Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 11 hours ago
49,492 skills
- gpl-agplKlotzkette/claude-fuer-deutsches-rechtFür GPL und AGPL: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- boss-zhipin-scrapereatmoreduck/boss-zhipin-scraperScrape BOSS直聘 (job listing site) via Chrome CDP. Searches jobs by keyword/city/filters, fetches JD details, outputs structured JSON/CSV with plaintext salary, and can summarize scraped results into a job-market prompt. Optional --company locally filters results by company name (boss_name substring) with no extra request. Use when user wants to search/analyze jobs on BOSS直聘 or zhipin.com.BrowserNo warnings★ 1.7K↓ —
- blog-brandAgriciDaniel/claude-blogEstablish durable brand and voice context for cross-skill consumption. Generates BRAND.md (audience, positioning, do/don't editorial rules, taboo phrases, competitor differentiation) and VOICE.md (existing persona JSON re-expressed as readable prose), both written to the project root. When present, the blog orchestrator loads these files, fenced as untrusted data, for write, rewrite, brief, outline, calendar, and strategy workflows. Pairs with blog-persona, which manages the structured persona JSON. Use when the user says "blog brand", "create brand context", "BRAND.md", "VOICE.md", "establish editorial brand". Not for learning a voice from existing posts (blog-style) or managing persona JSON (blog-persona).WritingNo warnings★ 2.6K↓ —
- gizaLeoYeAI/agent-master-skillsAutonomous DeFi yield management on Giza -- onboarding, portfolio reviews, withdrawals, rewards, and education. Connects to the Giza MCP server for autonomous stablecoin yield across Base, Arbitrum, Plasma, and HyperEVM.OtherNo warnings★ 2.2K↓ —
- sympysickn33/agentic-awesome-skillsSymPy is a Python library for symbolic mathematics that enables exact computation using mathematical symbols rather than numerical approximations.EngineeringNo warnings★ 49.1K↓ —
- play-billing-library-version-upgradeandroid/skillsUse this skill when upgrading or migrating an Android project from any legacy Google Play Billing Library (PBL) version to the latest stable version of PBL.OfficialOtherNo warnings★ 10.3K↓ —
- blog-localizeAgriciDaniel/claude-blogDeep cultural adaptation of an already translated blog post for one target market: local examples, CTAs, legal references, statistic sources, and formality (Sie/du, tu/vous). Built-in profiles for DACH, Francophone, Hispanic, and Japanese markets. Use when the user says "localize blog", "cultural adaptation", "adapt for Germany", "lokalisieren", "localiser", "adaptar" and a translation already exists. Not for translating (use blog-translate), auditing a folder of translations (use blog-locale-audit), or the full write-translate-localize pipeline (use blog-multilingual).WritingNo warnings★ 2.6K↓ —
- paymeLeoYeAI/agent-master-skillsSend and receive USDC/USDT crypto payments via PayMe smart wallets. Check balances, send stablecoins, view history, manage contacts, sell crypto for local currency via P2P in 10 African countries (Nigeria, Ghana, Kenya, South Africa, Cameroon, Senegal, Benin, Togo, Tanzania, Uganda). Supports bank transfer and mobile money. All payments require explicit user confirmation by default. Supports Base, Arbitrum, Polygon, BNB Chain, and Avalanche.FinanceNo warnings★ 2.2K↓ —
- qwen-aiLeoYeAI/agent-master-skillsUnlock deep video understanding with qwen-ai on ClawHub. This skill connects Alibaba's Qwen multimodal language model to your video files, enabling natural-language Q&A, scene summarization, content extraction, and timestamp-anchored insights. Ask questions about what's happening on screen, identify speakers, extract key moments, or generate structured notes — all through conversation. Supports mp4, mov, avi, webm, and mkv formats.MediaNo warnings★ 2.2K↓ —
- eli5coldteadotai/pr-lensWHAT: Explains a codebase, a folder, a feature, a command or a pull request to someone who knows nothing about it, as a PR Lens canvas whose walkthrough builds the picture one part at a time. WHEN: /eli5 <thing>, or asked to explain code simply, for a beginner, a new hire, a non-engineer, or 'like I'm five'. KEYWORDS: eli5, explain like I'm five, explain simply, beginner, onboarding, walkthrough, diagram, PR LensEngineeringNo warnings★ 2.3K↓ —
