Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 49 minutes ago
48,622 skills
- package-searchdavepoon/buildwithclaudeSearch for packages and assess security risk before adding as dependenciesSecurityNo warnings★ 3.7K↓ —
- hermes-tweetdavepoon/buildwithclaudeUse Hermes Tweet when a Claude Code workflow needs a source-aware handoff to Hermes Agent for X/Twitter research, account context, monitoring, or approval-gated actions through the native Hermes Agent plugin.ScienceNo warnings★ 3.7K↓ —
- yt-outlinejeremylongshore/tons-of-skills-marketplaceCreate a filmable YouTube outline and demo prep checklist from approved brief and packaging artifacts. Use when planning screen actions, section timing and rehearsals. Trigger with "outline this video" or "demo prep checklist".MediaNo warnings★ 2.9K↓ —
- data-dashboardplugin87/ux-ui-agent-skillsBuild a dense, data-heavy screen - an analytics console or a trading terminal - with real charts drawn from tokens: candlestick, volume, depth, stacked area, waterfall, scatter, correlation matrix, donut, gauge, sparklines, heatmaps and order books. Use when the request is a dashboard, terminal, monitoring view, data console, or any screen whose job is to show many numbers at once. Covers the layout sequence, the SVG geometry, the accessibility contract per chart type, and the contrast traps that only appear in dark mode.DataNo warnings★ 3.1K↓ —
- offensive-wpsSnailSploit/Claude-RedWPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink, Realtek, Broadcom, MediaTek), online PIN brute-force with reaver/bully, lockout handling, time-of-day evasion, WPS push-button vulnerability windows, and PIN-to-PSK derivation. Use when a target SOHO router exposes WPS — common on consumer ISP gear, often left enabled by default even when WPS attacks have been known for over a decade.SecurityNo warnings★ 10.2K↓ —
- pptx-html-fidelity-auditnexu-io/open-designAudit a python-pptx export against its source HTML deck, identify layout/content drift (footer overflow, cropped content, missing italic/em, lost styling, off-rhythm spacing), and re-export with strict footer-rail + cursor-flow layout discipline. Use this skill whenever the user has a .pptx that was generated from an HTML slide deck and asks to compare/audit/verify/fix the export — including phrases like "compare ppt with html", "fidelity audit", "fix the pptx", "ppt is cut off", "footer overlap", "italic missing in pptx", "re-export the deck", "pptx-html-fidelity-audit", or any case where a python-pptx → HTML round-trip needs verification or repair. Also trigger when the user shows you a deck.html and a deck.pptx side by side and is debugging visual differences.DocumentsNo warnings★ 105.3K↓ —
- brandkitplugin87/ux-ui-agent-skillsGenerate a complete, accessible brand design system from a brief, as primitive → semantic → component DTCG tokens (color, type, spacing, radius, shadow, motion), light + dark, plus a single theme.css, verified for WCAG. Use when the user wants a from-scratch brand/design foundation, a new palette + type system, or a themeable token kit for a product.DesignNo warnings★ 3.1K↓ —
- alchemy-cost-tuningjeremylongshore/tons-of-skills-marketplaceGovern Alchemy compute usage and spend with current account evidence, workload attribution, budgets, and reversible optimizations. Use when forecasting or reducing Alchemy cost. Trigger with "Alchemy cost", "Alchemy compute units", or "reduce Alchemy spend".OtherNo warnings★ 2.9K↓ —
- terms-generatorjeremylongshore/tons-of-skills-marketplaceDraft service-specific terms from confirmed features, business decisions and scoped applicability review, with clear assumptions and a separate review record. Use when preparing or revising website or app terms. Trigger with "terms-generator" or "create terms of service".PlanningNo warnings★ 2.9K↓ —
- research-to-deployjeremylongshore/tons-of-skills-marketplaceResearch current infrastructure documentation, generate reviewable deployment configurations and runbooks, and execute scoped deployments when authorized. Use when planning a cloud deployment or creating Terraform, container or Kubernetes configurations. Trigger with "research and deploy", "create Terraform" or "generate infrastructure configs".DevOpsNo warnings★ 2.9K↓ —
- gsd:updatedavepoon/buildwithclaudeUpdate GSD to latest version with changelog displayOtherNo warnings★ 3.7K↓ —
- evals-contextforyourhealth111-pixel/Vibe-SkillsProvides context about the Roo Code evals system structure in this monorepo. Use when tasks mention "evals", "evaluation", "eval runs", "eval exercises", or working with the evals infrastructure. Helps distinguish between the evals execution system (packages/evals, apps/web-evals) and the public website evals display page (apps/web-roo-code/src/app/evals).ProductivityNo warnings★ 3.8K↓ —
- managing-python-releaseskajisho5/ffmpeg-skillManages Python library releases including semantic versioning, changelog maintenance (Keep a Changelog format), release automation with GitHub Actions, and deprecation workflows. Use when planning releases, writing changelogs, automating release pipelines, or communicating breaking changes.EngineeringNo warnings★ 4.2K↓ —
- abridge-rate-limitsjeremylongshore/tons-of-skills-marketplaceAnalyze and control capacity, queueing, and backpressure for a tenant-specific Abridge integration without inventing public limits or headers. Use when handling concurrency or throttling requirements. Trigger with "plan Abridge capacity".PlanningNo warnings★ 2.9K↓ —
