Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 7 minutes ago
49,415 skills
- plan-campaign-brief-and-assetsgooseworks-ai/goose-skillsStep of the plan-campaign playbook: writes angles per channel, the asset list, measurement plan, hand-offs and replan triggers, then assembles the plan. Run plan-campaign instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- clean-user-facing-textguillaumemeyer/watermarks-removerClean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting prose while preserving facts, meaning, and the writer's voice. Use when the user asks to clean, humanize, polish, or finalize articles, manuscripts, reports, documentation, emails, product copy, UI text, Markdown, or HTML prose, or when a project rule or instruction file explicitly requires this workflow. Don't use for code-only tasks or undisclosed authorship evasion; leave code, commands, identifiers, paths, APIs, formulas, citations, required disclosures, and verbatim quotations unchanged.DesignNo warnings★ 26.4K↓ —
- baoyu-danger-x-to-markdownJimLiu/baoyu-skillsConverts X (Twitter) tweets and articles to markdown with YAML front matter. Uses reverse-engineered API requiring user consent. Use when user mentions "X to markdown", "tweet to markdown", "save tweet", or provides x.com/twitter.com URLs for conversion.MarketingNo warnings★ 27.3K↓ —
- spec-to-repoalirezarezvani/claude-skillsUse when the user says 'build me an app', 'create a project from this spec', 'scaffold a new repo', 'generate a starter', 'turn this idea into code', 'bootstrap a project', 'I have requirements and need a codebase', or provides a natural-language project specification and expects a complete, runnable repository. Stack-agnostic: Next.js, FastAPI, Rails, Go, Rust, Flutter, and more.PlanningNo warnings★ 29.3K↓ —
- postgresql-development-cloudbaseUpdatedTencentCloudBase/CloudBase-AI-ToolkitUse when building, debugging, or evaluating CloudBase PostgreSQL / CloudBase PG / PG mode apps, including Postgres schema setup, queryPgDatabase/managePgDatabase, JS SDK v3 app.rdb() CRUD/RPC, PG HTTP API fallback, RLS-style permissions, username-password auth, and Web CMS/admin CRUD flows backed by CloudBase PG.DataNo warnings★ 1.2K↓ —Also in 4 other repos
- baoyu-danger-gemini-webJimLiu/baoyu-skillsGenerates images and text via reverse-engineered Gemini Web API. Supports text generation, image generation from prompts, reference images for vision input, and multi-turn conversations. Use when other skills need image generation backend, or when user requests "generate image with Gemini", "Gemini text generation", or needs vision-capable AI generation.MediaNo warnings★ 27.3K↓ —
- baoyu-url-to-markdownJimLiu/baoyu-skillsFetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via Defuddle. Handles login/CAPTCHA via interaction wait modes. Use when user wants to save a webpage as markdown.BrowserNo warnings★ 27.3K↓ —
- doca-ethNVIDIA/skillsUse this skill for hands-on DOCA Ethernet packet-queue work on a BlueField DPU or ConnectX NIC — bringing up a `doca_eth_rxq` or `doca_eth_txq` on a port / representor / SF, picking among the four `enum doca_eth_rxq_type` values (`_REGULAR` / `_CYCLIC` / `_MANAGED_MEMPOOL` / `_SHARED_MEMPOOL`), sizing burst or scatter-gather length against the `_cap_*` queries, submitting `doca_eth_txq_task_send` / `_lso_send` (carrying packet `doca_buf`s — no `doca_eth_frame` struct exists), or debugging DOCA_ERROR_* from an Ethernet call. `doca_eth_rxq` and `doca_eth_txq` are two Core contexts; one `doca_ctx_start()` does not cover both. Trigger on implicit phrasings: "my RX queue is up but no packets arrive", "send-task returns AGAIN at line rate", "which queue type for fixed-MTU ingress", "device open fails without sudo", or "is L3 checksum offload available here". Refuse and route elsewhere for installing DOCA, flow-rule / steering programming, host↔DPU control messaging, or RDMA data movement.EngineeringNo warnings★ 3.9K↓ —
- browse-flowsmicrosoft/power-platform-skillsBrowse Power Automate environments and flows interactively. Use when the user wants to browse, list, or explore their flows and environments.OtherNo warnings★ 1.1K↓ —
- landingalirezarezvani/claude-skillsUse when asked for a premium single-file HTML landing page with 3D CSS, GSAP scroll effects and parallax. Locks positioning in a short intake, validates the palette with brand_palette_validator.py and the output with html_validator.py.DesignNo warnings★ 29.3K↓ —
- run-paid-campaigns-weekly-readgooseworks-ai/goose-skillsStep of the run-paid-campaigns playbook: reads each platform's last mature results window against the allowable cost, as evidence for the week's moves. Run run-paid-campaigns instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- baoyu-comicJimLiu/baoyu-skillsKnowledge comic creator supporting multiple art styles and tones. Creates original educational comics with detailed panel layouts and batch-capable image generation. Use when user asks to create "知识漫画", "教育漫画", "biography comic", "tutorial comic", or "Logicomix-style comic".MediaNo warnings★ 27.3K↓ —
- seo-auditalirezarezvani/claude-skillsFind why a site is not ranking: technical SEO, on-page issues, meta tags, site health. Use whenever the user asks why a page is not on Google, why traffic dropped or for an SEO audit.MarketingNo warnings★ 29.3K↓ —
