Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,418 skills from 2,407 repositories · updated 22 minutes ago
49,418 skills
- shodan-reconnaissancezebbern/claude-code-guideThis skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports." It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance.SecurityNo warnings★ 4.7K↓ —
- scenario-workflowsscenario-labs/skillsUse when a task involves running a Scenario workflow through MCP, including anything the user calls a Scenario app, a saved pipeline, or a multi-step generation graph. Triggers include listing workflows, building workflow_run's inputs object, pricing a run with a dry run, approving or rejecting a stuck approval node, a run rejected for input length, or a workflows_list reply flooding the context. Creating or editing graphs is scenario-workflow-authoring. Keywords: workflow, app, approval gate.WritingNo warnings★ 2.8K↓ —
- nebenberufKlotzkette/claude-fuer-deutsches-rechtFür Nebenberuf: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Berufsrecht Anwälte.OtherNo warnings★ 1.8K↓ —
- remote-from-slackcodeaholicguy/ai-devkitAI DevKit · Connect the current agent session to an available Slack channel bridge.OtherNo warnings★ 1.7K↓ —
- pysamK-Dense-AI/scientific-agent-skillsProvides Python/HTSlib workflows for genomic files. Used when reading, querying, filtering, or writing SAM/BAM/CRAM, VCF/BCF, FASTA/FASTQ, or tabix data with pysam, including pileup, coverage, indexing, and CRAM references.ScienceNo warnings★ 56.2K↓ —Also in 2 other repos
- seedance-meme-comedyLearnPrompt/awesome-seedanceA short skit where every beat is laid down to serve one punchline. The joke has to land on something visible, and the absurdity only works when the camera and the physics stay dead serious. Use when the user wants a Seedance 2.5 / 2.0 video prompt for this kind of clip (Twist-ending comedy skit; 中文触发词: 反转结尾搞笑短片, 搞笑, 反转, 梗, 沙雕), or asks how published cases of this type were prompted. Read references/cases.md before drafting.MediaNo warnings★ 2.4K↓ —
- huashu-info-searchalchaincyf/huashu-skills多渠道搜索新产品新技术，交叉验证后存入知识库。当用户提到"最新信息"、"新产品"、"搜索资料"、"查资料"、"了解XX"时使用。OtherNo warnings★ 2.2K↓ —
- security-reviewcodeaholicguy/ai-devkitAI DevKit · Review code, skills, and prompts for security vulnerabilities — OWASP Top 10, prompt injection, business logic flaws, and insecure defaults. Use when reviewing PRs, auditing modules, reviewing AI skills/prompts, or preparing for release.SecurityNo warnings★ 1.7K↓ —
- huashu-video-checkalchaincyf/huashu-skills基于MrBeast策略检查视频标题、封面和开头钩子。当用户提到"视频标题"、"封面图"、"点击率"、"CTR"、"观看时长"时使用。MediaNo warnings★ 2.2K↓ —
- document-codecodeaholicguy/ai-devkitAI DevKit · Document a code entry point with structured analysis, dependency mapping, and saved knowledge docs. Use when users ask to document, understand, or map code for a module, file, folder, function, or API.EngineeringNo warnings★ 1.7K↓ —
- okrs-kanzleiKlotzkette/claude-fuer-deutsches-rechtFür OKR und Prioritäten: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- gke-workload-securitygoogle/skillsAudits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (`audit_cluster.sh`), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling) and pod securityContext, and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing workload security posture, isolating namespaces, applying pod security standards, or configuring network policies and secret volume mounts. Don't use for Workload Identity (use gke-workload-identity), cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).OfficialSecurityNo warnings★ 22.2K↓ —
- founder-boardJakeschincariol/founder-skillYour board of directors. Puts a business idea in front of a three-member board, each a sub-agent reading the idea through one published framework: the Offers lens (from Alex Hormozi's $100M Offers), the Monopoly lens (from Peter Thiel's Zero to One) and the Product lens (from Walter Isaacson's biography of Steve Jobs). Each member scores the idea, names the risks that would kill it and votes fund, fund with conditions, or pass. Use when the user says "test my business idea", "would this work", "pressure-test this", "what would a board say", "is this a good business", or starts the founder pack on a new idea.TestingNo warnings★ 2.5K↓ —
- finopsLeoYeAI/agent-master-skillsExpert FinOps (Cloud Financial Operations) guidance for cloud cost optimization, financial management, and business value maximization. Use for cloud cost management, AWS/Azure/GCP billing, cost allocation, tagging strategies, Reserved Instances, Savings Plans, Committed Use Discounts, rightsizing, forecasting, budgeting, showback/chargeback, unit economics, FinOps maturity assessment, governance policies, anomaly detection, rate optimization, workload optimization, cloud sustainability, or any cloud financial operations questions. Follows FinOps framework standards.DevOpsNo warnings★ 2.2K↓ —
- flight-booking-aitourmind-com/Tourmind-Booking-SkillsUse when a user wants to resolve airports, search live flight offers, verify a selected airfare, create a flight booking, query a flight order, or safely create or query a third-party payment through TourMind.OtherNo warnings★ 2.4K↓ —
