Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 16 hours ago
47,548 skills
- apigee-agent-gateway-governancegoogle/skillsStands up an Apigee API proxy that a Google Cloud Agent Gateway calls as an ext-proc (Service Extension) callout on an agent's LLM traffic, to meter token usage per model, extract caller identity, and apply Model Armor prompt screening or a semantic cache. Use when wiring Apigee in as an AI gateway behind an Agent Gateway, when an agent's model egress needs governing, or when a callout proxy returns no verdict and you need to find out why. The distinguishing question is whether Apigee forwards the traffic or only inspects it: this skill is inspect-only, and builds the proxy itself. Don't use it when Apigee is meant to receive a request and route it onward to a backend — including hosting an MCP server behind Apigee — which needs a proxy with a target instead. Don't use for governing the agent's calls to tools or MCP servers. Don't use for choosing or switching which model a request goes to. Don't use for creating the Agent Gateway itself, nor for Apigee hybrid.OfficialEngineeringNo warnings★ 21.8K↓ —
- kaltstart-interviewKlotzkette/claude-fuer-deutsches-rechtFür Kaltstart-Interview: routet Rolle, Frist, Unterlagen und Fachschritt; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: Prozessrecht.PlanningNo warnings★ 1.8K↓ —
- sp3ndLeoYeAI/agent-master-skillsBuy products from Amazon using USDC on Solana. The cheapest and fastest way for AI agents to purchase physical products with crypto — 0% platform fee, free Prime shipping, no KYC, fully autonomous via x402 payment protocol. Supports 200+ countries across 22 Amazon marketplaces.FinanceNo warnings★ 2.2K↓ —
- ressort-bmwsbKlotzkette/claude-fuer-deutsches-rechtFür Ressort-Heranführung BMWSB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.OtherNo warnings★ 1.8K↓ —
- asc-ppp-pricingrorkai/app-store-connect-cli-skillsSet territory-specific pricing for subscriptions and in-app purchases using current asc setup, pricing summary, price import, and price schedule commands. Use when adjusting prices by country or implementing localized PPP strategies.PlanningNo warnings★ 1.1K↓ —
- run-paid-campaigns-draft-movesgooseworks-ai/goose-skillsStep of the run-paid-campaigns playbook: turns the weekly read into scale, pause, hold, rotate and fix recommendations within the spend ceiling. Run run-paid-campaigns instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- cloudflare-apijezweb/claude-skillsHit the Cloudflare REST API directly for operations that wrangler and MCP can't handle well. Bulk DNS, custom hostnames, email routing, cache purge, WAF rules, redirect rules, zone settings, Worker routes, D1 cross-database queries, R2 bulk operations, KV bulk read/write, Vectorize queries, Queues, and fleet-wide resource audits. Produces curl commands or scripts. Triggers: 'cloudflare api', 'bulk dns', 'custom hostname', 'email routing', 'cache purge', 'waf rule', 'd1 query', 'r2 bucket', 'kv bulk', 'vectorize query', 'audit resources', 'fleet operation'.DevOpsNo warnings★ 1.1K↓ —
- make-static-ads-composegooseworks-ai/goose-skillsStep of make-static-ads: writes each ad's render prompt and ordered image list from its concept-board row, one per ad and ratio, ready for a quoted render. Run make-static-ads instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- oma-architectureNewfirst-fluke/oh-my-agentEvaluate system boundaries and architectural tradeoffs. Use for architecture decisions, design reviews, and ADRs.PlanningNo warnings★ 1.4K↓ —
- research-market-listeninggooseworks-ai/goose-skillsStep of the research-market playbook: the worker brief for listening to what people say about the brand and category, risks first. Run research-market instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- research-competitors-rival-passgooseworks-ai/goose-skillsStep of the research-competitors playbook: the worker brief for profiling one rival at a capped depth, returning a fixed-shape profile. Run research-competitors instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- database-designCloudAI-X/claude-workflow-v2Designs database schemas, indexing strategies, query optimization, and migration patterns for SQL and NoSQL databases. Use when designing tables, optimizing queries, fixing N+1 problems, planning migrations, or when asked about database performance, normalization, ORMs, or data modeling.DataNo warnings★ 1.4K↓ —
- oma-tf-infrafirst-fluke/oh-my-agentInfrastructure-as-code specialist for multi-cloud provisioning using Terraform across any provider (AWS, GCP, Azure, Oracle Cloud). Use for terraform plan/apply, state management, compute, databases, storage, networking, IAM, OIDC, cost optimization, policy-as-code, ISO/IEC 42001 AI controls, ISO 22301 continuity, and ISO/IEC/IEEE 42010 architecture documentation.DevOpsNo warnings★ 1.4K↓ —