- mariadb-operator-pr-reviewmariadb-operator/mariadb-operatorPerform a structured maintainer-style PR review for the mariadb-operator repository. Gathers PR context, triages the change, and evaluates correctness, safety, pitfalls, backwards compatibility and code quality against the project conventions documented in AGENTS.md. Use whenever the user mentions a mariadb-operator PR number or URL and wants any kind of judgment on it — "review this PR", "what do you think of #1234", "is this safe to merge", "assess this diff", "take a look at this change" — even if they don't literally say "review".EngineeringNo warnings★ 1K↓ —
- product-video-hookshashgraph-online/awesome-codex-pluginsTurn a product into scroll-stopping video hooks. Writes the first 3 seconds of TikTok, Reels and Meta product videos as three agreeing layers (what is on screen, the spoken line, the text overlay), from the buyer's own words, across 20+ hook types taken from Meta's Hooks Menu, Motion's 2026 hook data, Hormozi's callouts and the TikTok openers that spread in 2026 (late discovery, compliment then reveal, problem and fix in one clip, reply to a comment). It matches each hook to the buyer's awareness, checks it against platform claim rules, and, when footage exists, makes one MP4 per hook for testing. Use when someone asks for hooks, openers, the first 3 seconds, a better intro, or new hook variants for a product video or ad. NOT for whole ad plans (use ecommerce-video-ads), generating a viral-style product-in-use hook clip from photos (use varg-product-hook), app or SaaS hooks, or YouTube titles and thumbnails.MediaNo warnings★ 1.5K↓ —
- run-organic-social-post-checkgooseworks-ai/goose-skillsChecks a draft social post before it goes out: voice match against the account, would a person actually post it, AI-sounding phrases, claims against what the brand has signed off, banned words, disclosure and rights, trend timing, and whether a named person must approve it; rewrites weak drafts. Use alone when you already have the draft, the brand's voice and approved claims; otherwise run run-organic-social.OtherNo warnings★ 1.3K↓ —
- work-with-creators-brief-writergooseworks-ai/goose-skillsWrites a one-page brief for one creator you have already picked: hook ideas in their format, at most three approved must-say lines, never-says, the disclosure for their platform, deliverables, timeline, the usage-rights ask and two examples. Adds a short first-message draft (gift and paid versions) for you to send. Use alone when you already have the creator, their best fitting post and the goal; otherwise run work-with-creators.WritingNo warnings★ 1.3K↓ —
- minutes-searchsilverstein/minutesSearch past meeting transcripts and voice memos for specific topics, people, decisions, or ideas. Use this whenever the user asks "what did we discuss about X", "find that meeting where we talked about Y", "what did Alex say", "did we decide on", "what was that idea about", or any question that could be answered by searching their meeting history. Also use for "do I have any notes about" or "check my meetings for".PlanningNo warnings★ 1.6K↓ —Also in 1 other repo
- model-savingshoangsonww/Claude-Code-Agent-MonitorEstimate the dollars saved by routing eligible Claude Code work to a cheaper model family, using the Agent Monitor pricing engine. Re-prices each model's token mix at the target family's rates and quantifies the delta. Uses /api/pricing (rates), /api/pricing/cost (current per-model spend), /api/sessions, and /api/analytics. Use when hunting for cost cuts or comparing model tiers.DataNo warnings★ 1.1K↓ —
- minutes-debriefsilverstein/minutesPost-meeting debrief — analyzes what happened, compares outcomes to your prep intentions, tracks decision evolution. Use when the user says "debrief", "what just happened in that meeting", "what did we decide", "debrief that call", "post-meeting", "what changed", or right after stopping a recording.OtherNo warnings★ 1.6K↓ —Also in 1 other repo
- research-audience-score-segment-qagooseworks-ai/goose-skillsStep of the research-audience playbook: scores and tiers list rows, groups them into segments with an angle each, runs the pre-handover checks and writes the list files. Run research-audience instead; not for direct use.TestingNo warnings★ 1.3K↓ —
- md-documentalirezarezvani/claude-skillsUse when converting long-form markdown (spec, RFC, report, plan) into a single-file HTML page with sticky TOC, search and code-copy. Parses with markdown_parser.py and renders with html_renderer.py using the design-system brand.DesignNo warnings★ 29.3K↓ —
- mcp-maintainerhoangsonww/Claude-Code-Agent-MonitorOperate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.OtherNo warnings★ 1.1K↓ —Also in 1 other repo
- research-audience-signals-and-hooksgooseworks-ai/goose-skillsFor a list of companies, finds dated, linked timing signals from the last 90 days (funding, new leaders, hiring, launches), drops stale ones and noise, scores timing, and gives one personal hook per person from their recent public work. Facts only, no message copy. Use alone when you already have the company list and, for hooks, the people; otherwise run research-audience.ScienceNo warnings★ 1.3K↓ —
security-patterns
CloudAI-X/claude-workflow-v2
SecurityUpdated Oct 6, 2026
From the author
Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, configuring CORS, implementing rate limiting, or when asked about JWT, OAuth, password hashing, API keys, RBAC, or security best practices.
Install
npx skills add CloudAI-X/claude-workflow-v2 --skill security-patterns -a claude-code
Installs to .claude/skills/security-patterns/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (1)
- SKILL.md