Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,399 skills from 2,375 repositories · updated 14 minutes ago
49,397 skills
- principle-attack-the-premisemichael-denyer/pstack-claudeApply when two or more fixes that share one premise have failed the same gate. Write the premise down and test it directly before you write another fix that assumes it.TestingNo warnings★ 3.9K↓ —
- principle-explain-the-numbermichael-denyer/pstack-claudeApply before you measure, and before you trust, report, or act on a number you measured: a speedup, a regression, a throughput, a latency, or an eval result. Find what limits it, and rule out that it measured something other than the work you think.OtherNo warnings★ 3.9K↓ —
- ops-doctordavepoon/buildwithclaudeHealth check and auto-repair for the ops plugin. Diagnoses manifest errors, broken permissions, invalid configs, stale caches, and missing files — then spawns an agent to fix everything automatically.OtherNo warnings★ 3.7K↓ —
- principle-guard-the-context-windowbacknotprop/pstackApply when context is filling up: large outputs, long files, repeated reads, fan-out planning. Route bulk to subagents; keep summaries in the main thread, not raw payloads.ProductivityNo warnings★ 3.5K↓ —Also in 1 other repo
- gsd:inboxdavepoon/buildwithclaudeTriage and review all open GitHub issues and PRs against project templates and contribution guidelinesEngineeringNo warnings★ 3.7K↓ —
- hedgefundmonitorforyourhealth111-pixel/Vibe-SkillsQuery the OFR (Office of Financial Research) Hedge Fund Monitor API for hedge fund data including SEC Form PF aggregated statistics, CFTC Traders in Financial Futures, FICC Sponsored Repo volumes, and FRB SCOOS dealer financing terms. Access time series data on hedge fund size, leverage, counterparties, liquidity, complexity, and risk management. No API key or registration required. Use when working with hedge fund data, systemic risk monitoring, financial stability research, hedge fund leverage or leverage ratios, counterparty concentration, Form PF statistics, repo market data, or OFR financial research data.ScienceNo warnings★ 3.8K↓ —
- gsd:ui-reviewdavepoon/buildwithclaudeRetroactive 6-pillar visual audit of implemented frontend codeDesignNo warnings★ 3.7K↓ —
- canva-cost-tuningjeremylongshore/tons-of-skills-marketplaceReduce unnecessary Canva Connect operations using measured request, retry, cache, and premium-feature evidence. Use when reviewing usage, trial-quota pressure, deduplication, or budget guardrails. Trigger with: "reduce Canva usage", "Canva quota planning", "optimize Canva calls".PlanningNo warnings★ 2.9K↓ —
- principle-laziness-protocolbacknotprop/pstackApply when refactoring, evaluating diff size, or tempted to add abstractions, layers, or signal threading. Bias toward deletion and the smallest change that solves the problem.EngineeringNo warnings★ 3.5K↓ —Also in 1 other repo
- principle-attack-the-premisebacknotprop/pstackApply when two or more fixes that share one premise have failed the same gate. Write the premise down and test it directly before you write another fix that assumes it.TestingNo warnings★ 3.5K↓ —
- doca-programming-guideNVIDIA/skillsUse this skill when the user is writing their first DOCA app or asking a library-agnostic programming question — picking a shipped sample to copy and modify, wiring pkg-config + meson (or FFI from Rust / Go / Python against the public C ABI), walking the Core lifecycle (create → configure → start → connect → use → stop → destroy), or decoding a DOCA_ERROR_*. Trigger on implicit phrasing: "write my first DOCA program", "meson line for doca_rdma_*", "DOCA_ERROR_BAD_STATE on first call", "call DOCA from Rust", "built clean but nothing on the wire". Refuse install / hugepages / pkg-config (doca-setup), docs or version lookup (doca-public-knowledge-map), and library-internal API work (matching library skill).WritingNo warnings★ 3.8K↓ —
- maintain-formal-verification-skillbacknotprop/pstackBring a project's formal verification back in line with the code after the code changes: find the commits that touched verified code, update the model, harness, or properties to describe the code as it is now, rerun, and say whether each failure is drift in the verification or a bug in the code. Use for /maintain-formal-verification-skill, "is the model still true to the code", or after merges and refactors that touched verified code without rechecking it.EngineeringNo warnings★ 3.5K↓ —
- offensive-network-attacksSnailSploit/Claude-RedDense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP attacks, 802.1X/NAC bypass, IPv6 attacks. Tools: Bettercap, Responder, mitm6, Ettercap, Wireshark. MITRE T1557, T1040. Use when conducting internal network assessments or testing Layer 2/3 attack surface.TestingNo warnings★ 10.3K↓ —
