Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 8 hours ago
49,492 skills
- juristen-gaiusKlotzkette/claude-fuer-deutsches-rechtFür Juristen Gaius: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- create-lecturepedrohcgs/claude-code-my-workflowCreate a new Beamer lecture `.tex` from source papers and materials, with notation consistency checks and the project's preamble wired in. Use when user says "create a lecture on X", "new lecture from these papers", "start a deck on topic Y", "scaffold a new Beamer file", "build me a lecture from these PDFs". Scaffolds the full deck — NOT for compiling existing `.tex` (use `/compile-latex`).DocumentsNo warnings★ 1.7K↓ —
- triage-inboxpedrohcgs/claude-code-my-workflowTriage academic email and calendar (Gmail / Google Calendar via the session's MCP) into a prioritized digest plus a referee-obligations tracker — classifying referee requests, R&R and editor correspondence, co-author threads, seminar and conference invites, and grant/admin deadlines, and proposing a human-gated action for each (draft reply, calendar hold, scaffold a project, snooze). Use when user says "triage my inbox", "check my academic email", "what needs my attention this week", "go through my mail", or when run as a scheduled routine. NEVER auto-sends or auto-accepts anything.WritingNo warnings★ 1.7K↓ —
- finopsLeoYeAI/agent-master-skillsExpert FinOps (Cloud Financial Operations) guidance for cloud cost optimization, financial management, and business value maximization. Use for cloud cost management, AWS/Azure/GCP billing, cost allocation, tagging strategies, Reserved Instances, Savings Plans, Committed Use Discounts, rightsizing, forecasting, budgeting, showback/chargeback, unit economics, FinOps maturity assessment, governance policies, anomaly detection, rate optimization, workload optimization, cloud sustainability, or any cloud financial operations questions. Follows FinOps framework standards.DevOpsNo warnings★ 2.2K↓ —
- verify-artifactpedrohcgs/claude-code-my-workflowProve that the file you are about to send, publish, or hand off IS the thing you mean — before it leaves your hands. Rebuild from source, check integrity, diff the derived artifact against its source, and require the recipient to echo what they received. Use before sending a paper/PDF for review, shipping a release or replication package, handing files to a coauthor or collaborator, uploading anything to an external reviewer or model, or publishing. Prevents an entire review/QA cycle from being spent on defects that exist only in the artifact, not in the work.TestingNo warnings★ 1.7K↓ —
- maintenance-and-reliabilitycbrock84/headcountKeeps production assets available — ranking equipment by consequence of failure, setting preventive and predictive intervals, sizing spares, and moving a plant off reactive maintenance. Use this to build or fix a maintenance program, decide what to put on a PM schedule, diagnose repeat failures on one asset, justify spares inventory, or work out why a plant that maintains everything still has unplanned downtime.PlanningNo warnings★ 2.6K↓ —
- secops-detection-engineeringgoogle/skillsAuthor, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps. Use when writing new detection rules, tuning existing rules, validating syntax, testing logic against historical telemetry, or evaluating detection coverage against threat intelligence blogs, CVE disclosures, and Threat Detection Opportunities (TDOs) using synthetic UDM events and long-running coverage analysis. Don't use for alert triage (use secops-triage), deep forensic event reconstruction on infected hosts (use secops-investigate), or case management operations (use secops-cases).OfficialSecurityNo warnings★ 21.9K↓ —
- dsh-code-reviewNewqufei1993/skills-hub审查代码改动或 PR 时使用，依据目标项目的实际需求检查正确性、生命周期、接口行为、验证证据和文档，报告有依据且可采取行动的问题。EngineeringNo warnings★ 1.9K↓ —
- portfolio-statusKlotzkette/claude-fuer-deutsches-rechtFür Prozessportfolio-Status: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- ar-loopNewLeoYeAI/agent-master-skillsUse for /ar-loop, or to run an autoresearch experiment on a schedule (10 min to monthly) with CronCreate.OtherNo warnings★ 2.2K↓ —
- portaljs-add-mapdatopian/portaljsRender a GeoJSON dataset on an interactive Leaflet map in the Views section of a dataset's showcase. Installs react-leaflet and a Map component, then renders the map for the chosen dataset. Use when a dataset's data is geographic and a map view is needed alongside the showcase's default metadata and download.MediaNo warnings★ 2.4K↓ —
- retentioncbrock84/headcountDiagnoses and reduces churn — cancellation flows, save offers, failed-payment recovery, at-risk detection, and the product and service causes underneath. Use this when churn is rising or unexplained, to design a cancellation or win-back flow, to recover involuntary churn, to identify at-risk accounts before they leave, or to decide whether a retention problem is a product problem.DesignNo warnings★ 2.6K↓ —
- waerme-quartierKlotzkette/claude-fuer-deutsches-rechtFür Wärme, Quartier und Fernwärme: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- google-cloud-filestore-auditinggoogle/skillsAudits Filestore instances on Google Cloud across projects for disaster recovery readiness (missing or stale backups), security access governance (overly permissive NFS export rules, 0.0.0.0/0 exposure, missing ROOT_SQUASH), and reliability compliance (Physical Zone Isolation PZI and Physical Zone Separation PZS). Use when assessing storage health posture, auditing NFS export permissions, identifying unprotected file shares, or validating zone failure domains. Don't use for Cloud Storage buckets, Persistent Disk, or NetApp Volumes.OfficialSecurityNo warnings★ 21.9K↓ —