- work-with-creators-creator-discoverygooseworks-ai/goose-skillsStep of the work-with-creators playbook: builds and screens a long list of creators from fans, category creators and search, and ranks finalists to vet next. Run work-with-creators instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- plan-campaign-channel-decisiongooseworks-ai/goose-skillsStep of the plan-campaign playbook: marks each candidate channel Run, Test, Later or No with a brand-fact reason and founder hours. Run plan-campaign instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- research-audience-segment-passgooseworks-ai/goose-skillsStep of the research-audience playbook: the worker brief for researching one buyer group, returning notes in a fixed shape. Run research-audience instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- fork-disciplinejezweb/claude-skillsAudit and enforce the core/client boundary in multi-client projects. Detects where shared platform code is tangled with client-specific code, finds hardcoded client checks, config files that replace instead of merge, scattered client code, migration conflicts, and missing extension points. Produces a boundary map, violation report, and refactoring plan. Optionally generates FORK.md documentation and restructuring scripts. Triggers: 'fork discipline', 'check the boundary', 'is this core or client', 'platform audit', 'client separation', 'fork test', 'refactor for multi-client', 'clean up the fork'.TestingNo warnings★ 1.1K↓ —
- research-marketgooseworks-ai/goose-skillsMarket research and brand watch: which market the brand is in, how big the reachable part is, what's changing, how buyers buy and what they pay, what people are saying now, and what it means for positioning. Use when the marketer asks for market research, "how big is my market", "what's changing in my category", "what do others charge", "what are people saying about us", "is there demand for <idea>", or "watch my brand / tell me if something blows up" (alerts only, risk first). Also writes positioning choices and finished messages ("position my product", "write our positioning"). Researches first, asks only decisions at the end, and saves the output to the brand. Not for who the buyers are and their own words — use research-audience; not for a deep look at rivals — use research-competitors.ScienceNo warnings★ 1.3K↓ —
- oma-dbNewfirst-fluke/oh-my-agentDesign schemas and migrations, tune queries, or plan vector retrieval and database operations. Application API implementation uses oma-backend.DataNo warnings★ 1.4K↓ —
- email-lifecycle-send-checkgooseworks-ai/goose-skillsChecks a drafted email flow or broadcast before it is loaded: flow logic and exits, overlaps, offer depth and codes, stock, claims, consent and legal footer, SMS rules, rendering, voice and AI-copy tells, and the goal metric. Returns a pass / fixed / open-question table. Use alone when you already have the finished draft and the brand's product and policy facts; otherwise run email-lifecycle.ProductivityNo warnings★ 1.3K↓ —
- asc-metadata-syncrorkai/app-store-connect-cli-skillsSync, validate, and apply App Store metadata and store assets with asc. Use when updating localizations, keywords, App Clip or preview assets, Asset Library media and placements, or migrating legacy fastlane metadata.OtherNo warnings★ 1.1K↓ —
- strategy-documentjezweb/claude-skillsWrite structured strategic documents for small and medium businesses: SWOT analyses, lean business plans, OKRs, competitive analyses. Each mode has a defined structure and quality bar. Use whenever a business asks to articulate strategy, set goals, analyse competition, plan for growth, do a SWOT, write OKRs, or build a lean business plan. Produces actionable documents, not generic frameworks.MarketingNo warnings★ 1.1K↓ —
- shiphashgraph-online/awesome-codex-pluginsRelease-gate sequence: validate → review → push → tag. Wraps kernel:git mechanics with the pre-ship safety chain. Triggers: ship, release, push to main, ready to merge, deploy.DevOpsNo warnings★ 1.5K↓ —
- favicon-genjezweb/claude-skillsGenerate custom favicons from logos, text, or brand colours. Produces favicon.svg, favicon.ico, apple-touch-icon.png, icon-192/512.png, and web manifest. Use whenever the user wants a favicon, mentions replacing a CMS default favicon, converting a logo into a favicon, creating branded initials icons, or troubleshooting favicon not displaying / iOS black square / missing manifest.OtherNo warnings★ 1.1K↓ —
security-patterns
CloudAI-X/claude-workflow-v2
SecurityUpdated Oct 6, 2026
From the author
Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, configuring CORS, implementing rate limiting, or when asked about JWT, OAuth, password hashing, API keys, RBAC, or security best practices.
Install
npx skills add CloudAI-X/claude-workflow-v2 --skill security-patterns -a claude-code
Installs to .claude/skills/security-patterns/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (1)
- SKILL.md