Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,538 skills from 2,407 repositories · updated 32 minutes ago
49,536 skills
- month-end-closealirezarezvani/claude-skillsUse when running, planning or speeding up a month-end (or quarter-end) close — building or reviewing the close checklist and calendar, reconciling a bank statement or sub-ledger to the general ledger, writing or reviewing flux (variance) explanations, or finding why the close takes too many days. Orders close tasks by dependency and finds the critical path, proves each reconciliation and ages what is left, and refuses to sign off material fluctuations explained with boilerplate.WritingNo warnings★ 29.3K↓ —
- asc-build-lifecyclerorkai/app-store-connect-cli-skillsTrack build processing, find latest builds, and clean up old builds with asc. Use when managing build retention or waiting on processing.OtherNo warnings★ 1.1K↓ —
- figmaopenai/skillsUse the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Trigger when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting.OfficialDesignNo warnings★ 28.5K↓ —Also in 2 other repos
- second-brain-backfillundefined-ui/second-brain-osImport a large archive into the vault in controlled batches: triage what is worth ingesting, process oldest first, checkpoint after every batch, and keep cost visible. Use this skill whenever the user wants to import years of bookmarks, an export from another notes app, a downloads folder, a chat history dump, or says "backfill", "bulk import", "process my archive". Do NOT use for ingesting one or a few new sources, which is second-brain-ingest.ProductivityNo warnings★ 1.4K↓ —
- ap-reviewerSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- outcomes-ledgergooseworks-ai/goose-skillsShared step of the marketing playbooks (research-audience, write-outreach, work-with-creators): keeps the brand's record of the prospects or creators that were handed over. Tracks a status for each person, permanent opt-outs, re-check dates and dated lessons, which the next run reads. Loaded by those playbooks; not for direct use.ScienceNo warnings★ 1.3K↓ —
- ad-policy-checkgooseworks-ai/goose-skillsChecks paid ads against the ad platform's rules (Meta, TikTok, Google, LinkedIn and others) and the brand's category rules: the copy, on-image or on-screen text, pictures and people. Rewrites what can be fixed honestly, adds the disclosures that are needed, and flags anything that needs a human or legal review, with one pass, fixed or flag line per ad and platform. Use alone when you already have the ad text or images and know where they will run; otherwise run the playbook for the job (e.g. make-static-ads, make-content, email-lifecycle).MarketingNo warnings★ 1.3K↓ —
- evals-bootstrapundefined-ui/second-brain-osScaffold a first eval suite for an agent: mine real failures into cases, write behavioural checks over traces, and generate the runner. Use when the user wants evals, regression tests for an agent, a golden set, or asks how to know a prompt/model change did not break things. Do NOT use for a single task's done-check (goal-test) or for auditing context (context-audit).TestingNo warnings★ 1.4K↓ —
- ap-workerSpielewoy/autoprompt-skillProduce only the assigned result, protect other owners' work, run the listed checks, and report an exact conflict instead of expanding scope.OtherNo warnings★ 1.2K↓ —
- test-error-statesreticlehq/reticleForce the states a happy-path run never reaches (a failing API, an empty list, a slow request, a timeout, an expired session, a toast that auto-dismisses) and check the UI actually handles them. Use when error handling was written but never run, when a loading or empty state needs verifying, when a bug only happens on a slow connection, or when a timer, poll, debounce or retry needs testing without sleeping.TestingNo warnings★ 1.2K↓ —
- devops-infrastructureCloudAI-X/claude-workflow-v2Guides Docker, CI/CD pipelines, deployment strategies, infrastructure as code, and observability setup. Use when writing Dockerfiles, configuring GitHub Actions, planning deployments, setting up monitoring, or when asked about containers, pipelines, Terraform, or production infrastructure.DevOpsNo warnings★ 1.4K↓ —
- ap-work-group-managerSpielewoy/autoprompt-skillDivide one accepted work group only when at least two useful workers can have non-overlapping ownership.OtherNo warnings★ 1.2K↓ —
