Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 15 minutes ago
49,413 skills
- research-competitors-edge-casesgooseworks-ai/goose-skillsStep of the research-competitors playbook: rules for run edge cases such as no browser, stalled workers, earlier reports and late reads. Run research-competitors instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
- scrapecreators-apigooseworks-ai/goose-skillsProvider reference for collecting public profiles, posts, comments, transcripts, trends, and ad-library data from major social platforms through ScrapeCreators. Use as a dependency of research workflows, not as the final user-facing deliverable.BrowserNo warnings★ 1.3K↓ —
- reflectNewhashgraph-online/awesome-codex-pluginsMine this session's transcript for lessons that will still hold in six months and turn each into an edit to a skill the session used, applied only after the user approves. Use at the end of a session, or on "reflect", "what should we learn from this", "capture lessons".WritingNo warnings★ 1.5K↓ —
- meta-evalagentscope-ai/OpenJudgeUse when the user wants to build an evaluation system for an LLM/agent application but doesn't know where to start — they have traces, prompts, RAG pipelines, or nothing at all. Also use when the user mentions evaluation, eval, benchmarking, testing LLM quality, measuring agent performance, assessing RAG accuracy, or wants to compare prompts/models. This skill is the entry router: it asks diagnostic questions then recommends which sub-skill (local workflow) to use next.TestingNo warnings★ 1.1K↓ —
- graphifyhashgraph-online/awesome-codex-plugins将 Graphify 作为可选知识图谱能力接入，用于 brownfield 结构扫描、依赖路径分析与架构问答。 不替代 `/team-*` 主链；输出统一回落到 handoff 与 artifacts 证据。OtherNo warnings★ 1.5K↓ —
- macboxNewhashgraph-online/awesome-codex-pluginsBuild, test, run, and tap through native iOS apps on a real remote Mac. Use for iOS build, test, and simulator work when this machine can't run Xcode, or when CLAUDE.md or AGENTS.md says to use macbox.TestingNo warnings★ 1.5K↓ —
- email-lifecycle-lifecycle-auditgooseworks-ai/goose-skillsStep of the email-lifecycle playbook: audits list, consent, live flows, recent sends and sending setup, marking every item verified, from-you or unknown. Run email-lifecycle instead; not for direct use.ProductivityNo warnings★ 1.3K↓ —
- audit-decisionsdzhng/skillsAudit the decisions an implementing agent made, not its diff — a pure audit that traces the session's history into a decisions ledger, changes no code, and never blocks an unsupervised run. Working code still embeds architecture the user never chose; surface it because future work inherits it. Use when the user wants to review the decisions the AI made on their behalf, before merging or committing AI-implemented work, when integrating a delegated subagent's pass, or when a fix "works" but might be a point fix.PlanningNo warnings★ 1.4K↓ —
- research-marketgooseworks-ai/goose-skillsMarket research and brand watch: which market the brand is in, how big the reachable part is, what's changing, how buyers buy and what they pay, what people are saying now, and what it means for positioning. Use when the marketer asks for market research, "how big is my market", "what's changing in my category", "what do others charge", "what are people saying about us", "is there demand for <idea>", or "watch my brand / tell me if something blows up" (alerts only, risk first). Also writes positioning choices and finished messages ("position my product", "write our positioning"). Researches first, asks only decisions at the end, and saves the output to the brand. Not for who the buyers are and their own words — use research-audience; not for a deep look at rivals — use research-competitors.ScienceNo warnings★ 1.3K↓ —
- image-to-uihashgraph-online/awesome-codex-pluginsRecreate an image, screenshot, or mockup as a 1:1 UI implementation. Match the reference rather than redesigning it, then render and compare the result to correct visible differences.DesignNo warnings★ 1.5K↓ —Also in 1 other repo
- helphashgraph-online/awesome-codex-pluginsShow KERNEL help. The unified skill system, state operations, agents, current plugin status. Triggers: help, how, what, skills, commands.OtherNo warnings★ 1.5K↓ —
- ux-designhashgraph-online/awesome-codex-pluginsUse when the user asks for UX, product flow, user journey, wireframes, usability, conversion, onboarding, checkout, signup, navigation, forms, state design, dashboard workflows, command palettes, settings, permissions, long-running task progress, admin/internal tools, activation, retention, or making an app easier to use over time. Designs and audits user experience flows, information architecture, content hierarchy, forms, onboarding, dashboards, settings, empty/loading/error/permission/success states, recovery paths, and repeated-use product ergonomics before visual polish. Pair with platform UI skills after the UX flow is clear.DesignNo warnings★ 1.5K↓ —
- car-rental-businesshashgraph-online/awesome-codex-pluginsRun and grow an exotic, luxury or Turo car rental business: price cars against live published market rates, scan competitors in any US city, plan a new rental business, draft rental agreements, run damage inspections, write vehicle listings and social posts, and reply to customer reviews. Market numbers come from the CarRentalList catalog via its free MCP server or the bundled client.WritingNo warnings★ 1.5K↓ —
- wranglerfcakyon/claude-codex-settingsRun or troubleshoot Wrangler CLI commands in projects that have a wrangler.jsonc, wrangler.json, or wrangler.toml file, including local development, Previews, deployment, and resource management. For new projects and projects without a Wrangler configuration file, use the cf CLI instead.DevOpsNo warnings★ 1.2K↓ —
