's goals are and what problem they're trying to solve. Use for /in-your-own-words.OtherNo warnings★ 3.2K↓ —
- think-harderforyourhealth111-pixel/Vibe-Skills4-phase structured analysis wrapper for vibe pre-routing (compatible with claude-code-settings think-harder semantics).EngineeringNo warnings★ 3.8K↓ —
- skill-kuaishou-uploadZJU-REAL/Easel快手视频发布：把竖版短视频发布到快手创作者中心。当用户说"发快手""上传快手""快手投稿" "发布到快手""快手视频发布"时使用。基于通用浏览器发布框架（Playwright + 登录态持久化）。TestingNo warnings★ 4.2K↓ —
- skill-channels-uploadZJU-REAL/Easel微信视频号发布：把竖版短视频发布到微信视频号（channels.weixin.qq.com）。当用户说 "发视频号""上传视频号""视频号发布""发到微信视频号""视频号投稿"时使用。基于通用浏览器 发布框架（Playwright + 登录态持久化），微信扫码登录。TestingNo warnings★ 4.2K↓ —
- press-media-relationsaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "build a media list for my launch", "write a launch press release", or "pitch press under embargo"; produces a three-tier media and analyst list (Tier 1 exclusive candidates, Tier 2 vertical press, Tier 3 communities and newsletters), an embargo pitch timing skeleton keyed to the launch-registry date, a press-release draft in standard structure with no fabricated quotes or numbers, and an analyst briefing outline. Not for press-kit assets — use launch-asset-packager; not for follow-up sequence mechanics — use outreach-manager; not for post-launch news-echo monitoring — use launch-monitor. 媒体名单/禁运期pitch/新闻稿/分析师简报WritingNo warnings★ 3K↓ —
- comprehensive-research-agentforyourhealth111-pixel/Vibe-SkillsEnsure thorough validation, error recovery, and transparent reasoning in research tasks with multiple tool callsScienceNo warnings★ 3.8K↓ —
- rtvi-vlm-customize-modelNVIDIA/skillsHow to swap the VLM in the VSS Alerts Blueprint — covers RTVI-VLM microservice deployment methods, all three VLM consumers (rtvi-vlm, vlm-as-verifier, vss-agent), and health checks.DevOpsNo warnings★ 3.8K↓ —
- prisma-database-setupprisma/skillsDeprecated compatibility name for prisma-orm-setup. Use only when a user or existing integration explicitly invokes prisma-database-setup; otherwise select prisma-orm-setup.OfficialDataNo warnings★ 77↓ —
- brobacknotprop/pstackRestate the last message in plain human language, with no jargon.OtherNo warnings★ 3.2K↓ —Also in 3 other repos
- claude-md-reviewwesammustafa/Claude-Code-Everything-You-Need-to-KnowAudit a CLAUDE.md file for the patterns that actually degrade Claude Code's output — vagueness, unnamed files, stale facts, and bloat. Use when asked to review, audit, improve, shrink, or fix a CLAUDE.md, and when a project's results feel inconsistent or Claude keeps rediscovering the same context.EngineeringNo warnings★ 3.5K↓ —
- pulumi-terraform-to-pulumipulumi/agent-skillsMigrate Terraform/OpenTofu projects to Pulumi, including translating HCL source code and/or importing Terraform state into a Pulumi stack. Use when a user wants to convert Terraform to Pulumi, migrate from HCL, or import tfstate into Pulumi. Do NOT trigger for general Terraform-vs-Pulumi comparisons or questions about using both tools side-by-side.OfficialDevOpsNo warnings★ 78↓ —
ton-vulnerability-scanner
trailofbits/skills
SecurityUpdated 3 days ago
From the author
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.
Install
npx skills add trailofbits/skills --skill ton-vulnerability-scanner -a claude-code
Installs to .claude/skills/ton-vulnerability-scanner/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (CC-BY-SA-4.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: CC-BY-SA-4.0
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance87
Maintenance100
Licence80
Adoption61
Files (4)
- SKILL.md
- agents/openai.yaml
- assets/trail-of-bits-mark.svg
- resources/VULNERABILITY_PATTERNS.md