Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 1 hour ago
49,413 skills
- running-livekit-simulationsfcakyon/claude-codex-settingsRuns LiveKit agent simulations and acts on the results. Use when the user says "run my simulations", "regression test my agent before deploying", "run the scenarios", "use lk agent simulate", "did my agent pass", "why did this scenario fail", "run simulations in CI", "test the audio pipeline", "check turn-taking and interruptions", or wants to check whole-conversation behavior before shipping. Covers text and audio mode and what each catches, running against a local or deployed agent, degraded-audio flags, automating a pre-release run, and triaging failures with list, view and export. For writing the scenarios use writing-livekit-scenarios. Not the default for a bare "test my agent", which goes to debugging-livekit-agents. Use this skill when the user names simulations, scenarios, a run, CI, or shipping.TestingNo warnings★ 1.2K↓ —Also in 1 other repo
- patentalirezarezvani/claude-skillsUse for prior-art search, freedom-to-operate, patent landscape, acquisition diligence or litigation prior art. Picks the use case with sub_use_case_router.py, searches Google Patents, Espacenet and USPTO and writes a .docx; not legal advice.DocumentsNo warnings★ 29.3K↓ —
- add-excelmicrosoft/power-platform-skillsAdds Excel Online (Business) connector to a Power Apps code app. Use when reading or writing Excel workbook data from OneDrive or SharePoint.DocumentsNo warnings★ 1.1K↓ —
- page-metadatakostja94/marketing-skillsWhen the user wants a full-page metadata audit or implementation across discovery, search intent, title, description, canonical, robots, hreflang, Open Graph, Twitter Cards, code or CMS changes, build validation, rendered HTML, production verification, localization, or post-release observation. Also use for "metadata audit," "sitewide meta optimization," "metadata implementation," "meta robots," "hreflang," "viewport," or "charset." For an isolated title, description, heading, Open Graph, or Twitter Card task, use its specialist skill directly.MediaNo warnings★ 1.1K↓ —
- auth-web-cloudbaseTencentCloudBase/CloudBase-AI-ToolkitCloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.DesignNo warnings★ 1.2K↓ —Also in 4 other repos
- building-livekit-agentsfcakyon/claude-codex-settingsBuilds voice and chat AI agents with LiveKit Agents on LiveKit Cloud or a self-hosted server. Use when the user asks to "build a voice agent", "create a LiveKit agent", "add voice AI to my app", "implement handoffs", "structure an agent workflow", "my agent is slow / too chatty", "it says it booked but nothing was saved", "make it confirm before committing", "it keeps re-asking things the caller already said", or is writing code against the LiveKit Agents SDK. Covers architecture: designing for latency, keeping context small, splitting a monolithic agent into handoffs and tasks, and designing for voice. Also covers keeping the model in charge of meaning while code owns state, approvals, and effects. For API specifics use reading-livekit-docs. To check behavior use debugging-livekit-agents and testing-livekit-agents.TestingNo warnings★ 1.2K↓ —
- grokipedia-recommendationskostja94/marketing-skillsWhen the user wants to add recommendations, links, or content to Grokipedia. Also use when the user mentions "Grokipedia," "GEO wiki," "AI encyclopedia," "suggest Grokipedia article," "Grokipedia citation," "Grokipedia listing," "AI search citation," "GEO visibility," or "Grokipedia optimization." For multi-platform parasite SEO strategy, use parasite-seo. For broad AI search visibility, use generative-engine-optimization.MarketingNo warnings★ 1.1K↓ —
- oma-dbNewfirst-fluke/oh-my-agentDesign schemas and migrations, tune queries, or plan vector retrieval and database operations. Application API implementation uses oma-backend.DataNo warnings★ 1.4K↓ —
- frontend-testing-debuggingfcakyon/claude-codex-settingsThis skill should be used when user asks to "debug this UI", "verify a rendered frontend change", or "check responsive layouts". Diagnose visual and interaction problems, compare reference screenshots, and reuse project QA journeys when available.TestingNo warnings★ 1.2K↓ —
- cloudbase-all-in-oneUpdatedTencentCloudBase/CloudBase-AI-ToolkitUnified CloudBase execution guide for all-in-one skill installs. Use this first for CloudBase app tasks, especially existing apps with TODOs, fixed pages, or active handlers. Routes PostgreSQL / CloudBase PG / app.rdb() / queryPgDatabase / managePgDatabase work away from legacy NoSQL and old auth patterns.DataNo warnings★ 1.2K↓ —
- email-triagemohitagw15856/pm-claude-skillsTriage a Gmail inbox down to only what needs you. Use when asked to triage email, clear an inbox, find what needs a reply, or summarise recent mail. Produces a prioritised list of items needing action — replies, decisions, follow-ups — for a configurable window (default last 8 hours), filtering out receipts, notifications, and newsletters.ProductivityNo warnings★ 1.5K↓ —