- loop-engineeringhuytieu/COG-second-brainShared loop-engineering reference for COG skills - the agent loop, deterministic verifiers, termination conditions, in-loop context management, and named patterns. Invoke when designing or debugging a skill that iterates (search-verify-retry, scan-until-dry, fetch-retry-gate).EngineeringNo warnings★ 1.3K↓ —
- social-media-kithuytieu/COG-second-brainAttach native media (teaser video, GIF, card images) to every social post, with per-platform upload stepsMarketingNo warnings★ 1.3K↓ —
- alert-managementhoangsonww/Claude-Code-Agent-MonitorInspect fired CCAM alerts and manage alert rules for token thresholds, event patterns, inactivity, and status duration. Use when acknowledging alerts, creating or editing a rule, checking cooldowns, or connecting alert rules to webhook targets.WritingNo warnings★ 1.1K↓ —
- blog-publishhuytieu/COG-second-brainSelf-evolving second brain with 35 AI skills, 10 agents, and people CRM. Closed-loop harness: a V-model verification lifecycle where the worker never grades its own homework. Plus paired anti-slop design skills for marketing and product UI. Works with Claude Code, Cursor, Kiro, Gemini CLI, Codex.WritingNo warnings★ 1.3K↓ —
- update-knowledge-basehuytieu/COG-second-brainMaintain and update product knowledge base from releases, features, and project changes with optional wiki syncOtherNo warnings★ 1.3K↓ —
- design-with-imagesdzhng/skillsExplore UI and visual design with image generation, then iterate the real implementation against the user-selected concept. Use when brainstorming visual directions, offering mockup variants, or implementing an approved generated design; do not stop at the mockups or the first code approximation.DesignNo warnings★ 1.4K↓ —
- feature-dochuytieu/COG-second-brainSelf-evolving second brain with 35 AI skills, 10 agents, and people CRM. Closed-loop harness: a V-model verification lifecycle where the worker never grades its own homework. Plus paired anti-slop design skills for marketing and product UI. Works with Claude Code, Cursor, Kiro, Gemini CLI, Codex.DesignNo warnings★ 1.3K↓ —
- mobile-friendlykostja94/marketing-skillsWhen the user wants to optimize for mobile-first indexing or fix mobile usability. Also use when the user mentions "mobile-friendly," "mobile-first indexing," "mobile SEO," "responsive design," "mobile adaptation," "mobile viewport," "viewport meta," "touch targets," "font size mobile," "AMP," or "Accelerated Mobile Pages." For viewport meta, use page-metadata.DesignNo warnings★ 1.1K↓ —
- export-open-issueshuytieu/COG-second-brainAudit and export open issues from any project tracker with summary analysis and vault archivalProductivityNo warnings★ 1.3K↓ —Also in 1 other repo
- editorial-illustrationshuytieu/COG-second-brainSelf-evolving second brain with 35 AI skills, 10 agents, and people CRM. Closed-loop harness: a V-model verification lifecycle where the worker never grades its own homework. Plus paired anti-slop design skills for marketing and product UI. Works with Claude Code, Cursor, Kiro, Gemini CLI, Codex.MediaNo warnings★ 1.3K↓ —
- 恢复创作NewChatCut-Inc/agent-plugin遇到连接或创作问题时帮助继续当前任务。OtherNo warnings★ 1K↓ —
- terminal-replicahuytieu/COG-second-brainReproduce YOUR real terminal and CLI agents (Claude Code, Codex CLI, Gemini CLI) faithfully in any generated graphic, GIF, or video frame. Use whenever an asset shows a terminal, an agent transcript, a statusline, or a CLI banner. Capture your actual theme, font, prompt and statusline first, and never invent a generic "hacker terminal" look.MediaNo warnings★ 1.3K↓ —Also in 1 other repo
oma-security
first-fluke/oh-my-agent
SecurityUpdated 12 hours ago
From the author
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.
Install
npx skills add first-fluke/oh-my-agent --skill oma-security -a claude-code
Installs to .claude/skills/oma-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (12)
- SKILL.md
- resources/artex.md
- resources/ci.md
- resources/cisco-source.md
- resources/deepsec-config.md
- resources/deepsec-matchers.md
- resources/deepsec-scanning.md
- resources/deepsec-setup.md
- resources/findings-contract.md
- resources/mcp-scanning.md
- resources/skill-scanning.md
- resources/validation.md