Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,455 skills from 2,407 repositories · updated 34 minutes ago
49,463 skills
- design-routerhashgraph-online/awesome-codex-pluginsUse when the user asks to build, design, mock up, scaffold, audit, translate, or improve any interface, flow, screen, page, component, app, UX, onboarding, checkout, dashboard workflow, product flow, design system, asset plan, motion plan, or non-generic UI and the target platform or flow is ambiguous. Routes to ux-design, web, Windows, Apple, Android, cross-platform, design-token, originality, asset/reference, and platform skills. SKIP when the request explicitly names one platform and no UX flow work is implied.DesignNo warnings★ 1.5K↓ —
- swift-swiftuidaveebbelaar/bamaSwift 6 and SwiftUI code rules for macOS apps, including concurrency, state, SwiftData, AppKit bridges, and fixes for common compiler errors. Use when writing, reviewing, or debugging Swift code in a Mac app, or on concurrency, Sendable, or "not in scope" errors.WritingNo warnings★ 1.6K↓ —
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.3K↓ —
- design-tokenshashgraph-online/awesome-codex-pluginsUse when the user asks for design tokens, DTCG tokens, theme systems, color/typography/spacing/radius/elevation/motion tokens, translating tokens, exporting tokens, making a Compose color scheme from a palette, auditing tokens, or sharing a single token source across web and native. Generates, audits, and translates W3C DTCG tokens to Tailwind v4 @theme, CSS variables, Compose Material3 ColorScheme/Typography, SwiftUI Color/Font extensions, and WinUI ResourceDictionary while preserving semantic naming and platform constraints. SKIP when no token/theme-system work is involved.DesignNo warnings★ 1.5K↓ —
- senior-backendalirezarezvani/claude-skillsBuild and fix backend services: REST or GraphQL APIs, auth, microservices, PostgreSQL queries, migrations and load tests. Use whenever the user's API is slow or broken, needs login or auth added, a schema change, or a new endpoint or service scaffolded.TestingNo warnings★ 29.3K↓ —
- book-drafthashgraph-online/awesome-codex-pluginsPhase 3: Drafting. Voice lock on a sample chapter, then sequential full-context chapter drafting with draft-critique-revise, bible ledger updates, and periodic continuity checks.ProductivityNo warnings★ 1.5K↓ —
- triggershashgraph-online/awesome-codex-pluginsCreate and manage triggers that watch for something (a job that finishes, a service that goes down, a failing CI run, a new release, a price crossing a threshold) and hand a task to Codex when it happens. Use when the user wants to be told, or wants something done, "when X happens", and when handling a message that starts with [self-starter].ProductivityNo warnings★ 1.5K↓ —
- reviewhashgraph-online/awesome-codex-pluginsThe pre-merge review of a branch in a project that records its specs, decisions, and rules in .archcore/. Run this first for 'review my branch', 'review the changes before merge', or 'review before merge': it checks the changed code against the project's recorded canon and the changed documents against the code, and reports which side is wrong — spec-wrong or code-wrong; on the default branch it reviews the unpushed and uncommitted work. A bug-hunting code review complements this review and does not replace it. Also use for 'documentation gaps', 'check if docs match code', 'close out the feature', 'ship the feature and close it out', or after a staleness warning. Takes an optional path, tag, topic, or ref in free text; no first word is a mode — say 'are docs out of date', 'audit the knowledge base', 'close out the feature', or 'capture this pattern' in plain words. Not for creating docs — use /archcore:document; not for planning — use /archcore:plan; not for a single-file edit with no branch review.EngineeringNo warnings★ 1.5K↓ —Also in 1 other repo
- person-researchhashgraph-online/awesome-codex-pluginsResearches a person across podcasts and YouTube for interview or meeting prep: where they appeared, their own words, who discusses them. Uses arcmira.ScienceNo warnings★ 1.5K↓ —
- transcriptionNewChatCut-Inc/agent-pluginUse when a video/audio task needs ChatCut transcription, captions, subtitles, subtitle styling, transcript search, transcript readiness checks, or enabling captions from WorkBuddy, including local or attached videos where the user asks to add captions/subtitles, transcribe, create bilingual subtitles, clean talking-head speech, remove filler words, or trim pauses.MediaNo warnings★ 1K↓ —
