Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,105 skills from 2,358 repositories · updated 19 hours ago
48,055 skills
- compare-showshashgraph-online/awesome-codex-pluginsCompares two podcasts or YouTube shows side by side: size, latest episode, what each talks about, what both cover, and shared sponsors. Uses arcmira.OtherNo warnings★ 1.5K↓ —
- push-to-forked-prhoangsonww/Claude-Code-Agent-MonitorPush the current working tree directly to a GitHub PR whose head lives on a **fork**, without creating a new branch and without pushing to `origin` (which is usually the upstream). Invoke when the user says things like "push straight to PROtherNo warnings★ 1.1K↓ —Also in 2 other repos
- writing-skillsGanyuanRan/AegisUse when creating new skills, editing existing skills, or verifying skills work before deploymentWritingNo warnings★ 1.4K↓ —
- error-propagationhoangsonww/Claude-Code-Agent-MonitorTrace error propagation through a multi-agent session by agent depth — where failures originated, the depth at which they appeared, and how they cascaded up to parent agents — using the Agent Monitor workflow intelligence API and the session event stream. Use when a multi-agent run failed and you need to find the origin and blast radius of the failure.EngineeringNo warnings★ 1.1K↓ —
- oma-translationfirst-fluke/oh-my-agentTranslate or revise localized UI strings and prose while preserving meaning, terminology, placeholders, and structure.DesignNo warnings★ 1.4K↓ —Also in 1 other repo
- oma-brainstormfirst-fluke/oh-my-agentExplore goals, constraints, and alternative approaches before choosing a design. Use when the user requests ideation or design exploration.PlanningNo warnings★ 1.4K↓ —Also in 1 other repo
- minutes-graphsilverstein/minutesPolicy-safe relationship rankings, commitments, aliases, person profiles, and topic research. Always use Minutes' bounded native CLI surfaces; never build or read a durable graph cache.ScienceNo warnings★ 1.6K↓ —Also in 1 other repo
- logo-designrampstackco/claude-skillsGenerate logo variants for a brand, producing multiple production-grade marks across different architectures (wordmark, lockup, symbol-only, letterform-as-symbol, monogram) with rationale, application specs, and decision-ready presentation. Distinct from `brand-identity`, which produces the complete system (logo plus color, type, voice, applications). Goes deep on the logo specifically: typographic register, symbol approach, application-context discipline (16px favicon, embroidery, signage, motion), and production specs (SVG-ready, single-color, reverse). Triggers on logo design, design a logo, wordmark, monogram, lockup, mark variants, logo iterations, redesign or refine the logo, logo refresh, letterform-as-symbol, and exploring mark variants for an established brand. Does NOT fire for full brand identity (use `brand-identity`), positioning or strategy (use `brand-discovery`), project-wide creative direction (use `creative-direction`), or one-off illustration.DesignNo warnings★ 1K↓ —
- writing-plansGanyuanRan/AegisUse when you have an approved spec or written requirements for a multi-step task that needs a durable plan document before touching code. Small, single-owner, or fast-path tasks do not need this skill.WritingNo warnings★ 1.4K↓ —
- improve-architecturedaveebbelaar/bamaArchitecture check-in for a growing macOS Swift codebase. Finds hot spots, proposes deeper modules, and refactors one step per commit with behavior proven unchanged. Use at the end of a milestone, before a big feature, when a file passes 600 lines, when one feature touches many files, when bugs repeat in one area, or when the user asks to refactor or clean up the code.PlanningNo warnings★ 1.4K↓ —
- shipevo-hq/evoLand the winning experiment from an evo run as a clean, mergeable change -- open a PR when the repo has a remote, otherwise merge into the working branch. Distills the best-scoring experiment down to the minimal diff that reproduces its behaviour, shaped for the qualities a maintainer merges on (scope discipline, test integrity, style adherence), then attaches an advisory mergeability report. Use when the user invokes /evo:ship, asks to land/merge/ship the best result, or wants to turn a finished optimization into a pull request.TestingNo warnings★ 1.5K↓ —Also in 1 other repo
- hf-cloud-sagemaker-iam-preflighthuggingface/skillsEnsure a usable SageMaker execution role exists before deploying or training. Use this skill whenever about to create a SageMaker endpoint, model, training job, or any resource that requires an execution role. Use it especially when the user has not provided a role ARN explicitly, when scripts are about to call `iam:CreateRole`, or when an AccessDenied error mentions an IAM action. Never blindly call `iam:CreateRole` — always check for existing roles first. This skill prevents the most common SageMaker deployment failure: trying to create IAM resources from an SSO principal that has no IAM write permissions.OfficialDevOpsNo warnings★ 11.3K↓ —
