Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,103 skills from 2,358 repositories · updated 19 minutes ago
48,054 skills
- swift-cspSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (26 mandatory, 6 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.SecurityNo warnings★ 1K↓ —
- cvpr-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CVPR submission campaign end to end, covering the November abstract/paper/supplement deadline chain, coauthor reviewer-duty scheduling, the January rebuttal sprint, February decisions, camera-ready and June conference logistics, and the resubmission ladder across ICCV, ECCV, and the next CVPR.ProductivityNo warnings★ 1.4K↓ —
- cyber-essentialsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update rule, mandatory MFA for cloud services and the new auto-fail questions, CE Plus technical audits, pricing, annual renewal, the included cyber liability insurance, and procurement mandates (PPN 014, MoD Defence Cyber Certification, NHS). Use this skill whenever a user mentions Cyber Essentials, CE Plus, IASME, the UK government cyber certification, Danzell or Willow question sets, UK public-sector or MoD supply-chain security requirements, or wants a readiness gap assessment.SecurityNo warnings★ 1K↓ —
- doctorhashgraph-online/awesome-codex-pluginsRead-only docflow diagnosis: scans docs, config, changelog, and links, then recommends init, adopt, or repair. Use when asked "check docs setup", "should I set up docflow", "why is docflow not working", or "doctor".OtherNo warnings★ 1.5K↓ —
- second-brain-quizundefined-ui/second-brain-osGenerate questions from the user's own concept pages so they can find out what they saved but never learned, and compare their answers against what the pages say. Use this skill when the user wants to test themselves, revise, make flashcards from their notes, or asks what they have forgotten. Do NOT use for generic quizzing on a topic the vault does not cover, or for answering a question from the vault.TestingNo warnings★ 1.2K↓ —
- second-brain-lintundefined-ui/second-brain-osAudit a second-brain vault for structural problems and repair them: broken wikilinks, orphan pages, empty stubs, frontmatter that violates the schema, near-duplicate pages, and stale index entries. Use this skill whenever the user asks to lint, clean, audit or check the health of their vault, says pages feel messy or links are broken, after a large bulk import, or when a scheduled maintenance run fires. Do NOT use for ingesting new sources, for answering questions from the vault, or for rewriting page content that is structurally fine but reads badly.OtherNo warnings★ 1.2K↓ —
- cis-controlsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.SecurityNo warnings★ 1K↓ —
- cmmc-readinessNewalirezarezvani/claude-skillsUse when a defense contractor or subcontractor is preparing for a CMMC 2.0 Level 2 self-assessment or C3PAO assessment, calculating or checking an SPRS score against NIST SP 800-171 Rev 2, deciding what can go on a POA&M, tracking POA&M closeout before Conditional status expires, or scoping assets, enclaves and cloud providers that handle CUI. Scores all 110 requirements with the 32 CFR 170.24 weights, blocks gaps that can never be deferred, and classifies the asset inventory into CMMC asset categories.PlanningNo warnings★ 29.2K↓ —
- form-explainermohitagw15856/pm-claude-skillsExplain an official form field by field (tax, benefits, immigration, employment, school, health, vehicle or court forms) from a photo, PDF, pasted text or just its name and number: what it is for, what each field means and what to put, the documents needed, the deadline, and where to send it. Use when someone says 'what is this form', 'help me understand form P45 / W-4 / Form 16', 'what do I write in this box', or 'I got this form in the post'. Produces a one-line purpose, a field-by-field guide, a documents checklist, common mistakes, and what happens next.DocumentsNo warnings★ 1.5K↓ —
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.2K↓ —
- clickhashgraph-online/awesome-codex-pluginsRecord revision-aware evidence for software work by default, or bind higher-risk execution to one human-readable approval contract in Guarded mode. Use when Click Hook context enables Evidence or Guarded mode, or when the user explicitly selects Click. Do not use for questions or explanations.LegalNo warnings★ 1.5K↓ —
- masking-budgetmohitagw15856/pm-claude-skillsTreat neurodivergent masking as a daily energy budget — audit what passing as neurotypical actually costs you, where the spend is worth it, where you can safely drop the mask, and how to plan a heavy-masking day so you don't crash after. Use when someone says 'I'm exhausted from masking', 'work drains me and I don't know why', 'how do I unmask safely', or is autistic/AuDHD/ADHD and burning out socially. Produces a mask-cost audit, a spend/drop map, and a recovery plan. A self-knowledge tool, not a diagnosis or therapy.PlanningNo warnings★ 1.5K↓ —
