Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,107 skills from 2,358 repositories · updated 20 minutes ago
48,058 skills
- hephaestus-buildagentlas-ai/Agentlas-OSUse when the user types /prompts:hep-build or /agentlas-build, mentions @Hephaestus for build work, asks to create a single Agentlas agent, create a multi-agent team, or package an existing local/external agent into Agentlas architecture.PlanningNo warnings★ 1.6K↓ —
- where-to-start-situation-savegooseworks-ai/goose-skillsStep of the where-to-start playbook: saves the founder's answers and the agreed first move with the brand, so later visits and other playbooks don't ask again. Run where-to-start instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- add-oneclinanocoai/nanoclawInstall or refresh OneCLI as NanoClaw's gateway provider. Use when setup selects OneCLI, an existing OneCLI-backed install is migrated to the gateway seam, or its runtime, approval bridge, setup, and agent guidance must be restored from the in-tree package.OtherNo warnings★ 31.1K↓ —
- add-codexnanocoai/nanoclawUse Codex (OpenAI's codex app-server) as a full agent provider — planning, tool orchestration, MCP tools, server-side history, session resume — alongside or instead of Claude. ChatGPT subscription or OpenAI API key, vault-only via the selected gateway. Per-group via `ncl groups config update --provider codex`. Distinct from using OpenAI as an MCP tool (where Claude remains the planner).PlanningNo warnings★ 31.1K↓ —
- wechat-articlemohitagw15856/pm-claude-skillsWrite a WeChat Official Account (公众号) article: a headline that earns the open, a digest line, a structure built for reading on a phone, and an ending that drives a share or follow, without clickbait the article does not deliver. Use when asked 帮我写公众号文章, 公众号标题, 推文怎么写, 写一篇公众号推送, or write a WeChat article. Produces three headline options, the digest (摘要), the full article with sub-headings and short paragraphs, cover image guidance, a closing call to action, and a check of claims and sources.WritingNo warnings★ 1.5K↓ —
- image-to-uihashgraph-online/awesome-codex-pluginsRecreate an image, screenshot, or mockup as a 1:1 UI implementation. Match the reference rather than redesigning it, then render and compare the result to correct visible differences.DesignNo warnings★ 1.5K↓ —Also in 1 other repo
- plan-campaigngooseworks-ai/goose-skillsCampaign planner: turns a product, offer, goal, budget and date into a plan the marketer can approve and a designer can start from today, with every channel kept or dropped for a reason. Zero paid is a valid answer; it never spends. Use when the ask names a campaign, a launch, drop or season push, a budget or a date: I have this budget and a launch date — what do I run, where?; plan my launch, drop or Black Friday push; plan a campaign; how should I split $5k; plan next month's campaign; our CAC blew up — replan. Not for a broad "grow my brand", "get more customers" or "where do I start" with no campaign, budget or date — use where-to-start; not for pausing ads on a sold-out product — use run-paid-campaigns; not for an email-only send plan — use email-lifecycle; not for reading this week's numbers — use analyze-performance.MarketingNo warnings★ 1.3K↓ —
- miglioradagoSte/squadraImprove a project's development workflow from observed failures, repeated work and avoidable waits. Apply scoped, verified remedies and useful project instructions, then automatically commit owned changes when the project's required checks and reviews are complete. Use after recurring development friction or when asked to improve the process; do not add rules without evidence.EngineeringNo warnings★ 1.2K↓ —
- tddhashgraph-online/awesome-codex-pluginsTest-Driven Development enforcer. Red→Green→Refactor cycle with no production code without a failing test first. Use for new features and bug fixes.TestingNo warnings★ 1.5K↓ —
- pentest-reportmohitagw15856/pm-claude-skillsWrite a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.SecurityNo warnings★ 1.5K↓ —
- lead-magnet-designrampstackco/claude-skillsDesigning lead magnets that earn the email. The discipline of building gated content (ebooks, templates, checklists, swipe files, mini-courses, free tools) that delivers genuine standalone value while qualifying the lead and warming them for what comes next. Honest about thin-bait (overpromises, underdelivers), kitchen-sink-resource (everything, helps with nothing), and earned-value-magnet (delivers standalone value while qualifying the lead). Triggers on lead magnet, gated content, opt-in offer, ebook, checklist, template, swipe file, mini-course, free tool, content upgrade, freebie, opt-in, list-building offer. Also triggers when an audience is being asked for an email and the offer attached to that ask needs design discipline, when previous lead magnets converted but did not produce qualified leads, or when a lead magnet is being scoped for the first time.DesignNo warnings★ 1K↓ —
- asc-analytics-reportsrorkai/app-store-connect-cli-skillsCollect, download, and verify App Store Connect Analytics reports with asc. Use when users need to discover analytics report requests, select report instances by processing date or granularity, download every segment, or verify downloaded files against Apple's size and MD5 metadata before analysis.DataNo warnings★ 1.1K↓ —
