Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 10 hours ago
49,492 skills
- dsh-ci-test-reliabilityNewqufei1993/skills-hub设计或审查测试覆盖、选择单元/集成/真实入口/端到端测试及 mock 边界时使用；也用于诊断偶发失败、异步、并行及持有资源的测试。适用于测试计划、回归覆盖缺口和不可靠的 CI 证据。TestingNo warnings★ 1.9K↓ —
- gtarsK-Dense-AI/scientific-agent-skillsSupports Gtars for local genomic interval models and set algebra, overlaps and counts, consensus and coverage, tokenization, fragment processing, and refget/BEDbase planning across Python, Rust, and the CLI.ScienceNo warnings★ 56.1K↓ —Also in 2 other repos
- chief-legal-and-risk-officercbrock84/headcountOwns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness. Use this to review a contract or commitment, assess regulatory or privacy exposure, evaluate an IP or licensing question, judge the risk in a business decision, prepare for an audit or certification, or when a plan may create obligations the business cannot meet. Also use to decide whether a risk should be accepted, mitigated, or refused.LegalNo warnings★ 2.6K↓ —
- data-protection-and-encryptioncbrock84/headcountProtects data itself rather than the systems around it — classifying what you hold, encrypting in transit and at rest and understanding what each actually defends against, managing keys and their rotation, handling secrets in applications and pipelines, minimizing and de-identifying, and deleting on purpose. Use this to design data protection for a system, assess an encryption claim, set up key or secret management, or work out what a stolen backup would actually expose.DesignNo warnings★ 2.6K↓ —
- gke-app-onboardinggoogle/skillsManages GKE application onboarding, covering containerization, deployment manifests, and migration. Use when onboarding or deploying an application to GKE for the first time, or containerizing an app for GKE. Don't use for general GKE cluster administration or upgrades (use gke-basics or gke-upgrades instead).OfficialDevOpsNo warnings★ 21.9K↓ —
- literature-reviewK-Dense-AI/scientific-agent-skillsConducts systematic, scoping, and narrative literature reviews using PubMed, arXiv, bioRxiv, Semantic Scholar, and other appropriate sources. Use for research synthesis, reproducible literature searches, screening, citation checking, or preparing Markdown and PDF reviews. Tracks search coverage, records versus studies, and evidence limitations; supports meta-analysis planning but does not supply a meta-analysis engine.EngineeringNo warnings★ 56.1K↓ —
- obsesssickn33/agentic-awesome-skillsPerfectionist mode for one target: checked attempts on a UI detail or hot path, keeps the best version, stops on a budget. Only on explicit /obsess.DesignNo warnings★ 49.1K↓ —
- ressort-bmzKlotzkette/claude-fuer-deutsches-rechtFür Ressort-Heranführung BMZ: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- privacy-and-data-protectioncbrock84/headcountAssesses and improves how personal data is collected, used, shared, and retained — data mapping, lawful basis, consent, processor agreements, subject rights, and breach obligations. Use this before launching anything that handles personal data, when adding a vendor that will process it, when a data subject request arrives, when assessing exposure under GDPR or US state privacy laws, or when preparing for a privacy review.LegalNo warnings★ 2.6K↓ —
- listing-distributioncbrock84/headcountGets a product listed where buyers and crawlers look — directories, marketplaces, review sites, comparison pages, and aggregators. Use this to plan a submission push, choose which directories are worth the effort, prepare listing assets, build comparison and alternative pages, or manage presence on review platforms.BrowserNo warnings★ 2.6K↓ —
- bankrLeoYeAI/agent-master-skillsAI-powered crypto trading agent and LLM gateway via natural language. Use when the user wants to trade crypto, check portfolio balances, view token prices, transfer crypto, manage NFTs, use leverage, bet on Polymarket, deploy tokens, set up automated trading, sign and submit raw transactions, or access LLM models through the Bankr LLM gateway funded by your Bankr wallet. Supports Base, Ethereum, Polygon, Solana, and Unichain.DevOpsNo warnings★ 2.2K↓ —
- blog-briefAgriciDaniel/claude-blogCreate a content brief for ONE planned post: target and secondary keywords, search intent, template choice, competitor gaps from the live SERP, sourced statistics to include, section plan, internal-link targets, and distribution ideas. Use when the user says "content brief", "blog brief", "SEO brief", "article brief". Not a skeleton only (blog-outline), a multi-post plan (blog-strategy, blog-calendar, blog-cluster), or the article itself (blog-write).WritingNo warnings★ 2.6K↓ —
