Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,352 skills from 2,375 repositories · updated 25 minutes ago
48,303 skills
- relational-database-web-cloudbaseTencentCloudBase/CloudBase-AI-Toolkit[Deprecated] Existing CloudBase MySQL Web SDK only. Do not recommend MySQL for new relational apps — use postgresql-development and app.rdb(). Read this only when a browser app must keep using @cloudbase/js-sdk against an environment that already has MySQL.DataNo warnings★ 1.2K↓ —Also in 5 other repos
- mood-boosteralibaba/skill-upTriggered when the user expresses boredom, low mood, frustration, irritation, or a need to relax. Responds with warm words of comfort and tells a joke to lighten the atmosphere. Trigger phrases include "I'm so bored", "feeling down", "so frustrated", "gloomy", "not happy", "I'm tired".OtherNo warnings★ 1.4K↓ —
- colm-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a COLM submission campaign across the calendar — working backward from the late-March abstract and paper deadlines through the May-June rebuttal, July decisions, August camera-ready, and October conference, coordinating co-authors, compute, and reciprocal-reviewing duties, and slotting COLM into a multi-venue LM-research pipeline.ProductivityNo warnings★ 1.4K↓ —
- create-flowmicrosoft/power-platform-skillsGuided flow creation wizard. Use when the user wants to create a new flow interactively. Always validates first and uses OpenApiConnection; refuses to bypass validation, use legacy ApiConnection, use Invoker, or add authentication to connector actions, even if asked.OtherNo warnings★ 1.1K↓ —
- figma-generate-designopenai/skillsUse this skill alongside figma-use when the task involves translating an application page, view, or multi-section layout into Figma. Triggers: 'write to Figma', 'create in Figma from code', 'push page to Figma', 'take this app/page and build it in Figma', 'create a screen', 'build a landing page in Figma', 'update the Figma screen to match code'. This is the preferred workflow skill whenever the user wants to build or update a full page, screen, or view in Figma from code or a description. Discovers design system components, variables, and styles via search_design_system, imports them, and assembles screens incrementally section-by-section using design system tokens instead of hardcoded values.OfficialDesignNo warnings★ 28.5K↓ —
- connect-required-verification-informationfcakyon/claude-codex-settingsUse this skill when the user asks what information a Stripe Connect connected account must provide for verification, onboarding, KYC, or account requirements; when they need to compare requirements between connected-account setups; or when they ask which verification fields, documents, or business details are required for a particular platform country, account country, business type, dashboard, service agreement, or capability.PlanningNo warnings★ 1.2K↓ —
- corl-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CoRL submission cycle end to end — the late-May abstract and paper deadlines, the summer review window, first-round rejection risk, the August one-page rebuttal and discussion period, autumn decisions, the October PMLR camera-ready, and the November conference — including what to do between milestones.ProductivityNo warnings★ 1.4K↓ —
- publish-pcf-companionmicrosoft/power-platform-skillsDeploy the dispatcher PCF for a third-party `.ppmplugin` control to a Power Platform environment via `pac pcf push`. The dispatcher PCF is the Studio-side control that dispatches the composite key `<name>/<receiver>` over the wrap shell's `SendMessagePlugin` bridge to the control's native module. Verifies deploy prereqs (Node.js 20+ with npm, .NET SDK, and active `pac auth`), then three confirmation gates — publisher prefix (2–8 chars; defaults to `pamext` or the last-used value from `.extension-state.md`), version bump (patch / minor / major / no-bump), target environment URL (from `pac org who`). Builds the PCF if needed, then pushes. Decoupled from /generate-pcf-companion so the engineer can scaffold and customize locally, then deploy when ready. Updates `.extension-state.md` with deployment history (timestamp, env URL, version, prefix used).DevOpsNo warnings★ 1.1K↓ —
- title-designNewhashgraph-online/awesome-codex-pluginsNine title templates with broadcast-grade presets: name and place lower thirds, speaker plates (two-line, ticker, caption bar, title card, corner tag), a podcast or show open, headline write-on reveals, a channel bumper animated on twos, CRT scanline, chrome echo melt and block-glitch title reveals. Presets give hold time from word count, safe areas for 16:9 and 9:16, type scale by frame height, tracking, plate opacity and enter/exit easing, from Netflix and BBC timing rules, EBU safe areas, Material motion, School of Motion, Art of the Title and the Spider-Verse animators. Use when a video needs a lower third, a name or location super, an intro title, a chapter card or a glitch/CRT/chrome text reveal. NOT for subtitles (use caption-styles) or logo animation of a brand mark.DesignNo warnings★ 1.5K↓ —