- social-post-craftcbrock84/headcountWrites, structures, and evaluates social posts end to end — hooks, body, formatting for how each platform renders, and a quality check before publishing. Use this to draft a post, rewrite one that underperformed, turn a longer piece into social content, sharpen an opening, or judge whether a draft is worth publishing.MediaNo warnings★ 2.6K↓ —
- architecture-optimizationwondelai/skillsGuided journey from a working codebase grown slow and tangled to one measurably fast, cleanly bounded, and readable. Orchestrates eight skills phase by phase - working-with-legacy-code, clean-architecture, software-design-philosophy, refactoring-patterns, system-design, ddia-systems, release-it, pragmatic-programmer - every phase carries its method inline so it runs standalone, asking the user questions at every decision point and recording results in the project docs/ folder (PERFORMANCE.md, ARCHITECTURE.md, ARCHITECTURE-OPTIMIZATION-PLAN.md) so the journey resumes across sessions. Use when the user wants to make an app faster, untangle drifted boundaries, fix slow endpoints and queries, or says 'it works but it is slow and getting worse'. For an untested prototype, improve-code-quality; for an aged codebase you fear to touch, remove-technical-debt; for greenfield structure, design-code-architecture; for marketing-site page speed, improve-website. For one framework in isolation, invoke that skill directly.PlanningNo warnings★ 2.6K↓ —Also in 2 other repos
- portaljs-new-portaldatopian/portaljsScaffold a new PortalJS data portal from a brief. Copies the canonical template from examples/portaljs-catalog and substitutes project tokens. Use when starting a brand-new data portal project from scratch.OtherNo warnings★ 2.4K↓ —
- pathogen-variant-surveillanceK-Dense-AI/scientific-agent-skillsQueries public GenSpectrum LAPIS data for pathogen genomic surveillance, current lineage nomenclature, weekly sequence proportions, reporting delays, and descriptive mutation frequencies. Use for variant surveillance, Pango lineage validation, dominant submitted lineages, Nextclade assignment provenance, SARS-CoV-2, influenza/H5N1 clades, RSV, mpox, measles, dengue, or LAPIS queries. Distinguishes sequence prevalence from infection prevalence, clades from genotypes, missing calls from reference matches, and sampling changes from biological growth advantage.ScienceNo warnings★ 56.1K↓ —
- remote-from-slackcodeaholicguy/ai-devkitAI DevKit · Connect the current agent session to an available Slack channel bridge.OtherNo warnings★ 1.7K↓ —
- extractNewLeoYeAI/agent-master-skillsTurn a proven pattern or debugging solution into a standalone reusable skill with SKILL.md, reference docs, and examples. Use when the user runs /si:extract or asks to package a recurring solution from memory into a skill.EngineeringNo warnings★ 2.2K↓ —
- pgvector-semantic-searchtimescale/pg-aiguideUse this skill for setting up vector similarity search with pgvector for AI/ML embeddings, RAG applications, or semantic search. **Trigger when user asks to:** - Store or search vector embeddings in PostgreSQL - Set up semantic search, similarity search, or nearest neighbor search - Create HNSW or IVFFlat indexes for vectors - Implement RAG (Retrieval Augmented Generation) with PostgreSQL - Optimize pgvector performance, recall, or memory usage - Use binary quantization for large vector datasets **Keywords:** pgvector, embeddings, semantic search, vector similarity, HNSW, IVFFlat, halfvec, cosine distance, nearest neighbor, RAG, LLM, AI search Covers: halfvec storage, HNSW index configuration (m, ef_construction, ef_search), quantization strategies, filtered search, bulk loading, and performance tuning.DataNo warnings★ 1.9K↓ —
- camsnapLeoYeAI/agent-master-skillsCapture frames or clips from RTSP/ONVIF cameras.OtherNo warnings★ 2.2K↓ —
- newsletter-writercbrock84/headcountWrites and edits newsletters and marketing emails people actually open — subject lines, opening, structure, voice, and the conversion turn where there is one. Use this to draft or rewrite a newsletter or email, sharpen weak email copy, plan a newsletter's structure and cadence, write a sequence, or repurpose an issue into other formats. For automated lifecycle and SMS programs, use `lifecycle-messaging`.MarketingNo warnings★ 2.6K↓ —
- fable-domainSahir619/fable-methodDiscuss a domain with the user, research it from real sources, then generate a trusted skill bundle for it - a step-by-step workflow with a flowchart, a domain adapter, a trap fixture, and a smoke eval. Use when the user says "/fable-domain SECTOR", "make a skill for DOMAIN", "add a domain to the fable method", or "give a lesser model Fable's workflow for DOMAIN". The bundle is the deliverable; a workflow without its flowchart, sources, and trap is not done.ScienceNo warnings★ 2.3K↓ —
007
sickn33/agentic-awesome-skills
SecurityUpdated 19 hours ago
From the author
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Install
npx skills add sickn33/agentic-awesome-skills --skill 007 -a claude-code
Installs to .claude/skills/007/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 89
Security85
Provenance95
Maintenance100
Licence100
Adoption72
Files (16)
- SKILL.md
- references/ai-agent-security.md
- references/api-security-patterns.md
- references/detailed-guide.md
- references/incident-playbooks.md
- references/owasp-checklists.md
- references/stride-pasta-guide.md
- scripts/config.py
- scripts/full_audit.py
- scripts/quick_scan.py
- scripts/requirements.txt
- scripts/scanners/__init__.py
- +4 more