Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,168 skills from 2,325 repositories · updated 12 hours ago
48,168 skills
- writerjeremylongshore/tons-of-skills-marketplaceProfessional writing assistant for PM documents. Use when the user needs to create, draft, review, or polish briefs, updates, emails, or presentations. Trigger with "write", "draft", "document", "help me write", "create a brief", or "polish this".WritingNo warnings★ 2.9K↓ —
- kiro-verify-completiongotalab/cc-sddVerify completion and success claims with fresh evidence. Use before claiming a task is complete, a fix works, tests pass, or a feature is ready for GO.TestingNo warnings★ 3.7K↓ —
- narrative-registryaaron-he-zhu/aaron-marketing-skillsUse when the user asks to record/query the brand narrative canon, tagline, message hierarchy, voice/naming rules, or a canon re-version; curates complete versioned canon events through the append-only narrative stream and derived views. Not for TALE scoring — use narrative-quality-auditor; not for authoring the system — use message-system-architect. 品牌叙事台账/canon 记录/语气与命名规范PlanningNo warnings★ 3K↓ —
- tweetclawjeremylongshore/tons-of-skills-marketplaceX/Twitter automation plugin. Post tweets, reply, like, retweet, follow, unfollow, send DMs, search tweets, look up users, extract bulk data, monitor accounts, run giveaway draws, and compose algorithm-optimized tweets via Xquik REST API. Use when the user asks about Twitter, X, tweets, followers, social media automation, tweet analytics, or giveaway management. Trigger with "post tweet", "search tweets", "extract followers", "run giveaway", "monitor account", "compose tweet", "trending topics".DataNo warnings★ 2.9K↓ —
- security-researchcode-yeongyu/oh-my-openagentTeam Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.SecurityNo warnings★ 70.5K↓ —
- work-with-prcode-yeongyu/oh-my-openagentFull PR lifecycle in a fresh task-owned git worktree: implement via the ulw-loop skill with mandatory evidence-bound manual QA → reviewer-readable English PR → verification loop (CI + Cubic, where Cubic is skipped only when its quota is exhausted) → merge by default → worktree cleanup. Decomposes one task into the smallest atomic, independently-mergeable PRs and builds the independent ones concurrently via one worktree per PR driven by parallel subagents or a team. Unbounded loop: any failing gate sends you back to fix-and-re-QA inside that PR's worktree. Use whenever implementation work needs to land as a PR. Triggers: 'create a PR', 'implement and PR', 'work on this and make a PR', 'implement issue', 'land this as a PR', 'split into atomic PRs', 'parallel PRs', 'work-with-pr', 'PR workflow', 'implement end to end', even when user just says 'implement X' if the context implies PR delivery.TestingNo warnings★ 70.5K↓ —Also in 1 other repo
- makeitsayNewdavepoon/buildwithclaudeChange or remove the words in a screenshot or photo with MakeItSay and keep the original font, colour and background. Use when the user wants to edit text in an image, fix a typo or price on a sign, menu, poster or UI screenshot, translate the lettering in a photo, or remove a line of text from an image. Needs a MakeItSay API key in MAKEITSAY_API_KEY.DesignNo warnings★ 3.7K↓ —
- attio-install-authjeremylongshore/tons-of-skills-marketplaceChoose and configure Attio REST authentication for a single workspace or multi-workspace OAuth app, including least-privilege scopes and a read-only verification. Use when connecting a service to Attio. Trigger with "Attio auth", "Attio API key", or "Attio OAuth setup".EngineeringNo warnings★ 2.9K↓ —
- complexa-targetNVIDIA/skillsAdd, edit, inspect, or validate Proteina-Complexa target definitions for protein binders, ligand binders, and AME motif scaffolding. Use for target registries, chain/residue selectors, hotspots, ligand fields, and incomplete motif inputs. Covers direct YAML edits and complexa target/validate target commands; running a campaign with an already registered target belongs to complexa-design.DesignNo warnings★ 3.8K↓ —
- meetingdavepoon/buildwithclaudeConvene a meeting of AI personas (3 to 10 participants) who debate a subject and reach a synthesis. Teams adapt to the theme (dev, design, product, business, life). The user can mix teams, add custom personas on the fly, and size the meeting up or down. Full debate written to a markdown file in the current directory, only the Boss's final synthesis is shown in the console.DesignNo warnings★ 3.7K↓ —
- tao-train-pointpillarsNVIDIA/skillsPointPillars for 3D object detection from LiDAR point clouds. Encodes point clouds into a pseudo-image via a pillar-based representation, then applies 2D detection — used in autonomous driving and robotics. Use when training, evaluating, exporting, pruning, retraining, or running inference for a TAO PointPillars model. Trigger phrases include "train PointPillars", "LiDAR 3D detection", "point-cloud object detection", "pillar-based 3D detector".MediaNo warnings★ 3.8K↓ —