- anti-ui-slophashgraph-online/awesome-codex-pluginsStop coding agents from shipping generic UI. Use UIZZE's 800,000+ real web and iOS screens to build product-specific interfaces, define a design contract, cover required states, and run a hard finish gate. Use when designing, implementing, redesigning, critiquing, or pre-ship reviewing a web or iOS interface in Codex, Claude Code, Cursor, Copilot, or another coding agent. Trigger with "anti-ui-slop", "stop UI slop", "ground this UI in real screens", or "run the UI finish gate".DesignNo warnings★ 1.5K↓ —Also in 8 other repos
- 00-academic-routeragentscope-ai/OpenJudgeUse when the user wants help with academic papers or citations but it's unclear which specific workflow fits — reviewing a paper, checking a BibTeX file for fake references, or benchmarking multiple LLMs on reference-recommendation accuracy. Also use when the user mentions paper review, peer review, BibTeX verification, citation checking, reference hallucination, or academic literature accuracy and hasn't specified which of those three tasks they mean. This skill is the entry router for the academic-eval suite: it asks one diagnostic question then routes to the right sub-skill.ScienceNo warnings★ 1K↓ —
- Error Resolverforyourhealth111-pixel/Vibe-SkillsLegacy error-resolution reference archive retained for migration. Do not route user tasks here; use systematic-debugging for active bug, stack-trace, and root-cause work.EngineeringNo warnings★ 3.8K↓ —
- gitnexushashgraph-online/awesome-codex-plugins将 GitNexus 作为受控可选代码智能能力接入,用于 brownfield MCP 查询、影响面分析、 detect_changes、多仓分析和更深代码图谱证据。输出必须回落到 `/team-*` 主链和 artifacts。OtherNo warnings★ 1.5K↓ —
- atc-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when writing or auditing the related-work and positioning of an ATC (ACM SIGOPS Annual Technical Conference, formerly USENIX ATC) systems paper — covering the systems literature lanes, positioning against OSDI/SOSP/NSDI/EuroSys/FAST, writing delta-first comparisons, and keeping self-citation double-blind.ScienceNo warnings★ 1.4K↓ —
- page-croalirezarezvani/claude-skillsUse when a homepage, landing, pricing or feature page is not converting, before rewriting it. Audits it section by section with conversion_audit.py and ranks fixes by expected impact.MarketingNo warnings★ 29.2K↓ —
- pentest-reportmohitagw15856/pm-claude-skillsWrite a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.SecurityNo warnings★ 1.5K↓ —
- icdm-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ICDM (IEEE International Conference on Data Mining) submission for readiness, covering Research-vs-Applied track choice and its anonymity regime, the triple-blind sweep, the 10-page IEEE all-inclusive cap, the single June deadline, in-paper artifact references, and the desk-level triggers that get an ICDM paper rejected without review.ScienceNo warnings★ 1.4K↓ —
- fse-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning an ESEC/FSE submission against the software-engineering literature across ICSE, FSE, ASE, ISSTA, MSR, and the SE journals (EMSE, TSE, TOSEM), writing delta-first contrast rather than a citation catalog, keeping self-citations double-anonymous, and handling concurrent, preprint, and prior-version overlap.WritingNo warnings★ 1.4K↓ —
- kdd-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted KDD paper for ACM proceedings, covering the 12-page proceedings budget with 9 content pages, the extra content page over the submission, the 3-page cap on references plus appendix, ACM e-rights and TAPS source processing, ACM Open APC status, de-anonymization, and Digital Library metadata for SIGKDD.ScienceNo warnings★ 1.4K↓ —
- 01-paper-reviewagentscope-ai/OpenJudgeReview academic papers for correctness, quality, and novelty using OpenJudge's multi-stage pipeline. Supports PDF files and LaTeX source packages (.tar.gz/.zip). Covers 10 disciplines: cs, medicine, physics, chemistry, biology, economics, psychology, environmental_science, mathematics, social_sciences. Use when the user asks to review, evaluate, critique, or assess a research paper, check references, or verify a BibTeX file.ScienceNo warnings★ 1K↓ —
- sci-abstractbrycewang-stanford/Awesome-Journal-SkillsUse when writing the two front-matter artifacts Science (AAAS) demands — the one-sentence summary for the table of contents and the ≤125-word single-paragraph abstract — both readable by any scientist and both leading with the quantified advance rather than the method. Late-stage polish skill for the flagship AAAS weekly.ScienceNo warnings★ 1.4K↓ —
human-gate
alirezarezvani/claude-skills
From the author
Use before shipping anything that needs human sign-off (a plan, spec, report, page, migration or irreversible action). Builds a review page with review_page_builder.py and runs human_gate.py, which refuses to close with an open blocker or no named reviewer.
Install
npx skills add alirezarezvani/claude-skills --skill human-gate -a claude-code
Installs to .claude/skills/human-gate/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Files (9)
- SKILL.md
- assets/batch.v1.schema.json
- assets/example_review_sidecar.md
- references/feedback_batching.md
- references/human_in_the_loop_canon.md
- references/review_loop_discipline.md
- scripts/feedback_parser.py
- scripts/human_gate.py
- scripts/review_page_builder.py