- new-diagrampedrohcgs/claude-code-my-workflowScaffold a new TikZ diagram from the snippet gallery with prevention rules pre-applied (explicit node dimensions, coordinate map, directional edge labels). Compiles standalone, invokes tikz-reviewer with citations from tikz-measurement.md, and loops on revisions until APPROVED.OtherNo warnings★ 1.7K↓ —
- fable-loopSahir619/fable-methodEnd-to-end orchestrated workflow that runs a task the way Fable ran sessions - parallel evidence subagents, one committed plan, surgical execution with an intent gate, adversarial verification agents, honest outcome-first report. Use for non-trivial multi-step tasks when the user says "/fable-loop", "run the fable loop", or "do this the way Fable would". For the rules alone without orchestration, use fable-method; for large multi-phase projects, prefer the GSD workflow and use this inside phases.PlanningNo warnings★ 2.3K↓ —
- lit-reviewpedrohcgs/claude-code-my-workflowStructured literature search + synthesis with citation extraction, thematic clustering, and gap identification. Use when user says "find papers on X", "do a lit review", "what's the literature on...", "summarize what we know about...", "where's the gap in this field", "review recent work on Y". Produces a written review with BibTeX-ready citations. Uses WebSearch/WebFetch for recent work.EngineeringNo warnings★ 1.7K↓ —
- vaccinatepedrohcgs/claude-code-my-workflowQualify a check before it is allowed to clear anything — prove it can detect the failure it is meant to catch. Seeds known defects into a copy of a real artifact plus a clean control, runs the checker, and reports recall and false-positive rate into a qualification ledger. Use when the user says "does this check work", "qualify the gate", "test my reviewer", "seed defects", "vaccinate", "qualify the checks", "can I trust this review", "does it pass for the right reason", or before relying on any automated check or referee simulation for a decision that matters. NOT a code fixer and NOT a reviewer itself — it grades the grader.TestingNo warnings★ 1.7K↓ —
- blogAgriciDaniel/claude-blogFull-lifecycle blog engine with 31 sub-skills, 12 templates, 100-point scoring, and 5 agents. Routes requests to the right sub-skill: writing, rewriting, analysis, outlines, audits, schema, charts, images, repurposing, AI citation SEO, FLOW prompts, topic clusters, and multilingual publishing. Optimized for Google rankings, E-E-A-T, and AI citations. Supports any platform. Use when the user asks to create, revise, analyze, plan, translate, localize, audit, or repurpose blog content, or invokes a /blog subcommand. Do not activate merely because the word "blog" appears in an unrelated coding, theme-debugging, database, log-analysis, or definition request.WritingNo warnings★ 2.7K↓ —
- blog-rewriteAgriciDaniel/claude-blogRewrite and optimize existing blog posts for Google SEO (E-E-A-T, helpful content) and AI citation visibility as one SEO discipline. For AI-citation-only audit (no Google work), use blog-geo instead. Replaces fabricated statistics with sourced data, applies answer-first formatting, adds images, generates SVG charts, and updates modified dates only for substantive changes. Works with any blog format (MDX, markdown, HTML). Use when user says "rewrite blog", "optimize blog", "update blog", "improve blog", "fix blog".WritingNo warnings★ 2.7K↓ —
- portaljs-add-datasetdatopian/portaljsAdd a dataset (CSV, TSV, JSON, or GeoJSON) to an existing PortalJS portal. Appends an entry to datasets.json so the catalog and showcase render it automatically; routes the data by source (local file vs remote URL) — R2 via Git LFS by default, remote URLs by passthrough. Use when registering a new dataset in a scaffolded portal.DataNo warnings★ 2.4K↓ —
- portaljs-connect-ckandatopian/portaljsWire a scaffolded PortalJS portal to a CKAN backend over its API. Generates a tiny server-side fetch client (no runtime dependency) and feeds the /search catalog and /@namespace/slug showcases from CKAN instead of datasets.json. Use when connecting an existing portal to a live CKAN instance instead of a static manifest.EngineeringNo warnings★ 2.4K↓ —
- portaljs-add-resourcedatopian/portaljsAdd another file (resource) to an EXISTING dataset in a PortalJS portal — a data dictionary, methodology, or an additional data file. Turns a single-file dataset into a multi-resource one; the showcase renders a section per resource. Use when a dataset needs a second file, such as a data dictionary, methodology doc, or an additional period's data.MediaNo warnings★ 2.4K↓ —
iam-helper-for-policy-simulator
google/skills
OfficialOtherUpdated 10 hours ago
From the author
Safely simulates and applies Identity and Access Management (IAM) v1 (Allow) policy changes on Google Cloud. Uses the Policy Simulator to replay historical access logs against proposed policies to prevent breaking active workloads before applying the changes. Use when simulating or applying IAM v1 allow policies across Projects, Folders, or Organizations. Don't use for analyzing IAM v2 deny policies, VPC Service Controls, or performing general policy troubleshooting.
Install
npx skills add google/skills --skill iam-helper-for-policy-simulator -a claude-code
Installs to .claude/skills/iam-helper-for-policy-simulator/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 89
Security85
Provenance100
Maintenance100
Licence100
Adoption68
Files (3)
- SKILL.md
- references/attribution.md
- scripts/analyze_simulation.py