- pricing-packaging-planneraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "plan launch pricing", "design pricing tiers / packaging", or "set up a launch discount / early-bird offer"; produces a launch pricing and packaging plan — tier structure and naming, a value-to-price map aligned to the message house, a launch-offer ladder with a true deadline reason, beta / early-adopter pricing with a post-launch graduation path, and guarantee / refund terms — with every price claim and offer term submitted to memory/events/claims.ndjson. Not for the canonical offer / claim record — use offer-claims-registry; not for paid-newsletter subscription economics — use newsletter-monetization-planner; not for ad bidding — use bid-strategy-planner. 发布定价/梯度打包/早鸟优惠/保证设计PlanningNo warnings★ 3.1K↓ —
- gsd:spikedavepoon/buildwithclaudeSpike an idea through experiential exploration, or propose what to spike next (frontier mode)OtherNo warnings★ 3.7K↓ —
- anima-hello-worldjeremylongshore/tons-of-skills-marketplaceGenerate reviewable React or HTML code from a Figma design using the Anima SDK. Use when testing design-to-code conversion, learning Anima's code output format, or building your first automated design-to-code pipeline. Trigger with: "anima hello world", "anima example", "figma to react", "figma to code", "anima generate code".TestingNo warnings★ 2.9K↓ —
- gsd:from-gsd2davepoon/buildwithclaudeImport a GSD-2 (.gsd/) project back to GSD v1 (.planning/) formatPlanningNo warnings★ 3.7K↓ —
- golang-documentationsamber/cc-skills-golangComprehensive documentation guide for Golang projects, covering godoc comments, README, CONTRIBUTING, CHANGELOG, Go Playground, Example tests, API docs, and llms.txt. Use when writing or reviewing doc comments, documentation, adding code examples, setting up doc sites, or discussing documentation best practices. Triggers for both libraries and applications/CLIs.TestingNo warnings★ 3.8K↓ —
- gsd:new-milestonedavepoon/buildwithclaudeStart a new milestone cycle — update PROJECT.md and route to requirementsPlanningNo warnings★ 3.7K↓ —
- doca-aes-gcmNVIDIA/skillsUse this skill when the user is doing hands-on DOCA AES-GCM work on a BlueField DPU or ConnectX NIC — configuring `doca_aes_gcm_task_encrypt` / `_task_decrypt`, querying `doca_aes_gcm_cap_*` for per-key-type (only `DOCA_AES_GCM_KEY_128` / `_256` — AES-192 not supported) and per-task support, sizing plaintext against the max-buf cap, setting source / destination mmap permissions, validating with a NIST GCMVS or RFC 5288 vector, or debugging DOCA_ERROR_* including the security-critical tag-verification-failed outcome on decrypt. Trigger even when the user does not explicitly mention "DOCA AES-GCM" or "AEAD" — typical implicit phrasings: "decrypt completion IO_FAILED", "auth tag isn't verifying", "NOT_PERMITTED on my encrypt buffer", "is AES-192-GCM on this BlueField" (no), or "encrypted record came back tampered". Refuse and route elsewhere for non-GCM AES modes (CBC / CTR / XTS — CPU OpenSSL), key management (KMS / HSM / rotation), SHA (doca-sha), or general AEAD background.SecurityNo warnings★ 3.8K↓ —
- technical-writingbacknotprop/pstackLayered technical-writing standard: Diátaxis structure, Google developer style sentences, STE instruction rules, Global English syntax. Use for /technical-writing or when writing or reviewing docs, RFCs, readmes, PR descriptions, or commit messages.WritingNo warnings★ 3.5K↓ —
- swarmmichael-denyer/pstack-claudeFan out N parallel workers, drain them, and return one report. Use for /swarm, 'swarm this', or parallel coverage, races, gauntlets, and exploration.OtherNo warnings★ 3.9K↓ —
- sharpenmichael-denyer/pstack-claudeMake a task deeper, not bigger, then rewrite the prompt. Use for /sharpen.ProductivityNo warnings★ 3.9K↓ —
- gsd:nextdavepoon/buildwithclaudeAutomatically advance to the next logical step in the GSD workflowProductivityNo warnings★ 3.7K↓ —
adjudicate-regression
trailofbits/skills
OtherUpdated 22 hours ago
From the author
Use when deciding whether source and live reproduction evidence establish a new regression or an exclusion.
Install
npx skills add trailofbits/skills --skill adjudicate-regression -a claude-code
Installs to .claude/skills/adjudicate-regression/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (CC-BY-SA-4.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: CC-BY-SA-4.0
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance87
Maintenance100
Licence80
Adoption61
Files (1)
- SKILL.md