- videodbsickn33/agentic-awesome-skillsVideo and audio perception, indexing, and editing. Ingest files/URLs/live streams, build visual/spoken indexes, search with timestamps, edit timelines, add overlays/subtitles, generate media, and create real-time alerts.MediaNo warnings★ 49.1K↓ —
- design-stylescbrock84/headcountApplies a deliberate visual direction to an interface — minimalist editorial, industrial utilitarian, or high-polish commercial — each with its own type scale, palette behavior, surface treatment, and motion. Use this when a product needs a point of view rather than defaults, when choosing between visual directions, when an interface reads as generic, or when restyling something without changing its structure.DesignNo warnings★ 2.6K↓ —
- finopsLeoYeAI/agent-master-skillsExpert FinOps (Cloud Financial Operations) guidance for cloud cost optimization, financial management, and business value maximization. Use for cloud cost management, AWS/Azure/GCP billing, cost allocation, tagging strategies, Reserved Instances, Savings Plans, Committed Use Discounts, rightsizing, forecasting, budgeting, showback/chargeback, unit economics, FinOps maturity assessment, governance policies, anomaly detection, rate optimization, workload optimization, cloud sustainability, or any cloud financial operations questions. Follows FinOps framework standards.DevOpsNo warnings★ 2.2K↓ —
- blog-decayAgriciDaniel/claude-blogCompare two Google Search Console page exports (current vs previous period) to flag pages whose clicks or impressions fell by a chosen threshold, with a triage hint (refresh, query shift, consolidate, prune). The 20% default is a screening heuristic, not proof of decay. Use for "/blog decay", "content decay", "QoQ decline", "refresh declining posts". Needs two GSC exports; not for diagnosing a single traffic drop live (blog-google) or rewriting posts (blog-rewrite).WritingNo warnings★ 2.6K↓ —
- alphagenomeK-Dense-AI/scientific-agent-skillsLooks up precomputed AlphaGenome Atlas effects for any GRCh38 single-nucleotide variant (AVI score with Phred and 18 SHAP feature attributions, plus raw and quantile scores for RNA-seq, DNase, ATAC, ChIP-TF, ChIP-histone, CAGE, PRO-cap, splicing, polyadenylation and contact-map tracks), scores variants or scans windows on demand with the AlphaGenome model for human and mouse (variant scoring, in silico mutagenesis, REF-versus-ALT track prediction), and builds Atlas website deep links. Use when the user mentions AlphaGenome, AlphaGenome Atlas, AVI or AlphaGenome Variant Impact, DeepMind variant effect prediction, or wants to prioritise or mechanistically interpret non-coding, regulatory, splicing, enhancer, promoter, or chromatin-accessibility effects of SNVs from a VCF, credible set, or region. Research use only; not a clinical tool.ScienceNo warnings★ 56.1K↓ —
- evogoLeoYeAI/agent-master-skillsComplete WhatsApp automation via Evolution API Go v3 - instances, messages (text/media/polls/carousels), groups, contacts, chats, communities, newsletters, and real-time webhooksEngineeringNo warnings★ 2.2K↓ —
- coauthor-briefpedrohcgs/claude-code-my-workflowGenerate a co-author / collaborator handoff brief for a multi-author, multi-machine project — summarizing what changed since the last brief (git delta), the current state of each artifact (manuscript, analysis, slides), open questions, how to reproduce locally, and any restricted-data access steps. Use when user says "coauthor brief", "handoff brief", "bring my coauthor up to speed", "what changed since last week", "onboard a collaborator", "write a handoff for [name]", or before sending a co-author the repo. NOT a commit or a checkpoint — it is the cross-machine, cross-person summary `meta-governance.md` only partially covers.DocumentsNo warnings★ 1.7K↓ —
