Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 2 hours ago
49,415 skills
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.3K↓ —
- oma-voiceUpdatedfirst-fluke/oh-my-agentGenerate or transcribe speech with Voicebox or VoiceStudio, or process existing audio locally. Use for narration, transcripts, timed speech, and loudness conversion; video editing uses oma-video.MediaNo warnings★ 1.4K↓ —Also in 2 other repos
- dac-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when writing or auditing the related-work and positioning of an ACM/IEEE Design Automation Conference (DAC) Research Manuscript, covering the EDA literature lanes (DAC/ICCAD/DATE/ASP-DAC/TCAD/TODAES), delta-first positioning against the strongest prior tool, honest benchmark-suite lineage, and third-person self-citation under double-blind review within the six-page budget.DesignNo warnings★ 1.4K↓ —
- colt-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a COLT (Conference on Learning Theory) submission for CMT readiness, the 12-page PMLR-format main body, single-PDF assembly with unlimited appendix, double-anonymous formatting, the parallel-submission ban covering journals and proceedings venues, and the ordered final-week checks before the AoE deadline.DocumentsNo warnings★ 1.4K↓ —
- cscw-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when readying a CSCW manuscript for upload — confirming the current pathway (rolling via Manuscript Central as of mid-2026), the single-column ACM template, the word-length scrutiny band, anonymization of author and community identifiers, ethics statements, and desk-risk triage.OtherNo warnings★ 1.4K↓ —
- corl-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when preparing or auditing a CoRL OpenReview submission — the corl_2026 LaTeX template, the 8-page main text with a mandatory Limitations section counted inside it, uncounted references and appendix, the supplementary file and 250 MB video, double-anonymous rules, abstract registration, and dual-submission checks.MediaNo warnings★ 1.4K↓ —
- lgpdSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert LGPD compliance advisor for Brazil's Lei Geral de Proteção de Dados (Law 13,709/2018). Use this skill whenever a user asks about LGPD, Brazilian data protection, ANPD, personal data processing in Brazil, data subject rights under Brazilian law, legal bases for processing, sensitive data handling, DPO appointment in Brazil, data breach notification to ANPD, LGPD penalties (fines up to 2% of revenue / R$50M), international data transfers from Brazil, Brazil-EU mutual adequacy (January 2026 — SCCs/BCRs no longer needed for Brazil-EU transfers), LGPD gap assessments, privacy policy drafting for Brazilian operations, DPIA under LGPD, consent management, or comparing LGPD with GDPR. Trigger for any Brazil privacy or data protection question even if LGPD is not named explicitly.LegalNo warnings★ 1K↓ —
- ecai-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ECAI submission for readiness — the abstract-then-full-paper two-deadline flow, the tight 7-page body budget, double-blind anonymity, the correct template/publisher regime (ecai.cls/FAIA for a standalone ECAI vs ijcai.sty/IJCAI proceedings for the joint IJCAI-ECAI 2026), the per-author submission cap, the ethics statement, and desk-reject triage before the AoE cutoff.ScienceNo warnings★ 1.4K↓ —
- sci-writingbrycewang-stanford/Awesome-Journal-SkillsUse when choosing the Science (AAAS) format (Research Article vs Report) and holding its length and structure budgets — main-text word caps, figure caps, argument-ordered Results, and deciding what belongs in the main text versus Supplementary Materials.WritingNo warnings★ 1.4K↓ —
- edbt-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an EDBT research-track submission for Microsoft CMT readiness, covering the cycle choice, the paper shape (Regular / Experiments-&-Analysis / Vision), the OpenProceedings/host LaTeX template and per-shape page budget, the 12-month resubmission ban, reproducibility items, and desk-reject triage before the cycle deadline.ScienceNo warnings★ 1.4K↓ —
- baoyu-slide-deckJimLiu/baoyu-skillsGenerates professional slide deck images from content. Creates outlines with style instructions, then generates individual slide images. Use when user asks to "create slides", "make a presentation", "generate deck", "slide deck", or "PPT".DocumentsNo warnings★ 27.3K↓ —
- focs-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when running the final pre-upload audit of a FOCS (IEEE Symposium on Foundations of Computer Science) submission — the April HotCRP deadline clock, the abstract-references-plus-ten-pages attention rule, the 11-point single-column format floor, PDF security restrictions, double-blind checks, and SIGACT publication-policy compliance.SecurityNo warnings★ 1.4K↓ —
- iccv-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ICCV submission in the weeks before the early-March deadline, covering OpenReview registration and profile completeness, the single same-day paper-plus-supplement upload, the 8-page inclusive format, the 25-submissions-per-author cap, every-author reviewer enrollment, anonymity and media-embargo rules, and desk-reject triage.ScienceNo warnings★ 1.4K↓ —
