Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 4 hours ago
48,362 skills
- cloudbase-mcpUpdatedTencentCloudBase/CloudBase-AI-ToolkitCloudBase MCP reference. Use when connecting local or remote MCP, calling tools from the shell with mcporter, reading tool schemas, choosing the domestic or international endpoint, setting site, region, cloud mode, or plugin flags, or contributing a fix to the open-source MCP server, skills, or CLI.EngineeringNo warnings★ 1.2K↓ —Also in 5 other repos
- spec-workflowUpdatedTencentCloudBase/CloudBase-AI-ToolkitUse when medium-to-large changes need explicit requirements, technical design, and task planning before implementation, especially for multi-module work, unclear acceptance criteria, or architecture-heavy requests.PlanningNo warnings★ 1.2K↓ —Also in 5 other repos
- docs-workflowsTencentCloudBase/CloudBase-AI-ToolkitDocumentation and extension workflows derived from local slash commands (docs, explanation, issues, prototypes, tutorials, MCP design review).DesignNo warnings★ 1.2K↓ —
- writing-livekit-scenariosfcakyon/claude-codex-settingsCreates and maintains the scenarios a LiveKit agent simulation runs, and wires the agent to consume them. Use when the user asks "what should I test", "generate simulation scenarios", "write scenarios for my agent", "add a scenario for X", "organize my scenario files", "my simulations are flaky", "the scenario hits my real database", "seed state per scenario", "it passed but booked the wrong thing", "grade the final state", or wants to stress-test a flow before shipping. Covers generating a baseline with the LiveKit scenario generator and refining it, writing the cases generation misses, phrasing simulated-user instructions so they steer reliably, splitting scenarios into sets across files, and the agent-side code that seeds deterministic state from a scenario and fails a run on its final state. To run them use running-livekit-simulations.WritingNo warnings★ 1.2K↓ —Also in 1 other repo
- planning-with-filesOthmanAdi/planning-with-filesPersistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk; lifecycle hooks inject selected project planning context. Automatic recovery reads project planning files only. Explicit session-catchup.py --metadata reads same-project local agent session records and emits aggregate counts only; --replay may emit bounded nonce-framed excerpts. Optional gated mode can request continuation only when the host supports it and never runs commands declared in Markdown. The skill has no network upload path. Use for research or work needing 5+ tool calls.PlanningNo warnings★ 27.9K↓ —Also in 1 other repo
- threat-detectionalirezarezvani/claude-skillsUse when hunting threats, sweeping IOCs or looking for anomalies in logs and telemetry. Ranks ATT&CK-mapped signals and z-score anomalies with threat_signal_analyzer.py.OtherNo warnings★ 29.2K↓ —
- onboarding-croalirezarezvani/claude-skillsUse when activation, time-to-value or a first-run experience after signup needs work, before redesigning it. Finds the activation drop-off with activation_funnel_analyzer.py.MarketingNo warnings★ 29.2K↓ —
- durable-objectsfcakyon/claude-codex-settingsBuild, debug, or review Cloudflare Durable Objects code for persistent state and coordination.DevOpsNo warnings★ 1.2K↓ —
- app-authNewfcakyon/claude-codex-settingsThis skill should be used when the user asks to "standardize app authentication", "share login across web, mobile and TV", "reuse the Google login flow", "simplify signup", "fix password recovery", or "fix popup-blocked login". Use shared account/session contracts, email and Google web adapters, and an optional auth panel. Native and TV flows are integration contracts awaiting device validation.ProductivityNo warnings★ 1.2K↓ —
- cloudflare-onefcakyon/claude-codex-settingsDesign, configure, troubleshoot, or review Cloudflare One Zero Trust and SASE deployments. Use cloudflare-one-migrations for migration planning from other vendors.DevOpsNo warnings★ 1.2K↓ —
- openship-configfcakyon/claude-codex-settingsThis skill should be used when the user asks to "create openship.json", "configure an OpenShip deployment", "make a repo deployable on OpenShip", or fix "openship config validate" errors.DevOpsNo warnings★ 1.2K↓ —
- derive-clientfcakyon/claude-codex-settingsReverse-engineer a website's internal API by recording browser traffic into a HAR file, then generate a standalone client or CLI that calls the endpoints directly, with no browser needed after the first recording. Use when asked to "derive a client", "build a CLI for <site>", "reverse engineer this site's API", "record network requests", "turn this site into an API", or when the same site will be automated repeatedly and direct HTTP calls would beat driving the browser every time.BrowserNo warnings★ 1.2K↓ —
- tavily-usagefcakyon/claude-codex-settingsThis skill should be used when user asks to "search the web", "fetch content from URL", "extract page content", "use Tavily search", "scrape this website", "get information from this link", or "web search for X".BrowserNo warnings★ 1.2K↓ —