- blog-factcheckAgriciDaniel/claude-blogVerify statistics and claims in blog posts by fetching cited source URLs and checking if the claimed data actually appears on the page. Extracts all load-bearing claims (statistics, product or policy claims, ranking and comparative claims, named sources), validates cited URLs before fetching, and scores match confidence (exact match 1.0, paraphrase 0.7-0.9, not found 0.0). Flags uncited claims as UNVERIFIED and marks a claim verified only when this run fetched the source and found the passage. Checks that a source says what the post says it says; it cannot prove the source is true or verify first-hand experience. Use when the user says "fact check", "verify statistics", "check sources", "factcheck". Report only; not for rewriting posts (blog-rewrite).WritingNo warnings★ 2.6K↓ —
- glance-canonical-layoutsandroid/skillsUse this skill to create home screen widgets using Jetpack Glance Canonical Layouts from the Android Platform Samples project, or when asked to implement standard widget layout patterns (including Check List, Image Grid, Snap Scrolling, and Standard Toolbar).OfficialMediaNo warnings★ 10.3K↓ —
- taxcbrock84/headcountStructures the tax questions a growing business faces — corporate income, sales and use, payroll, nexus, and the obligations created by hiring or selling somewhere new. Use this to work out what a new state or country obligates you to, prepare for a tax filing or audit, understand sales tax on your product, or check what a remote hire or new market triggers.FinanceNo warnings★ 2.6K↓ —
- fable-domainSahir619/fable-methodDiscuss a domain with the user, research it from real sources, then generate a trusted skill bundle for it - a step-by-step workflow with a flowchart, a domain adapter, a trap fixture, and a smoke eval. Use when the user says "/fable-domain SECTOR", "make a skill for DOMAIN", "add a domain to the fable method", or "give a lesser model Fable's workflow for DOMAIN". The bundle is the deliverable; a workflow without its flowchart, sources, and trap is not done.ScienceNo warnings★ 2.3K↓ —
- blog-cannibalizationAgriciDaniel/claude-blogDetect keyword cannibalization across blog posts by extracting primary keywords from titles and headings, clustering semantically similar targets, and flagging posts competing for the same search intent. Supports a free local mode (file analysis) and a paid DataForSEO API mode that runs only after the user approves the call count. Outputs a severity-scored report with a recommended action per cluster (merge, differentiate, canonical, noindex, or no action). Use when the user says "cannibalization", "keyword overlap", "competing pages". Not a site audit (blog-audit) or cluster planning (blog-cluster); it changes no files or redirects.WritingNo warnings★ 2.6K↓ —
- seven-pass-reviewpedrohcgs/claude-code-my-workflowMechanize Pattern 15 — the seven-pass adversarial review protocol for academic manuscripts. Spawns 7 fresh-context subagents in parallel (abstract, intro, methods, results, robustness, prose, citations), then synthesizes a prioritized revision checklist. Use for submission-ready or R&R-stage papers where single-pass review isn't enough.EngineeringNo warnings★ 1.7K↓ —
- learning-and-developmentcbrock84/headcountBuilds capability — skills gaps, career frameworks, training that transfers to the job, and internal mobility. Use this to design a career ladder, close a capability gap, decide whether to build or hire a skill, structure onboarding into a role, or work out why training keeps failing to change anything.DesignNo warnings★ 2.6K↓ —
hunt-lfi
elementalsouls/Claude-BugHunter
WritingUpdated 19 hours ago
From the author
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poisoning → RCE, PHP filter-chain RCE (no upload needed), php:// / data:// / zip:// / phar:// wrappers, RFI via allow_url_include, directory traversal read/write/delete. Covers OOB/blind LFI confirmation and false-positive discipline. Use when hunting file-include or path-traversal bugs on any target.
Install
npx skills add elementalsouls/Claude-BugHunter --skill hunt-lfi -a claude-code
Installs to .claude/skills/hunt-lfi/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (MIT) does not let us redistribute its files. The install commands fetch them from GitHub instead.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
- Reads credential files such as ~/.ssh or ~/.awsLow
Why 89
Security95
Provenance85
Maintenance100
Licence100
Adoption59
Files (1)
- SKILL.md