Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,395 skills from 2,375 repositories · updated 2 minutes ago
49,395 skills
- wiki-ingestAr9av/obsidian-wikiIngest new documents, raw text, folders, or URLs into the Obsidian wiki as distilled, linked knowledge. Use for general wiki ingestion when no more specific ingest skill applies, including processing _raw/ staged content.PlanningNo warnings★ 3.7K↓ —
- cursor-hello-worldjeremylongshore/tons-of-skills-marketplaceCreate your first project using Cursor AI features: Tab, Chat, Composer, and Inline Edit. Triggers on "cursor hello world", "first cursor project", "cursor getting started", "try cursor ai", "cursor basics", "cursor tutorial".WritingNo warnings★ 2.9K↓ —
- earth2studio-discoverNVIDIA/skillsFind Earth2Studio models, data sources, and examples for a weather/climate use case. Do NOT use for writing inference code, downloading data, or installation.WritingNo warnings★ 3.8K↓ —
- ramp-observabilityjeremylongshore/tons-of-skills-marketplaceInstrument Ramp API clients, webhook consumers, deferred tasks, and accounting syncs with safe service and financial-correctness signals. Use when defining dashboards, alerts, traces, or reconciliation health. Trigger with "monitor Ramp integration" or "Ramp observability".DevOpsNo warnings★ 2.9K↓ —
- geomasterforyourhealth111-pixel/Vibe-SkillsComprehensive geospatial science skill covering remote sensing, GIS, spatial analysis, machine learning for earth observation, and 30+ scientific domains. Supports satellite imagery processing (Sentinel, Landsat, MODIS, SAR, hyperspectral), vector and raster data operations, spatial statistics, point cloud processing, network analysis, and 7 programming languages (Python, R, Julia, JavaScript, C++, Java, Go) with 500+ code examples. Use for remote sensing workflows, GIS analysis, spatial ML, Earth observation data processing, terrain analysis, hydrological modeling, marine spatial analysis, atmospheric science, and any geospatial computation task.ScienceNo warnings★ 3.8K↓ —
- landing-experience-checkeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "pre-launch check the landing page", "run a Quality-Score preflight", or "verify ad-to-page message match before launch"; produces an ad↔page continuity report — message-match gaps, above-the-fold check, page-speed read, form-friction count, mobile-render flags — as a pass/fix punch list. Not for redesigning or rewriting the page — use landing-optimizer; not for scoring the account or the RQS — use ad-account-auditor. 落地页体验预检/广告落地页一致性检查DesignNo warnings★ 3.1K↓ —
- competitor-analysisaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "analyze competitors" or "竞品分析"; benchmarks competitor keywords, content, backlinks, AI citations, and traffic share into strengths, weaknesses, and an action plan. Not for a pairwise topic-coverage gap map — use content-gap-analysis. 竞品分析/竞争对手PlanningNo warnings★ 3.1K↓ —
- content-quality-auditoraaron-he-zhu/aaron-marketing-skillsUse when auditing content quality, E-E-A-T, or publish readiness; runs a typed 80-item CORE-EEAT profile with evidence coverage, veto checks, and a fix plan. Not for structural tags/headers alone — use on-page-seo-checker; not for domain/citation trust — use domain-authority-auditor. 内容质量/EEAT评分MarketingNo warnings★ 3.1K↓ —
- security-guardrailsdavepoon/buildwithclaudeAdversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow bypass, and social engineering attacks.SecurityNo warnings★ 3.7K↓ —
- check-linksNewwesammustafa/Claude-Code-Everything-You-Need-to-KnowRuns the link checker on a folder and explains each broken link it finds, with the file, the line and a likely fix. Use when someone asks to check links or find broken links in the docs.OtherNo warnings★ 3.5K↓ —
- team-reviewNewwesammustafa/Claude-Code-Everything-You-Need-to-KnowThe team's review of a change to linkcheck, run the same way on a laptop and in CI. Use on a staged diff or a pull request.EngineeringNo warnings★ 3.5K↓ —
- notion-automationdavepoon/buildwithclaudeAutomate Notion tasks via Rube MCP (Composio): pages, databases, blocks, comments, users. Always search tools first for current schemas.ProductivityNo warnings★ 3.7K↓ —
- sales-enablement-kitaaron-he-zhu/aaron-marketing-skillsUse when the user asks to "build battle cards", "prep the sales team for launch", or "write the internal launch FAQ"; produces the internal enablement kit for a sales-led launch — battle cards vs each named alternative (where we win / where they win / trap questions, every fact traceable), a sales talk track derived from the PR-FAQ spine, an objection-handling table (objection → response → evidence), internal FAQ + CS macros, and an internal launch announcement with embargo discipline. Not for the external message house — use message-house-builder; not for competitor tracking itself — use competitor-tracker or competitor-analysis; not for outbound sequences — use cold-outbound-sequencer. 销售赋能/battle card/销售叙事/异议处理/内部FAQWritingNo warnings★ 3.1K↓ —
- principle-exhaust-the-design-spacemichael-denyer/pstack-claudeApply when facing a novel UI interaction or architectural decision with no precedent in the codebase. Build 2-3 competing prototypes and compare side by side before committing.DesignNo warnings★ 3.9K↓ —