- ap-roadmap-scoutSpielewoy/autoprompt-skillAnswer one named planning question with observations tied to the inspected sources; do not write or coordinate the roadmap.PlanningNo warnings★ 1.2K↓ —
- ap-goal-checkerSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- partnerships-architectalirezarezvani/claude-skillsUse when deciding whether to sign a partner, at which tier (referral, reseller, OEM, SI, alliance), with what joint GTM and revshare. Runs partner_tier_classifier.py, revshare_modeler.py and joint_gtm_planner.py.PlanningNo warnings★ 29.2K↓ —
- appllama-usageAppllama/appllama-skillsUse the Appllama MCP (mcp.appllama.io) well — research real top-grossing mobile apps, their screens, flows, and UI elements, then build from what you learn. Load when the Appllama MCP is connected and the task involves building a mobile app or screen, researching app design patterns, studying onboarding/paywall/feature flows, improving an existing screen, or whenever an appllama_* / search_apps / list_app_screens tool is available. Covers the tool map, pagination, expiring media, and the full build-from-research playbooks.DesignNo warnings★ 3.9K↓ —
- cloudflare-onefcakyon/claude-codex-settingsDesign, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.DevOpsNo warnings★ 1.2K↓ —
- codebase-auditTencentCloudBase/CloudBase-AI-ToolkitPerform a full codebase review, categorize findings by severity, file GitHub issues, then fix each issue in an isolated git worktree and submit PRs. Use this skill when the user asks to audit the codebase, do a comprehensive code review, find and fix security/quality/reliability issues, or run a proactive health check across the entire repository.SecurityNo warnings★ 1.2K↓ —
- render-flat-vector-explainergooseworks-ai/goose-skillsAssemble the FREE steps of the flat-vector-explainer video format — a flat-illustration host character (who, where, tone, voice and music come from the recipe choices) walks a countable N-step product routine, one step per beat, and Remotion composites every chip/numeral/tagline/slate/CTA as an animated DOM overlay ON TOP of the Kling i2v character clips (text is NEVER baked into a keyframe — i2v warps type), the closing 'N products' grid is a PIL composite of the REAL product photos (not AI), full-sentence VO drives word-by-word burned captions over a VO-forward music bed, and the ~50s animated silent master is re-cut to a 30s deliverable FROM the animated master (never a static intermediate). Documentation-grade — ships config.example.json + PIPELINE.md + a README of the free assembly; the paid gen steps (keyframes, Kling i2v, VO, music) are separate capabilities the recipe orchestrates. Use for the flat-vector-explainer format.MediaNo warnings★ 1.3K↓ —
- second-brain-queryundefined-ui/second-brain-osAnswer a question from a second-brain vault by reading its own pages, citing the pages used, and saying plainly when the vault does not contain the answer. Use this skill whenever the user asks what they know about a topic, what they have read on something, what connects two ideas, what they have changed their mind about, or asks any question that should be answered from their own notes rather than general knowledge. Do NOT use for ingesting new material, for general questions the vault has nothing to do with, or when the user explicitly wants an answer from the open web.ProductivityNo warnings★ 1.2K↓ —
- ap-depth-proberSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-worker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- second-brain-mergeundefined-ui/second-brain-osMerge two pages that describe the same thing, preserving every distinct claim, redirecting inbound links, and recording the merge. Use this skill when the user approves a duplicate merge, says "these are the same page", "merge X into Y", or asks to clean up near-duplicates that a lint run proposed. Do NOT use to merge pages on your own judgement, to delete a page outright, or to split one page into several.OtherNo warnings★ 1.2K↓ —
- ap-synthesizerSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-roadmap-author`; this retired role cannot perform new work.PlanningNo warnings★ 1.2K↓ —
- open-wrap-urlmicrosoft/power-platform-skillsUse when the user wants to open the Power Apps Wrap page for an app ID in the active environment.OtherNo warnings★ 1.1K↓ —
oma-security
first-fluke/oh-my-agent
From the author
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.
Install
npx skills add first-fluke/oh-my-agent --skill oma-security -a claude-code
Installs to .claude/skills/oma-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 88
Files (12)
- SKILL.md
- resources/artex.md
- resources/ci.md
- resources/cisco-source.md
- resources/deepsec-config.md
- resources/deepsec-matchers.md
- resources/deepsec-scanning.md
- resources/deepsec-setup.md
- resources/findings-contract.md
- resources/mcp-scanning.md
- resources/skill-scanning.md
- resources/validation.md