- offensive-sstiSnailSploit/Claude-RedDense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty, Mako, Handlebars, ERB, Thymeleaf, EJS, Pug. Engine fingerprinting, filter bypass, blind exploitation, WAF evasion, SSTI-to-RCE chains. Tools: tplmap. CWE-1336. MITRE T1190. Use when testing template rendering endpoints or exploiting template injection for code execution.TestingNo warnings★ 10.2K↓ —
- adobe-observabilityjeremylongshore/tons-of-skills-marketplaceInstrument Adobe integrations with redacted structured logs, request/job/activation correlation, service-level indicators, alerts, and evidence retention. Use when the task requires adobe content-safe observability. Trigger with "monitor Adobe API", "Adobe observability", or "App Builder logs".DevOpsNo warnings★ 2.9K↓ —
- doca-urom-svcNVIDIA/skillsOperate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using `doca-urom`: pull the NGC image, choose the UCX component, size queues, configure Comch pairing, and align host and service versions. SECURITY: the service has no standalone access control; Comch pairing and RDMA permissions are the boundary. Pair only intended hosts, expose least-privilege memory regions, and verify both views before start. Trigger for slow UCX collectives, unexpected NOT_PERMITTED, or missing completions. Do not use for host application code, MPI/UCX integration design, or DOCA install.SecurityNo warnings★ 3.8K↓ —
- doca-uromNVIDIA/skillsHost-side DOCA UROM library (doca_urom_*): offload an HPC / UCX / MPI application's remote memory operations (puts, gets, atomics, collectives) from the host CPU onto a BlueField DPU. Trigger on "MPI all-reduce burning host CPU", "push UCX traffic onto the BlueField", "first doca_urom call returns NOT_PERMITTED", or "host library and DPU service look out of sync", even without naming DOCA UROM. An offload needs both halves: this host library and the UROM Service on the DPU (doca-urom-svc), which owns deploying that container. Covers creating UROM Service contexts (doca_urom_service_*) and Worker contexts (doca_urom_worker_*) that run plugins on the DPU, discovering plugins via doca_urom_service_get_plugins_list, progressing completions, and DOCA_ERROR_* from doca_urom_* calls. Route elsewhere for UROM Service deployment on the DPU side, MPI / UCX collective algorithm design, and RDMA / RoCE / IB substrate bring-up.DevOpsNo warnings★ 3.8K↓ —
- deliverability-qaaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "run a deliverability pre-flight before I send", "check my SPF/DKIM/DMARC/BIMI", "why am I landing in spam / promotions", or "score my sender reputation and list hygiene"; runs the ONE-TIME pre-send SEND S1 authentication pre-flight and builds the SEND S (Sender-integrity / Deliverability) evidence read — DNS + DMARC-RUA auth, domain/IP reputation, inbox placement, content/link/render, and point-in-time bounce/complaint hygiene — using Pass/Partial/Fail/Unknown/N/A states and scoring only at complete applicable coverage. Not for the recurring hygiene trend — use list-hygiene-monitor; not for final EQS or veto verdicts — use email-quality-auditor; not for segments/suppression lists — use list-segment-builder. 邮件送达率预检/SPF DKIM DMARC认证/发件域声誉TestingNo warnings★ 3K↓ —
- gsd:milestone-summarydavepoon/buildwithclaudeGenerate a comprehensive project summary from milestone artifacts for team onboarding and reviewProductivityNo warnings★ 3.7K↓ —
- skill-douyin-uploadZJU-REAL/Easel将视频/图文内容发布到抖音（creator.douyin.com）。基于 Playwright + 持久化登录态，headless 即可运行， 流程与选择器移植自开源实现 douyin-upload-mcp-skill（含高清发布入口、切 tab、上传等转码、AI 封面、 发布成功 toast 校验、二维码登录）。适用场景：发布抖音视频、发布图文、扫码登录、发布前预检。TestingNo warnings★ 4.3K↓ —
- design-codeplugin87/ux-ui-agent-skillsGenerate production-ready, accessible, token-driven component code for ANY framework (React+Tailwind, Next.js, SwiftUI, Vue, Svelte, Angular, Solid, Web Components/Lit, React Native, Flutter, Jetpack Compose, vanilla CSS, or CSS-in-JS). Use when the user wants working UI code for a component or screen in a specific stack.DesignNo warnings★ 3.1K↓ —
- abridge-hello-worldjeremylongshore/tons-of-skills-marketplaceRun a bounded Abridge smoke test through the documented user workflow using an approved test encounter and no invented API. Use when validating a new tenant or pilot cohort. Trigger with "smoke test Abridge".TestingNo warnings★ 2.9K↓ —
- nvshmem-get-startedNVIDIA/skillsUse when NVSHMEM beginners want a tutorial-style overview on assessment, mental models, first C/C++ or Python NVSHMEM programs, compilation, launching, and next steps.EngineeringNo warnings★ 3.8K↓ —
provider-resources
hashicorp/agent-skills
OfficialTestingUpdated 4 days ago
From the author
Implement Terraform Provider resources and data sources using the Plugin Framework: CRUD operations, schema design, plan modifiers and validators, not-found handling, waiters for eventually consistent APIs, import support, resource design principles, and required acceptance test coverage. Use when adding or changing a resource or data source, deciding whether an API concept should be a resource, wiring a resource to the provider's configured client, handling drift or resource-not-found, or reviewing a resource implementation before submission.
Install
npx skills add hashicorp/agent-skills --skill provider-resources -a claude-code
Installs to .claude/skills/provider-resources/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (MPL-2.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: MPL-2.0
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance100
Maintenance100
Licence80
Adoption48
Files (3)
- SKILL.md
- references/design-principles.md
- references/retries-and-waiters.md