- patentalirezarezvani/claude-skillsUse for prior-art search, freedom-to-operate, patent landscape, acquisition diligence or litigation prior art. Picks the use case with sub_use_case_router.py, searches Google Patents, Espacenet and USPTO and writes a .docx; not legal advice.DocumentsNo warnings★ 29.3K↓ —
- gitnexushashgraph-online/awesome-codex-plugins将 GitNexus 作为受控可选代码智能能力接入，用于 brownfield MCP 查询、影响面分析、 detect_changes、多仓分析和更深代码图谱证据。输出必须回落到 `/team-*` 主链和 artifacts。OtherNo warnings★ 1.5K↓ —
- email-lifecyclegooseworks-ai/goose-skillsLifecycle email, SMS and push: audits the list and deliverability, then writes the flows this kind of business needs first, loadable as-is in your own tool, plus segments, cadence and this week's broadcasts. Never sends anything. Use when: set up my welcome and abandoned-cart emails; trial onboarding or waitlist launch emails; win back lapsed customers; plan this week's emails and texts; push notifications for my app; why are my emails going to spam; plan our Black Friday email and SMS sends; a send went wrong. Not for cold outreach to prospects — use write-outreach; not the editorial newsletter issue — use make-content; not the whole cross-channel Black Friday plan — use plan-campaign.ProductivityNo warnings★ 1.3K↓ —
- claude-exechashgraph-online/awesome-codex-pluginsRun one prompt through headless Claude with scoped permissions and a time bound. Use when: scripting or automating a `claude -p` call, even a simple one.OtherNo warnings★ 1.5K↓ —Also in 2 other repos
- runbook-generatoralirezarezvani/claude-skillsUse when a service needs runbooks for deploy, incident response, maintenance or rollback, before launch. Generates them per environment with runbook_generator.py.DevOpsNo warnings★ 29.3K↓ —
- discovertaishi-i/awesome-japanese-nlp-resourcesGiven a Japanese NLP GitHub repo/model/dataset (URL / owner/repo / tool name) OR a topic, find what's already in awesome-japanese-nlp-resources and discover related resources NOT yet listed (contribution candidates). Mines the bundled dataset, then expands via web research across GitHub and Hugging Face. Use when the user names a SPECIFIC repository, model, or tool and wants alternatives/equivalents, OR wants to discover Japanese NLP resources for a topic that are NOT yet in the list, OR wants to prepare a contribution. Trigger phrases include 'mecabに似たツール', 'fugashiの代替', 'alternatives to fugashi', 'repos like manga-ocr', 'what else is like sudachi', 'リストに無い新しい日本語NLP', 'awesome-japanese-nlpに追加できそうな', '最近公開された日本語NLPツール', 'find unlisted Japanese NLP repos', 'new Japanese models on Hugging Face', 'contribute a new resource'. For a simple lookup of what already exists, use the search skill instead.ScienceNo warnings★ 1K↓ —
- gpt-image-2-6hashgraph-online/awesome-codex-pluginsGuide to OpenAI's GPT Image 2.6 on varg (gpt_image_2_6) and the entry point to the GPT Image 2.6 skill set: Flare vs Sunburst, quality vs reasoning_effort, sizes and aspect presets, what fal rejects (xhigh and max effort, SVG, over 16 GIF frames), measured prices, failure modes, the exact varg MCP and REST calls, and prompt recipes for the text-heavy layouts people shared on X: infographic, product launch poster, photo to editorial travel print, photo to Baroque gallery poster, landmark postcard, character turnaround sheet, storyboard sheet and low-res to clean upscale, each credited to its author. Use when someone asks for GPT Image 2.6, gpt-image-2.6, Flare or Sunburst, wants an infographic, poster, art print, character sheet or storyboard with readable text, or asks how to prompt, size or price this model. Not for looping GIFs (gpt-image-gif), sticker packs (gpt-image-sticker-pack), game sprite sheets (gpt-image-sprite-sheet), circle-and-arrow edits (gpt-image-markup-edit) or video (varg-ai).MediaNo warnings★ 1.5K↓ —
- whyNewhashgraph-online/awesome-codex-pluginsExplain why code exists in its current form by sending one investigator to each reachable evidence source and returning a cited, confidence-graded answer. Use for "why does this exist", "why was it built this way", "where did this limit come from", "is this dead code".FinanceNo warnings★ 1.5K↓ —
- tddNewhashgraph-online/awesome-codex-pluginsWhen a bug can be caught by an inexpensive local test, write that narrow failing test before the fix, check that it fails because of the bug, then fix the code and watch the test pass. Use on /tdd, "write a failing test first", "add a regression test", or when a bug has an obvious inexpensive test location.TestingNo warnings★ 1.5K↓ —
- tddhashgraph-online/awesome-codex-pluginsTest-first cycle and red-step evidence rule for skills that implement behavior a test can assert. Binds when the verification skill resolves a test command; defines what the red run must quote and when the cycle is skipped with a reason.TestingNo warnings★ 1.5K↓ —
senior-security
alirezarezvani/claude-skills
SecurityUpdated 15 hours ago
From the author
Check if a design or code is secure: STRIDE threat model, DREAD risk scores, leaked secret scan. Use whenever the user asks what could be attacked, how risky a feature is, or to find exposed keys.
Install
npx skills add alirezarezvani/claude-skills --skill senior-security -a claude-code
Installs to .claude/skills/senior-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (6)
- SKILL.md
- references/cryptography-implementation.md
- references/security-architecture-patterns.md
- references/threat-modeling-guide.md
- scripts/secret_scanner.py
- scripts/threat_modeler.py