Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,105 skills from 2,358 repositories · updated 10 hours ago
48,055 skills
- eu-craSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill for gap analysis, product classification (Default / Class I / Class II), conformity assessment route selection, CE marking, SBOM requirements, vulnerability and incident reporting to ENISA/CSIRTs, support period obligations, and manufacturer/importer/distributor duties. Trigger for EU CRA, Cyber Resilience Act, PDE compliance, Annex I requirements, SBOM EU, CE marking cybersecurity, or connected product security EU.SecurityNo warnings★ 1K↓ —
- tisaxSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA assessment regime that OEMs like VW, BMW, and Mercedes-Benz require from suppliers and service providers. Covers the VDA ISA 6 catalogue (current through 2026) and the ISA2027 transition (published July 1, 2026; mandatory for assessments ordered from January 1, 2027), assessment levels AL1/AL2/AL3, all 12 assessment objectives/labels (Confidential, Strictly Confidential, High/Very High Availability, Proto Parts/Vehicles, Test Vehicles, Proto Events, Data, Special Data), maturity scoring (0–5, target 3, cutback rules), the ENX portal process, scoping, audit-provider selection, corrective action plans and the 9-month window, 3-year label validity, and ISO 27001 mapping. Use for any TISAX, VDA ISA, ENX, automotive information-security assessment, prototype protection, or OEM supplier-security requirement question — gap assessments, label selection, readiness, and audit prep.SecurityNo warnings★ 1K↓ —
- varg-video-editingNewhashgraph-online/awesome-codex-pluginsWhich service to edit an existing video with, and how to edit it without breaking it. A routing guide for ten editing jobs: cut, trim, resize and join (FFmpeg, the varg ffmpeg tool, Rendi), talking-head cleanup (silence and filler cuts from word timestamps: auto-editor, Descript, ElevenLabs Scribe, Groq Whisper), long video to Shorts (OpusClip, or transcript + Gemini + FFmpeg), captions and subtitles (ASS through FFmpeg, Remotion, HyperFrames, Submagic, ZapCap), assembling from a timeline or template (HyperFrames, Remotion, Shotstack, Creatomate), AI edits that restyle, swap people, relight or extend (varg Recast/Relight/ID-V2V, Runway Aleph, Luma Ray, Wan VACE), dubbing and lip sync (HeyGen, ElevenLabs Dubbing, Sync Labs), upscaling, slow motion and background removal (Topaz, SeedVR, Bria), finding moments and QA (Gemini, varg video-analyze, Twelve Labs, VideoDB), and handing the cut to DaVinci Resolve, Premiere or Final Cut. Use when someone asks to edit, cut, trim, shorten, clip, reframe, caption, subtitleMediaNo warnings★ 1.5K↓ —
- soc2Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P). Use this skill whenever a user mentions SOC 2, Trust Services Criteria, SOC 2 Type 1 or Type 2, audit readiness, compliance gaps, control documentation, evidence collection, vendor risk questionnaires, or anything related to AICPA service organization controls. Trigger even for adjacent topics like "we need to get audited", "a customer asked for our security report", "writing an information security policy", or "preparing for an audit". Covers gap analysis, policy writing, control documentation, audit evidence preparation, and vendor risk reviews for organizations at any maturity level — from first-time startups to seasoned compliance teams.SecurityNo warnings★ 1K↓ —
- servershashgraph-online/awesome-codex-pluginsGive a Homie studio game lasting servers - named communities with their own rooms and rules - humans-only, hybrid (seats reserved for AI companions), beginner (new players, AI guides, kids-safe) - plus agent passes, the AI skill dial, the party's level vote, and AI guides that talk (a game vocabulary; Cloudflare's Clef decision model on the studio's Workers AI by default, Llama or the owner's key instead, Clef on the person's own computer under dev, or the owner's own Claude in a seat). Use when someone asks for servers, realms or shards, human-only play, AI party members or companions, guides or helpers for new players or kids, guides that answer "help me with this quest", "fill empty spots with AI", letting Claude play as a guide, which model the guides think with, testing an agents.json, free local AI guides, or how strong the bots should be.TestingNo warnings★ 1.5K↓ —
- csrdSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability reporting obligations, ESG disclosure, CSRD scope and thresholds, value chain reporting, XBRL digital tagging, third-party assurance, CSRD gap assessments, CSRD implementation timelines, ESRS E1–E5 environmental standards, ESRS S1–S4 social standards, ESRS G1 governance, the 2026 Omnibus scope change (Directive (EU) 2026/470, 1,000+ employees) and revised/simplified ESRS (July 2026), CSRD vs GRI/TCFD/SASB alignment, or any EU corporate sustainability reporting question. Trigger even if the user only mentions "ESG reporting Europe", "sustainability disclosure EU", or "non-financial reporting".FinanceNo warnings★ 1K↓ —
- django-q2hashgraph-online/awesome-codex-pluginsUse when adding, changing, testing, or debugging Django Q2 background tasks, scheduled jobs, qcluster workers, Redis broker configuration, or ORM broker fallback in Django projects.TestingNo warnings★ 1.5K↓ —
