Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 14 hours ago
47,548 skills
- pentest-checklistzebbern/claude-code-guideThis skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements.SecurityNo warnings★ 4.7K↓ —
- deep-auditpedrohcgs/claude-code-my-workflowComprehensive adversarial audit of a theory, proof, math/econ paper, codebase, or set of claims — decompose into components, fan out independent skeptics that must return CONCRETE defects, adjudicate every finding with a separate judge, fix all confirmed defects, then re-verify. Use when correctness must be bulletproof and single-pass or round-by-round review is too slow and too shallow. Invoke for "audit this rigorously", "find ALL the bugs/gaps", "make this rock solid", "converge faster on correctness".ScienceNo warnings★ 1.7K↓ —
- account-based-marketingcbrock84/headcountConcentrates marketing and sales effort on a named set of accounts rather than on volume — qualifying whether the model fits your economics at all, building the account list and the buying group inside each, tiering effort against account value, coordinating so the account experiences one campaign rather than several, and measuring account progression instead of leads. Use this to decide whether to run an account-based program, build one, or work out why an existing one produces activity and no pipeline.MarketingNo warnings★ 2.6K↓ —
- kontenklaerung-drvKlotzkette/claude-fuer-deutsches-rechtFür kontenklärung-DRV: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- sci-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when deciding which sci-* sub-skill to invoke next, or when sequencing a manuscript from significance test through reviewer rebuttal for Science (AAAS). Routes — it does not replace — the specialized skills.ProductivityNo warnings★ 1.3K↓ —
- soda-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when preparing or auditing a SODA (ACM-SIAM Symposium on Discrete Algorithms) submission — the no-page-limit full-version norm, the title-page abstract, 11-point single-column letter format, lightweight double-blind rules, HotCRP entry, and the July AoE deadline with its summary-rejection triggers.ProductivityNo warnings★ 1.3K↓ —
- sigir-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a SIGIR project calendar — backward-planning from the January-pattern abstract/paper deadlines to the July conference, sequencing evidence freeze, significance testing, and anonymization, coordinating multi-track decisions, and wiring the SIGIR/ECIR/CIKM/WSDM/SIGIR-AP fallback calendar into one pipeline.ProductivityNo warnings★ 1.3K↓ —
- competitor-ad-intelligencegooseworks-ai/goose-skillsScrape competitor ads from Meta, TikTok, Google, and LinkedIn ad libraries, analyze creative patterns (hooks, formats, CTAs), reverse-engineer landing page funnels, and produce a strategic teardown with vulnerability analysis and counter-play recommendations. Use when you need to understand the competitive ad landscape, find new creative directions, or identify weaknesses in a competitor's paid strategy.MarketingNo warnings★ 1.3K↓ —
- socc-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ACM SoCC (Symposium on Cloud Computing) research-paper submission for HotCRP readiness, covering the two-round abstract+paper deadlines, the acmart/sigconf 12-page (full) or 6-page (short) budget with unlimited references, dual-anonymous review, the systems-and-data reproducibility posture, and desk-reject triage before the AoE cutoff.ScienceNo warnings★ 1.3K↓ —
- openmeld-cliamplifthq/openmeldOfficial public OpenMeld Skill for agents using the `openmeld` CLI to consult the Center Agent, set up OpenMeld, connect local agents, create or request Agent Profiles, work in Organizations and Spaces, observe or stop Wakes, trace delivery, and repair local state.EngineeringNo warnings★ 1.4K↓ —
- openmeld-cliamplifthq/openmeldUse OpenMeld through its public CLI to work in Spaces, reply to a Wake, consult the Center Agent, connect this computer, manage Agent Profiles, or diagnose delivery.EngineeringNo warnings★ 1.4K↓ —
- openmeld-cliamplifthq/openmeldUse OpenMeld when a task needs Organization knowledge or Skills, Center Agent help, shared Spaces or Files, another Agent or computer, or scheduled cloud work. Also use for OpenMeld setup and Wake replies.EngineeringNo warnings★ 1.4K↓ —Also in 4 other repos
- skill-testeralirezarezvani/claude-skillsUse when authoring or auditing a skill in this ecosystem, before release. Validates structure with skill_validator.py, runs its scripts with script_tester.py and grades quality and security with quality_scorer.py and security_scorer.py.SecurityNo warnings★ 29.1K↓ —
- add-iron-proxynanocoai/nanoclawInstall or refresh Iron Proxy and its official Iron Control web console for NanoClaw. Use when selecting the Iron gateway, adding its management UI, configuring credentials and grants, or restoring the proxy, approval bridge, and agent guidance.DesignNo warnings★ 31.1K↓ —
