Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 12 hours ago
49,492 skills
- hunt-lfielementalsouls/Claude-BugHunterHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal — /etc/passwd read, log poisoning → RCE, PHP filter-chain RCE (no upload needed), php:// / data:// / zip:// / phar:// wrappers, RFI via allow_url_include, directory traversal read/write/delete. Covers OOB/blind LFI confirmation and false-positive discipline. Use when hunting file-include or path-traversal bugs on any target.WritingNo warnings★ 5.4K↓ —
- networkxsickn33/agentic-awesome-skillsNetworkX is a Python package for creating, manipulating, and analyzing complex networks and graphs.EngineeringNo warnings★ 49.1K↓ —
- tezosLeoYeAI/agent-master-skillsExpert Tezos blockchain development guidance. Provides security-first smart contract development, FA1.2/FA2 token standards, gas optimization, and production deployment patterns. Use when building Tezos L1 smart contracts or implementing token standards.SecurityNo warnings★ 2.2K↓ —
- telluriumK-Dense-AI/scientific-agent-skillsSimulates biochemical kinetic models from SBML or Antimony with Tellurium and libRoadRunner, checks model units, compares deterministic parameter perturbations, and exports and replays SBML plus SED-ML COMBINE archives. Use for reaction-network time courses, kinetic parameters, concentration dynamics and reproducible simulation experiments; steady-state constraint-based metabolic flux analysis belongs to cobrapy.OtherNo warnings★ 56.1K↓ —Also in 1 other repo
- coauthor-briefpedrohcgs/claude-code-my-workflowGenerate a co-author / collaborator handoff brief for a multi-author, multi-machine project — summarizing what changed since the last brief (git delta), the current state of each artifact (manuscript, analysis, slides), open questions, how to reproduce locally, and any restricted-data access steps. Use when user says "coauthor brief", "handoff brief", "bring my coauthor up to speed", "what changed since last week", "onboard a collaborator", "write a handoff for [name]", or before sending a co-author the repo. NOT a commit or a checkpoint — it is the cross-machine, cross-person summary `meta-governance.md` only partially covers.DocumentsNo warnings★ 1.7K↓ —
- diagnosepedrohcgs/claude-code-my-workflowA ready-to-fork Claude Code template for academics using LaTeX/Beamer + R. Multi-agent review, quality gates, adversarial QA, and replication protocols.TestingNo warnings★ 1.7K↓ —
- camsnapLeoYeAI/agent-master-skillsCapture frames or clips from RTSP/ONVIF cameras.OtherNo warnings★ 2.2K↓ —
- fortbildungKlotzkette/claude-fuer-deutsches-rechtFür Fortbildung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Berufsrecht Notare.OtherNo warnings★ 1.8K↓ —
- plurumLeoYeAI/agent-master-skillsPlurum is a collective consciousness for AI agents. Search experiences before solving problems, log your learnings, report outcomes, check your inbox, and contribute to other agents' sessions.OtherNo warnings★ 2.2K↓ —
- typeui-fundamentalsbergside/typeuiUniversal UI/UX design principles covering visual hierarchy, interaction laws, typography foundations, and WCAG accessibility requirements. Use when making design decisions not covered by a specific design system, validating principle compliance, or resolving conflicts between aesthetics and accessibility. Design-system-agnostic and applies to every surface.DesignNo warnings★ 2.2K↓ —
- subunternehmerKlotzkette/claude-fuer-deutsches-rechtFür Subunternehmer: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: subunternehmer.OtherNo warnings★ 1.8K↓ —
- konzernklauselKlotzkette/claude-fuer-deutsches-rechtFür Konzernklausel: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: konzernklausel.OtherNo warnings★ 1.8K↓ —
- open-source-sbomKlotzkette/claude-fuer-deutsches-rechtFür Open Source und SBOM: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: robotik-recht. Route: open-source-sbom.OtherNo warnings★ 1.8K↓ —
- consulting-agbKlotzkette/claude-fuer-deutsches-rechtFür Consulting AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- seabornsickn33/agentic-awesome-skillsSeaborn is a Python visualization library for creating publication-quality statistical graphics. Use this skill for dataset-oriented plotting, multivariate analysis, automatic statistical estimation, and complex multi-panel figures with minimal code.EngineeringNo warnings★ 49.1K↓ —
