Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,105 skills from 2,358 repositories · updated 7 hours ago
48,055 skills
- writing-relayflowsAgentWorkforce/relayUse when authoring a Relayflows flow (@relayflows/surface / @relayflows/sdk, the journal-based v2 engine — the CLI is `flows`, package versions 2.0.x) in TypeScript or YAML/JSON. Covers the three-rung ladder (run/llm/agent), the resident verbs (human/dispatch/done), verification gates, TypeScript vs YAML authoring, per-step cli/model selection and its resolution order, flows.json, and `flows check`/`run`/`resume` with their real refusal shapes and exit codes. Not for the older, unrelated `@relayflows/core` WorkflowBuilder engine (`.pattern('dag')`/.agent()/.step() chains) that `writing-agent-relay-workflows` and `migrating-persona-to-relayflow` cover — that's a different product despite the similar name.WritingNo warnings★ 1.1K↓ —
- scenario-model-trainingscenario-labs/skillsUse when generated assets must keep a consistent style, character, or product look and references stop scaling, or when a user asks to train a custom model through the Scenario MCP, fine-tune a LoRA, clone a voice, curate a training dataset, choose a base model, set epochs and sample prompts, estimate training cost, diagnose a trained model that lost its identity or has one epoch, or generate with a trained model. Keywords: custom model, LoRA, dataset curation, epoch previews.OtherNo warnings★ 1.5K↓ —
- investigate-processmicrosoft/power-platform-skillsUse when a broad Process Mining business question, observed pattern or competing explanation needs investigation across analytical perspectives.FinanceNo warnings★ 1.1K↓ —
- test-native-extensionmicrosoft/power-platform-skillsValidate a third-party control repo across four automated layers plus one printed manual recipe. Layer 1 asserts native-source structure (Android getName() and iOS +moduleName to manifest nativeModule; @ReactMethod / RCT_EXPORT_METHOD to methods; no @ReactModule) plus load/init readiness (ReactPackage public no-arg constructor, iOS [cls new] no-arg init, requiresMainQueueSetup NO, non-throwing eager construction), so launch-time crashes surface before any build. Layer 2 validates the committed `./manifest.json` against the ppmplugin-format rules. Layer 3 asserts request/response/error-code agreement across native and PCF. Layer 4 compiles the PCF (auto-skipped if absent). Layer 5 prints a device end-to-end recipe. Native compile belongs to /build-android-binary and /build-ios-binary — this is the cheap structural pre-flight before those slow builds. Reports pass/fail per layer with a fix hint and updates .extension-state.md.TestingNo warnings★ 1.1K↓ —
- search-shared-sessionsAgentWorkforce/relaySearch an Agent Relay workspace's shared coding-agent sessions for prior work, decisions, fixes, or the context behind a task or pull request. Use when team history could answer the user's question or prevent repeating an investigation.FinanceNo warnings★ 1.1K↓ —
- add-nativemicrosoft/power-platform-skillsPublic entry point for native device capabilities and native controls — camera, image picker, barcode/QR scanner, document picker, file picker, secure storage, file system, sharing, haptic feedback, PDF generation/viewing, pen/signature capture, background GPS/geolocation tracking, or supported local file workflows — in a Power Apps mobile app. Also owns routing to internal camera/PDF/pen/geolocation implementation helpers and the guidance boundary between native wrappers and Dataverse File/Image host controls.DocumentsNo warnings★ 1.1K↓ —
- rollback-planmohitagw15856/pm-claude-skillsWrite a concrete rollback plan for a risky change (deploy, migration, feature-flag flip, config rollout) so the reverse is one command away — not an improvised debate at 2am. Use when asked to write a rollback plan, back-out plan, revert plan, or 'what if we need to undo this'. Produces a rollback plan with the signals that trigger it, exact reverse commands, verification steps, data-safety notes, and a communications template.PlanningNo warnings★ 1.5K↓ —
