Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 22 hours ago
48,622 skills
- offensive-cicd-pipelineSnailSploit/Claude-RedComprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection via PR titles and issue bodies, workflow_run event abuse, GITHUB_TOKEN over-scoping, composite action supply chain compromise), Jenkins attack paths (Groovy sandbox escapes, script console remote code execution, Java remoting deserialization, credential store dumping, shared library injection), GitLab CI exploitation (YAML anchor injection, runner registration token abuse, CI variable extraction, protected branch bypass via merge request pipelines), and Azure DevOps pipeline agent compromise with service connection theft. Includes artifact poisoning techniques across all platforms, tooling guidance for gato and jenkins-attack-framework, and maps to MITRE ATT&CK T1195.002 (Supply Chain Compromise: Compromise Software Supply Chain). Covers enumeration of pipeline configurations, privilege escalation from contributor to code execution, lateral movement through pipeline trust boundaries, and persiDevOpsNo warnings★ 10.2K↓ —
- clade-load-scalejeremylongshore/tons-of-skills-marketplaceScale Claude usage for high-throughput applications — batches, queues, Use when working with load-scale patterns. concurrency control, and tier upgrades. Trigger with "anthropic scale", "claude high volume", "anthropic throughput", "scale claude api", "anthropic concurrent requests".EngineeringNo warnings★ 2.9K↓ —
- cross-linkerAr9av/obsidian-wikiFind and add missing cross-references between wiki pages. Use when pages are disconnected or after large ingestion. This modifies pages to add links; use wiki-lint for report-oriented structural auditing.OtherNo warnings★ 3.6K↓ —
- principle-make-operations-idempotentmichael-denyer/pstack-claudeApply when designing commands, lifecycle steps, or processing loops that run amid crashes, restarts, and retries. Converge to the same end state regardless of partial prior runs.OtherNo warnings★ 3.7K↓ —
- runway-hello-worldjeremylongshore/tons-of-skills-marketplaceCreate, observe, and preserve one approved Runway text-to-video task using the current per-model contract. Use when proving the first billable generation path. Trigger with: "Runway hello world", "first Runway video", "smoke test Runway generation".TestingNo warnings★ 2.9K↓ —
- kiro-reviewgotalab/cc-sddReview a task implementation against approved specs, task boundaries, and verification evidence. Use after an implementer finishes a task, after remediation, or before accepting a task as complete.EngineeringNo warnings★ 3.7K↓ —
- speak-rate-limitsjeremylongshore/tons-of-skills-marketplaceHandle Speak API rate limits with exponential backoff, request queuing, and optimization strategies. Use when implementing rate limits features, or troubleshooting Speak language learning integration issues. Trigger with phrases like "speak rate limits", "speak rate limits".EngineeringNo warnings★ 2.9K↓ —
- negotiatejeremylongshore/tons-of-skills-marketplaceUse when preparing clause-linked contract counterproposals, fallback positions, or a negotiation email draft from supplied terms and commercial priorities. Trigger with /negotiate or generate counter-proposals for this contract.LegalNo warnings★ 2.9K↓ —
- skill-collab-proposalZJU-REAL/Easel品牌合作方案与联名策划。当用户提到"品牌合作"、"商单方案"、"合作报价"、"联名"、"联动方案"、 "博主合作"、"品牌植入"、"商务合作"、"合作提案"时触发。支持两种模式：商单方案（品牌找上门， 基于 KOL 定价表生成报价、内容形式、排期、KPI 预估）和联名策划（与博主/品牌联动，生成双方 优势互补、内容分工、互推策略）。OtherNo warnings★ 4.3K↓ —
- coda-automationdavepoon/buildwithclaudeAutomate Coda tasks via Rube MCP (Composio): manage docs, pages, tables, rows, formulas, permissions, and publishing. Always search tools first for current schemas.ProductivityNo warnings★ 3.7K↓ —
- kiro-validate-gapgotalab/cc-sddAnalyze implementation gap between requirements and existing codebasePlanningNo warnings★ 3.7K↓ —
- prisma-computeprisma/skillsDeploy and operate apps on Prisma Compute with the Prisma 8 CLI. Use whenever the user mentions Prisma Compute, deploying or hosting a Prisma app, `prisma deploy`, `prisma dev module.ts`, Prisma Composer apps (`module.ts`, `compute()`, the `composer` section of `prisma.config.ts`), preview stages, deploy on push (`prisma git connect`, `prisma/cloud-deploy-action`), `prisma service` logs, versions, rollback, or custom domains, `project env`, `PRISMA_SERVICE_TOKEN`, regions, 504s, sleeping instances, or `waitUntil`; also when a project still uses the removed `@prisma/cli app deploy`, `prisma.compute.ts`, `defineComputeConfig`, `compute:deploy`, or `build logs` surface.OfficialDevOpsNo warnings★ 77↓ —
