Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,418 skills from 2,407 repositories · updated 13 minutes ago
49,416 skills
- senior-frontendalirezarezvani/claude-skillsBuild and review React, Next.js, TypeScript or Tailwind frontends: components, scaffolding, performance and bundle size. Use whenever the user wants a new component or app, a page feels slow, the bundle is too big, or asks for a frontend code review.DesignNo warnings★ 29.3K↓ —
- colt-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a COLT (Conference on Learning Theory) submission for CMT readiness, the 12-page PMLR-format main body, single-PDF assembly with unlimited appendix, double-anonymous formatting, the parallel-submission ban covering journals and proceedings venues, and the ordered final-week checks before the AoE deadline.DocumentsNo warnings★ 1.4K↓ —
- hpca-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an HPCA submission for the two-step July gate on HotCRP, the 11-page main-body limit, the IEEE template, double-blind anonymity plus the all-authors reference rule, the AI-use disclosure, artifact-link scrubbing, and final-week sequencing before the paper deadline.ScienceNo warnings★ 1.4K↓ —
- iccv-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ICCV submission in the weeks before the early-March deadline, covering OpenReview registration and profile completeness, the single same-day paper-plus-supplement upload, the 8-page inclusive format, the 25-submissions-per-author cap, every-author reviewer enrollment, anonymity and media-embargo rules, and desk-reject triage.ScienceNo warnings★ 1.4K↓ —
- ijcai-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an IJCAI or IJCAI-ECAI project timeline from venue fit through abstract registration, full-paper upload, author information, PPI payment, summary-reject risk, author response, notification, camera-ready, in-person presentation, and artifact release.ProductivityNo warnings★ 1.4K↓ —
- gcloud-usagefcakyon/claude-codex-settingsThis skill should be used when user asks about "GCloud logs", "Cloud Logging queries", "Google Cloud metrics", "GCP observability", "trace analysis", or "debugging production issues on GCP".DevOpsNo warnings★ 1.2K↓ —
- podcast-marketingkostja94/marketing-skillsWhen the user wants to plan, create, or market a podcast. Also use when the user mentions "podcast," "podcast strategy," "podcast SEO," "show notes," "podcast distribution," "Spotify podcast," "Apple Podcasts," "podcast discoverability," "PodcastEpisode schema," or "podcast repurposing." For show notes, use article-content.MediaNo warnings★ 1.1K↓ —
- cikm-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning a CIKM submission against three literatures at once — retrieval, mining, and knowledge management/databases — building the boundary-work paragraph, guarding against misattributing SIGIR/KDD/ICDM classics to CIKM, and handling preprints under the arXiv-declaration and dual-submission rules.ScienceNo warnings★ 1.4K↓ —
- ase-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ASE (IEEE/ACM Automated Software Engineering) research-track submission for HotCRP readiness, covering the ACM acmart sigconf template and the 10+2 page budget, double-anonymous review, the mandatory Data Availability Statement, the early-rejection stage before rebuttal, and desk-reject triage before the deadline.ScienceNo warnings★ 1.4K↓ —
- cloudbase-agentTencentCloudBase/CloudBase-AI-ToolkitBuild and deploy AI agents with CloudBase Agent SDK (TypeScript & Python). Implements the AG-UI protocol for streaming agent-UI communication. Use when deploying agent servers, using LangGraph/LangChain/CrewAI adapters, building custom adapters, understanding AG-UI protocol events, or building web/mini-program UI clients. Supports both TypeScript (@cloudbase/agent-server) and Python (cloudbase-agent-server via FastAPI).DevOpsNo warnings★ 1.2K↓ —Also in 5 other repos
- conext-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an ACM CoNEXT campaign backward from a deadline, covering the choice between the December and June submission cycles, the mandatory registration step, the one-shot major-revision window, the reproducibility badge opt-in due at submission, PACMNET camera-ready, and presentation — all on CoNEXT's distinctive two-cycles-per-year calendar.ProductivityNo warnings★ 1.4K↓ —
- grill-mealirezarezvani/claude-skillsInterview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".TestingNo warnings★ 29.3K↓ —
- skill-sync-publisherhashgraph-online/awesome-codex-pluginsSafely validate, publish, and track a local SKILL.md directory across GitHub, Awesome Codex Plugins, HOL Registry, skills.sh, SkillsMP, LobeHub, ClawHub, and Cursor Directory. Use when the user asks to publish, update, register, or synchronize an agent skill across marketplaces.OtherNo warnings★ 1.5K↓ —