- sdd-riperalibaba/skill-upSDD-RIPER workflow executor with phase gatingProductivityNo warnings★ 1.4K↓ —
- agentlas-graphagentlas-ai/Agentlas-OSUse when the user types /agentlas-graph, /agentlas graph, or /hep-graph to create, list, inspect, or run Agentlas automation graphs.OtherNo warnings★ 1.6K↓ —Also in 1 other repo
- minutes-debriefsilverstein/minutesPost-meeting debrief — analyzes what happened, compares outcomes to your prep intentions, tracks decision evolution. Use when the user says "debrief", "what just happened in that meeting", "what did we decide", "debrief that call", "post-meeting", "what changed", or right after stopping a recording.OtherNo warnings★ 1.6K↓ —Also in 1 other repo
- debughashgraph-online/awesome-codex-pluginsUse for bugs, unexpected behavior, regressions, or failing tests you did not write.EngineeringNo warnings★ 1.5K↓ —
- designhashgraph-online/awesome-codex-pluginsUse for UI, UX, visual hierarchy, frontend-design judgment, references, redesigns, and design critique when the user's Emulo taste should guide the task. Do not use for unrelated execution or marketing/social writing alone.DesignNo warnings★ 1.5K↓ —Also in 2 other repos
- code-quality-revieweralibaba/skill-upReviews code and provides detailed quality assessmentEngineeringNo warnings★ 1.4K↓ —
- hep-buildagentlas-ai/Agentlas-OSBuild, repair, or package Agentlas agents and teams with Hephaestus.OtherNo warnings★ 1.6K↓ —
- mcp-mocked-markeralibaba/skill-upMCP mocked marker smoke skill used by skill-up e2e tests.TestingNo warnings★ 1.4K↓ —
- report-issuemicrosoft/power-platform-skillsUse this skill when the user wants to "report a bug", "file an issue", "report an issue", "submit a bug report", or report any problem with the canvas-apps plugin to the GitHub repository.OtherNo warnings★ 1.1K↓ —
- mariadb-operator-release-notesmariadb-operator/mariadb-operatorCreate the release notes and upgrade guide for a mariadb-operator release. Given the release PR whose body lists every PR included in the release, it gathers each PR, groups the changes by relevance, and produces `docs/releases/RELEASE_<version>_HEADER.md.gotmpl` and `docs/releases/UPGRADE_<version>.md` in the format the previous releases use, then opens a PR targeting `release-<version>`. If no release PR is provided it asks for the new version and infers the changes from git history since the last tag. Use whenever the user wants release notes, an upgrade/update guide, or docs for a new mariadb-operator version — "create the release notes for 26.10.0", "write the upgrade guide", "document this release", "prepare the release PR docs" — even if they don't mention a release PR.ProductivityNo warnings★ 1K↓ —
- redis-securityredis/agent-skillsRedis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules, and disabling dangerous commands. Use when deploying Redis to production, defining ACL users for an application, configuring TLS connections, locking down a Redis instance behind a firewall, or auditing a Redis deployment for security hardening.OfficialSecurityNo warnings★ 172↓ —Also in 1 other repo
- pinme-llmglitternetwork/pinmeUse this skill when a PinMe project (Worker TypeScript) needs to call OpenRouter-backed LLM APIs, including models, chat/completions, streaming, or OpenRouter web search. Guides AI to generate correct Worker TS code.EngineeringNo warnings★ 3.8K↓ —
- scrapecreators-apigooseworks-ai/goose-skillsProvider reference for collecting public profiles, posts, comments, transcripts, trends, and ad-library data from major social platforms through ScrapeCreators. Use as a dependency of research workflows, not as the final user-facing deliverable.BrowserNo warnings★ 1.3K↓ —
- loop-engineeringhuytieu/COG-second-brainShared loop-engineering reference for COG skills - the agent loop, deterministic verifiers, termination conditions, in-loop context management, and named patterns. Invoke when designing or debugging a skill that iterates (search-verify-retry, scan-until-dry, fetch-retry-gate).EngineeringNo warnings★ 1.3K↓ —
- fixhashgraph-online/awesome-codex-pluginsWhen explicitly invoked with a software defect or unwanted behavior, translate the natural-language report and repository evidence into one compact repair contract, explain it plainly, then fix it in one approved shot. Never invoke implicitly.LegalNo warnings★ 1.5K↓ —
pentest-report
mohitagw15856/pm-claude-skills
SecurityUpdated 2 hours ago
From the author
Write a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.
Install
npx skills add mohitagw15856/pm-claude-skills --skill pentest-report -a claude-code
Installs to .claude/skills/pentest-report/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (1)
- SKILL.md