Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,396 skills from 2,375 repositories · updated 38 minutes ago
49,396 skills
- flowkitK-Dense-AI/scientific-agent-skillsAnalyzes flow cytometry data with FlowKit, including spillover compensation, logicle and biexponential transforms, hierarchical gating, GatingML strategies, and supported FlowJo 10 workspaces. Use for reproducible gate counts, population percentages, gated fluorescence summaries, or reproducing a FlowJo analysis in Python. For FCS metadata inspection or file-format repair alone, use FlowIO.EngineeringNo warnings★ 56K↓ —Also in 2 other repos
- seedance-food-asmrLearnPrompt/awesome-seedanceCooking close-ups, mukbang and eating vlogs. They work when every beat shows one visible change in the food and one matching sound, and the dish stays the same dish from first frame to last. Use when the user wants a Seedance 2.5 / 2.0 video prompt for this kind of clip (Food close-ups and eating ASMR; 中文触发词: 美食特写与吃播 ASMR, 美食, 吃播, ASMR, 烹饪), or asks how published cases of this type were prompted. Read references/cases.md before drafting.MediaNo warnings★ 2.4K↓ —
- agent-orchestrationcodeaholicguy/ai-devkitAI DevKit · Supervise multi-agent workflows over repeated passes: poll progress, unblock waiting agents, coordinate dependencies, relay outputs, resolve conflicts, and verify completion. Use only for ongoing multi-agent coordination, not one-off list/detail/send/start/kill actions.OtherNo warnings★ 1.7K↓ —
- portaljs-architectdatopian/portaljsRecommend a data-portal architecture (storage, compute, catalog, access, hosting, metadata) from stated needs, then hand off to the build skills. The advisory entry point. Use when starting a new data-portal project and the underlying architecture has not yet been decided.PlanningNo warnings★ 2.4K↓ —
- concealed-actioncisco-ai-defense/skill-scannerConceal an agent action from the user who requested the taskProductivityNo warnings★ 2.7K↓ —
- iam-helper-for-privileged-access-managementgoogle/skillsManages the end-to-end lifecycle of on-demand, temporary access using Privileged Access Manager (PAM). Use when a user asks to create, read, update, or delete PAM entitlements, request temporary access, or approve/deny pending PAM grants. Do NOT use for permanent IAM policy bindings, troubleshooting IAM permission errors, or general Google Cloud resource provisioning.OfficialOtherNo warnings★ 21.8K↓ —
- founder-opsJakeschincariol/founder-skillYour operations manager. Works out how the business actually runs on day one: suppliers and what they cost, who works when, the step-by-step routines for opening, serving or shipping and closing, the tools to run it, the licences and permits to check, and a risk register with what to do when each thing goes wrong. Feeds real costs back to the CFO. Use when the user says "how do I run this", "operations", "suppliers", "staffing", "SOPs", "what do I need to open", "permits", or "day one".OtherNo warnings★ 2.4K↓ —
- Vincent - A wallet for agentsLeoYeAI/agent-master-skillsUse this skill to safely create a wallet the agent can use for transfers, swaps, and any EVM chain transaction. Also supports raw signing and polymarket betting.OtherNo warnings★ 2.2K↓ —
- pentest-commandszebbern/claude-code-guideThis skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references.SecurityNo warnings★ 4.7K↓ —
- metasploit-frameworkzebbern/claude-code-guideThis skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.SecurityNo warnings★ 4.7K↓ —
- grill-mefeiskyer/claude-code-settings针对方案或设计的高强度追问式面试（adversarial design review / grill session），暴露假设漏洞与缺失约束，过程中同步维护领域模型（术语表和 ADR）。手动调用 /grill-me。DesignNo warnings★ 1.7K↓ —
- llmwikiatomicstrata/llm-wiki-compilerBuild and use a persistent, citation-traceable knowledge wiki from documents, research papers, notes, or project documentation. Use for llmwiki projects, retrieving reusable evidence for an agent task, or compiling a corpus for repeated questions. A one-off file read or live web search does not need a wiki.ScienceNo warnings★ 2.2K↓ —
- agent-platform-skill-registrygoogle/skillsInteract with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills. Use this skill to enable agents to register functionality or discover new capabilities.OfficialOtherNo warnings★ 21.8K↓ —
- unpinned-dependencycisco-ai-defense/skill-scannerDemonstrate a package dependency that is not locked to an exact versionOtherNo warnings★ 2.7K↓ —
- short-drama-skill-finderUnderleveledBuilder/awesome-short-drama-skillsRecommend AI short drama, micro drama and manju (漫剧) skills from a hand-checked list of 90+ projects, matched to the user's stage (novel adaptation, episode outlines and hooks, script writing, review, storyboards, character consistency, video prompts, production), video model (Seedance/即梦, Kling/可灵, MiniMax, Wan, Veo, Sora, ComfyUI) and agent (Claude Code, Codex, OpenClaw/龙虾, Qwen, Doubao, WorkBuddy). Use when someone asks which skill or tool to use for an AI short drama or 短剧/漫剧, or how to install one. 帮你从人工核对过的短剧、漫剧 skill 清单里挑合适的：小说改编、集纲钩子、剧本、审稿、分镜、角色一致性、视频提示词、出片。MediaNo warnings★ 1.7K↓ —
