Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,418 skills from 2,407 repositories · updated 8 minutes ago
49,416 skills
- ai-model-nodejsTencentCloudBase/CloudBase-AI-ToolkitUse this skill for Node.js backend AI via @cloudbase/node-sdk (>=3.16.0) — cloud functions, CloudRun, Express/Koa/NestJS, serverless APIs, scheduled jobs, LLM proxies, agent orchestration. The only SDK supporting image generation (ai.createImageModel + generateImage). Text via ai.createModel with groups cloudbase, the legacy hunyuan-v3 / hunyuan-exp, or custom-*; model ids (e.g. deepseek-v4.1-flash, glm-5.3, kimi-k2.6) go in the `model` field of generateText/streamText. MUST run two-step preflight before code — see body. NOT for browser/Web (use ai-model-web) or Mini Program (use ai-model-wechat).BrowserNo warnings★ 1.2K↓ —Also in 5 other repos
- squadraUpdateddagoSte/squadraCoordinates work entrusted to several Codex, Claude, Cursor or mixed windows, with tasks, acknowledgements, proofs, a non-author reviewer and a persistent registry. Includes squadra dash to view the activity and squadra selftest to test the protocol. Use when the owner asks for a squad (squadra), a coordinator/builders/reviewer, resuming a squad or its dashboard; it does not impose this scheme on ordinary changes in a single window.TestingNo warnings★ 1.2K↓ —
- research-marketgooseworks-ai/goose-skillsMarket research and brand watch: which market the brand is in, how big the reachable part is, what's changing, how buyers buy and what they pay, what people are saying now, and what it means for positioning. Use when the marketer asks for market research, "how big is my market", "what's changing in my category", "what do others charge", "what are people saying about us", "is there demand for <idea>", or "watch my brand / tell me if something blows up" (alerts only, risk first). Also writes positioning choices and finished messages ("position my product", "write our positioning"). Researches first, asks only decisions at the end, and saves the output to the brand. Not for who the buyers are and their own words — use research-audience; not for a deep look at rivals — use research-competitors.ScienceNo warnings★ 1.3K↓ —
- snsitsmostafa/aws-agent-skillsAWS SNS notification service for pub/sub messaging. Use when creating topics, managing subscriptions, configuring message filtering, sending notifications, or setting up mobile push.DevOpsNo warnings★ 1.2K↓ —
- rss-writing-stylebrycewang-stanford/Awesome-Journal-SkillsJournal-specific Claude Code/Codex skill packs covering mainstream journals — AER, QJE, Nature, Cell, 管理世界, 经济研究 & 200+ more — your fast track to getting published. ｜ 覆盖主流期刊的 Claude Code/Codex 期刊技能包，从选题、识别策略到表格规范与审稿回复全流程，助你快速发论文。WritingNo warnings★ 1.4K↓ —
- work-with-creatorsgooseworks-ai/goose-skillsReal creators and influencers, researched, priced and briefed. Use when the marketer says "find influencers", "which creators are worth paying, at what price?", "find real UGC creators to film for our ads", "who should we seed product to", "is this creator's engagement real", "what should I pay this creator" or "write a creator brief". Free research first; one credit yes only to vet deeper. Drafts only: contacts nobody, agrees nothing, moves no money. Not for AI-made UGC-style video — use goose-video; if unsure, ask: a real person filming, or AI-made?MediaNo warnings★ 1.3K↓ —
- workers-best-practicesfcakyon/claude-codex-settingsCloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.DevOpsNo warnings★ 1.2K↓ —
- resolve-pr-commentsfcakyon/claude-codex-settingsThis skill should be used when user asks to "address PR comments", "resolve PR feedback", "handle review comments", "fix PR issues", "respond to PR review", or explicitly invokes "resolve-pr-comments".EngineeringNo warnings★ 1.2K↓ —