- django-htmxhashgraph-online/awesome-codex-pluginsBuild and review HTMX interactions in Django server-rendered projects, especially generated django-saas-starter apps. Use when adding hx attributes, partial template responses, request.htmx branching, django-htmx response headers, forms, swaps, triggers, redirects, polling, boosted links or forms, or coordinating HTMX with Alpine.js local state.MediaNo warnings★ 1.5K↓ —
- os-step-by-stepkharmanskyi/open-stepsALWAYS invoke this skill when you need the user to act - run a command, paste a secret, click, approve - and whenever they ask how to do something or say they do not know what to do: "step by step", "walk me through it", "what do I do", "what should I do", "I don't understand what to do", "explain what I need to do", in any language. Picking which task comes next is os-whats-next; this skill is for doing the thing in front of you. First earn the ask: try it yourself, find another route, shrink it to the part only they can do. Then one action per step, commands labelled by what they touch, no jargon. Commands are single lines that prompt for any value - typing hidden for secrets - and confirm in plain words. Afterwards verify their step.ProductivityNo warnings★ 1.3K↓ —
- adopthashgraph-online/awesome-codex-pluginsAdd docflow to a repo that already has docs, without rewriting them. Adds missing config, folders, helpers, agent guidance, and an adoption review. Use when docs already exist or doctor recommends adopt.EngineeringNo warnings★ 1.5K↓ —
- minutes-recordsilverstein/minutesStart or stop recording a meeting, call, or voice memo. Use this whenever the user says "record", "start recording", "capture this meeting", "stop recording", "I'm in a meeting", "take notes on this call", or wants to transcribe live audio. Also use when they ask about recording status or want to know if something is being recorded.MediaNo warnings★ 1.6K↓ —Also in 1 other repo
- django-tddhashgraph-online/awesome-codex-pluginsDjango testing strategies with pytest-django, TDD methodology, factory_boy, mocking, coverage, and testing Django REST Framework APIs.TestingNo warnings★ 1.5K↓ —
- analyzing-projectsCloudAI-X/claude-workflow-v2Analyzes codebases to understand structure, tech stack, patterns, and conventions. Use when onboarding to a new project, exploring unfamiliar code, or when asked "how does this work?" or "what's the architecture?"PlanningNo warnings★ 1.4K↓ —
- optimizing-performanceCloudAI-X/claude-workflow-v2Analyzes and optimizes application performance across frontend, backend, and database layers. Use when diagnosing slowness, improving load times, optimizing queries, reducing bundle size, or when asked about performance issues.DataNo warnings★ 1.4K↓ —
- nopuawuji-labs/nopuaThe anti-PUA. Drives AI with wisdom, trust, and inner motivation instead of fear and threats. Activates on: task failed 2+ times, about to give up, suggesting user do it manually, blaming environment unverified, stuck in loops, passive behavior, or user frustration ('try harder', 'figure it out', '换个方法', '为什么还不行'). ALL task types. Not for first failures.ProductivityNo warnings★ 1.4K↓ —
- designing-architectureCloudAI-X/claude-workflow-v2Designs software architecture and selects appropriate patterns for projects. Use when designing systems, choosing architecture patterns, structuring projects, making technical decisions, or when asked about microservices, monoliths, or architectural approaches.PlanningNo warnings★ 1.4K↓ —
- react-uihashgraph-online/awesome-codex-pluginsUse when building any val with a user interface — dashboards, web apps, landing pages, forms, admin tools, anything users see in a browser. Covers JSX/React conventions, Twind/Tailwind styling, React version pinning, the view-source link requirement, and what to avoid (template-string HTML, external assets).DesignNo warnings★ 1.5K↓ —
- legal-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Legal Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Legal Page.LegalNo warnings★ 1.1K↓ —
security-audit
cloudflare/security-audit-skill
OfficialSecurityUpdated Sep 14, 2026
From the author
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
Install
npx skills add cloudflare/security-audit-skill --skill security-audit -a claude-code
Installs to .claude/skills/security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance100
Maintenance85
Licence100
Adoption72
Files (20)
- AI-AND-LLM.md
- ATTACK-CLASSES.md
- CLIENT-SIDE.md
- CLOUD-AND-DEPLOYMENT.md
- DATA-ISOLATION-AND-LIFECYCLE.md
- DESKTOP-MOBILE-AND-LOCAL-IPC.md
- HUNTING.md
- MEMORY-SAFETY-AND-BINARY.md
- PROTOCOLS-RPC-AND-MESSAGING.md
- RECONNAISSANCE.md
- RESOURCE-EXHAUSTION-AND-AVAILABILITY.md
- SKILL.md
- +8 more