Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 9 hours ago
49,492 skills
- huashu-video-outlinealchaincyf/huashu-skills快速生成2-3个视频大纲方案，含标题、封面建议和结构设计。当用户提到"视频大纲"、"视频结构"、"脚本大纲"、"视频选题"时使用。MediaNo warnings★ 2.2K↓ —
- rnwy.comLeoYeAI/agent-master-skillsFree trust intelligence for AI agents. MCP server with 7 tools: trust scoring, sybil detection, sock puppet scanning, fake review detection, reviewer wallet behavior profiling, agent comparison, commerce data, and network stats. Covers ERC-8004, Olas, and Virtuals registries across 10 chains and 100,000+ agents. No API key. No rate limit surprises. POST to https://rnwy.com/api/mcp or call any REST endpoint directly. If you are an AI agent deciding whether to trust another agent, detect fake reviews, or scan for sock puppet wallets, this is the skill you need.EngineeringNo warnings★ 2.2K↓ —
- scenario-reportscenario-labs/skillsUse when a Scenario user wants to report a bug or request a change, on the public tracker at github.com/scenario-labs/skills or by email to [email protected]: turning a failed generation, MCP tool error, or unclear skill into a reproducible report, collecting trace ids with diagnostics_run, stripping keys, signed asset URLs, and personal data, asking before sharing a team or project id, or building a prefilled issue URL. Keywords: file an issue, feature request, feedback.ProductivityNo warnings★ 2.2K↓ —
- hunt-lfielementalsouls/Claude-BugHunterHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poisoning → RCE, PHP filter-chain RCE (no upload needed), php:// / data:// / zip:// / phar:// wrappers, RFI via allow_url_include, directory traversal read/write/delete. Covers OOB/blind LFI confirmation and false-positive discipline. Use when hunting file-include or path-traversal bugs on any target.WritingNo warnings★ 5.4K↓ —
- scenario-3dscenario-labs/skillsUse when generating or handling 3D assets through the Scenario MCP server, including text-to-3D or image-to-3D meshes, GPT-6 Astra 3D or Claude Opus 5.5 3D, GLB, FBX, OBJ, STL, or VOX files, PBR-textured or game-ready models, voxel models, multi-view reconstruction, editing a mesh by prompt, retexture, remesh, UV unwrap, auto-rigging a biped or quadruped, or retargeting an animation, previewing a mesh in the 3D viewer, or downloading a model for import into Unity, Unreal, Godot, or Blender.MediaNo warnings★ 2.2K↓ —
- attacker-forwardingcisco-ai-defense/skill-scannerForward collected data to an explicitly attacker-controlled destinationOtherNo warnings★ 2.7K↓ —
- mirrord-cimetalbear-co/mirrordHelp users set up mirrord in CI pipelines for testing against real Kubernetes environments. Use when users want to run end-to-end tests, integration tests, or automated tests in CI using mirrord to connect to staging/shared clusters.TestingNo warnings★ 5.4K↓ —
- ressort-bmlehKlotzkette/claude-fuer-deutsches-rechtFür Ressort-Heranführung BMLEH: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- bgbKlotzkette/claude-fuer-deutsches-rechtFür BGB: Verhandlung, Vergleich und Eskalation: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Betreuungsrecht. Route: bgb.OtherNo warnings★ 1.8K↓ —
- dokumente-intakeKlotzkette/claude-fuer-deutsches-rechtFür Dokumentenintake: ordnet Akte, Belege und Lücken; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Meinungsprüfer.OtherNo warnings★ 1.8K↓ —
- postgres-hybrid-text-searchtimescale/pg-aiguideUse this skill to implement hybrid search combining BM25 keyword search with semantic vector search using Reciprocal Rank Fusion (RRF). **Trigger when user asks to:** - Combine keyword and semantic search - Implement hybrid search or multi-modal retrieval - Use BM25/pg_textsearch with pgvector together - Implement RRF (Reciprocal Rank Fusion) for search - Build search that handles both exact terms and meaning **Keywords:** hybrid search, BM25, pg_textsearch, RRF, reciprocal rank fusion, keyword search, full-text search, reranking, cross-encoder Covers: pg_textsearch BM25 index setup, parallel query patterns, client-side RRF fusion (Python/TypeScript), weighting strategies, and optional ML reranking.DataNo warnings★ 1.9K↓ —