- app-routerdavepoon/buildwithclaudeThis skill should be used when the user asks to "create a Next.js route", "add a page", "set up layouts", "implement loading states", "add error boundaries", "organize routes", "create dynamic routes", or needs guidance on Next.js App Router file conventions and routing patterns.OtherNo warnings★ 3.7K↓ —
- security-guardrailsdavepoon/buildwithclaudeAdversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow bypass, and social engineering attacks.SecurityNo warnings★ 3.7K↓ —
- trello-automationdavepoon/buildwithclaudeAutomate Trello boards, cards, and workflows via Rube MCP (Composio). Create cards, manage lists, assign members, and search across boards programmatically.OtherNo warnings★ 3.7K↓ —
- runway-cost-tuningjeremylongshore/tons-of-skills-marketplaceReduce Runway credit waste through current pricing, duplicate prevention, model policy, and measured usage without publishing stale price tables. Use when reviewing spend. Trigger with: "optimize Runway cost", "Runway credit usage", "reduce Runway spend".OtherNo warnings★ 2.9K↓ —
- flyio-install-authjeremylongshore/tons-of-skills-marketplaceInstall or upgrade flyctl and establish least-privilege Fly.io authentication with expiry and rotation evidence. Use when onboarding an operator or automation identity. Trigger with: "install flyctl", "create Fly deploy token", "test Fly API auth".TestingNo warnings★ 2.9K↓ —
- runway-rate-limitsjeremylongshore/tons-of-skills-marketplaceAnalyze and control Runway generation concurrency, rolling daily quota, spend limits, and queued tasks without inventing an RPM cap. Use when production traffic is throttled or scaling. Trigger with: "Runway rate limits", "Runway THROTTLED tasks", "Runway concurrency".ProductivityNo warnings★ 2.9K↓ —
- serply-web-searchdavepoon/buildwithclaudeSearch Google, Bing, Google News and Google Scholar, and read public pages, through the Serply MCP server. Use when you need current information beyond training data, recent news coverage, or academic papers, with source URLs. Remote server at https://api.serply.io/mcp with an API key from https://serply.io sent in the X-Api-Key header.EngineeringNo warnings★ 3.7K↓ —
- remediationdavepoon/buildwithclaudeGet a context-aware remediation plan for a vulnerability with fix verification stepsSecurityNo warnings★ 3.7K↓ —
- i4h-workflow-createNVIDIA/skillsCreate a minimal blank Workflow scaffold with a Scene containing ground and light plus an idle run mode. Use for fast new Workflow scaffolding.ProductivityNo warnings★ 3.8K↓ —
- vaexforyourhealth111-pixel/Vibe-SkillsUse this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and machine learning on large datasets. Apply when users need to work with large CSV/HDF5/Arrow/Parquet files, perform fast statistics on massive datasets, create visualizations of big data, or build ML pipelines that do not fit in memory.DataNo warnings★ 3.8K↓ —Also in 1 other repo
- ulw-executecode-yeongyu/oh-my-openagentExecutes a written ulw-plan work plan with Boulder state, evidence ledger, worktree discipline, and parallel subagents. Use when the user says ulw-execute or asks to run a .omo/plans plan.WritingNo warnings★ 70.5K↓ —
- you-web-searchdavepoon/buildwithclaudeSearch the live web and read URLs through the You.com MCP server. Use when you need current information beyond training data: recent releases, docs, pricing, news, or any question where facts may have changed. Two endpoints: keyless basic search at https://api.you.com/mcp?profile=free, or full tools with an API key from https://you.com/platform/api-keys.EngineeringNo warnings★ 3.7K↓ —
- compliance-auditjeremylongshore/tons-of-skills-marketplaceUse when reviewing a website, application, or supplied evidence for potential gaps across GDPR, CCPA/CPRA, accessibility, PCI DSS, CAN-SPAM, COPPA, or SOC 2 readiness. Produces scoped findings, applicability questions, and an evidence-based remediation plan.LegalNo warnings★ 2.9K↓ —
golang-continuous-integration
samber/cc-skills-golang
SecurityUpdated Oct 23, 2026
From the author
GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release pipelines, Docker build/push, repository security settings, and AI-driven PR review. Use when setting up or improving Go project CI, writing or fixing `.github/workflows/*.yml`, adding a linter or security scanner as a pipeline job, wiring automated dependency-update bots, or adding quality gates. Covers wiring tools into a pipeline, not the analysis they perform: do NOT use for choosing or interpreting security findings (→ See `samber/cc-skills-golang@golang-security` skill) or for choosing, upgrading, or auditing dependency versions (→ See `samber/cc-skills-golang@golang-dependency-management` skill).
Install
npx skills add samber/cc-skills-golang --skill golang-continuous-integration -a claude-code
Installs to .claude/skills/golang-continuous-integration/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance83
Maintenance100
Licence100
Adoption56
Files (19)
- SKILL.md
- assets/claude-code-review.yml
- assets/codecov.yml
- assets/codeql-config.yml
- assets/copilot-review-instructions.md
- assets/dependabot-auto-merge.yml
- assets/dependabot.yml
- assets/docker.yml
- assets/goreleaser-cli.yml
- assets/goreleaser-lib.yml
- assets/goreleaser-monorepo.yml
- assets/integration.yml
- +7 more