Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 3 hours ago
49,415 skills
- make-content-two-pass-editgooseworks-ai/goose-skillsEdits an existing draft in order: a substance pass (arguable thesis, swap test, fakes removed, CTA fit), a claims and fact check that cuts or softens unproven lines, a readability and voice-match pass, then an AI-tell sweep, with an edit note listing open gaps. Use alone when you already have a finished draft and the brand's voice samples and approved claims; otherwise run make-content.WritingNo warnings★ 1.3K↓ —
- render-creator-pip-listiclegooseworks-ai/goose-skillsAssemble a creator picture-in-picture product-listicle ad from a config. The creator stays full-frame for every beat (voice and lips generated together), and each product beat carries three overlays for the whole beat: a title pill, the product demo in a rounded picture-in-picture window (the brand's muted UGC clip, or its UI still or screen recording), and a product card with thumbnail, number, category and name. Hook and CTA beats show the creator with the title pill only. It builds one overlay image per beat, composites it on the creator clip, concatenates the beats and burns timed captions last. Free, deterministic assembly; the creator anchor and talking clips come from create-image-fal and create-video-fal. Use for the creator-pip-listicle format.MediaNo warnings★ 1.3K↓ —
- make-content-content-briefgooseworks-ai/goose-skillsWrites a one-page content brief before any draft: audience, intent, the one arguable point, what top results already say and what this piece adds, an outline, a proof inventory with gaps marked, voice, CTA and banned words, checked against six gates. Use alone when you already have the topic, format, audience and destination and want only the brief; otherwise run make-content.WritingNo warnings★ 1.3K↓ —
- researchdaveebbelaar/bamaOnline research for a macOS app before building it, run as parallel researcher subagents, saved to docs/research/. Use when the user asks what to build, which features matter, how the best apps in a category work, how a macOS API or integration works, or wants a feature comparison.ScienceNo warnings★ 1.6K↓ —
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.3K↓ —
- analytics-trackingkostja94/marketing-skillsCompatibility pointer for GA4 event, key-event and User-ID tracking; maintained in Open Analytics.DataNo warnings★ 1.1K↓ —
- videohashgraph-online/awesome-codex-pluginsUse when a brief has to become a film. Turns a one line ask into a Claude Design prompt written in the animations-v3 engine's own language, plus the built piece.jsx and a contact sheet to look at before anyone renders. Covers reference roles, the kit, the storyboard gate, the motion floor, and the verification commands. Do not use for backend work, UI design, or marketing copy alone.MediaNo warnings★ 1.5K↓ —
- eu-ai-actSushegaad/Claude-Skills-Governance-Risk-and-ComplianceEU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations including the July 2025 Code of Practice (Arts. 51–55), conformity assessment and CE marking (Arts. 43–48), EU AI database registration, Art. 50 transparency (chatbots, synthetic media, AI-generated content), governance (AI Office, AI Board), penalties (Art. 99), confirmed phase-in timeline (Digital Omnibus, Reg. (EU) 2026/1744, in force July 27, 2026: Annex III deferred to Dec 2, 2027; Annex I to Aug 2, 2028), and cross-framework mapping to ISO 42001, NIST AI RMF, and GDPR. Use for any EU AI regulation, AI system classification, or AI compliance question. Current as of August 2026. GPAI enforcement powers active since August 2, 2026.DevOpsNo warnings★ 1K↓ —
- pinme-emailglitternetwork/pinmeUse this skill when a PinMe project (Worker TypeScript) needs to integrate email sending (send_email). Guides AI to generate correct Worker TS code.ProductivityNo warnings★ 3.8K↓ —
- pinme-r2glitternetwork/pinmeUse when a PinMe Cloudflare Worker needs R2 object storage, including secure file or image upload, streaming download, metadata lookup, deletion, listing, Range requests, or R2+D1 coordination. Guides AI to use PinMe's automatically injected env.R2 binding without R2 credentials or manual Wrangler configuration.DevOpsNo warnings★ 3.8K↓ —
- pinme-shareglitternetwork/pinmeUse this skill when the user wants to share, publish, or upload a static result through PinMe, especially by generating a static HTML share page for a PinMe project link, deployed full-stack app, Codex conversation summary, report, file, demo, or any 分享/发布/上传分享页 request that should end with `pinme upload`.DevOpsNo warnings★ 3.8K↓ —
- baoyu-slide-deckJimLiu/baoyu-skillsGenerates professional slide deck images from content. Creates outlines with style instructions, then generates individual slide images. Use when user asks to "create slides", "make a presentation", "generate deck", "slide deck", or "PPT".DocumentsNo warnings★ 27.3K↓ —