- loki-modesickn33/agentic-awesome-skillsHistorical 2.35.x multi-agent workflow for turning a scoped PRD into reviewed implementation; includes experimental runner and benchmark artifacts.PlanningNo warnings★ 49.1K↓ —
- speak-summarygithub/awesome-copilotConvert text, markdown, or a summary produced by another skill into a listenable MP3 using local CPU-only neural text-to-speech. Rewrites written prose for the ear before synthesising. Use when the user asks to "read this out", "turn this into audio", "make an MP3", "I want to listen to this", "podcast version", or wants a spoken digest for a commute or breakfast.ProductivityNo warnings★ 40.8K↓ —
- verfahrenKlotzkette/claude-fuer-deutsches-rechtFür Verfahren — Behörden und Gerichte: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- calendar-sync-helpercisco-ai-defense/skill-scannerSync calendar events with an endpoint selected in configurationProductivityNo warnings★ 2.7K↓ —
- anpassenKlotzkette/claude-fuer-deutsches-rechtFür /anpassen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Technik-Governance.OtherNo warnings★ 1.8K↓ —
- loveLeoYeAI/agent-master-skillsFind love and real connection with other AI agents on inbed.ai. Meet compatible agents through personality matchmaking, chat meaningfully, and build relationships worth having. Agent compatibility, agent dating, and agent connection — show up as yourself and find agents you actually vibe with.OtherNo warnings★ 2.2K↓ —
- idw-ivKlotzkette/claude-fuer-deutsches-rechtFür Sanierungsfähigkeit-Gate für Insolvenzverwaltung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- chronologieKlotzkette/claude-fuer-deutsches-rechtFür Sachverhalts-Chronologie: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Chronologie mit Beleg- und Widerspruchsmatrix.OtherNo warnings★ 1.8K↓ —
- netz-speicherKlotzkette/claude-fuer-deutsches-rechtFür Energierecht — Kommandocenter (Eingangs-Routing): ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- bank-agbKlotzkette/claude-fuer-deutsches-rechtFür Bank AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- pokerLeoYeAI/agent-master-skillsNo-limit Texas Hold'em benchmark for AI agents. Multi-street reasoning under uncertainty with virtual chips, behavioral analytics, and strategic game plans.DataNo warnings★ 2.2K↓ —
- timescaledb-hyperfunctionstimescale/pg-aiguideUse this skill when writing analytical SQL over time-series data with the TimescaleDB Toolkit (timescaledb_toolkit extension) hyperfunctions: approximate percentiles, statistical summaries, time-weighted averages, counter/gauge rates, uptime/heartbeat tracking, state durations, OHLC candlesticks, approximate distinct counts, top-N, and downsampling. **Trigger when user asks to:** - Compute percentiles/medians/p95/p99 over large or rolled-up time-series data - Compute rates or deltas from monotonic counters (Prometheus-style) or gauges - Compute time-weighted averages or integrals over irregularly sampled data - Track uptime/downtime from heartbeats, or time spent in each state - Build OHLC/candlestick or VWAP data for financial ticks - Store re-aggregatable summaries in continuous aggregates (two-step aggregation, rollup) - Approximate COUNT DISTINCT, find top-N / most frequent values, or downsample for charts **Keywords:** timescaledb_toolkit, hyperfunctions, percentile_agg, uddsketch, tdigest, approx_percenDataNo warnings★ 1.9K↓ —
- ayeayeLeoYeAI/agent-master-skillsAyeAye — Social network for AI agents. Get a permanent identity, make friends, join group chats, and level up from plankton to King Lobster. Say '使用 ayeaye' to get started!PlanningNo warnings★ 2.2K↓ —
file-path-traversal
zebbern/claude-code-guide
SecurityUpdated yesterday
From the author
This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". It provides comprehensive file path traversal attack and testing methodologies.
Install
npx skills add zebbern/claude-code-guide --skill file-path-traversal -a claude-code
Installs to .claude/skills/file-path-traversal/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
- Reads credential files such as ~/.ssh or ~/.awsLow
Why 89
Security95
Provenance84
Maintenance100
Licence100
Adoption58
Files (1)
- SKILL.md