Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,396 skills from 2,375 repositories · updated 21 minutes ago
49,396 skills
- gsd:plant-seeddavepoon/buildwithclaudeCapture a forward-looking idea with trigger conditions — surfaces automatically at the right milestonePlanningNo warnings★ 3.7K↓ —
- mbse-requirementsNewdavepoon/buildwithclaudeAuthor, review, and repair system requirements to aerospace and defense practice. Use when writing or fixing requirements, applying EARS patterns, assigning requirement IDs, setting priority or verification method, splitting compound requirements, removing ambiguity, or reviewing a requirements document for quality. Triggers on requirement, shall statement, EARS, spec review, acceptance criteria, requirements quality, ReqIF.PlanningNo warnings★ 3.7K↓ —
- kiro-debuggotalab/cc-sddInvestigate implementation failures using root-cause-first debugging. Use when an implementer is blocked, verification fails, or repeated remediation does not converge.EngineeringNo warnings★ 3.8K↓ —
- vercel-cost-tuningjeremylongshore/tons-of-skills-marketplaceOptimize Vercel costs through plan selection, function efficiency, and usage monitoring. Use when analyzing Vercel billing, reducing function execution costs, or implementing spend management and budget alerts. Trigger with phrases like "vercel cost", "vercel billing", "reduce vercel costs", "vercel pricing", "vercel expensive", "vercel budget".PlanningNo warnings★ 2.9K↓ —
- splitting-datasetsjeremylongshore/tons-of-skills-marketplaceProcess split datasets into training, validation, and testing sets for ML model development. Use when requesting "split dataset", "train-test split", or "data partitioning". Trigger with relevant phrases based on skill purpose.TestingNo warnings★ 2.9K↓ —
- principle-sequence-verifiable-unitsbacknotprop/pstackApply to multi-step work (sweeps, migrations, runs of similar edits) and to how you stack commits and PRs. Break work into small units that each end in a verifiable state, check each before the next, and order delivery so the sequence proves itself to a reviewer.WritingNo warnings★ 3.5K↓ —
- rate-limiting-apisjeremylongshore/tons-of-skills-marketplaceImplement sophisticated rate limiting with sliding windows, token buckets, and quotas. Use when protecting APIs from excessive requests. Trigger with phrases like "add rate limiting", "limit API requests", or "implement rate limits".EngineeringNo warnings★ 2.9K↓ —
- gsd:spike-wrap-updavepoon/buildwithclaudePackage spike findings into a persistent project skill for future build conversationsOtherNo warnings★ 3.7K↓ —
- sitemap-auditnowork-studio/notfair-pluginXML sitemap audit — find and fix the sitemap problems that quietly waste crawl budget and slow indexing. Discovers the sitemap (robots.txt, /sitemap.xml, sitemap index), validates structure and size limits, and cross-checks the URLs it lists against reality: non-200 / redirected / noindex / canonicalized-away URLs that shouldn't be in a sitemap, plus indexable pages that are missing from it. Reviews lastmod accuracy, sitemap-index organization, and robots.txt reference. Use this skill whenever the user asks about sitemaps, sitemap errors in Search Console, "sitemap couldn't fetch / has errors", crawl budget, pages not getting indexed, or whether their sitemap is clean. Trigger on: "sitemap", "sitemap.xml", "XML sitemap", "sitemap errors", "sitemap audit", "couldn't fetch sitemap", "crawl budget", "pages not indexed sitemap", "sitemap index", "lastmod", "robots.txt sitemap", or any sitemap/crawl-coverage question. For a full-site SEO audit use /seo-analysis; for broken links use /broken-link-checker.BrowserNo warnings★ 4.1K↓ —
- outreach-manageraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "write influencer outreach", "follow up with a creator", "pitch a journalist, hunter, or launch partner", or "negotiate partnership terms"; produces personalized pitches, multi-touch follow-up sequences, negotiation scripts with objection handling, and a status pipeline tracker — the shared outreach mechanics engine for creator, media/analyst, launch-partner, and social-selling / advocate-recruitment targets. Not for finalizing signed agreements — use contract-helper; not for media-list tiering, embargo terms, or press-release structure — use press-media-relations. 达人邀约建联/合作谈判话术LegalNo warnings★ 3.1K↓ —
- kiro-spec-requirementsgotalab/cc-sddGenerate EARS-format requirements based on project description and steering context. Use when generating requirements from project description.PlanningNo warnings★ 3.8K↓ —
- verify-paperclippaperclipai/paperclipVerify Paperclip from a source checkout, published npm install, or existing staging or production stack. Select the environment, data state, version, and platform; drive real UI or CLI journeys and capture evidence. Route deployment to the private Cloud skills.DevOpsNo warnings★ 110.7K↓ —
- kiro-spec-tasksgotalab/cc-sddGenerate implementation tasks for a specificationPlanningNo warnings★ 3.8K↓ —Also in 4 other repos
- wordpressnowork-studio/notfair-pluginOperate connected WordPress sites through the NotFair MCP. Use for WordPress content, posts, pages, media, comments, terms, design, settings, plugins, themes, HTML files, or approved WordPress changes on a NotFair-connected site. Not the local Application-Password CMS setup used by SEO scripts.DesignNo warnings★ 4.1K↓ —