- scenario-audioscenario-labs/skillsUse when generating or handling audio on Scenario via MCP. Triggers include music tracks, full-length songs with vocals written from lyrics, background scores, soundtracks, game sound effects, SFX, foley, ambience, looping audio, voiceover, narration, speech, TTS, text-to-speech, dialogue, voice cloning, re-voicing a recording, scoring or adding sound to a video, transcription, or requests to create, wait on, play, or download audio files (MP3, WAV) with Scenario tools.MediaNo warnings★ 1.5K↓ —
- data-warehouse-experimentationrampstackco/claude-skillsRunning experiments out of the data warehouse instead of via dedicated experiment platforms. SQL-based assignment, exposure logging discipline, metric definitions in dbt models, statistical analysis in SQL or Python, variance reduction with CUPED, sequential testing, and the operational tradeoffs vs platforms like Statsig and Optimizely. Triggers on warehouse-native experimentation, run experiments in BigQuery, run experiments in Snowflake, dbt experiments, SQL t-test, CUPED variance reduction, exposure log, sample ratio mismatch, sequential testing, mSPRT, doubly robust estimation, build vs buy experimentation. Also triggers when the team is choosing between platform and warehouse, building warehouse-native experiment infrastructure, auditing one, or running an experiment with a custom metric the platform cannot handle.TestingNo warnings★ 1K↓ —
- minutes-verifysilverstein/minutesVerify that Minutes is properly set up and working — model downloaded, mic accessible, directories exist, no stale state. Use when the user says "is minutes working", "check my setup", "verify minutes", "test recording setup", "why isn't minutes working", "minutes health check", or after running setup for the first time.TestingNo warnings★ 1.6K↓ —Also in 1 other repo
- socc-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an ACM SoCC project timeline from venue fit through the two-round abstract+paper deadlines, the rebuttal, notification, camera-ready, and presentation, with backward-planning offsets for a cloud-systems measurement paper and honest handling of the two-rounds-per-year cadence and the no-cross-round-resubmission rule.ProductivityNo warnings★ 1.4K↓ —
- acl-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing experiments for an ACL paper, covering tuned LLM baselines, multi-dataset and multilingual evaluation, statistical significance and variance, human evaluation with agreement reporting, contamination and prompt-sensitivity controls, ablations, and error-analysis expectations in NLP reviewing.ScienceNo warnings★ 1.4K↓ —
- asc-whats-new-writerrorkai/app-store-connect-cli-skillsGenerate engaging, localized App Store release notes (What's New) from git log, bullet points, or free text using canonical metadata under `./metadata`. Optionally pairs with promotional text updates.WritingNo warnings★ 1.1K↓ —
- docs-lifecycle-scanamplifthq/openmeldUse when closing out a feature, tidying developing/ documentation, or asked to check docs health — runs the lifecycle linter and applies the README deletion rules.OtherNo warnings★ 1.4K↓ —
- asc-wall-submitrorkai/app-store-connect-cli-skillsSubmit or update a Wall of Apps entry in the App-Store-Connect-CLI repository using `asc apps wall submit`. Use when the user says "submit to wall of apps", "add my app to the wall", or "wall-of-apps".EngineeringNo warnings★ 1.1K↓ —
- sitemap-task-biasagentlas-ai/Agentlas-OSUse when creating or auditing an agent-team sitemap, Task Bias ledger, concept coverage, product surface map, validation chain, or missing-concept check.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- wacv-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a WACV campaign calendar across the two-round model, from track and round choice through the Round 1 submission, rebuttal, and Accept/Revise-and-Resubmit/Reject decision, into the Round 2 revision and decision, camera-ready, and the winter conference — with the branch points that a single-deadline plan misses.ProductivityNo warnings★ 1.4K↓ —
- postgresql-planningamplifthq/openmeldPlan and implement OpenMeld PostgreSQL business persistence, schemas and migrations, transactions, Hyperdrive access, and data cutover. Use for the shared relational database transition or PostgreSQL work; not for unrelated D1 performance fixes or OpenConnector's upstream database.DataNo warnings★ 1.4K↓ —
- itcs-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ITCS submission for HotCRP readiness — the early-September abstract-then-paper deadlines, single-column >= 11pt format with no hard page limit, the first-10-pages merits window, complete proofs of all central claims, the lightweight double-blind sweep, and the archival-prior-publication check.ScienceNo warnings★ 1.4K↓ —
dependency-auditor
alirezarezvani/claude-skills
SecurityUpdated 5 hours ago
From the author
Use before a release, during a CVE investigation, before a major version bump or for a license review. Scans dependencies with dep_scanner.py, checks licenses with license_checker.py and plans safe upgrades with upgrade_planner.py.
Install
npx skills add alirezarezvani/claude-skills --skill dependency-auditor -a claude-code
Installs to .claude/skills/dependency-auditor/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (16)
- README.md
- SKILL.md
- assets/sample_go.mod
- assets/sample_package.json
- assets/sample_requirements.txt
- expected_outputs/sample_license_report.txt
- expected_outputs/sample_upgrade_plan.txt
- expected_outputs/sample_vulnerability_report.json
- references/dependency_management_best_practices.md
- references/license_compatibility_matrix.md
- references/vulnerability_assessment_guide.md
- scripts/dep_scanner.py
- +4 more