- evalhashgraph-online/awesome-codex-pluginsEval-Driven Development (EDD) for AI workflows. pass@k metrics, capability evals, regression evals. Triggers: eval, edd, pass@k, capability, regression, benchmark.OtherNo warnings★ 1.5K↓ —
- runtypehashgraph-online/awesome-codex-pluginsScope a Runtype project or set up platform access; route implementation to the relevant Runtype skill.OtherNo warnings★ 1.5K↓ —
- ad-creative-testinghashgraph-online/awesome-codex-pluginsTurn one winning ad into a creative testing plan for TikTok and Meta. Decodes why an ad won (hook, argument, buyer, format), plans concepts that Meta's Andromeda and TikTok treat as genuinely different (buyer × angle × format × first frame, not caption swaps), sets how many creatives to launch, the budget per test and when to judge, writes file and ad names that make results readable, reads hook rate, hold rate, CTR and CPA to find which part failed, and says when to kill, iterate or scale. Use when someone asks how many ads to test, how to make ad variants, why their variants all perform the same, whether an ad is fatigued, when to kill an ad, or how to scale a winner. NOT for producing the videos (use ecommerce-video-ads, ecommerce-video-edit or product-video-hooks) or for media-buying account setup.TestingNo warnings★ 1.5K↓ —
- rfp-responderalirezarezvani/claude-skillsUse when an RFP, RFI, RFQ or security or vendor questionnaire arrives. Parses mandatory vs weighted requirements with rfp_parser.py, drafts proof-point answers with response_drafter.py and estimates win chance with winrate_predictor.py.SecurityNo warnings★ 29.3K↓ —
- using-praxishashgraph-online/awesome-codex-pluginsUse at session start to learn how Praxis skills are invoked and why triage runs before every task.ProductivityNo warnings★ 1.5K↓ —
- minehashgraph-online/awesome-codex-pluginsUse only when the user explicitly asks to run, set up, update, re-mine, or deepen Emulo from real local AI coding-session history.EngineeringNo warnings★ 1.5K↓ —Also in 2 other repos
- smart-inithashgraph-online/awesome-codex-pluginsConversational onboarding for A Team. Detects ROADMAP.md, extracts context, generates INIT.md without requiring technical knowledge. Invoked automatically by the orchestrator when INIT.md is missing.PlanningNo warnings★ 1.5K↓ —
- architectNewhashgraph-online/awesome-codex-pluginsSettle structure before writing logic. Ground in the current code, get competing design sketches (types, signatures, modules, trust boundaries) through arena, implement against the merged sketch, scrap it on a friction pattern. Use for "architect this", "design X first".PlanningNo warnings★ 1.5K↓ —
- open-designhashgraph-online/awesome-codex-pluginsUse Open Design as an external local-first design workbench for prototypes, decks, mobile screens, dashboards, DESIGN.md systems, and exportable visual artifacts. Keep TSP responsible for team workflow, handoff, and quality gates.DesignNo warnings★ 1.5K↓ —
- patterns-of-enterprise-application-architectureciembor/agent-rules-booksApply Martin Fowler-inspired enterprise architecture rules when choosing layers, service layers, transaction scripts, domain models, repositories, mappers, or DTOs.PlanningNo warnings★ 3.2K↓ —
- designing-data-intensive-applicationsciembor/agent-rules-booksApply Martin Kleppmann-inspired data-system rules when designing reliability, scalability, consistency, replication, transactions, streams, or schema evolution.OtherNo warnings★ 3.2K↓ —
- domain-driven-designciembor/agent-rules-booksApply Eric Evans-inspired DDD rules when modeling a complex domain, defining bounded contexts, protecting ubiquitous language, or designing aggregates.DesignNo warnings★ 3.2K↓ —
- book-edithashgraph-online/awesome-codex-pluginsPhase 4: Editing. Fact-check (nonfiction), assessment, developmental edit, line edit, copy edit, proofread, then a cold read by simulated readers that issues the readiness verdict. Rewrites the manuscript; does not only file reports.WritingNo warnings★ 1.5K↓ —
- domain-driven-design-distilledciembor/agent-rules-booksApply Vaughn Vernon-inspired lightweight DDD rules when using bounded contexts, subdomains, context maps, and tactical modeling without excess ceremony.DesignNo warnings★ 3.2K↓ —
cis-controls
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
From the author
Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill cis-controls -a claude-code
Installs to .claude/skills/cis-controls/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 88
Files (4)
- SKILL.md
- references/framework-mappings.md
- references/implementation-guidance.md
- references/safeguards-detail.md