- oma-architectureNewfirst-fluke/oh-my-agentEvaluate system boundaries and architectural tradeoffs. Use for architecture decisions, design reviews, and ADRs.PlanningNo warnings★ 1.4K↓ —
- generate-mcp-app-uimicrosoft/power-platform-skillsGenerate a single-file MCP App widget for an MCP tool, with either bundled runtime code or user-approved public CDN imports. Describe the visual and provide a plain structured payload or a full tool result with content, structuredContent, and meta.DesignNo warnings★ 1.1K↓ —
- report-issuemicrosoft/power-platform-skillsUse this skill when the user wants to "report a bug", "file an issue", "report an issue", "submit a bug report", or report any problem with the mcp-apps plugin to the GitHub repository.OtherNo warnings★ 1.1K↓ —
- agentdock-user-guideuvwt/agentdock当用户询问 AgentDock 是什么、如何使用、配置在哪里、不同平台或安装方式怎样修改配置并生效、如何重启或验证配置、如何发现并配置 Codex/Claude/Grok 等 Coding Agent 的 ACP，以及常见运行问题时使用；覆盖 macOS Desktop、Windows Desktop、Linux 服务、Docker 和直接运行二进制，不用于源码开发与贡献流程。DevOpsNo warnings★ 1.3K↓ —
- canvas-appmicrosoft/power-platform-skillsCreates or edits a Power Apps Canvas App through the Canvas Authoring MCP coauthoring session. Handles staged experience design, direct and partitioned targeted edits, planned multi-screen changes, responsive layout, and compile-error convergence. Trigger on requests to create, build, generate, modify, update, change, fix, or edit a Canvas App or .pa.yaml files.DesignNo warnings★ 1.1K↓ —
- stripe-appsfcakyon/claude-codex-settingsBuild, modify, or review Stripe Apps and extensions using the relevant documentation and reference guides. Use for custom Stripe Dashboard UI, stripe-app.yaml, @stripe/ui-extension-sdk, @stripe/extensibility-sdk, script extensions, extension interfaces, custom workflow actions, and apps that authenticate to Stripe or react to events. Also use when deciding whether a Stripe extension can support the user's billing or workflow requirements.DesignNo warnings★ 1.2K↓ —
- ui-regressionfcakyon/claude-codex-settingsThis skill should be used when the user asks to "verify UI changes", "audit UI quality", "test every screen and action", "run regression QA", "check a deployed UI", or "validate an extension release". Test known web and browser-extension workflows on localhost, staging, or production with action coverage, recovery, localization, accessibility, and real integration evidence. Use dogfood for open-ended bug discovery.DesignNo warnings★ 1.2K↓ —
- add-onedrivemicrosoft/power-platform-skillsAdds OneDrive for Business connector to a Power Apps code app. Use when uploading, downloading, listing, or managing files in OneDrive.EngineeringNo warnings★ 1.1K↓ —
- douyin-scriptmohitagw15856/pm-claude-skillsWrite a short-video script for 抖音 (Douyin) or similar vertical-video platforms: a hook in the first three seconds, a shot-by-shot plan with on-screen text, spoken lines timed to the length, and a cover and caption. Use when asked 帮我写抖音脚本, 短视频脚本, 分镜脚本, 视频开头怎么抓人, or write a Douyin video script. Produces the hook options, a timed shot list with visuals, voice-over and on-screen text, the caption and tags, the cover frame, and a compliance check of claims.MediaNo warnings★ 1.5K↓ —
- videohashgraph-online/awesome-codex-pluginsUse when a brief has to become a film. Turns a one line ask into a Claude Design prompt written in the animations-v3 engine's own language, plus the built piece.jsx and a contact sheet to look at before anyone renders. Covers reference roles, the kit, the storyboard gate, the motion floor, and the verification commands. Do not use for backend work, UI design, or marketing copy alone.MediaNo warnings★ 1.5K↓ —
- ap-arbiterSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- incident-responserampstackco/claude-skillsManage active production incidents through detection, triage, mitigation, communication, and resolution with structured roles and decision-making. Use this skill whenever the user has an active incident, a production issue, a service outage, a security incident, or needs to plan incident response procedures. Triggers on incident response, production incident, outage, service down, site down, P0, P1, severity, downtime, on-call, incident commander, status page, postmortem prep. Also triggers when something is actively broken in production and the user is figuring out what to do.SecurityNo warnings★ 1K↓ —