- gcloud-usagefcakyon/claude-codex-settingsThis skill should be used when user asks about "GCloud logs", "Cloud Logging queries", "Google Cloud metrics", "GCP observability", "trace analysis", or "debugging production issues on GCP".DevOpsNo warnings★ 1.2K↓ —
- supabasefcakyon/claude-codex-settingsUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); debugging and troubleshooting errors or unexpected behavior on Supabase projects (HTTP errors, Postgres errors, RLS surprises, permission denied, schema cache issues, timeouts, Edge Function crashes, Realtime drops, Storage failures) and reading or querying logs (Logs Explorer, ClickHouse).SecurityNo warnings★ 1.2K↓ —
- oma-translationNewfirst-fluke/oh-my-agentTranslate or revise localized UI strings and prose while preserving meaning, terminology, placeholders, and structure.DesignNo warnings★ 1.4K↓ —
- oma-tf-infraNewfirst-fluke/oh-my-agentCreate or review Terraform infrastructure and plans. Use for cloud resources, IAM, networking, state management, and infrastructure changes.DevOpsNo warnings★ 1.4K↓ —
- cloud-functionsUpdatedTencentCloudBase/CloudBase-AI-ToolkitCloudBase function runtime guide for building, deploying, and debugging your own Event Functions or HTTP Functions. This skill should be used when users need application runtime code on CloudBase, not when they are merely calling CloudBase official platform APIs.DevOpsNo warnings★ 1.2K↓ —Also in 5 other repos
- agentlasagentlas-ai/Agentlas-OSSingle entry point for every Agentlas command: /agentlas network, /agentlas build, /agentlas storm, /agentlas goal, /agentlas one, /agentlas upload, /agentlas cloud, /agentlas hub, /agentlas local, /agentlas browser, /agentlas call, /agentlas search, /agentlas login, /agentlas orch, /agentlas update.BrowserNo warnings★ 1.6K↓ —
- oma-pmfirst-fluke/oh-my-agentProduct manager that decomposes requirements into actionable tasks with priorities and dependencies. Use for planning, requirements, specification, scope, prioritization, task breakdown, and ISO 21500, ISO 31000, or ISO 38500-aligned planning recommendations.PlanningNo warnings★ 1.4K↓ —
- agentlasagentlas-ai/Agentlas-OSSingle entry point for every Agentlas command: /agentlas network, /agentlas build, /agentlas storm, /agentlas goal, /agentlas one, /agentlas upload, /agentlas cloud, /agentlas hub, /agentlas local, /agentlas browser, /agentlas call, /agentlas search.BrowserNo warnings★ 1.6K↓ —
- oma-voiceNewfirst-fluke/oh-my-agentGenerate or transcribe speech with Voicebox or VoiceStudio, or process existing audio locally. Use for narration, transcripts, timed speech, and loudness conversion; video editing uses oma-video.MediaNo warnings★ 1.4K↓ —
- oma-recapfirst-fluke/oh-my-agentSummarize AI conversation histories for a specified date or period. Use for daily work recaps and cross-tool activity summaries.PlanningNo warnings★ 1.4K↓ —Also in 1 other repo
- varg-unboxing-videoNewhashgraph-online/awesome-codex-pluginsTurns product photos into an unboxing or ASMR video ad on varg: hands-only, top-down or POV, the box tapped, opened and the product lifted out and switched on, with native ASMR sound (taps, crinkle, lid pop) and no music, in timed VISUAL / ACTION / SOUND blocks on Seedance 2.5 with the box and the product as references. Unboxing has the highest winner rate of any Meta ad format (9.8%, Motion 2026) while only 2.1% of ads use it. Use when a seller (TikTok Shop, Shopify, dropshipping, Amazon) asks for an unboxing video, an ASMR or satisfying product video, "open the box" content, a packaging reveal, or a hands-only product demo made from photos. Not for talking-head UGC (use ai-ugc-ad-video), the full 60 s guide reel (varg-dropship-reel) or a studio spin of the product alone (product-photo-to-video).MediaNo warnings★ 1.5K↓ —
tisax
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
SecurityUpdated Oct 10, 2026
From the author
Expert TISAX (Trusted Information Security Assessment Exchange) advisor for the automotive supply chain — the ENX/VDA assessment regime that OEMs like VW, BMW, and Mercedes-Benz require from suppliers and service providers. Covers the VDA ISA 6 catalogue (current through 2026) and the ISA2027 transition (published July 1, 2026; mandatory for assessments ordered from January 1, 2027), assessment levels AL1/AL2/AL3, all 12 assessment objectives/labels (Confidential, Strictly Confidential, High/Very High Availability, Proto Parts/Vehicles, Test Vehicles, Proto Events, Data, Special Data), maturity scoring (0–5, target 3, cutback rules), the ENX portal process, scoping, audit-provider selection, corrective action plans and the 9-month window, 3-year label validity, and ISO 27001 mapping. Use for any TISAX, VDA ISA, ENX, automotive information-security assessment, prototype protection, or OEM supplier-security requirement question — gap assessments, label selection, readiness, and audit prep.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill tisax -a claude-code
Installs to .claude/skills/tisax/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (5)
- SKILL.md
- references/assessment-process.md
- references/iso27001-mapping.md
- references/labels-and-levels.md
- references/vda-isa-catalogue.md