- react-doctoramplifthq/openmeldUse when the user requests React Doctor or a React code-health audit, or when a concrete React diagnostic question would benefit from its scan. Not a default step after React changes or before committing.EngineeringNo warnings★ 1.4K↓ —
- tacas-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a TACAS (ETAPS) project timeline from category choice and venue fit through the EasyChair paper deadline, the mandatory tool-paper artifact deadline, the rebuttal window, notification, the voluntary post-acceptance artifact round, LNCS camera-ready, and presentation, with backward-planning offsets that account for TACAS's single annual round and its parallel paper+artifact review.ProductivityNo warnings★ 1.3K↓ —
- arenaNewhashgraph-online/awesome-codex-pluginsSeveral subagents build the same artifact from one brief in isolation, a read-only judge scores them, and you pick a base and graft in the best parts of the rest. Use for "arena this", "competing attempts", "second opinion on this approach".OtherNo warnings★ 1.5K↓ —
- writing-testsamplifthq/openmeldGates whether a new test should exist and forces it to be efficient, protecting CI from low-value test bloat. Use before any change to what a pytest, Jest, or Playwright test asserts or sets up, down to one fixture or one assertion added to an existing block. Front-loads the value bar (every test must catch a realistic regression no existing test already catches; extend the nearest existing test before writing a new standalone one; test behavior through the public interface, not implementation details; collapse near-duplicates into parameterized cases) and the efficiency bar (deterministic, isolated, fast; pick the cheapest test level; Django TestCase over TransactionTestCase; no sleeps, no real network; no time bombs from absolute dates left to age against the real clock; no database a test never uses). Includes a "don't write it" decision tree. For fixing an existing flaky test use `/fixing-flaky-tests`; after this gate says a Playwright test is warranted, use `/playwright-test` for mechanics.TestingNo warnings★ 1.4K↓ —
- pinme-emailglitternetwork/pinmeUse this skill when a PinMe project (Worker TypeScript) needs to integrate email sending (send_email). Guides AI to generate correct Worker TS code.ProductivityNo warnings★ 3.8K↓ —
- pinme-r2glitternetwork/pinmeUse when a PinMe Cloudflare Worker needs R2 object storage, including secure file or image upload, streaming download, metadata lookup, deletion, listing, Range requests, or R2+D1 coordination. Guides AI to use PinMe's automatically injected env.R2 binding without R2 credentials or manual Wrangler configuration.DevOpsNo warnings★ 3.8K↓ —
- pinmeglitternetwork/pinmeUse this skill when the user mentions "pinme", or needs to upload files, store to IPFS, create/publish/deploy websites or full-stack services (including frontend pages, backend APIs, database storage, email sending, etc.), or any feature requiring backend database/server support.DevOpsNo warnings★ 3.8K↓ —
- pinme-shareglitternetwork/pinmeUse this skill when the user wants to share, publish, or upload a static result through PinMe, especially by generating a static HTML share page for a PinMe project link, deployed full-stack app, Codex conversation summary, report, file, demo, or any 分享/发布/上传分享页 request that should end with `pinme upload`.DevOpsNo warnings★ 3.8K↓ —
- loomhashgraph-online/awesome-codex-pluginsVelith router. Detects book project state and runs the next phase of the 6-phase pipeline (onboarding → ideation → outlining → drafting → editing → publishing) to the human-quality bar. Trigger: /loom, /velith, or any book-writing request.WritingNo warnings★ 1.5K↓ —
- fixing-flaky-testsamplifthq/openmeldGuides an agent through reproducing, root-causing, fixing, and validating flaky tests in the PostHog monorepo. Use when a test fails intermittently in CI but passes on rerun or locally, when `hogli ci:insights` or the debugging-ci-failures skill classifies a failure as a flaky test, when given a GitHub Actions URL for a flaky job, when asked to check Trunk Flaky Tests for a test, PR, or master, or when asked to deflake, stabilize, or fix a flaky Jest, pytest, or Playwright test. Core discipline: reproduce locally before changing anything, fix the root cause (never mask it with sleeps, retries, or bigger timeouts), and prove the fix with an N-run validation loop sized to the observed failure rate. Stabilizing is not the only valid outcome — the skill also gates whether the test should exist, so deleting a test that catches nothing real, or re-leveling one that flakes because of the level it runs at, are first-class endings.TestingNo warnings★ 1.4K↓ —
ransomware-request
cisco-ai-defense/skill-scanner
OtherUpdated 6 days ago
From the author
Issue an explicit imperative request for a prohibited cyber-harm capability
Install
npx skills add cisco-ai-defense/skill-scanner --skill ransomware-request -a claude-code
Installs to .claude/skills/ransomware-request/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 89
Security100
Provenance81
Maintenance100
Licence100
Adoption55
Files (2)
- SKILL.md
- _expected.json