- setup-app-insightsmicrosoft/power-platform-skillsConfigure optional customer-owned Application Insights telemetry for a Power Apps mobile app — enable it against an existing Azure resource, change the resource, or disable it. Standalone, and invoked by /edit-app.DevOpsNo warnings★ 1.1K↓ —
- run-taskhashgraph-online/awesome-codex-pluginsExecute a single Todo task through In Progress to Review, meeting every acceptance criterion with tests and vibe-lint checks. Refuses Planning-status tasks. Invoked as /agiflow:run-task <task>. Uses get_task, update_task, create_task_comment.ProductivityNo warnings★ 1.5K↓ —
- ccpaSushegaad/Claude-Skills-Governance-Risk-and-ComplianceCalifornia Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold analysis, consumer rights fulfillment (access, delete, correct, opt-out of sale/sharing, limit SPI, ADMT opt-out), privacy notice drafting, service provider vs. contractor vs. third-party classification, sensitive personal information (SPI) handling, data minimization, opt-out mechanisms (including GPC), cybersecurity audits and risk assessments (live since Jan 1, 2026), ADMT obligations (effective 2026, deadline Jan 1, 2027), CPPA enforcement (Disney $2.75M, PlayOn $1.1M, Ford $375K), penalty exposure, GDPR comparison, and gap assessments for businesses operating in or targeting California residents.LegalNo warnings★ 1K↓ —
- varg-product-lockNewhashgraph-online/awesome-codex-pluginsTurns product photos into AI video shots that keep the product identical: a lock sheet (fixed geometry, fixed surface, allowed motion), a reference pack of 2-4 angles passed as @image roles to Seedance 2.5 or Kling 4, a camera-risk ladder (locked frame → push-in → slide → small orbit), banned motion words, one action per 4-6 s shot, a drift check with varg video_analyze, and the real packshot composited back where text must be exact. Fixes the #1 "looks fake" tell in AI product ads: warped logos, melted labels, products that change shape or size between shots. Use when a product drifts, morphs, changes color or loses its label in AI video, when someone asks for "consistent product", "keep my logo", "product looks different in every shot", or before a batch of product videos for TikTok Shop, Meta or Amazon. Not for people and characters staying the same (use varg-consistent-characters or varg-character-design).DocumentsNo warnings★ 1.5K↓ —
- ads-performance-analyticsrampstackco/claude-skillsHow to read paid media dashboards without fooling yourself. Attribution models, platform reporting quirks, multi-platform reconciliation, ROAS vs LTV horizon traps, statistical noise in performance metrics, incrementality testing, and the failure modes that produce expensive lessons. Triggers on read paid media dashboard, attribution analysis, ROAS vs LTV, multi-platform reconciliation, ad incrementality, geo holdout, conversion lift study, ghost bidding, paid media reporting, board-deck paid media metrics, blended CAC, MMM, MTA, last-click attribution. Also triggers when a marketer is about to scale, kill, or rebudget a campaign based on platform metrics, or when reconciling platform reports against warehouse revenue.DataNo warnings★ 1K↓ —
- budget-buildermohitagw15856/pm-claude-skillsBuild a realistic personal monthly budget from someone's income and expenses. Use when asked to make a budget, plan monthly spending, allocate income, or get finances under control. Produces a categorized budget (a 50/30/20-style allocation tuned to their reality), a surplus/shortfall number, and concrete next moves. Educational, not regulated financial advice.FinanceNo warnings★ 1.5K↓ —
- frontend-component-buildrampstackco/claude-skillsBuild production-ready frontend components with accessible markup, sensible props, defined states, and tested behavior. Use this skill whenever the user wants to build a component from scratch, refactor an existing one, design a component API, or implement a UI element with proper states and accessibility. Triggers on build a component, create a button, create a modal, create a form input, component API, props design, component states, refactor component, accessible component. Also triggers when implementing UI from a design that needs to be reusable.DesignNo warnings★ 1K↓ —
- integration-orchestratorrampstackco/claude-skillsGenerate a phased delivery orchestration plan for creative-direction-driven work: which skills run when, what locks at which gate, how handoffs occur, and how the cadence implements in the team's tools (Jira, Linear, Notion, Figma, GitHub) with AI agents via MCP and CLI. A temporal map of phases, lock points, handoff specs, gate definitions, and QA verification gates. Distinct from `creative-brief` (static project brief) and `creative-direction` (aesthetic direction). Triggers on integration orchestrator, delivery cadence, project orchestration, when does the brief lock, how to phase creative direction, design-development handoff, QA gate, agent-driven QA, and when a creative-direction project is starting, mid-flight with broken cadence, or integrating AI agents into PM workflow. Does NOT fire for project scoping (use `creative-brief`), aesthetic direction (use `creative-direction`), or general project management without a creative-direction throughline.TestingNo warnings★ 1K↓ —