- os-say-simplekharmanskyi/open-stepsALWAYS invoke this skill when the user asks for simpler or shorter about something said or written - "say it simply", "what does this mean", "I don't understand your answer", "too long", "wait, what?", "bro" - in any language, about any text: your own answer, a report, a review comment, an error. "I don't understand what to DO" is os-step-by-step; this skill restates text. It restates for a reader who does not read code: leads with the point, keeps every number, warning and caveat - no facts added, no bad news dropped. A number returns exactly that many points, most important first.WritingNo warnings★ 1.3K↓ —
- rfp-responderalirezarezvani/claude-skillsUse when an RFP, RFI, RFQ or security or vendor questionnaire arrives. Parses mandatory vs weighted requirements with rfp_parser.py, drafts proof-point answers with response_drafter.py and estimates win chance with winrate_predictor.py.SecurityNo warnings★ 29.3K↓ —
- sandbox-nextfcakyon/claude-codex-settingsBuild or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.DevOpsNo warnings★ 1.2K↓ —
- supabasefcakyon/claude-codex-settingsUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); debugging and troubleshooting errors or unexpected behavior on Supabase projects (HTTP errors, Postgres errors, RLS surprises, permission denied, schema cache issues, timeouts, Edge Function crashes, Realtime drops, Storage failures) and reading or querying logs (Logs Explorer, ClickHouse).SecurityNo warnings★ 1.2K↓ —
- yolo-trainingfcakyon/claude-codex-settingsThis skill should be used when user asks to "improve my mAP", "why is my model overfitting", "my training is diverging", "read my results.csv", "interpret my training curves", "my AP50 is good but AP50-95 is bad", "my recall is low", "how do I pick learning rate", "which augmentations should I use", "should I use a bigger model", "tune hyperparameters", or asks how to train YOLO26 for detection, instance or semantic segmentation, pose, OBB, classification, or depth.DataNo warnings★ 1.2K↓ —
- metronomefcakyon/claude-codex-settingsGuides Metronome usage-based billing integration decisions — event ingestion (single and batch, idempotency, billable metrics), contract design (rate cards, overrides, dimensional pricing, products), invoicing lifecycle (grace periods, finalization, Stripe sync), credit and commit management (prepaid, postpaid, thresholds, auto-recharge), and Stripe integration (arrears invoicing, tax providers, line item limits). Use when building, modifying, or reviewing any Metronome integration — including ingesting usage events, creating customers, contracts, or rate cards, designing billable metric group keys, managing credits and commits, configuring invoicing, syncing invoices with Stripe Billing, billing AI applications for token usage, setting up self-serve (PLG) pricing, reviewing customer health, commit burn, portfolios, or renewals, or migrating from Stripe Billing Meters to Metronome.DesignNo warnings★ 1.2K↓ —
- model-savingshoangsonww/Claude-Code-Agent-MonitorEstimate the dollars saved by routing eligible Claude Code work to a cheaper model family, using the Agent Monitor pricing engine. Re-prices each model's token mix at the target family's rates and quantifies the delta. Uses /api/pricing (rates), /api/pricing/cost (current per-model spend), /api/sessions, and /api/analytics. Use when hunting for cost cuts or comparing model tiers.DataNo warnings★ 1.1K↓ —
- mcp-maintainerhoangsonww/Claude-Code-Agent-MonitorOperate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.OtherNo warnings★ 1.1K↓ —Also in 1 other repo
- iso27001Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.SecurityNo warnings★ 1K↓ —
- minutes-prepsilverstein/minutesInteractive meeting preparation — builds a relationship brief and talking points before a call. Use when the user says "prep me for my call with", "I'm meeting with X", "prepare me for", "what should I bring up with", "meeting prep", "get ready for my call", or wants to review history with someone before a meeting.EngineeringNo warnings★ 1.6K↓ —Also in 1 other repo
- oma-frontendUpdatedfirst-fluke/oh-my-agentImplement or modify web UI in React, Next.js, or Angular. Use for components, pages, styles, forms, and frontend state or data flows.DesignNo warnings★ 1.4K↓ —Also in 3 other repos
- yc-readerhimself65/finance-skillsLook up Y Combinator companies and batches from the public yc-oss API, a static JSON dataset refreshed daily: company profiles, batch rosters (e.g. W25, S24), companies by industry or tag, top companies, who is hiring, founder-diversity lists, and overall YC stats. Use this skill whenever the user asks about YC-backed startups, a YC batch, YC companies in a sector or tag or that are hiring, the Y Combinator portfolio, or startup and venture research that draws on YC data. Read-only.ScienceNo warnings★ 3.5K↓ —
sandbox-mcp
alibaba/skill-up
OtherUpdated 11 hours ago
From the author
Verify Sandbox MCP can be installed and called from skill-up.
Install
npx skills add alibaba/skill-up --skill sandbox-mcp -a claude-code
Installs to .claude/skills/sandbox-mcp/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (5)
- README.md
- SKILL.md
- evals/cases/python-run.yaml
- evals/eval.yaml
- evals/fixtures/mcp/agent-sandbox.yaml