Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 2 hours ago
48,362 skills
- generate-ppmpluginmicrosoft/power-platform-skillsBuild and verify a third-party `.ppmplugin` end to end. This recommended entry point detects Android and iOS source, confirms target platforms, then invokes the manifest, platform build, assemble, and audit stages in order. Advanced users can invoke a stage directly for focused reruns or debugging. Produces a native-only bundle (`manifest.json` plus an Android DEX and/or iOS framework) and stops on any failed stage rather than emitting an unverified partial build. Run after the native module exists.EngineeringNo warnings★ 1.1K↓ —
- terms-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Terms Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Terms Page.OtherNo warnings★ 1.1K↓ —
- influencer-prospectingScrapeCreators/social-media-research-skillsUse when the user wants to find creators, influencers, affiliates, or social accounts in a niche for outreach, partnerships, sponsorships, UGC, seeding, or competitive research. Produces scored prospect lists from public social data.ScienceNo warnings★ 5.4K↓ —
- youtube-playlistZeroPointRepo/youtube-skillsUse when a YouTube playlist is involved: pasted playlist links or IDs, requests to list playlist videos, browse playlist contents, or work through a playlist for transcripts or research. Also use when the user wants all videos from a series, course, or collection. Not for creating playlists or account management.ScienceNo warnings★ 1.2K↓ —
- decision-loggeralirezarezvani/claude-skillsUse when logging a decision after a board meeting, reviewing past decisions or checking overdue actions. Keeps raw transcripts and approved decisions separately with decision_tracker.py.OtherNo warnings★ 29.2K↓ —
- brooks-reviewhyhmrright/brooks-lintPR code review that surfaces decay risks, design smells, and maintainability issues with concrete Symptom → Source → Consequence → Remedy findings, drawing on twelve classic engineering books. Triggers when: user asks to review code, check a PR, shares a diff or pastes code asking "does this look right?" / "any issues here?" / "ready to merge?", or asks for feedback on a function, class, or file. Also triggers when user mentions: code smells / refactoring / clean architecture / DDD / SOLID principles / Hyrum's Law / deep modules / tactical programming / conceptual integrity / Brooks's Law / Mythical Man-Month / second system effect. Do NOT trigger for: questions about how to write code from scratch, language syntax questions, or framework/tool questions where no existing code is shared.EngineeringNo warnings★ 1.6K↓ —
- ad-library-teardownScrapeCreators/social-media-research-skillsUse when the user wants to analyze active ads from Meta/Facebook, Google, or LinkedIn ad libraries; tear down a competitor's messaging; extract hooks, offers, CTAs, video transcripts, landing page claims, and test ideas from public ads.MarketingNo warnings★ 5.4K↓ —
- senior-frontendUpdatedalirezarezvani/claude-skillsBuild and review React, Next.js, TypeScript or Tailwind frontends: components, scaffolding, performance and bundle size. Use whenever the user wants a new component or app, a page feels slow, the bundle is too big, or asks for a frontend code review.DesignNo warnings★ 29.2K↓ —
- tdd-guideUpdatedalirezarezvani/claude-skillsTest-first development and test generation for Jest, Pytest, JUnit, Vitest or Mocha: red-green-refactor, fixtures and mocks, coverage gaps. Use whenever the user asks to write tests (before or after the code), mock a dependency or raise coverage.TestingNo warnings★ 29.2K↓ —
- senior-architectUpdatedalirezarezvani/claude-skillsMake system architecture decisions and draw architecture diagrams: monolith vs microservices, database choice, scalability, ADRs, design reviews, Mermaid or PlantUML. Use whenever the user asks how to structure a system, which database to pick, whether it will scale, or wants an ADR or diagram.PlanningNo warnings★ 29.2K↓ —
- code-review-assistantalibaba/skill-upTriggered when the user submits code or requests a code review. Automatically analyzes code quality, identifies potential bugs, security vulnerabilities, and performance issues, and provides improvement suggestions. Trigger phrases include "take a look at this code", "review this", "is there a problem with this function".EngineeringNo warnings★ 1.4K↓ —
- content-repurposingScrapeCreators/social-media-research-skillsUse when the user wants to turn public social videos, transcripts, posts, or creator research into reusable content assets such as LinkedIn posts, X threads, short-form scripts, newsletters, blog outlines, carousels, or content calendars.ScienceNo warnings★ 5.4K↓ —
- officehashgraph-online/awesome-codex-pluginsRun a Homie studio's live games from its back office - who is playing right now in every room (players, bots, round, uptime), announce a line to players in-game, kick or mute a player, close a room, set players per room, and each game's launch state (private, invite-only beta with invite links and codes, public). The owner confirms anything that takes something away with one tap. Use when someone asks who is playing, wants to talk to their players, remove or silence a player, run a closed or invite-only beta, hide or launch a game, make invite codes, or run the studio's Lounge (its community room, with play nights, moderators and kept chat).OtherNo warnings★ 1.5K↓ —