- gsd:threaddavepoon/buildwithclaudeManage persistent context threads for cross-session workProductivityNo warnings★ 3.7K↓ —
- principle-minimize-reader-loadmichael-denyer/pstack-claudeApply when reviewing or shaping code that's hard to trace. Count layers between question and answer, and hidden state in the reader's head; collapse one-caller wrappers and shrink mutable scope.EngineeringNo warnings★ 3.7K↓ —
- firebase-ai-logic-basicsfirebase/agent-skillsIntegrates Firebase AI Logic (formerly Vertex AI for Firebase) into mobile and web apps (Android, iOS, Web, and Flutter) to call Gemini models from client code. Use when provisioning or initializing Firebase AI Logic, or adding Gemini features to an app: text generation, multimodal input, chat, streaming, structured output, hybrid on-device inference, App Check protection, or switching models with Remote Config.OfficialEngineeringNo warnings★ 497↓ —
- kiro-spec-requirementsgotalab/cc-sddGenerate comprehensive requirements for a specificationPlanningNo warnings★ 3.7K↓ —Also in 5 other repos
- big-pics-little-wordsplannotator/effective-htmlExplain the current subject in HTML with large visuals and minimal text while preserving key details.OtherNo warnings★ 3.8K↓ —
- clerk-cost-tuningjeremylongshore/tons-of-skills-marketplaceOptimize Clerk costs and understand pricing. Use when planning budget, reducing costs, or understanding Clerk pricing model. Trigger with phrases like "clerk cost", "clerk pricing", "reduce clerk cost", "clerk billing", "clerk budget".PlanningNo warnings★ 2.9K↓ —
- gsd:execute-phasedavepoon/buildwithclaudeExecute all plans in a phase with wave-based parallelizationPlanningNo warnings★ 3.7K↓ —
- kiro-spec-tasksgotalab/cc-sddGenerate implementation tasks for a specificationPlanningNo warnings★ 3.7K↓ —
- principle-build-the-levermichael-denyer/pstack-claudeApply to any non-trivial work, not just bulk work: edits, migrations, analyses, checks. Build the tool that does it or proves it (codemod, script, generator, or a skill your subagents follow) instead of working by hand. The tool is the artifact a reviewer can rerun.WritingNo warnings★ 3.7K↓ —
- nvflare-diagnose-jobNVIDIA/skillsUse when the user asks why a reported NVFLARE job failure signal occurred: the job failed, stalled, timed out, lost clients, ended with EXECUTION_EXCEPTION, or produced suspicious errors. Diagnose in simulation, POC, or production by collecting bounded evidence and mapping failure patterns to recovery actions.OtherNo warnings★ 3.8K↓ —
- tao-finetune-kumo-anomalyNVIDIA/skillsKumo-Anomaly — diffusion-based anomaly detection and fine-tuning for multivariate time series. Use when the user asks to "fine-tune Kumo-Anomaly", "run Kumo-Anomaly inference", "detect anomalies with diffusion", "time series anomaly detection", "finetune Kumo-Anomaly", "use perform_anomaly_analysis_with_diffusion", "automl Kumo-Anomaly", "hyperparameter search Kumo-Anomaly", "hyperparameter optimization" or mentions "curriculum_medium.yaml", "final_model.pth", "kumo-anomaly", "sdk/anomaly_analysis", or "TSDiffuser_Generic".OtherNo warnings★ 3.8K↓ —
- kiro-validate-implgotalab/cc-sddValidate feature-level integration after all tasks are implemented. Checks cross-task consistency, full test suite, and overall spec coverage.TestingNo warnings★ 3.7K↓ —Also in 5 other repos
auth-patterns
davepoon/buildwithclaude
OtherUpdated yesterday
From the author
This skill should be used when the user asks about "authentication in Next.js", "NextAuth", "Auth.js", "middleware auth", "protected routes", "session management", "JWT", "login flow", or needs guidance on implementing authentication and authorization in Next.js applications.
Install
npx skills add davepoon/buildwithclaude --skill auth-patterns -a claude-code
Installs to .claude/skills/auth-patterns/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance83
Maintenance100
Licence100
Adoption57
Files (4)
- SKILL.md
- examples/nextauth-setup.md
- references/middleware-auth.md
- references/session-management.md