Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
48,622 skills from 2,355 repositories · updated 14 hours ago
47,548 skills
- internal-controls-and-auditcbrock84/headcountDesigns and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit. Use this to design controls for a process, prepare for an external audit, respond to an audit finding, set approval thresholds, or assess where a small team's segregation of duties is genuinely broken.TestingNo warnings★ 2.6K↓ —
- dnanexus-integrationK-Dense-AI/scientific-agent-skillsBuilds and operates reproducible genomics workloads on DNAnexus with the dx CLI, dxpy, apps/applets, native workflows, dxCompiler, and Nextflow. Supports DNAnexus data transfers, dxapp.json development, execution monitoring, workflow import, and project automation.ScienceNo warnings★ 55.6K↓ —
- orchata-ragLeoYeAI/agent-master-skillsKnowledge management and RAG platform with tree-based document indexing. Use this skill to search, browse, and manage Orchata knowledge bases via MCP tools.OtherNo warnings★ 2.2K↓ —
- oil-uiUpdatedoil-oil/oil-ui设计、改进和评审网站、App、后台与组件的界面：探索设计方向、生成多风格同屏对比页，并基于真实截图打磨视觉层级；按请求交付对比页、设计说明、设计稿或可运行界面。只负责设计判断，不用于纯业务逻辑、接口构建、无界面变化的代码整理，或改法已完全明确的日常修改（如改文案、调数量、删指定元素、复用现有样式，哪怕带有“优化”字样）。已安装 oil-ui-pro 时交给 oil-ui-pro。DesignNo warnings★ 2.6K↓ —
- oma-tf-infraNewfirst-fluke/oh-my-agentCreate or review Terraform infrastructure and plans. Use for cloud resources, IAM, networking, state management, and infrastructure changes.DevOpsNo warnings★ 1.4K↓ —
- ibkrhashgraph-online/awesome-codex-pluginsKeep an eye on an Interactive Brokers (IBKR) account or prices and speak up when something changes - new executions, prices crossing a level, option assignments and exercises, deposits and withdrawals, big moves in net asset value. Use when the user wants Codex to watch their IBKR account or IBKR market data, and when handling a fire of an IBKR trigger.OtherNo warnings★ 1.5K↓ —
- ctf-miscljagiello/ctf-skillsProvides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.SecurityNo warnings★ 3.6K↓ —
- cloudbase-document-database-in-wechat-miniprogramTencentCloudBase/CloudBase-AI-ToolkitUse CloudBase document database WeChat MiniProgram SDK to query, create, update, and delete data. Supports complex queries, pagination, aggregation, and geolocation queries.DataNo warnings★ 1.2K↓ —Also in 5 other repos
- gentle-designNewGentleman-Programming/gentle-shellTrigger: design a screen or page, mockup, landing page, UI directions, artboards, try a different approach, design system sync. Write self-contained HTML design directions under design/<slug>/.DesignNo warnings★ 1.5K↓ —
- masonrykostja94/marketing-skillsDeprecated compatibility entry for Masonry construction. This component is now maintained in Bricks; install and use component-builder to build a new Masonry.OtherNo warnings★ 1.1K↓ —
- research-marketgooseworks-ai/goose-skillsMarket research and brand watch: which market the brand is in, how big the reachable part is, what's changing, how buyers buy and what they pay, what people are saying now, and what it means for positioning. Use when the marketer asks for market research, "how big is my market", "what's changing in my category", "what do others charge", "what are people saying about us", "is there demand for <idea>", or "watch my brand / tell me if something blows up" (alerts only, risk first). Also writes positioning choices and finished messages ("position my product", "write our positioning"). Researches first, asks only decisions at the end, and saves the output to the brand. Not for who the buyers are and their own words — use research-audience; not for a deep look at rivals — use research-competitors.ScienceNo warnings★ 1.3K↓ —
- functionshashgraph-online/awesome-codex-pluginsBuild and prove durable studio functions for record, order, schedule and tool events, with concurrent database updates and event feeds.DataNo warnings★ 1.5K↓ —