- tools-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Tool Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Tool Page.OtherNo warnings★ 1.1K↓ —
- email-lifecyclegooseworks-ai/goose-skillsLifecycle email, SMS and push: audits the list and deliverability, then writes the flows this kind of business needs first, loadable as-is in your own tool, plus segments, cadence and this week's broadcasts. Never sends anything. Use when: set up my welcome and abandoned-cart emails; trial onboarding or waitlist launch emails; win back lapsed customers; plan this week's emails and texts; push notifications for my app; why are my emails going to spam; plan our Black Friday email and SMS sends; a send went wrong. Not for cold outreach to prospects — use write-outreach; not the editorial newsletter issue — use make-content; not the whole cross-channel Black Friday plan — use plan-campaign.ProductivityNo warnings★ 1.3K↓ —
- privacy-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Privacy Policy Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Privacy Policy Page.OtherNo warnings★ 1.1K↓ —
- weekly-rollupmohitagw15856/pm-claude-skillsRoll a week of daily reports and agent activity into one honest weekly summary: trajectory against goals, what shipped with proof, the recurring blocker, and what to change next week. Use when asked for a weekly rollup, summarise my week, what did the agent accomplish this week, or a Friday wrap-up from my daily reports. Produces a 12-line weekly rollup in the shared status vocabulary: shipped versus planned, the pattern in the blockers, and one concrete change for next week.PlanningNo warnings★ 1.5K↓ —
- recallNewhashgraph-online/awesome-codex-pluginsRebuild where recent work stands from the agent's past chat transcripts and the team's shared record (PRs, tickets, chat, errors), and return a short status brief ending in the next step. Use for "what was I doing on X", "catch me up on my work", "where did I leave off".OtherNo warnings★ 1.5K↓ —
- add-datasourcemicrosoft/power-platform-skillsAdds a data source or connector to a Power Apps code app. Asks what the user wants to accomplish and routes to the appropriate specialized skill.PlanningNo warnings★ 1.1K↓ —
- implementhashgraph-online/awesome-codex-pluginsChange or repair code, config or services without weakening tests; report what ran and what did not. Use when: implementing a change or fixing a defect.TestingNo warnings★ 1.5K↓ —Also in 2 other repos
- refund-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Refund Policy Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Refund Policy Page.OtherNo warnings★ 1.1K↓ —
- title-tagkostja94/marketing-skillsWhen the user wants to write, audit, or optimize an HTML title tag, SEO title, page title, SERP title, browser-tab title, duplicate title, or title rewrite issue. For a sitewide metadata lifecycle including implementation and production validation, use page-metadata.BrowserNo warnings★ 1.1K↓ —
- phone-messagesnano-muse/nanoMusenanoMuse: an open-source personal agent for every device you own. One agent with a name and a look of its own that does things, keeps working while the app is closed, remembers you, and asks before anything you cannot undo. On Android, iPhone and iPad, Windows / macOS / Linux and in the browser; your phone's screen and your computer as its hands.BrowserNo warnings★ 3.2K↓ —
- skill-creatorNewnano-muse/nanoMuseUse when creating or updating a reusable skill with task-specific instructions, supporting files and checks.PlanningNo warnings★ 3.2K↓ —
- debughashgraph-online/awesome-codex-pluginsUse for bugs, unexpected behavior, regressions, or failing tests you did not write.EngineeringNo warnings★ 1.5K↓ —
- triggershashgraph-online/awesome-codex-pluginsCreate and manage triggers that watch for something (a job that finishes, a service that goes down, a failing CI run, a new release, a price crossing a threshold) and hand a task to Codex when it happens. Use when the user wants to be told, or wants something done, "when X happens", and when handling a message that starts with [self-starter].ProductivityNo warnings★ 1.5K↓ —
security-audit
cloudflare/security-audit-skill
OfficialSecurityUpdated Sep 14, 2026
From the author
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
Install
npx skills add cloudflare/security-audit-skill --skill security-audit -a claude-code
Installs to .claude/skills/security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance100
Maintenance85
Licence100
Adoption72
Files (20)
- AI-AND-LLM.md
- ATTACK-CLASSES.md
- CLIENT-SIDE.md
- CLOUD-AND-DEPLOYMENT.md
- DATA-ISOLATION-AND-LIFECYCLE.md
- DESKTOP-MOBILE-AND-LOCAL-IPC.md
- HUNTING.md
- MEMORY-SAFETY-AND-BINARY.md
- PROTOCOLS-RPC-AND-MESSAGING.md
- RECONNAISSANCE.md
- RESOURCE-EXHAUSTION-AND-AVAILABILITY.md
- SKILL.md
- +8 more