- codebase-auditTencentCloudBase/CloudBase-AI-ToolkitPerform a full codebase review, categorize findings by severity, file GitHub issues, then fix each issue in an isolated git worktree and submit PRs. Use this skill when the user asks to audit the codebase, do a comprehensive code review, find and fix security/quality/reliability issues, or run a proactive health check across the entire repository.SecurityNo warnings★ 1.2K↓ —
- plan-campaigngooseworks-ai/goose-skillsCampaign planner: turns a product, offer, goal, budget and date into a plan the marketer can approve and a designer can start from today, with every channel kept or dropped for a reason. Zero paid is a valid answer; it never spends. Use when the ask names a campaign, a launch, drop or season push, a budget or a date: I have this budget and a launch date — what do I run, where?; plan my launch, drop or Black Friday push; plan a campaign; how should I split $5k; plan next month's campaign; our CAC blew up — replan. Not for a broad "grow my brand", "get more customers" or "where do I start" with no campaign, budget or date — use where-to-start; not for pausing ads on a sold-out product — use run-paid-campaigns; not for an email-only send plan — use email-lifecycle; not for reading this week's numbers — use analyze-performance.MarketingNo warnings★ 1.3K↓ —
- cloudbase-declarative-deployTencentCloudBase/CloudBase-AI-ToolkitCloudBase declarative deployment from a cloudbaserc config (声明式部署, 配置式部署, cloudbaserc 部署) through the deployBuild / deployPlan / deployApply MCP tools. Use when deploying database, functions, app, hosting, or gateway resources described in cloudbaserc.json/yaml as a single desired-state config, when a user wants to build static hosting artifacts locally first (deployBuild), or wants a dry-run plan before applying (deployPlan), or when handling multi-environment deploys via mode / envOverrides. Covers build-plan-apply flow (deployBuild local build → deployPlan dry-run → deployApply confirm=true), hosting build-output neutralization, envId resolution priority, only/skip filtering, concurrency, and continueOnError. Prefer deployBuild (when hosting declares a buildCommand) and deployPlan before deployApply; do not confuse with per-resource tcb CLI deploy or single-function deploy.DevOpsNo warnings★ 1.2K↓ —Also in 5 other repos
- cloudflare-email-servicefcakyon/claude-codex-settingsImplement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.DevOpsNo warnings★ 1.2K↓ —
- analytics-strategyrampstackco/claude-skillsDesign measurement frameworks including event taxonomy, KPI hierarchy, dashboard architecture, attribution models, and analytics implementation strategy. Use this skill whenever the user wants to plan analytics, design dashboards, build event taxonomies, define KPIs, set up tracking, or audit existing measurement. Triggers on analytics strategy, measurement plan, event taxonomy, tracking plan, KPI framework, dashboard design, north star metric, attribution model, conversion tracking, GA4 setup, Mixpanel setup, analytics audit. Also triggers when the user has data but no clear way to use it, or wants to make decisions but doesn't know what to track.DataNo warnings★ 1K↓ —
oma-security
first-fluke/oh-my-agent
NewSecurityUpdated 11 hours ago
From the author
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.
Install
npx skills add first-fluke/oh-my-agent --skill oma-security -a claude-code
Installs to .claude/skills/oma-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (12)
- SKILL.md
- resources/artex.md
- resources/ci.md
- resources/cisco-source.md
- resources/deepsec-config.md
- resources/deepsec-matchers.md
- resources/deepsec-scanning.md
- resources/deepsec-setup.md
- resources/findings-contract.md
- resources/mcp-scanning.md
- resources/skill-scanning.md
- resources/validation.md