- seohashgraph-online/awesome-codex-pluginsComprehensive SEO analysis for any website or business type. Full site audits, single-page analysis, technical SEO (crawlability, indexability, Core Web Vitals with INP), schema markup, content quality (E-E-A-T), image optimization, sitemap analysis, and GEO for AI Overviews/ChatGPT/Perplexity. Industry detection for SaaS, e-commerce, local, publishers, agencies. Triggers on: SEO, audit, schema, Core Web Vitals, sitemap, E-E-A-T, AI Overviews, GEO, technical SEO, content quality, page speed.MarketingNo warnings★ 1.5K↓ —
- rework-loophashgraph-online/awesome-codex-pluginsStructured rework with git blame attribution for failed goal iterations. Maps failures to responsible changes and routes targeted fix briefs.EngineeringNo warnings★ 1.5K↓ —
- pinterest-postskostja94/marketing-skillsWhen the user wants to create Pinterest Pins, optimize Pin descriptions, or grow Pinterest presence. Also use when the user mentions "Pinterest," "Pin," "Pinterest SEO," "Pinterest description," "Pinterest board," or "Pinterest marketing." For asset specs, use visual-content.MarketingNo warnings★ 1.1K↓ —
- resuminghashgraph-online/awesome-codex-pluginsResume an interrupted workflow run with verify-first strategy — loads sidecar state, verifies the last step, and continues execution.ProductivityNo warnings★ 1.5K↓ —
- brand-voicehashgraph-online/awesome-codex-pluginsBuild a source-derived writing style profile from real posts, essays, launch notes, docs, or site copy, then reuse that profile across content, outreach, and social workflows. Use when the user wants voice consistency without generic AI writing tropes.WritingNo warnings★ 1.5K↓ —
- choosing-swarm-patternsAgentWorkforce/relayUse when coordinating multiple AI agents with Agent Relay's workflow engine and need to pick the right orchestration pattern - covers the 10 core patterns (fan-out, pipeline, hub-spoke, consensus, mesh, handoff, cascade, dag, debate, hierarchical) plus 14 specialized ones, with decision framework and accurate SDK/YAML examples.PlanningNo warnings★ 1.1K↓ —
- e2e-testinghashgraph-online/awesome-codex-pluginsPlaywright E2E testing patterns, Page Object Model, configuration, CI/CD integration, artifact management, and flaky test strategies.TestingNo warnings★ 1.5K↓ —Also in 1 other repo
- creating-claude-hooksAgentWorkforce/relayUse when creating or publishing Claude Code hooks - covers executable format, event types, JSON I/O, exit codes, security requirements, and PRPM package structureSecurityNo warnings★ 1.1K↓ —
- terminal-replicahuytieu/COG-second-brainReproduce your real terminal and CLI agents (Claude Code, Codex, Gemini CLI) faithfully in graphics and video framesMediaNo warnings★ 1.3K↓ —
- partshashgraph-online/awesome-codex-pluginsStudios build on each other with parts from games, apps, music and video that their owners choose to share or sell (a creature, a level generator, a chase camera, a bot brain, a pickup mechanic, an audio pack). Use this when planning or making games, apps, music or video (look for pieces before writing one from scratch), when the person asks what parts exist, says "use the X from that game", "make this reusable" or "share this", and before a game that uses parts goes online.MediaNo warnings★ 1.5K↓ —
- sun-and-moonmohitagw15856/pm-claude-skillsGet sunrise, sunset, golden hour, day length, and moon phase for any location with zero API keys — sunrise-sunset.org and Open-Meteo via curl, times converted to local. Use when asked when is sunset today, golden hour for a photo shoot, how long is the day, what's the moon phase tonight, or sun times for a date and place. Produces the sun/moon times in the user's local zone (the UTC trap handled), the photography windows, and the rerunnable command.MediaNo warnings★ 1.5K↓ —
- creating-claude-rulesAgentWorkforce/relayUse when creating or fixing .claude/rules/ files - provides correct paths frontmatter (not globs), glob patterns, and avoids Cursor-specific fields like alwaysApplyPlanningNo warnings★ 1.1K↓ —
nist-800-53
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
SecurityUpdated Oct 10, 2026
From the author
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-800-53 -a claude-code
Installs to .claude/skills/nist-800-53/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (4)
- SKILL.md
- references/assessment-rmf.md
- references/baselines-tailoring.md
- references/control-families.md