Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 3 hours ago
48,362 skills
- cyber-essentialsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update rule, mandatory MFA for cloud services and the new auto-fail questions, CE Plus technical audits, pricing, annual renewal, the included cyber liability insurance, and procurement mandates (PPN 014, MoD Defence Cyber Certification, NHS). Use this skill whenever a user mentions Cyber Essentials, CE Plus, IASME, the UK government cyber certification, Danzell or Willow question sets, UK public-sector or MoD supply-chain security requirements, or wants a readiness gap assessment.SecurityNo warnings★ 1K↓ —
- cis-controlsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.SecurityNo warnings★ 1K↓ —
- ap-scribeSpielewoy/autoprompt-skillReport the compatibility redirect to `C0`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- transcript-intelligencegooseworks-ai/goose-skillsTurn TikTok, Instagram, YouTube, Facebook, X, LinkedIn, Reddit, or Rumble transcripts into timestamped hooks, claims, objections, proof, calls to action, sponsorship signals, and reusable content atoms. Use directly for transcript analysis or as support for creator, competitor, trend, demand, and repurposing work.MarketingNo warnings★ 1.3K↓ —
- raci-matrixmohitagw15856/pm-claude-skillsDefine a RACI matrix for a cross-functional project or process. Use when asked to build a RACI, create a responsibility matrix, clarify ownership across teams, or document decision rights. Produces a complete RACI matrix with role definitions, decision mapping, and a process for resolving conflicts.OtherNo warnings★ 1.5K↓ —
- ad-lead-quality-analyzergooseworks-ai/goose-skillsFor paid lead-gen and participant-recruitment ads, replaces vanity CPA with true CAC per qualified lead by joining ad-platform data with downstream funnel events, surfaces tracking gaps, and classifies every creative into Scale / Keep / Investigate / Cut.MarketingNo warnings★ 1.3K↓ —
- mcp-audithoangsonww/Claude-Code-Agent-MonitorAudit the configured MCP servers (user + project scope) via the Agent Monitor Config Explorer API: transport (stdio vs http), command/args and env variable names, headers, and the source file each definition came from. Reads /api/cc-config/mcp. Use when reviewing MCP integrations for hygiene, duplication, or unexpected transports.EngineeringNo warnings★ 1.1K↓ —
- hep-cloudagentlas-ai/Agentlas-OSStaff a task only from the signed-in owner's Agent Cloud agents.ProductivityNo warnings★ 1.6K↓ —
- cwd-rolluphoangsonww/Claude-Code-Agent-MonitorRoll up Claude Code sessions by working directory (project) from Agent Monitor data — session count, total cost, total tokens, and last-active timestamp per cwd — so per-project activity can be compared at a glance. Use when summarizing where effort and spend went across projects.EngineeringNo warnings★ 1.1K↓ —
- push-to-forked-prhoangsonww/Claude-Code-Agent-MonitorPush the current working tree directly to a GitHub PR whose head lives on a **fork**, without creating a new branch and without pushing to `origin` (which is usually the upstream). Invoke when the user says things like "push straight to PROtherNo warnings★ 1.1K↓ —Also in 2 other repos
- valid-skillfirst-fluke/oh-my-agentA minimal, fully spec-conformant fixture skill used to exercise the happy path.PlanningNo warnings★ 1.4K↓ —
- verify-login-logoutreticlehq/reticleProve sign-in lands the user where they should be, sign-out really ends the session so a protected page sends them back to sign in, and an expired session asks to sign in again instead of breaking. Use when auth, a login form, a logout button, route guards or token refresh were added or changed, or when a user reports being logged out, or not logged out, unexpectedly.OtherNo warnings★ 1.3K↓ —
- analyze-performance-intakegooseworks-ai/goose-skillsStep of the analyze-performance playbook: gathers the week's numbers from tools, exports and pastes, cleans them, and writes the coverage line or switches to claims-only mode. Run analyze-performance instead; not for direct use.WritingNo warnings★ 1.3K↓ —
- cvpr-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a CVPR submission before the OpenReview deadline, covering abstract registration and profile requirements, the 8-page limit including figures and tables, the Compute Reporting Form, anonymity and external-link bans, dual-submission attestations, reviewer-duty enrollment, and desk-reject triage.PlanningNo warnings★ 1.4K↓ —
- atc-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when writing or auditing the related-work and positioning of an ATC (ACM SIGOPS Annual Technical Conference, formerly USENIX ATC) systems paper — covering the systems literature lanes, positioning against OSDI/SOSP/NSDI/EuroSys/FAST, writing delta-first comparisons, and keeping self-citation double-blind.ScienceNo warnings★ 1.4K↓ —
