Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,459 skills from 2,407 repositories · updated 15 minutes ago
49,457 skills
- code-review-assistantalibaba/skill-upTriggered when the user submits code or requests a code review. Automatically analyzes code quality, identifies potential bugs, security vulnerabilities, and performance issues, and provides improvement suggestions. Trigger phrases include "take a look at this code", "review this", "is there a problem with this function".EngineeringNo warnings★ 1.4K↓ —
- isms-audit-expertalirezarezvani/claude-skillsUse for ISO 27001 audit work: internal or surveillance audits, Annex A control evidence, Statement of Applicability, nonconformities, Stage 1 and 2 prep. Plans risk-based audits with isms_audit_scheduler.py.PlanningNo warnings★ 29.3K↓ —
- ai-securityalirezarezvani/claude-skillsUse when assessing an AI/ML system or LLM agent for prompt injection, jailbreaks, model inversion, data poisoning or tool abuse. Maps findings to MITRE ATLAS and scores robustness with ai_threat_scanner.py.SecurityNo warnings★ 29.3K↓ —
- run-organic-social-platform-researchgooseworks-ai/goose-skillsResearches how one social platform works right now from dated sources (what gets reach, formats rising and fading, how small accounts get seen, recent changes) and finds what is getting watched in a given niche there, with linked examples and engagement read against each author's baseline. Use alone when you already have the platform and niche; otherwise run run-organic-social.ScienceNo warnings★ 1.3K↓ —
- workhashgraph-online/awesome-codex-pluginsUse for execution, debugging, verification, planning, and shipping when the user's Emulo working profile should guide the task. Do not use for design/UI/UX work, marketing or social writing, or Emulo setup/mining.DesignNo warnings★ 1.5K↓ —Also in 2 other repos
- videohashgraph-online/awesome-codex-pluginsUse when a brief has to become a film. Turns a one line ask into a Claude Design prompt written in the animations-v3 engine's own language, plus the built piece.jsx and a contact sheet to look at before anyone renders. Covers reference roles, the kit, the storyboard gate, the motion floor, and the verification commands. Do not use for backend work, UI design, or marketing copy alone.MediaNo warnings★ 1.5K↓ —Also in 1 other repo
- check-updatesmicrosoft/power-platform-skillsUse when a Power Apps mobile project needs dependency updates or an npm audit review. Checks the mobile-app plugin first, then updates the native host, other Microsoft packages, and all remaining direct npm packages in order with validation and rollback.EngineeringNo warnings★ 1.1K↓ —
- research-competitors-category-passgooseworks-ai/goose-skillsStep of the research-competitors playbook: the worker brief covering the whole category, including searches, AI answers, community threads and category ad winners. Run research-competitors instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- research-audience-account-sourcinggooseworks-ai/goose-skillsStep of the research-audience playbook: finds candidate accounts matching the fit definition, confirms gates, applies exclusions and dedupes. Run research-audience instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- add-connectormicrosoft/power-platform-skillsAdds any Power Platform connector to a Power Apps code app. Generic fallback for connectors not covered by a specific skill.PlanningNo warnings★ 1.1K↓ —
- minutes-ingestsilverstein/minutesExtract facts from meetings and update your knowledge base — person profiles, chronological log, and index. Use when the user asks "ingest my meetings", "update my knowledge base", "extract facts from meetings", "sync meetings to wiki", "backfill knowledge", or wants their PARA/Obsidian/wiki profiles updated from conversation data.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- analyze-performance-call-and-learngooseworks-ai/goose-skillsStep of the analyze-performance playbook: calls ended tests, scores last week's calls, writes this week's kill/scale/hold calls and drafts learnings for the brand brain. Run analyze-performance instead; not for direct use.TestingNo warnings★ 1.3K↓ —
- threat-detectionalirezarezvani/claude-skillsUse when hunting threats, sweeping IOCs or looking for anomalies in logs and telemetry. Ranks ATT&CK-mapped signals and z-score anomalies with threat_signal_analyzer.py.OtherNo warnings★ 29.3K↓ —
- analyze-performance-rank-and-readgooseworks-ai/goose-skillsStep of the analyze-performance playbook: ranks creative by angle, hook and format with spend gates, writes short per-channel reads and drafts what to make next. Run analyze-performance instead; not for direct use.WritingNo warnings★ 1.3K↓ —
