Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 9 hours ago
48,620 skills
- tdd-guideforyourhealth111-pixel/Vibe-SkillsTest-first development route for TDD, writing failing tests first, RED -> GREEN -> REFACTOR, and behavior-changing feature/bug/refactor work. Do not use for already-failing test root-cause debugging, test-report packaging, or final completion evidence.TestingNo warnings★ 3.8K↓ —
- skill-xhs-publisherZJU-REAL/Easel将图文/视频内容发布到小红书（XHS）。基于 Playwright + 持久化登录态，headless 即可运行， 流程与选择器移植自成熟开源实现 xiaohongshu-mcp（含发布成功校验、上传完成等待、话题联想绑定、 新旧发布按钮兼容、反检测）。适用场景：发布图文笔记、发布视频、扫码登录、发布前预检。TestingNo warnings★ 4.3K↓ —
- kiro-steering-customgotalab/cc-sddCreate custom steering documents for specialized project contextsPlanningNo warnings★ 3.7K↓ —Also in 6 other repos
- jetson-customize-mgbeNVIDIA/skillsEnable Jetson Thor 25G/10G/1G MGBE QSFP via kernel-DT overlay. Do NOT use for UPHY lane allocation or ODMDATA edits.WritingNo warnings★ 3.8K↓ —
- neon-object-storageneondatabase/agent-skillsS3-compatible object storage that branches with your database, so each branch gets its own copy of the files and the rows that point at them. Use when a user wants object storage, a bucket, blob/file storage, or somewhere to put uploads, images, documents, avatars, or user-generated files for their app or agent — especially when they already use (or are setting up) Lakebase Postgres and don't want to add a separate storage provider like AWS S3, Cloudflare R2, or Supabase Storage. Triggers include "object storage", "bucket", "blob storage", "file storage", "store uploads/images/files", "S3-compatible storage", "presigned URL", "where do I put files", "storage logs", "bucket logs", "CDN in front of object storage", "Neon Object Storage", "Neon Storage", and "storage that branches with my database".OfficialDevOpsNo warnings★ 108↓ —Also in 1 other repo
- skill-article-outlineZJU-REAL/Easel生成长文大纲：基于搜索分析生成 H2/H3 标题结构、段落字数目标、图表位置和 FAQ 规划，适用于公众号文章、知乎专栏、博客。 当用户说"文章大纲""长文结构""公众号大纲""知乎回答框架""写作提纲""文章框架""H2/H3 结构"时使用。WritingNo warnings★ 4.3K↓ —
- skill-risk-scannerZJU-REAL/Easel内容原创度与版权风险评估：分析文案是否存在洗稿/搬运嫌疑，评估素材版权风险， 检查引用规范。基于 LLM 文本分析，不包含技术查重。 当用户说"查重"、"原创度"、"是不是抄的"、"版权风险"、"能不能用这张图"、 "音乐版权"、"原创检测"、"有没有侵权"、"素材版权"、"会不会被投诉"时触发。 和 skill-quality-gate 的区别：quality-gate 查敏感词和平台规则合规， risk-scanner 专注原创度和版权侵权风险。OtherNo warnings★ 4.3K↓ —
- placement-exclusion-manageraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "build my brand-safety exclusion lists", "set placement / topic / content exclusions before launch", "add network and audience exclusions", or "prep the A1 brand-safety evidence for the auditor"; produces a placement/network exclusion list, a content-suitability & sensitive-topic block list, an audience/negative-audience exclusion set, and a packaged A1 brand/placement-safety evidence file for the gate. Not for building the audiences you target — use audience-segment-builder; not for computing the RQS or issuing the A1 verdict — use ad-account-auditor. 品牌安全/排除位置/否定受众列表MarketingNo warnings★ 3K↓ —
- pitch-narrative-builderaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "build our pitch deck narrative", "write a fundraising story", or "structure the sales pitch narrative"; derives from the narrative canon a company pitch/deck narrative — problem → the undeniable shift → product-as-hero → proof → the ask — as a slide-beat outline (one narrative beat per slide, with the claim ID each proof beat rests on), for both a sales pitch and a fundraising deck. Every proof beat is labeled Measured / User-provided / '[needs source]' and unverified ones route to the claims candidates. Not for the launch-window battle cards and talk track — use sales-enablement-kit; not for the durable message hierarchy or the arc itself — use message-system-architect / strategic-narrative-designer; not for finished deck visual design — out of scope; not for claim adjudication — use offer-claims-registry. 路演叙事/融资故事/销售 pitch/幻灯节拍DocumentsNo warnings★ 3K↓ —
- i4h-workflow-validateNVIDIA/skillsRun the root-level workflow runtime policy or rule-based rollouts and verify simulator success. Use for evaluation, checkpoints, or local controllers; do not use for replay or dataset annotation.ProductivityNo warnings★ 3.8K↓ —
- hex-rate-limitsjeremylongshore/tons-of-skills-marketplaceImplement Hex rate limiting, backoff, and idempotency patterns. Use when handling rate limit errors, implementing retry logic, or optimizing API request throughput for Hex. Trigger with phrases like "hex rate limit", "hex throttling", "hex 429", "hex retry", "hex backoff".EngineeringNo warnings★ 2.9K↓ —
- skill-profile-builderZJU-REAL/Easel首次使用引导：从社媒链接分析、从零生成账号画像 Profile。收集社媒链接+运营意图，分析已发内容与收藏喜好，生成 6 维 Profile。当用户说 创建画像/第一次用/帮我建个人设/分析我的账号建画像/从链接生成画像 时使用。与 skill-profile-manager 的区别：本 SKILL 专做首次从零分析生成；已有画像的编辑/记忆更新/导出/对比/切换找 profile-manager。OtherNo warnings★ 4.3K↓ —
- tddbacknotprop/pstackUse only when the user explicitly asks for TDD, a failing test, or a regression test, OR when the bug has an obvious cheap local test target. Skip when the test path is unclear, expensive, integration-heavy, or not requested.TestingNo warnings★ 3.3K↓ —Also in 3 other repos
