Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,538 skills from 2,407 repositories · updated 31 minutes ago
49,536 skills
- sandbox-migrate-to-nextfcakyon/claude-codex-settingsMigrate Cloudflare Sandbox apps from stable @cloudflare/sandbox to @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-next for apps already on the preview.DevOpsNo warnings★ 1.2K↓ —
- twitter-algorithm-optimizerComposioHQ/awesome-claude-skillsAnalyze and optimize tweets for maximum reach using Twitter's open-source algorithm insights. Rewrite and edit user tweets to improve engagement and visibility based on how the recommendation system ranks content.WritingNo warnings★ 78.8K↓ —Also in 1 other repo
- cwd-rolluphoangsonww/Claude-Code-Agent-MonitorRoll up Claude Code sessions by working directory (project) from Agent Monitor data — session count, total cost, total tokens, and last-active timestamp per cwd — so per-project activity can be compared at a glance. Use when summarizing where effort and spend went across projects.EngineeringNo warnings★ 1.1K↓ —
- cis-controlsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.SecurityNo warnings★ 1K↓ —
- oma-dbNewfirst-fluke/oh-my-agentDesign schemas and migrations, tune queries, or plan vector retrieval and database operations. Application API implementation uses oma-backend.DataNo warnings★ 1.4K↓ —
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.3K↓ —
- pods-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an ACM PODS project timeline across its multiple submission cycles per year, from venue fit through the EasyChair abstract-then-paper deadlines, the 48-hour rebuttal, the accept/reject/revision decision and shepherded revision round, PACMMOD-track publication, the arXiv full version, and presentation — with backward-planning offsets for a theory paper and honest handling of cycle choice.ProductivityNo warnings★ 1.4K↓ —
- nist-800-53Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceNIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.SecurityNo warnings★ 1K↓ —
- comprehensive-analysishuytieu/COG-second-brainDeep-dive 7-day analysis across all data sources for weekly reviews, board prep, and strategic planningPlanningNo warnings★ 1.3K↓ —Also in 1 other repo
- iso27701Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.SecurityNo warnings★ 1K↓ —
- dac-workflowbrycewang-stanford/Awesome-Journal-SkillsUse to plan a full ACM/IEEE Design Automation Conference (DAC) Research-Manuscript campaign backward from the mid-to-late-November manuscript deadline through the two-stage abstract-then-manuscript submission on Softconf, the winter review, the March notification, the April camera-ready and copyright for the ACM Digital Library, and the July conference in Long Beach — with the Engineering-Track and Late-Breaking-Results side calendars.ProductivityNo warnings★ 1.4K↓ —
- make-static-ads-ad-copygooseworks-ai/goose-skillsStep of make-static-ads: writes the text for each slot the ad's template sets, then the primary texts, headline, description and CTA around the image, from usable facts and customer words. Run make-static-ads instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- plan-campaign-budget-and-testsgooseworks-ai/goose-skillsStep of the plan-campaign playbook: splits the budget across chosen channels, checks per-channel minimums, and writes the test plan and paid structure. Run plan-campaign instead; not for direct use.TestingNo warnings★ 1.3K↓ —
- verify-cli-runreticlehq/reticleProve that a command-line tool actually did what it said, instead of trusting its exit code and its output. Snapshots the filesystem before and after, names the expected consequence in advance, and returns one of four verdicts with what could not be seen. Use after running a build, a migration, a scaffolder, a formatter, a codegen step, or an AI coding CLI; when a command printed success and you are about to report "done"; when you are about to write "exit code 0, so it worked"; or when a tool claims it edited files. Needs nothing installed.EngineeringNo warnings★ 1.2K↓ —
- cav-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing a CAV (Computer Aided Verification) empirical evaluation, covering standard benchmark sets (SV-COMP/SMT-COMP/HWMCC/VNN-COMP), fair baseline solvers with pinned versions and equal resource limits, timeout-dominated comparisons, soundness cross-checks and proof witnesses, cactus/scatter reporting, and matching evidence to the shape of each verification claim.OtherNo warnings★ 1.4K↓ —
- aaai-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an AAAI main technical track submission for OpenReview readiness, double-blind anonymity, page limits, reproducibility checklist, supplementary material, author limits, multiple-submission policy, and AAAI AI-use policy compliance.LegalNo warnings★ 1.4K↓ —
- fedrampSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP Certification Classes (A, B, C, D — new baseline labels: A = pilot/transitional, B = LI-SaaS/Low, C = Moderate, D = High, per NTC-0004), FedRAMP 20x (now the primary authorization pathway), OSCAL mandate (September 2026), 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, or architecture reviews for federal cloud. FedRAMP Ready retired July 28, 2026 (Legacy FedRAMP Ready). When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.SecurityNo warnings★ 1K↓ —
- sci-writingbrycewang-stanford/Awesome-Journal-SkillsUse when choosing the Science (AAAS) format (Research Article vs Report) and holding its length and structure budgets — main-text word caps, figure caps, argument-ordered Results, and deciding what belongs in the main text versus Supplementary Materials.WritingNo warnings★ 1.4K↓ —
- budget-sethoangsonww/Claude-Code-Agent-MonitorDefine a spend budget for Claude Code and, optionally, create a cost alert rule that fires when usage crosses the limit, via POST /api/alerts/rules on the Agent Monitor dashboard. Reads current spend from /api/pricing/cost to size the budget sensibly and explains every rule field before writing. Use when setting a spend limit or wiring up a budget guardrail.WritingNo warnings★ 1.1K↓ —
- jlcpcbhashgraph-online/awesome-codex-pluginsJLCPCB PCB fabrication and assembly — BOM/CPL generation, basic vs extended parts, assembly constraints, design rules, ordering workflow. Use with KiCad for JLCPCB manufacturing. Use this skill when the user mentions JLCPCB, wants to order PCBs or assembled boards, needs prototype bare PCBs and stencils, wants to know JLCPCB design rules and capabilities, or is asking about PCB manufacturing costs or turnaround times. For gerber/CPL export, stencil ordering, and BOM management, see the `bom` skill.DesignNo warnings★ 1.5K↓ —
- cloudbase-all-in-oneTencentCloudBase/CloudBase-AI-ToolkitUnified CloudBase execution guide for all-in-one skill installs. Use this first for CloudBase app tasks, especially existing apps with TODOs, fixed pages, or active handlers. Routes PostgreSQL / CloudBase PG / app.rdb() / queryPgDatabase / managePgDatabase work away from legacy NoSQL and old auth patterns.DataNo warnings★ 1.2K↓ —
- vn-pdplSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.FinanceNo warnings★ 1K↓ —
- cav-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning a CAV (Computer Aided Verification) submission against the verification literature across CAV, TACAS, FMCAD, VMCAI, POPL/PLDI, and the journals (FMSD, JAR, TOCL, STTT), writing delta-first contrast rather than a citation catalog, crediting the right benchmark and tool lineages, keeping self-citations double-anonymous for the anonymized categories, and handling concurrent and prior-version overlap.WritingNo warnings★ 1.4K↓ —
- sox-itgcSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams. Covers the four ITGC domains external auditors test for SOX 404 — access to programs and data, program changes, computer operations, and program development — plus scoping in-scope systems from the financial statements, designing risk-and-control matrices (RCMs), writing control narratives and test scripts, evaluating deficiencies (control deficiency vs significant deficiency vs material weakness under AS 2201 and Reg S-X), drafting remediation plans, SOX 404(a)/404(b) applicability and filer status, IPO readiness timelines, and COSO 2013 alignment. Use this skill whenever a user mentions SOX, ITGC, IT general controls, 404(a)/404(b), ICFR, material weakness, user access reviews, segregation of duties in IT, change management controls for financial systems, SOX testing or walkthroughs, PCAOB audits, or quarterly compliance for financial reporting systems.TestingNo warnings★ 1K↓ —
baoyu-image-gen
JimLiu/baoyu-skills
MediaUpdated 3 days ago
From the author
AI image generation with OpenAI GPT Image 2.5, Azure OpenAI, Google, OpenRouter, DashScope, Z.AI GLM-Image, MiniMax, Jimeng, Seedream, Replicate and Agnes APIs. Supports text-to-image, reference images, aspect ratios, and batch generation from saved prompt files. Sequential by default; use batch parallel generation when the user already has multiple prompts or wants stable multi-image throughput. Use when user asks to generate, create, or draw images.
Install
npx skills add JimLiu/baoyu-skills --skill baoyu-image-gen -a claude-code
Installs to .claude/skills/baoyu-image-gen/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance93
Maintenance100
Licence100
Adoption69
Files (49)
- SKILL.md
- references/codex-image2-fallback.md
- references/codex-oauth-vs-openai-api-key.md
- references/config/first-time-setup.md
- references/config/preferences-schema.md
- references/providers/agnes.md
- references/providers/codex-cli.md
- references/providers/dashscope.md
- references/providers/minimax.md
- references/providers/openrouter.md
- references/providers/replicate.md
- references/providers/zai.md
- +37 more