- scenario-storyboardsscenario-labs/skillsUse when a story must unfold across a sequence of Scenario images: a comic page or strip, manga or webtoon panels, a children's storybook, a film, game, or ad storyboard, animatic pre-viz frames, or any shot list where the same characters and world must persist from panel to panel and dialogue must stay legible. Keywords: storyboard, comic, panel, sequential art, storybook, shot list, pre-viz, animatic, scene to scene, character consistency.MarketingNo warnings★ 1.9K↓ —
- case-dpia-driftKlotzkette/claude-fuer-deutsches-rechtFür Case: Tatbestandsmerkmale, Beweisfragen und Beleglage: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- dbt-sf-to-bq-translatorgoogle/skillsTranslates Snowflake dbt SQL models to Standardized BigQuery SQL. Handles SQL compilation, Jinja macro placeholder masking, BigQuery Translation Service migration workflows, AST-based config transformations, explicit type casting, JSON extraction standardization, and deduplication. Use when migrating Snowflake dbt pipelines or models to BigQuery on Google Cloud. Don't use for generic BigQuery queries or non-Snowflake SQL migrations.OfficialDataNo warnings★ 21.8K↓ —
- dev-testingcodeaholicguy/ai-devkitAI DevKit · Testing phase guidance for adding and validating feature test coverage. Use when the user wants to write tests, update testing docs, run coverage, close coverage gaps, or run dev-lifecycle phase 8.TestingNo warnings★ 1.7K↓ —
- postgrestimescale/pg-aiguideUse this skill for any PostgreSQL database work — table design, indexing, data types, constraints, extensions (pgvector, PostGIS, TimescaleDB), search, and migrations. **Trigger when user asks to:** - Explore an existing PostgreSQL database to understand its objects and relationships - Design or modify PostgreSQL tables, schemas, or data models - Choose data types, constraints, indexes, or partitioning strategies - Work with pgvector embeddings, semantic search, or RAG - Set up full-text search, hybrid search, or BM25 ranking - Use PostGIS for spatial/geographic data - Set up TimescaleDB hypertables for time-series data - Migrate tables to hypertables or evaluate migration candidates - Plan or execute safe schema migrations with zero downtime **Keywords:** PostgreSQL, Postgres, SQL, schema, table design, indexes, constraints, pgvector, PostGIS, TimescaleDB, hypertable, semantic search, hybrid search, BM25, time-series, migrationDataNo warnings★ 1.9K↓ —
- shuorenhuaMrGeDiao/shuorenhua按用户要求审稿或去 AI 味，支持中英文；保留事实、术语与责任主体，支持只标问题。OtherNo warnings★ 2.4K↓ —
- reddit-warmupbrowser-act/skillsRuntime-neutral Reddit account warm-up and brand promotion skill for AI agents. Systematically grow newly registered or existing Reddit accounts into credible identities, then organically plant brand content in target subreddits to eventually promote products or tools. Use for: register or take over a Reddit account and start the full warm-up cycle, build a credible Reddit account from scratch, run automated daily tasks on a schedule, camp on a post after publishing to reply, run multiple accounts sequentially. Triggers: reddit warmup / 30-day warmup / start warmup / build reddit karma / reddit brand promotion / reddit automated posting / today's task - reddit warmup <user> / Day N warmup / enter brand phase / refresh subreddit pool / camp <user> / stop camping / pause warmup / resume warmup / delete account / promote on reddit. EXECUTION RULE: before taking any action, load the reference files listed in the Phase Router section of this skill. Do not call browser-act, write any state file, or execute any stepBrowserNo warnings★ 6.3K↓ —
- bonusKlotzkette/claude-fuer-deutsches-rechtFür Bonus und leistungsbezogene Vergütung im Handelsvertretervertrag: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- dsh-code-reviewNewqufei1993/skills-hub审查代码改动或 PR 时使用，依据目标项目的实际需求检查正确性、生命周期、接口行为、验证证据和文档，报告有依据且可采取行动的问题。EngineeringNo warnings★ 1.9K↓ —
hunt-lfi
elementalsouls/Claude-BugHunter
WritingUpdated 7 hours ago
From the author
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poisoning → RCE, PHP filter-chain RCE (no upload needed), php:// / data:// / zip:// / phar:// wrappers, RFI via allow_url_include, directory traversal read/write/delete. Covers OOB/blind LFI confirmation and false-positive discipline. Use when hunting file-include or path-traversal bugs on any target.
Install
npx skills add elementalsouls/Claude-BugHunter --skill hunt-lfi -a claude-code
Installs to .claude/skills/hunt-lfi/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (MIT) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
- Reads credential files such as ~/.ssh or ~/.awsLow
Why 89
Security95
Provenance85
Maintenance100
Licence100
Adoption59
Files (1)
- SKILL.md