- landing-experience-checkeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "pre-launch check the landing page", "run a Quality-Score preflight", or "verify ad-to-page message match before launch"; produces an ad↔page continuity report — message-match gaps, above-the-fold check, page-speed read, form-friction count, mobile-render flags — as a pass/fix punch list. Not for redesigning or rewriting the page — use landing-optimizer; not for scoring the account or the RQS — use ad-account-auditor. 落地页体验预检/广告落地页一致性检查DesignNo warnings★ 3K↓ —
- clerk-rate-limitsjeremylongshore/tons-of-skills-marketplaceUnderstand and manage Clerk rate limits and quotas. Use when hitting rate limits, optimizing API usage, or planning for high-traffic scenarios. Trigger with phrases like "clerk rate limit", "clerk quota", "clerk API limits", "clerk throttling".PlanningNo warnings★ 2.9K↓ —
- principle-foundational-thinkingbacknotprop/pstackApply before writing logic: choosing core types and data structures, sequencing scaffold-vs-feature work, asking what concurrent actors share. Get the data structures right so downstream code becomes obvious.WritingNo warnings★ 3.3K↓ —Also in 2 other repos
- send-experiment-designeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "design an email A/B test", "set up a multivariate subject/CTA test", "run a send-time test", "build a hold-out group", or "is this email result statistically and practically material?"; produces a falsifiable hypothesis, one-variable-per-cell matrix, sample-size/MDE/duration/power plan, and an effect/uncertainty read from own ESP data. Applies only a precommitted owner-approved action rule; the helper never chooses a business action. Not for EQS/vetoes or writing the email. 邮件AB测试设计/多变量测试/发送时间测试/留出组/显著性判定TestingNo warnings★ 3K↓ —
- kiro-spec-initgotalab/cc-sddInitialize a new specification with detailed project descriptionPlanningNo warnings★ 3.7K↓ —Also in 5 other repos
- research-to-deployjeremylongshore/tons-of-skills-marketplaceResearch current infrastructure documentation, generate reviewable deployment configurations and runbooks, and execute scoped deployments when authorized. Use when planning a cloud deployment or creating Terraform, container or Kubernetes configurations. Trigger with "research and deploy", "create Terraform" or "generate infrastructure configs".DevOpsNo warnings★ 2.9K↓ —
- dynamic-content-personalizeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "personalize the email", "add merge tags / dynamic content", "set up conditional blocks per segment", or "make first-name and product-recommendation fields fall back safely"; produces a merge-tag map with per-tag fallbacks, conditional-block rules with per-segment variations, a fallback-safety audit, and a PII guard on what may render, informing the SEND E (Engagement/personalization) dimension. Not for building the segments — use list-segment-builder; not for writing the base copy — use email-creative-builder; not for scoring EQS or running vetoes — use email-quality-auditor. 邮件个性化/合并标签/条件内容块/兜底默认值MediaNo warnings★ 3K↓ —
- clari-rate-limitsjeremylongshore/tons-of-skills-marketplaceAnalyze and schedule Clari exports, ingestion jobs, and Copilot reads within provider concurrency and quota controls. Use when preventing 429 responses or coordinating workers. Trigger with: "handle Clari rate limits", "schedule Clari jobs", "recover from Clari 429".OtherNo warnings★ 2.9K↓ —
- transformersforyourhealth111-pixel/Vibe-SkillsThis skill should be used when working with pre-trained transformer models for natural language processing, computer vision, audio, or multimodal tasks. Use for text generation, classification, question answering, translation, summarization, image classification, object detection, speech recognition, and fine-tuning models on custom datasets.MediaNo warnings★ 3.8K↓ —
- jetson-customize-pcieNVIDIA/skillsPer-controller PCIe enable / disable / lanes / link-speed for a Jetson Thor or Orin custom carrier via ODMDATA + kernel-DT overlay. Do NOT use for UPHY lane allocation or endpoint-mode bring-up.OtherNo warnings★ 3.8K↓ —
- competitor-analysisaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "analyze competitors" or "竞品分析"; benchmarks competitor keywords, content, backlinks, AI citations, and traffic share into strengths, weaknesses, and an action plan. Not for a pairwise topic-coverage gap map — use content-gap-analysis. 竞品分析/竞争对手PlanningNo warnings★ 3K↓ —
audit-prep-assistant
trailofbits/skills
SecurityUpdated 4 days ago
From the author
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments). Use when preparing your own codebase to be audited by someone else, getting a repository review-ready before an external security review, deciding what to fix before auditors start, or asking what assessors need from a project. For understanding unfamiliar code you are about to audit, use audit-context-building instead.
Install
npx skills add trailofbits/skills --skill audit-prep-assistant -a claude-code
Installs to .claude/skills/audit-prep-assistant/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (CC-BY-SA-4.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: CC-BY-SA-4.0
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance87
Maintenance100
Licence80
Adoption61
Files (3)
- SKILL.md
- agents/openai.yaml
- assets/trail-of-bits-mark.svg