- interviewalirezarezvani/claude-skillsUse when someone has an agent idea to scope before launch ('help me scope an agent'). Interviews them about the one job and writes a build sheet with build_sheet_builder.py, checked by primitives_validator.py; no API key needed.PlanningNo warnings★ 29.3K↓ —
- generate-prdhuytieu/COG-second-brainGenerate product requirements documents with optional publishing to Confluence or other wiki platformsPlanningNo warnings★ 1.3K↓ —Also in 1 other repo
- planning-with-filesOthmanAdi/planning-with-filesPersistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk; agent instructions read selected project planning context when invoked. Automatic recovery reads project planning files only. Explicit session-catchup.py --metadata reads same-project local agent session records and emits aggregate counts only; --replay may emit bounded nonce-framed excerpts. This adapter registers no lifecycle or Stop hook, never requests continuation, and never runs commands declared in Markdown. The skill has no network upload path. Use for research or work needing 5+ tool calls.PlanningNo warnings★ 27.9K↓ —
- run-organic-social-plan-calendargooseworks-ai/goose-skillsStep of the run-organic-social playbook: turns the audit, research and dated moments into a two-week grid of empty post slots. Run run-organic-social instead; not for direct use.PlanningNo warnings★ 1.3K↓ —
- run-paid-campaigns-apply-and-loggooseworks-ai/goose-skillsStep of the run-paid-campaigns playbook: stages the week's approval items, applies only what the marketer approves and keeps the change log. Run run-paid-campaigns instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- research-audiencegooseworks-ai/goose-skillsAudience research: who the buyers are, in their own words, where they gather and how to reach them — plus named prospect lists when asked. Use when the marketer says "research our audience", "who should we target", "mine our reviews", "why do people buy us or leave", "where does our audience hang out"; or for lists: "find 50 right-fit leads with emails", "find retailers or accounts to pitch", "score these leads / who do we call first", "who's looking for an alternative to X", "tell me when a past champion changes jobs". Reads the brand's own customer data first and delivers a readable report saved to the brand. Never contacts anyone. Not for market size or trends — use research-market; not for writing the messages — use write-outreach.ScienceNo warnings★ 1.3K↓ —
- crabboxopenclaw/crabboxDetect and use Crabbox for repository tests and validation on remote runners. Use when crabbox.yaml or .crabbox.yaml exists, the crabbox CLI is available, or work needs remote compute, a clean or reusable environment, target-platform coverage, or auditable execution evidence.TestingNo warnings★ 1.5K↓ —Also in 1 other repo
- ad-campaign-analyzergooseworks-ai/goose-skillsAnalyze ad campaign performance data (Google, Meta, LinkedIn) to identify what's working, what's wasting budget, and specific cut/scale/test recommendations. Runs statistical analysis, funnel diagnostics, and multi-channel budget reallocation with specific dollar-amount shift recommendations and scenario modeling.MarketingNo warnings★ 1.3K↓ —
- git-workflowsTencentCloudBase/CloudBase-AI-ToolkitReusable git delivery workflows derived from local slash commands (commit, push, PR, release notes, GitHub Actions failure triage with worktree-based fixes, and isolating your own changes from a shared dirty workspace).EngineeringNo warnings★ 1.2K↓ —
- research-audience-fit-definitiongooseworks-ai/goose-skillsStep of the research-audience playbook: drafts the searchable fit definition, exclusions and list size that the list run then searches on. Run research-audience instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
qa-testing
rampstackco/claude-skills
From the author
Run QA testing on a page, feature, or full site at one of three depth tiers (smoke, standard, full). Use this skill whenever the user asks to QA a page or site, run a smoke test after a deploy, verify a page before launch, or run a regression sweep. Triggers on QA, QA sweep, smoke test, regression test, post-deploy check, pre-launch check, verify the deploy, test this page, does the page render, broken link, 404, image not loading. Also triggers proactively after a deploy or a new page launch where verification matters. Covers accessibility, performance, and SEO at the surface-signal level only: deep audits belong to `accessibility-audit`, `performance-optimization`, and `seo-technical`, and code-level debugging to `code-review-web`.
Install
npx skills add rampstackco/claude-skills --skill qa-testing -a claude-code
Installs to .claude/skills/qa-testing/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 88
Files (3)
- README.md
- SKILL.md
- references/qa-report-template.md