Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,168 skills from 2,325 repositories · updated 16 hours ago
48,166 skills
- prove-patchtrailofbits/skillsUse when a local security patch commit needs independent scoped and three-arm proof.SecurityNo warnings★ 7.9K↓ —
- flyio-debug-bundlejeremylongshore/tons-of-skills-marketplaceCollect a bounded, redacted Fly.io support bundle for release, Machine, health, volume, network, and platform incidents. Use when escalating a reproducible problem. Trigger with: "build Fly debug bundle", "collect Fly support evidence", "sanitize Fly incident data".EngineeringNo warnings★ 2.9K↓ —
- c-reviewtrailofbits/skillsPerforms comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.EngineeringNo warnings★ 7.9K↓ —
- fondo-install-authjeremylongshore/tons-of-skills-marketplaceSet up Fondo account and configure integrations with Gusto, QuickBooks, and bank accounts for automated startup bookkeeping and R&D tax credits. Trigger: "setup fondo", "fondo account", "fondo integrations", "connect fondo".FinanceNo warnings★ 2.9K↓ —
- spenddavepoon/buildwithclaudeShow current Claude Code spend by project and branch via BudgetClawEngineeringNo warnings★ 3.7K↓ —
- gsd:add-backlogdavepoon/buildwithclaudeAdd an idea to the backlog parking lot (999.x numbering)OtherNo warnings★ 3.7K↓ —
- offensive-network-attacksSnailSploit/Claude-RedDense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC bypass, IPv6 attacks. Tools: Bettercap, Responder, mitm6, Ettercap, Wireshark. MITRE T1557, T1040. Use when conducting internal network assessments or testing Layer 2/3 attack surface.TestingNo warnings★ 10K↓ —
- skill-hook-generatorZJU-REAL/Easel针对任意主题生成多种 Hook(开头钩子)变体,用经过验证的互动公式抓住开头注意力,附字数校验。 当用户说"写钩子""开头怎么写""Hook""抓眼球的开头""标题钩子""前三秒""怎么开头"时使用。 本 SKILL 专攻可复用的开头钩子变体;成篇营销文案用 copywriting,视频分秒脚本用 video-script。MediaNo warnings★ 4.2K↓ —
- gsd:reviewdavepoon/buildwithclaudeRequest cross-AI peer review of phase plans from external AI CLIsEngineeringNo warnings★ 3.7K↓ —
- auth-patternsdavepoon/buildwithclaudeThis skill should be used when the user asks about "authentication in Next.js", "NextAuth", "Auth.js", "middleware auth", "protected routes", "session management", "JWT", "login flow", or needs guidance on implementing authentication and authorization in Next.js applications.OtherNo warnings★ 3.7K↓ —
- report-regressionstrailofbits/skillsUse when assembling or refreshing an evidence-linked regression report from saved campaign decisions.MarketingNo warnings★ 7.9K↓ —
- json-canvasdavepoon/buildwithclaudeCreate and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.WritingNo warnings★ 3.7K↓ —Also in 1 other repo
- blast-radiusmichael-denyer/pstack-claudeFind what a change could break somewhere else before it ships, beyond the diff, and prove the one fact it's safe because of by running real code instead of writing it up. Use for 'blast radius of X', 'what could this break', reviewing a small diff you don't trust, or a brief that asserts something about existing code ('make X public', 'X already handles Y') before you design against that assertion.DesignNo warnings★ 3.7K↓ —
- gsd:graphifydavepoon/buildwithclaudeBuild, query, and inspect the project knowledge graph in .planning/graphs/PlanningNo warnings★ 3.7K↓ —
- clari-sdk-patternsjeremylongshore/tons-of-skills-marketplaceBuild and validate a typed local Clari REST client with bounded retries, job polling, pagination, and redaction. Use when standardizing application code around public contracts. Trigger with: "build a Clari client", "wrap the Clari API", "type Clari responses".EngineeringNo warnings★ 2.9K↓ —
- pymc-bayesian-modelingforyourhealth111-pixel/Vibe-SkillsCompatibility alias for the descriptive PyMC skill name. Delegate to the canonical local `pymc` payload while preserving route and README compatibility.OtherNo warnings★ 3.8K↓ —
- ketchup-videobacknotprop/pstackCatch the user up like /ketchup, with a short subtitled video of slides for what happened and the waiting calls as text under it. Use for /ketchup-video.MediaNo warnings★ 3.3K↓ —
- on-page-seo-checkeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "audit on-page SEO" or "diagnose why a single page dropped"; scores titles, meta, header structure, keyword placement, links, and images with prioritized fixes. Not for E-E-A-T / publish-readiness scoring — use content-quality-auditor; not for crawl / CWV / indexing — use technical-seo-checker. 页面SEO审计/排名诊断MarketingNo warnings★ 3K↓ —
- klingai-team-setupjeremylongshore/tons-of-skills-marketplaceConfigure Kling AI for teams with per-project API keys, usage quotas, and role-based access. Trigger with phrases like 'klingai team', 'kling ai organization', 'klingai multi-user', 'shared klingai access'.EngineeringNo warnings★ 2.9K↓ —
- content-gap-analysisaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "find content gaps", "竞品写了什么", or "还应该写什么"; builds a competitor-relative coverage map of missing topics, keyword gaps, and editorial-calendar opportunities. Not for raw keyword demand discovery — use keyword-research. 内容缺口/选题规划ScienceNo warnings★ 3K↓ —
- canva-install-authjeremylongshore/tons-of-skills-marketplaceImplement Canva Connect OAuth 2.0 Authorization Code with SHA-256 PKCE on a backend. Use when creating an integration, adding explicit scopes, handling callback state, or rotating single-use refresh tokens. Trigger with: "set up Canva OAuth", "Canva PKCE", "refresh Canva token".EngineeringNo warnings★ 2.9K↓ —
- runway-hello-worldjeremylongshore/tons-of-skills-marketplaceCreate, observe, and preserve one approved Runway text-to-video task using the current per-model contract. Use when proving the first billable generation path. Trigger with: "Runway hello world", "first Runway video", "smoke test Runway generation".TestingNo warnings★ 2.9K↓ —
- provider-actionshashicorp/agent-skillsImplement Terraform Provider actions using the Plugin Framework. Use when developing imperative operations that execute at lifecycle events (before/after create, update, destroy).OfficialDevOpsNo warnings★ 910↓ —
- whymichael-denyer/pstack-claudeUse for 'why does X work this way', 'why we picked Y', design rationale, regressions, postmortems, or data-backed thresholds. Discovers available MCPs and queries each evidence category (source control, issue tracker, long-form docs, real-time chat, infrastructure observability, error tracking, product analytics warehouse) in parallel, then returns a cited read on decisions and tradeoffs. Use how for runtime behavior.DevOpsNo warnings★ 3.7K↓ —
clade-hello-world
jeremylongshore/tons-of-skills-marketplace
From the author
Send your first message to Claude using the Anthropic SDK. Use when starting a new Claude integration, testing your setup, or learning the Messages API basics. Trigger with phrases like "anthropic hello world", "claude api example", "first claude call", "anthropic quick start".
Install
npx skills add jeremylongshore/tons-of-skills-marketplace --skill clade-hello-world -a claude-code
Installs to .claude/skills/clade-hello-world/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 90
Files (2)
- SKILL.md
- references/one-pager.md