- hri-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing the camera-ready of an accepted ACM/IEEE HRI paper — de-anonymizing systematically, completing ACM+IEEE dual-publication metadata (CCS concepts, ORCID, rights/eRights form), delivering every rebuttal promise within the 8-page budget, finalizing the video and de-anonymized archive, and passing production checks.MediaNo warnings★ 1.4K↓ —
- webhook-managementhoangsonww/Claude-Code-Agent-MonitorConfigure and validate CCAM webhook targets across supported chat, incident, automation, and generic providers. Use when listing provider requirements, creating or updating a target, scoping it to alert rules, sending a test notification, reviewing delivery history, or deleting a target.TestingNo warnings★ 1.1K↓ —
- hpca-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an HPCA submission for the two-step July gate on HotCRP, the 11-page main-body limit, the IEEE template, double-blind anonymity plus the all-authors reference rule, the AI-use disclosure, artifact-link scrubbing, and final-week sequencing before the paper deadline.ScienceNo warnings★ 1.4K↓ —
- paid-media-strategyrampstackco/claude-skillsA discipline for running paid media that does not light money on fire. Hypothesis writing for paid spend, channel selection, budget allocation, audience targeting, bid strategy, campaign types, what NOT to spend on, attribution reality, and the failure modes that produce expensive lessons. Triggers on paid media strategy, ad budget allocation, channel selection, paid media plan, audit my Google Ads, audit my Meta Ads, scale paid media, kill underperforming campaign, paid media hypothesis, ad spend strategy, attribution reality, performance marketing strategy. Also triggers when a team is asking how to scale paid media, or whether to add a new channel, or how to reallocate spend across channels.MarketingNo warnings★ 1K↓ —
- imc-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when writing or auditing the related-work and positioning of an ACM IMC paper, covering the measurement literature lanes, positioning against prior datasets and vantage points, delta-first framing, citing the datasets and tools you build on, distinguishing IMC from SIGCOMM/NSDI/PAM prior art, and keeping self-citations double-blind.ScienceNo warnings★ 1.4K↓ —
- cost-optimizationrampstackco/claude-skillsAudit and reduce infrastructure and tooling costs without sacrificing reliability or velocity. Use this skill when reviewing monthly cloud or SaaS spend, finding unused resources, rightsizing infrastructure, negotiating vendor contracts, deciding what to consolidate, or planning for budget cuts. Triggers on cost optimization, cloud spend, SaaS spend, rightsizing, unused resources, FinOps, infrastructure audit, vendor consolidation, budget cut, cost review. Also triggers when finance flags rising costs or when a contract renewal is up.DevOpsNo warnings★ 1K↓ —
- rfp-responderalirezarezvani/claude-skillsUse when an RFP, RFI, RFQ or security or vendor questionnaire arrives. Parses mandatory vs weighted requirements with rfp_parser.py, drafts proof-point answers with response_drafter.py and estimates win chance with winrate_predictor.py.SecurityNo warnings★ 29.3K↓ —
- alert-managementhoangsonww/Claude-Code-Agent-MonitorInspect fired CCAM alerts and manage alert rules for token thresholds, event patterns, inactivity, and status duration. Use when acknowledging alerts, creating or editing a rule, checking cooldowns, or connecting alert rules to webhook targets.WritingNo warnings★ 1.1K↓ —
- icra-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ICRA paper for upload — PaperPlaza account and metadata, the 6-page-plus-2-reference-page limit, IEEE two-column template compliance, the double-anonymous rule introduced in the 2026 cycle, video-attachment specs (180 s, 20 MB), dual-submission conflicts with RA-L, and return-without-review triggers.MediaNo warnings★ 1.4K↓ —
- remote-collectionhoangsonww/Claude-Code-Agent-MonitorConfigure and troubleshoot CCAM Remote Data Sources that collect Claude Code and Codex history over SSH. Use when adding, editing, testing, syncing, or removing a remote machine, verifying provider paths, or deciding whether to retain or purge imported sessions.TestingNo warnings★ 1.1K↓ —
- ijcai-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an IJCAI or IJCAI-ECAI project timeline from venue fit through abstract registration, full-paper upload, author information, PPI payment, summary-reject risk, author response, notification, camera-ready, in-person presentation, and artifact release.ProductivityNo warnings★ 1.4K↓ —
security-baseline
rampstackco/claude-skills
SecurityUpdated Oct 27, 2026
From the author
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.
Install
npx skills add rampstackco/claude-skills --skill security-baseline -a claude-code
Installs to .claude/skills/security-baseline/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (3)
- README.md
- SKILL.md
- references/headers-checklist.md