- fse-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning an ESEC/FSE submission against the software-engineering literature across ICSE, FSE, ASE, ISSTA, MSR, and the SE journals (EMSE, TSE, TOSEM), writing delta-first contrast rather than a citation catalog, keeping self-citations double-anonymous, and handling concurrent, preprint, and prior-version overlap.WritingNo warnings★ 1.4K↓ —
- render-vo-anchored-motion-listiclegooseworks-ai/goose-skillsAssemble a narrated motion-graphic listicle video ad from a config: a voiceover (cloned or cast, in the chosen tone) reads a numbered list while N animated web-graphic beats in one branded design system (alternating tiles, big numerals, callouts) are rendered frame by frame and timed to the voiceover's words. Optional B-roll windows (a brand clip, an AI clip or a motion graphic) give the eye a break, and captions appear only inside those windows, with the voiceover mixed over a low music bed. Free, deterministic assembly; the voiceover, music and any AI clips come from create-vo-elevenlabs, create-music-elevenlabs and create-video-fal. Use for the vo-anchored-motion-listicle format.MediaNo warnings★ 1.3K↓ —
- data-exporthoangsonww/Claude-Code-Agent-MonitorExport Claude Code session and analytics data in JSON, CSV, or Markdown formats. Supports exporting sessions, events, costs, and analytics for external analysis or reporting. Use for data backup or integration.DataNo warnings★ 1.1K↓ —
- make-static-ads-graphic-requestgooseworks-ai/goose-skillsMakes one simple non-ad brand graphic, such as an email header, social feed or story image, or a blog or link-preview image, in the brand's style with at most a short line of text, after claim and rights checks and a yes to the quote; returns the link and alt text. Not for carousels, decks or print. Use alone when you already have the purpose, placement and exact wording; otherwise run make-static-ads.MarketingNo warnings★ 1.3K↓ —
- wsdm-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a WSDM submission before the August deadlines - EasyChair setup, the abstract-then-paper week, the appendix-inclusive page budget, the required ethical-considerations section, anonymization that survives Associate-Chair metadata visibility, and desk-reject exposure at a no-rebuttal venue.ScienceNo warnings★ 1.4K↓ —
- vis-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted IEEE VIS paper for its IEEE TVCG camera-ready, covering de-anonymization, the VGTC/TVCG template and journal metadata (DOI, ORCID, IEEE keywords/index terms), integrating the second-round required changes without scope creep, permanentizing open-materials links, the Open Practices disclosure form, and the Graphics Replicability Stamp handoff.ScienceNo warnings★ 1.4K↓ —
- live-watchhoangsonww/Claude-Code-Agent-MonitorPolls the Agent Monitor /api/stats endpoint several times over a short window and reports the live deltas in active_sessions, active_agents, events_today, and ws_connections so you can see activity moving in real time. Use when watching the dashboard for live changes rather than a one-time snapshot.EngineeringNo warnings★ 1.1K↓ —
- uai-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when converting an accepted UAI paper into its PMLR proceedings version, covering de-anonymization, final formatting against the UAI template, metadata for the PMLR volume, restoring public code and data links, poster and spotlight preparation for the conference, and sequencing work back from the camera-ready deadline.ScienceNo warnings★ 1.4K↓ —
- make-static-ads-find-referencesgooseworks-ai/goose-skillsStep of make-static-ads: picks a template for every ad in its chosen style, after its visual idea and style are set, from the brand's own ads, the GooseWorks library or category leaders, and records what the chosen creativity level keeps from it. Run make-static-ads instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
dependency-auditor
alirezarezvani/claude-skills
UpdatedSecurityUpdated 16 hours ago
From the author
Audit project dependencies for CVEs and licenses and plan safe upgrades. Use whenever the user asks if their packages are safe, before a release or major version bump, while chasing a CVE, or for a license review.
Install
npx skills add alirezarezvani/claude-skills --skill dependency-auditor -a claude-code
Installs to .claude/skills/dependency-auditor/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (16)
- README.md
- SKILL.md
- assets/sample_go.mod
- assets/sample_package.json
- assets/sample_requirements.txt
- expected_outputs/sample_license_report.txt
- expected_outputs/sample_upgrade_plan.txt
- expected_outputs/sample_vulnerability_report.json
- references/dependency_management_best_practices.md
- references/license_compatibility_matrix.md
- references/vulnerability_assessment_guide.md
- scripts/dep_scanner.py
- +4 more