- oma-pdffirst-fluke/oh-my-agentConvert PDF files to Markdown using opendataloader-pdf. Extracts text, tables, headings, lists, and images with correct reading order. Use for PDF parsing, PDF to Markdown conversion, document extraction, and AI-ready data preparation.DocumentsNo warnings★ 1.4K↓ —
- make-static-ads-find-referencesgooseworks-ai/goose-skillsStep of make-static-ads: picks a template for every ad in its chosen style, after its visual idea and style are set, from the brand's own ads, the GooseWorks library or category leaders, and records what the chosen creativity level keeps from it. Run make-static-ads instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- agentlas-buildagentlas-ai/Agentlas-OSBuild, repair, or package Agentlas agents and teams with Hephaestus.OtherNo warnings★ 1.6K↓ —
- valaxy-themeYunYouJun/valaxyCreate or evolve a runnable Valaxy theme from a design brief, reference site, or UI library. Use for valaxy-theme-* packages, AI theme generation, theme starter customization, or adapting AK UI to a Valaxy blog. Covers theme contracts, demo content, packaging, SSR and browser verification. Use the general valaxy Skill for site configuration or article editing without theme development.DesignNo warnings★ 1.1K↓ —
- wsdm-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning the calendar for a WSDM submission - the single annual cycle from August abstract and paper deadlines through October notification to the February conference, backward milestone planning, the September short-paper fallback, alternate entrances (demos, WSDM Cup, doctoral consortium), and coordination with sibling-venue deadlines.ProductivityNo warnings★ 1.4K↓ —
- analyze-driversmicrosoft/power-platform-skillsUse when seeking explanatory attributes or hypotheses for differences in process duration, waiting, utilization or rework.OtherNo warnings★ 1.1K↓ —
- linkedin-postskostja94/marketing-skillsWhen the user wants to create LinkedIn post copy or optimize for LinkedIn. Also use when the user mentions "LinkedIn post," "LinkedIn article," "professional post," "post to LinkedIn," "LinkedIn content," "LinkedIn copy," "B2B LinkedIn," "LinkedIn engagement," "LinkedIn feed," "share box," "document post," "poll," "Newsletter," "reshare," or "LinkedIn marketing." For LinkedIn ads, use linkedin-ads.MarketingNo warnings★ 1.1K↓ —
- cpp-testinghashgraph-online/awesome-codex-pluginsUse only when writing/updating/fixing C++ tests, configuring GoogleTest/CTest, diagnosing failing or flaky tests, or adding coverage/sanitizers.TestingNo warnings★ 1.5K↓ —
- goal-testundefined-ui/second-brain-osTurn a vague task into a testable definition of done and generate an executable goal-test script for it, optionally with a bounded retry loop around a headless agent. Use when the user wants to run an agent in a loop, asks how to know when an agent task is finished, or says a goal like "improve X" needs to become checkable. Do NOT use for building eval suites over many cases — that is evals-bootstrap.TestingNo warnings★ 1.2K↓ —
- mcp-serverhoangsonww/Claude-Code-Agent-MonitorConfigure, launch, validate, and troubleshoot CCAM's comprehensive MCP server for Claude Code, Codex, and other MCP hosts. Use when installing dependencies, building the server, selecting stdio, HTTP, or REPL transport, setting mutation/destructive policy, supplying dashboard authentication, or checking complete tool registration.EngineeringNo warnings★ 1.1K↓ —
- brooks-harnesshyhmrright/brooks-lintMaintenance orchestrator for the brooks-lint plugin itself. Runs a sequential subagent pipeline — author → eval → QA → trigger-audit → release — to add or edit a skill, refresh the eval suite, keep the four manifests + all README translations + CHANGELOG + AGENTS/GEMINI in sync, audit trigger boundaries, and cut releases. Drives the five agents in .claude/agents/ (skill-author, eval-curator, consistency-qa, trigger-boundary-auditor, release-manager). Triggers when the maintainer asks to work ON brooks-lint itself: "add a new skill", "edit the brooks-debt guide", "update the eval suite", "fix the trigger descriptions", "make this change and validate it", "release brooks-lint", "bump and publish", and follow-ups: "re-run", "re-validate", "update that skill", "redo the audit", "do the X part again". Do NOT trigger for: USING the brooks-lint analysis skills on some target codebase (that's brooks-review / brooks-audit / brooks-debt / brooks-test / brooks-health / brooks-sweep); generic questions about brooks-lint TestingNo warnings★ 1.6K↓ —
senior-secops
alirezarezvani/claude-skills
UpdatedSecurityUpdated 15 hours ago
From the author
Find and fix application security problems: security reviews, CVE remediation, hardening, secrets and auth, SOC 2, PCI-DSS, HIPAA and GDPR checks. Use whenever the user asks if their app is secure, needs to patch a vulnerable dependency or prepares for an audit.
Install
npx skills add alirezarezvani/claude-skills --skill senior-secops -a claude-code
Installs to .claude/skills/senior-secops/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (7)
- SKILL.md
- references/compliance_requirements.md
- references/security_standards.md
- references/vulnerability_management_guide.md
- scripts/compliance_checker.py
- scripts/security_scanner.py
- scripts/vulnerability_assessor.py