- minutes-video-reviewsilverstein/minutesAnalyze a product walkthrough, bug report video, Loom, or ScreenPal using Minutes transcription plus visual review. Use when the user wants a recorded demo or bug clip turned into a durable brief with transcript, key frames, issues, and next steps.MediaNo warnings★ 1.6K↓ —Also in 1 other repo
- skill-evalhashgraph-online/awesome-codex-pluginsMeasure whether a skill helps by comparing runs with and without it. Use when: reading skill A/B results or deciding to keep, revise or remove one.OtherNo warnings★ 1.5K↓ —Also in 2 other repos
- smart-inithashgraph-online/awesome-codex-pluginsConversational onboarding for A Team. Detects ROADMAP.md, extracts context, generates INIT.md without requiring technical knowledge. Invoked automatically by the orchestrator when INIT.md is missing.PlanningNo warnings★ 1.5K↓ —
- varg-product-hookNewhashgraph-online/awesome-codex-pluginsMakes the first 5-15 seconds of a product video, the part that stops the scroll: either finds a hook that already went viral for this kind of product (TikTok Creative Center, ad spy tools, Reels search) and remakes the idea, or generates a realistic UGC-style clip of the product in use with Seedance 2.5 on varg from the product's own photos (a backyard-camera fail, a torture test, problem then solution, a satisfying close-up, a gift reaction), or the whole "The problem → Vs → The solution" music ad. Use when someone selling a product (dropshipping, Shopify, TikTok Shop, Amazon) asks for a viral hook, a scroll-stopper, a "TikTok made me buy it" clip, product b-roll that looks like real footage, or "a video of my product in use" made from product photos. Not for the full guide reel with the laptop and pen (use varg-dropship-reel, which calls this skill for its hook), talking-head UGC ads with an actor reading a script (find one with video-skills), or studio packshot spins (use varg-ai).TestingNo warnings★ 1.5K↓ —
- ads-creative-developmentrampstackco/claude-skillsHow to produce ad creative that converts at performance scale. Hook patterns, format selection, video pacing, variation systems, sequential testing methodology, fatigue detection, brand-voice alignment without conversion dilution, and platform-specific creative norms. Triggers on ad creative, ad design, hook patterns, ad video pacing, creative testing, ad variations, creative refresh, creative fatigue, refresh ad creative, video ads for Meta, TikTok creative, LinkedIn ad creative, ad asset library. Also triggers when a team is producing creative at scale, planning a creative test cycle, or auditing why creative is not converting.MarketingNo warnings★ 1K↓ —
- ai-model-webTencentCloudBase/CloudBase-AI-ToolkitUse this skill when a browser/Web app (React, Vue, Next, Nuxt, static sites, SPAs, dashboards, AI chat UI, 页面, 前端, 网页) needs AI models via @cloudbase/js-sdk. Default routing for Web/frontend AI — call directly from the browser, do NOT propose a Node.js proxy. Covers generateText and streamText; models via ai.createModel with groups cloudbase, the legacy hunyuan-v3 / hunyuan-exp, or custom-*, model id in the `model` field. MUST run two-step preflight before code — see body. NOT for Node.js backend (use ai-model-nodejs), Mini Program (use ai-model-wechat), or image generation (Node SDK only).DesignNo warnings★ 1.2K↓ —
- add-clidashnanocoai/nanoclawAdd clidash — a zero-dependency, read-only web dashboard that derives its tabs and tables at runtime from any CLI that lists resources as JSON. Ships pre-wired for NanoClaw's ncl CLI (agent groups, sessions, channels, users, roles), plus message-activity charts, a log tail, and a read-only file viewer for group skills/CLAUDE.md/profiles.EngineeringNo warnings★ 31.1K↓ —
- oma-scmfirst-fluke/oh-my-agentManage Git branches, merges, conflicts, commits, and release baselines. Use for repository history and change-management operations.EngineeringNo warnings★ 1.4K↓ —Also in 3 other repos
- content-brief-authoringrampstackco/claude-skillsHow to author a content brief that actually guides a writer (human or AI) to produce a piece that ranks, converts, or both. Per-piece editorial brief: target keyword and cluster, search intent, audience and JTBD, heading structure, entity coverage for AEO/GEO, internal linking strategy, success criteria. The middle path between thin briefs (a keyword and a deadline) and thick briefs (a 4-page document nobody reads). Triggers on content brief, brief the writer, brief the article, brief authoring, content brief template, brief audit, per-piece brief, editorial brief, target keyword brief, search intent brief. Also triggers when briefing a human writer or an AI agent on a single content piece.WritingNo warnings★ 1K↓ —
session-debug
hoangsonww/Claude-Code-Agent-Monitor
EngineeringUpdated 21 hours ago
From the author
Debug a specific session by inspecting its full event chain (PreToolUse, PostToolUse, Stop, SubagentStop, Compaction, APIError, TurnDuration, Notification events), agent hierarchy (recursive parent/child tree with subagent_type and depth), token usage with compaction baselines, workflow intelligence data (orchestration DAG, error propagation by depth), and session metadata (thinking_blocks, turn_count, total_turn_duration_ms).
Install
npx skills add hoangsonww/Claude-Code-Agent-Monitor --skill session-debug -a claude-code
Installs to .claude/skills/session-debug/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance77
Maintenance100
Licence100
Adoption49
Files (2)
- SKILL.md
- agents/openai.yaml