- blog-writeAgriciDaniel/claude-blogWrite a new blog article from scratch for Google rankings and AI citations, then take it through the delivery gates. Generates the full article with template selection, answer-first formatting, Key Takeaways box, sourced statistics, licensed images, built-in SVG charts, optional FAQ and internal linking, in MDX, markdown or HTML. Use when the user asks to write a new blog post or article from a topic or brief ("write a blog post", "draft a new article", "/blog write"). Not for editing an existing post (blog-rewrite), and not for a standalone outline, brief or research request.WritingNo warnings★ 2.6K↓ —
- zhengxi-viewslyra81604/zhengxi-views郑希观点库——基于易方达基金经理郑希 2012–2026 年全部公开观点原文语料，外加从语料蒸馏、有本人原话佐证的郑希投资方法的可溯源 research skill。能做： (1) 溯源问答——他怎么看 AI算力/光通信/新能源/半导体/ROE 等，引用其原话作答； (2) 讲解他的投资方法/框架/选股逻辑；(3) 前瞻应用——用他的方法分析当下任意主题/行业/个股，语料没谈过也能据框架推演； (4) 风格化点评——用他季报/手记的口吻写市场点评、季度展望； (5) 言行对照——用他全部基金真实数据（季度持仓/净值/业绩/规模/任职回报）核对"说的"与"买的"，或答他的业绩/重仓/规模； (6) 全市场查询对比——内置约 2.7 万只基金列表，按需抓任意基金真实数据做查询或与郑希对比； (7) 郑希框架评分——给一只基金按他的方法打分（多像郑希会买的）。 When the user mentions 郑希/易方达郑希/zhengxi, asks his view on a sector/stock/theme, his 投资方法/框架/选股/风格/持仓/业绩/净值/规模, wants to apply his approach, a commentary 用郑希口吻, to check words vs holdings, or to look up/compare/score ANY China mutual fund (任意基金/某基金经理/同类对比/给基金打分)——use this skill, even if they don't say "skill", even if the topic isn't in his corpus (fall back to his method). 引用忠于原文、不杜撰；推演与原话区分。研究学习辅助，非投资建议。ScienceNo warnings★ 1.8K↓ —
- scientific-writingK-Dense-AI/scientific-agent-skillsDrafts, revises, and audits scientific manuscripts or reports with explicit evidence provenance, reporting-guideline coverage, authorship accountability, confidentiality controls, and local consistency checks. Use for manuscript sections, references, declarations, tables, figures, or submission preparation when scientific accuracy and traceability matter.ScienceNo warnings★ 56.1K↓ —
- bug-receiptgithub/awesome-copilotClose defects and incidents with a BUG RECEIPT and VERIFIED, PARTIAL, or BLOCKED status after diagnosis, repair, or recovery.OtherNo warnings★ 40.8K↓ —
- delikte-furtumKlotzkette/claude-fuer-deutsches-rechtFür Delikte Furtum: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- anschluss-routingKlotzkette/claude-fuer-deutsches-rechtFür Anschluss-Routing: routet Rolle, Frist, Unterlagen und Fachschritt; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: robotik-recht.OtherNo warnings★ 1.8K↓ —
- kaltstart-interviewKlotzkette/claude-fuer-deutsches-rechtFür Patentrecht — Kaltstart-Interview: routet Rolle, Frist, Unterlagen und Fachschritt; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.PlanningNo warnings★ 1.8K↓ —
- lean-analyticswondelai/skillsChoose and audit startup metrics using Croll and Yoskovitz's "Lean Analytics". Use when the user mentions "what metrics should we track", "KPIs", "north star metric", "One Metric That Matters (OMTM)", "vanity metrics", "analytics dashboard", "DAU/MAU", "churn benchmark", or "measure product-market fit". Also trigger when choosing metrics for a startup or feature, auditing a dashboard for vanity metrics, setting metric targets and baselines, or instrumenting a product by business model and stage. Covers good-vs-vanity metrics, the One Metric That Matters, metrics by business model, the five startup stages, and benchmarks. For the build-measure-learn loop, see lean-startup. For fixing activation and retention, see improve-retention.DataNo warnings★ 2.6K↓ —Also in 2 other repos
- nda-it-saas-vendorKlotzkette/claude-fuer-deutsches-rechtFür NDA mit IT-/SaaS-Vendor: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: NDA-Abgleich. Route: nda-it-saas-vendor.LegalNo warnings★ 1.8K↓ —
aws-penetration-testing
zebbern/claude-code-guide
TestingUpdated yesterday
From the author
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.
Install
npx skills add zebbern/claude-code-guide --skill aws-penetration-testing -a claude-code
Installs to .claude/skills/aws-penetration-testing/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
- Uses sudoLow
Why 89
Security95
Provenance84
Maintenance100
Licence100
Adoption58
Files (2)
- SKILL.md
- references/advanced-aws-pentesting.md