- chief-executivecbrock84/headcountSets direction, allocates capital and attention, and makes the calls no one else can make. Use this when a decision spans more than one function, when priorities conflict and something must be cut, when a plan needs pressure-testing before commitment, or when the question is what the organization should do rather than how to do it. Also use to route a request to the right executive when it is unclear who owns it.TestingNo warnings★ 2.6K↓ —
- labor-and-union-relationscbrock84/headcountManages the relationship with a represented workforce — administering a collective agreement, handling grievances, understanding what supervisors may and may not say, and preparing for bargaining. Use this for a grievance or arbitration question, a work rule change in a represented unit, supervisor guidance during organizing, contract interpretation and past practice, or preparation for negotiations.LegalNo warnings★ 2.6K↓ —
- threat-modelingcbrock84/headcountIdentifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points, the trust boundaries, and the controls that actually address the realistic threats. Use this when designing a feature or system, when a change touches authentication, data handling, payments, or external input, before a security review, or when deciding which security work is worth doing at all.SecurityNo warnings★ 2.6K↓ —
- hey-lolLeoYeAI/agent-master-skillsBecome an AI creator on hey.lol - a social platform where AI agents earn money by posting content and engaging with humans.OtherNo warnings★ 2.2K↓ —
- google-cloud-solution-multi-agent-securitygoogle/skillsDesigns, deploys, and secures Google Cloud Agent Gateway solutions. Use when the user needs to configure multi-agent security, ingress (CLIENT_TO_AGENT), or egress (AGENT_TO_ANYWHERE) patterns involving Model Armor, IAP, and Agent Registry. Don't use for general Cloud Load Balancing or basic VPC setup not related to Agent Gateways.OfficialSecurityNo warnings★ 21.9K↓ —
- benefits-realizationcbrock84/headcountEnsures projects deliver the value they were approved on — defining measurable benefits, baselining, tracking after delivery, and honest post-implementation review. Use this to define benefits for a business case, set a baseline, track whether value actually landed, or run a post-implementation review that produces something useful.EngineeringNo warnings★ 2.6K↓ —
- product-launchcbrock84/headcountTakes something built and gets it into the market — tiering the launch to match what it actually warrants, sequencing internal readiness before external announcement, preparing sales and support to answer the questions it creates, choosing the date for a reason, and measuring adoption rather than announcement reach. Use this to plan a launch, right-size one that is consuming more than it deserves, work out why a released feature nobody uses was launched loudly, or run the weeks after launch day.PlanningNo warnings★ 2.6K↓ —
- deal-negotiationcbrock84/headcountNegotiates a commercial deal without giving away the terms that matter — preparing your walk-away and theirs, trading concessions rather than conceding them, recognizing the tactics that create false urgency, protecting price by moving other variables, and closing on terms someone can actually deliver. Use this to prepare for a negotiation, respond to a demand mid-deal, work out why discounts keep landing at quarter end, or review terms before they are signed.FinanceNo warnings★ 2.6K↓ —
- output-waehlenKlotzkette/claude-fuer-deutsches-rechtFür Output wählen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: patentrecherche.OtherNo warnings★ 1.8K↓ —
- usus-modernusKlotzkette/claude-fuer-deutsches-rechtFür Usus Modernus: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- mietsenkungsverlangenKlotzkette/claude-fuer-deutsches-rechtFür Mietsenkungsverlangen (Mietpreisbremse, WiStrG 1954, Wucher): ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- notionLeoYeAI/agent-master-skillsNotion API for creating and managing pages, databases, and blocks.ProductivityNo warnings★ 2.2K↓ —
vulnerability-management
cbrock84/headcount
SecurityUpdated Oct 18, 2026
From the author
Runs the loop from discovering a weakness to confirming it is fixed — scanning, triage, prioritization by real exploitability, remediation tracking, and patch policy. Use this to stand up or fix a vulnerability program, triage scanner output, decide what to fix first, set patch SLAs, handle a disclosure from an outside researcher, or report posture to leadership.
Install
npx skills add cbrock84/headcount --skill vulnerability-management -a claude-code
Installs to .claude/skills/vulnerability-management/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 89
Security100
Provenance80
Maintenance100
Licence100
Adoption53
Files (2)
- SKILL.md
- references/sources.md