- email-lifecyclegooseworks-ai/goose-skillsLifecycle email, SMS and push: audits the list and deliverability, then writes the flows this kind of business needs first, loadable as-is in your own tool, plus segments, cadence and this week's broadcasts. Never sends anything. Use when: set up my welcome and abandoned-cart emails; trial onboarding or waitlist launch emails; win back lapsed customers; plan this week's emails and texts; push notifications for my app; why are my emails going to spam; plan our Black Friday email and SMS sends; a send went wrong. Not for cold outreach to prospects — use write-outreach; not the editorial newsletter issue — use make-content; not the whole cross-channel Black Friday plan — use plan-campaign.ProductivityNo warnings★ 1.3K↓ —
- ui-designTencentCloudBase/CloudBase-AI-ToolkitUse when users need visual direction, interface hierarchy, layout decisions, design specifications, or prototypes before implementing a Web or mini program UI.DesignNo warnings★ 1.2K↓ —Also in 5 other repos
- planning-with-files-zhOthmanAdi/planning-with-files用于多步骤 AI 代理工作的持久化文件规划系统。将 task_plan.md、findings.md 和 progress.md 保存在磁盘上，生命周期钩子会注入选定的项目规划上下文。自动恢复只读取项目规划文件。只有显式运行 session-catchup.py --metadata 才会检查本机同项目的会话元数据；--replay 可输出有长度限制且由 nonce 框定的同项目摘录。可选门禁仅在宿主支持时请求继续，绝不执行 Markdown 中声明的命令。本技能没有网络上传路径。适用于研究或需要 5 次以上工具调用的工作。触发词：任务规划、项目计划、制定计划、分解任务、多步骤规划、进度跟踪、文件规划、帮我规划、拆解项目PlanningNo warnings★ 27.9K↓ —
- analyze-performancegooseworks-ai/goose-skillsWeekly performance read across every channel we run: what worked, why, and what to make next, judged on the business's real number (store revenue, qualified pipeline, retained users), not platform claims. Use when: write my Monday report; how are my ads doing — which ad won?; are my ads actually making money (Meta says 4x ROAS but revenue is flat); why did sales drop this week; did the test win; is my tracking working; monthly numbers for the replan; anything on fire today. Not for acting on the recommendations (pausing, scaling, launching) — use run-paid-campaigns; not for replanning the budget — use plan-campaign.TestingNo warnings★ 1.3K↓ —
- planning-with-files-zhtOthmanAdi/planning-with-files用於多步驟 AI 代理工作的持久化檔案規劃。將 task_plan.md、findings.md 與 progress.md 保存在磁碟上，生命週期鉤子會注入選定的專案規劃內容。自動恢復只讀取專案規劃檔案；只有明確執行 session-catchup.py --metadata 才會檢查本機同一專案的代理工作階段中繼資料，--replay 則會輸出有界且以 nonce 框定的摘錄。選用的閘門模式只會在主機支援時要求繼續，而且絕不執行 Markdown 中宣告的命令。此技能沒有網路上傳路徑。適用於研究或需要超過 5 次工具呼叫的工作。觸發詞：任務規劃、專案計畫、制定計畫、分解任務、多步驟規劃、進度追蹤、檔案規劃、幫我規劃、拆解專案PlanningNo warnings★ 27.9K↓ —
- ndss-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing the evaluation of an NDSS paper — attack demonstrations, defense evaluations under adaptive adversaries, and Internet measurements — choosing between testbed, emulation, and live experiments and meeting NDSS's deployment-realism evidence bar.DevOpsNo warnings★ 1.4K↓ —
- uai-writing-stylebrycewang-stanford/Awesome-Journal-SkillsUse when revising a UAI manuscript for probabilistic-inference readers, enforcing precise notation for distributions, graphs, and interventions, explicit assumption and identifiability statements, an 8-page main part that carries the whole argument while proofs sit in the appendix, and claims calibrated to what the theory and experiments show.WritingNo warnings★ 1.4K↓ —
- investigate-processmicrosoft/power-platform-skillsUse when a broad Process Mining business question, observed pattern or competing explanation needs investigation across analytical perspectives.FinanceNo warnings★ 1.1K↓ —
- iccv-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing the experimental program for an ICCV paper against the early-March deadline, covering benchmark-drift audits across the two-year gap, baseline fairness in the foundation-model era, ablations that isolate mechanisms, qualitative and failure evidence, and sequencing runs so the decisive result lands before the deadline, not after.ScienceNo warnings★ 1.4K↓ —
- planning-with-files-esOthmanAdi/planning-with-filesPlanificación persistente basada en archivos para tareas multipaso de agentes de IA. Mantiene task_plan.md, findings.md y progress.md en disco; los hooks del ciclo de vida inyectan contexto seleccionado de planificación del proyecto. La recuperación automática solo lee los archivos de planificación del proyecto. session-catchup.py --metadata, solicitado de forma explícita, puede inspeccionar metadatos locales de sesiones del mismo proyecto; --replay puede emitir extractos limitados y enmarcados con nonce. El modo con gate opcional solo puede solicitar que el host continúe si este lo admite y nunca ejecuta comandos declarados en Markdown. El skill no tiene ninguna ruta de carga por red. Úsalo para investigación o trabajo que requiera 5 o más llamadas a herramientas.PlanningNo warnings★ 27.9K↓ —