- offensive-cicd-secretsSnailSploit/Claude-RedComprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers environment variable extraction from build contexts, exploitation of vault and secrets-manager misconfigurations (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), runner and agent token abuse for lateral movement, OIDC federation attacks exploiting trust relationships between CI/CD providers and cloud platforms, build log leakage analysis for inadvertently exposed credentials, cache poisoning techniques for credential exfiltration, platform-specific credential store exploitation (GitHub Actions secrets, GitLab CI variables, Jenkins credential providers), service connection and service account abuse in Azure DevOps and GCP, and Docker registry credential theft from build environments. Maps to MITRE ATT&CK T1552 (Unsecured Credentials) and its sub-techniques. Each section provides enumeration procedures, extraction techniques, and post-exploitation pivoting guidance for using rDevOpsNo warnings★ 10.3K↓ —
- gsd:remove-phasedavepoon/buildwithclaudeRemove a future phase from roadmap and renumber subsequent phasesPlanningNo warnings★ 3.7K↓ —
- gsd:reviewdavepoon/buildwithclaudeRequest cross-AI peer review of phase plans from external AI CLIsEngineeringNo warnings★ 3.7K↓ —
- ramp-data-handlingjeremylongshore/tons-of-skills-marketplaceDefine collection, redaction, retention, access, and deletion controls for Ramp financial, identity, receipt, and card data. Use when designing storage, logs, support bundles, analytics, or card-detail delivery. Trigger with "Ramp data handling" or "Ramp PCI boundary".DataNo warnings★ 2.9K↓ —
- notion-rate-limitsjeremylongshore/tons-of-skills-marketplaceImplement adaptive Notion request throttling and bounded retry behavior from observed responses. Use when handling 429s, queue pressure, or bursty workloads. Trigger with "handle Notion rate limits", "throttle Notion requests", or "fix Notion 429".ProductivityNo warnings★ 2.9K↓ —
- setup-cmsnowork-studio/notfair-pluginConnect a CMS to notfair SEO tools. Guides users through configuring WordPress, Strapi, Contentful, or Ghost — tests the connection, and writes credentials to .env.local. Once set up, seo-analysis automatically cross- references CMS content against Google Search Console data. Use whenever the user says "connect my CMS", "set up WordPress", "configure Strapi", "add Contentful", "connect Ghost", or "CMS setup". Also trigger if the user asks why no CMS data appears in a seo-analysis report.TestingNo warnings★ 4.1K↓ —
- gsd:insert-phasedavepoon/buildwithclaudeInsert urgent work as decimal phase (e.g., 72.1) between existing phasesOtherNo warnings★ 3.7K↓ —
- social-quality-auditoraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "audit our social presence" or "is this batch safe to publish"; runs either the typed ECHO asset gate or a separate program-maturity profile, with channel-truth, claim, disclosure, manipulation, UGC-rights, and denominator checks. Not for creator deliverables — use creator-content-auditor; not for launch readiness — use launch-readiness-auditor. 社媒资产门/运营成熟度/发布前放行OtherNo warnings★ 3.1K↓ —
- shopify-load-scalejeremylongshore/tons-of-skills-marketplaceLoad test Shopify integrations respecting API rate limits, plan capacity with k6, and scale for Shopify Plus burst events (flash sales, BFCM). Use when preparing for high-traffic events, benchmarking API throughput, or sizing infrastructure for Shopify webhook volume. Trigger with phrases like "shopify load test", "shopify scale", "shopify BFCM", "shopify flash sale", "shopify capacity", "shopify k6 test".TestingNo warnings★ 2.9K↓ —
- doca-dtsNewNVIDIA/skillsDeploy and configure the NVIDIA DOCA Telemetry Service (DTS) as it is actually run: (A) BlueField (built-in static pod), (B) Host (docker) on x86_64 / aarch64, or (C) DPF (DPUService / helm chart) — plus the shared configuration layer (`dts_config.ini`, providers, exporters, level labels) that all three share. The user's DEPLOYMENT TYPE decides everything; pick it first. Trigger even without "DTS" for "prometheus on the DPU shows nothing on 9100", "telemetry container exits right after start", "add ethtool counters to the telemetry DPUService", "how do I upgrade the built-in telemetry on BlueField", or "level labels per rack/pod". Refuse and route elsewhere for installing DOCA itself, the `doca_telemetry` / `doca_telemetry_exporter` library API, installing the DPF cluster, Grafana / Prometheus server setup or dashboard / PromQL authoring, and BFB / BSP imaging — those belong to other skills or to external products.DevOpsNo warnings★ 3.8K↓ —
rules
code-yeongyu/oh-my-openagent
OtherUpdated 4 hours ago
From the author
Use when the user asks about Codex Rules behavior, injected project rules, supported rule file locations, matching, or environment configuration.
Install
npx skills add code-yeongyu/oh-my-openagent --skill rules -a claude-code
Installs to .claude/skills/rules/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (Custom or unclear) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: Custom or unclear
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance95
Maintenance100
Licence45
Adoption75
Files (1)
- SKILL.md