- lindy-cost-tuningjeremylongshore/tons-of-skills-marketplaceOptimize Lindy AI costs through credit management, model selection, and agent consolidation. Use when reducing spend, analyzing credit usage patterns, or optimizing budget allocation across agents. Trigger with phrases like "lindy cost", "lindy billing", "reduce lindy spend", "lindy budget", "lindy credits".OtherNo warnings★ 2.9K↓ —
- navan-hello-worldjeremylongshore/tons-of-skills-marketplaceProve one contracted Navan integration can authenticate and return a bounded read-only response without inventing a universal API. Use when completing access intake. Trigger with "test Navan access", "first Navan read", or "Navan connectivity proof".TestingNo warnings★ 2.9K↓ —
- sentry-rate-limitsjeremylongshore/tons-of-skills-marketplaceManage Sentry rate limits, quotas, and event volume optimization. Use when hitting 429 errors, tuning sampleRate/tracesSampleRate, filtering noisy browser errors with beforeSend, configuring inbound data filters, setting per-key rate limits, or monitoring quota usage via the Sentry stats API. Trigger: "sentry rate limit", "sentry quota", "reduce sentry events", "sentry 429", "sentry spike protection", "sentry sampling".BrowserNo warnings★ 2.9K↓ —
- clari-cost-tuningjeremylongshore/tons-of-skills-marketplaceAnalyze and optimize Clari integration consumption across export quota, Copilot requests, transfer, storage, and warehouse work. Use when reducing unnecessary runs. Trigger with: "reduce Clari cost", "budget Clari exports", "tune Clari retention".OtherNo warnings★ 2.9K↓ —
- groq-sdk-patternsjeremylongshore/tons-of-skills-marketplaceApply production-ready Groq SDK patterns for TypeScript and Python. Use when implementing Groq integrations, refactoring SDK usage, or establishing team coding standards for Groq. Trigger with phrases like "groq SDK patterns", "groq best practices", "groq code patterns", "idiomatic groq".EngineeringNo warnings★ 2.9K↓ —
- ketchupmichael-denyer/pstack-claudeCatch the user up on what changed in this chat since their last message, in plain words and small visuals. List every item waiting on them with what they need to decide it from the reply alone. Use for /ketchup.OtherNo warnings★ 3.9K↓ —
- scvi-toolsanthropics/knowledge-work-pluginsDeep learning for single-cell analysis using scvi-tools. This skill should be used when users need (1) data integration and batch correction with scVI/scANVI, (2) ATAC-seq analysis with PeakVI, (3) CITE-seq multi-modal analysis with totalVI, (4) multiome RNA+ATAC analysis with MultiVI, (5) spatial transcriptomics deconvolution with DestVI, (6) label transfer and reference mapping with scANVI/scArches, (7) RNA velocity with veloVI, or (8) any deep learning-based single-cell method. Triggers include mentions of scVI, scANVI, totalVI, PeakVI, MultiVI, DestVI, veloVI, sysVI, scArches, variational autoencoder, VAE, batch correction, data integration, multi-modal, CITE-seq, multiome, reference mapping, latent space.OfficialOtherNo warnings★ 34.6K↓ —
- create-verification-skillmichael-denyer/pstack-claudeGenerate a project-local verification skill that drives your app the way a user does — any language, framework, or platform. Use for /create-verification-skill, "make a control skill for this repo", "make a driver skill for this repo", or when a project has no scripted way to prove UI/CLI/service behavior.DesignNo warnings★ 3.9K↓ —
- early-access-designeraaron-he-zhu/aaron-marketing-skillsUse when the user asks to "design an early access program", "set up a waitlist and beta stages", or "define beta graduation criteria"; produces a waitlist→concept→alpha→beta→GA stage ladder with per-stage purpose and opt-in semantics, quantified graduation criteria per stage (labeled Estimated), a cohort-gating and invite-throttling plan, tester recruitment with launch-day social-proof prep, a feedback-loop spec where every status change notifies its subscribers, and a referral-loop mechanism spec (invite codes, anti-abuse). Not for waitlist acquisition strategy or the capture-flow spec — use list-growth-designer; not for the canonical stage record — use launch-registry. waitlist/内测阶梯/抢先体验/毕业标准/反馈闭环DesignNo warnings★ 3.1K↓ —
- docs-writeforyourhealth111-pixel/Vibe-SkillsWrite documentation following Metabase's conversational, clear, and user-focused style. Use when creating or editing documentation files (markdown, MDX, etc.).WritingNo warnings★ 3.8K↓ —Also in 1 other repo
sharp-edges
trailofbits/skills
SecurityUpdated 20 hours ago
From the author
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.
Install
npx skills add trailofbits/skills --skill sharp-edges -a claude-code
Installs to .claude/skills/sharp-edges/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (CC-BY-SA-4.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyNo network use seenLicence: CC-BY-SA-4.0
Safety checks on SKILL.md
No warnings.
Why 90
Security100
Provenance87
Maintenance100
Licence80
Adoption61
Files (19)
- SKILL.md
- agents/openai.yaml
- assets/trail-of-bits-mark.svg
- references/auth-patterns.md
- references/case-studies.md
- references/config-patterns.md
- references/crypto-apis.md
- references/lang-c.md
- references/lang-csharp.md
- references/lang-go.md
- references/lang-java.md
- references/lang-javascript.md
- +7 more