- derive-metricmicrosoft/power-platform-skillsUse when a requested measure is missing, a saved custom metric needs reuse, or an ephemeral formula or derived scalar is needed.OtherNo warnings★ 1.1K↓ —
- iros-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing IROS experiments — real-robot trial counts, success criteria set in advance, reset procedures, failure taxonomies, baseline fairness on matched hardware, sim-to-real gap reporting, small-n statistics, and the claim-to-evidence ladder that embodied-systems reviewers apply before they trust a demo.OtherNo warnings★ 1.4K↓ —
- hri-writing-stylebrycewang-stanford/Awesome-Journal-SkillsUse when drafting or revising an ACM/IEEE HRI full paper's structure and prose for an interdisciplinary audience — leading with the human-robot contribution and research questions, making hypotheses and measures explicit, describing the robot embodiment, keeping claims proportional to the study within the 8-page acmart budget, and writing so the chosen track's contribution type is unmistakable.WritingNo warnings★ 1.4K↓ —
- write-outreachgooseworks-ai/goose-skillsCold outreach a person sends to business buyers: email and LinkedIn sequences, a first line per prospect, reply and objection answers, and a read of replies. Use when the marketer says "write a cold email sequence", "what do I send to this list", "write LinkedIn messages for these leads", "how do I reply to this prospect" or "handle this objection", "reply to this demo request", "win back or reconnect with accounts that churned or went quiet", or "why is nobody replying to my outreach". Drafts only; the marketer sends from their own tool. Not for finding the people — use research-audience; not for emails to subscribers or users, or consumer win-back — use email-lifecycle.WritingNo warnings★ 1.3K↓ —
- huggingface-community-evalshuggingface/skillsRun evaluations for Hugging Face Hub models using inspect-ai and lighteval on local hardware. Use for backend selection, local GPU evals, and choosing between vLLM / Transformers / accelerate. Not for HF Jobs orchestration, model-card PRs, .eval_results publication, or community-evals automation.OfficialOtherNo warnings★ 11.3K↓ —
- inithashgraph-online/awesome-codex-pluginsFirst-time Archcore setup. Wires the host (MCP config, hooks, CLAUDE.md/AGENTS.md managed block), measures the authored context the repo already holds, then composes a first-day seed — stack rule, run guide, data-model, integrations, config, entry points, public surface, a linked architecture overview, and specs for the top hotspot modules — shown in ONE preview and created on a single confirm. Modes, named as the first word: init import converts the repo's authored context — CLAUDE.md, AGENTS.md, .cursor/rules and other agent instructions, ADR and RFC folders, contributor docs, internal pages of a published docs site, recoverable git history — into native typed documents with no import marks, staged by a plan when the volume is large; init refresh adds facts that appeared since, or drills into one domain with init refresh <domain>. Use on a fresh clone, empty `.archcore/`, 'set up archcore', 'migrate our CLAUDE.md to archcore', 'import our docs and ADRs', or to wire host configs. Not for individual docs or pPlanningNo warnings★ 1.5K↓ —Also in 1 other repo
ctf-misc
ljagiello/ctf-skills
SecurityUpdated 6 days ago
From the author
Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.
Install
npx skills add ljagiello/ctf-skills --skill ctf-misc -a claude-code
Installs to .claude/skills/ctf-misc/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
- Uses sudoLow
Why 88
Security95
Provenance83
Maintenance100
Licence100
Adoption56
Files (14)
- SKILL.md
- audio.md
- bashjails.md
- ctfd-navigation.md
- dns.md
- encodings-advanced.md
- encodings.md
- games-and-vms-2.md
- games-and-vms-3.md
- games-and-vms-4.md
- games-and-vms.md
- linux-privesc.md
- +2 more