Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 7 hours ago
48,362 skills
- convex-backendCloudAI-X/claude-workflow-v2Convex backend development guidelines. Use when writing Convex functions, schemas, queries, mutations, actions, or any backend code in a Convex project. Triggers on tasks involving Convex database operations, real-time subscriptions, file storage, or serverless functions.DataNo warnings★ 1.4K↓ —
- chi-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted ACM CHI paper for publication — the TAPS source upload, the PCS publication-ready package, mandatory accessibility work (alt text, screen-reader-friendly PDFs, table headers), video previews, ACM's open-access model, e-rights, and registration deadlines.MediaNo warnings★ 1.4K↓ —
- research-audience-score-segment-qagooseworks-ai/goose-skillsStep of the research-audience playbook: scores and tiers list rows, groups them into segments with an angle each, runs the pre-handover checks and writes the list files. Run research-audience instead; not for direct use.TestingNo warnings★ 1.3K↓ —
- icml-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when stress-testing ICML experimental evidence before submission or rebuttal, including strong tuned baselines, mechanism-isolating ablations, seed variance and confidence intervals, compute disclosure, data leakage and split construction, reproducibility, negative results, and fit to ICML soundness, originality, and significance scoring.TestingNo warnings★ 1.4K↓ —
- run-taskhashgraph-online/awesome-codex-pluginsExecute a single Todo task through In Progress to Review, meeting every acceptance criterion with tests and vibe-lint checks. Refuses Planning-status tasks. Invoked as /agiflow:run-task <task>. Uses get_task, update_task, create_task_comment.ProductivityNo warnings★ 1.5K↓ —
- cav-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning a CAV (Computer Aided Verification) submission against the verification literature across CAV, TACAS, FMCAD, VMCAI, POPL/PLDI, and the journals (FMSD, JAR, TOCL, STTT), writing delta-first contrast rather than a citation catalog, crediting the right benchmark and tool lineages, keeping self-citations double-anonymous for the anonymized categories, and handling concurrent and prior-version overlap.WritingNo warnings★ 1.4K↓ —
- ad-creative-testingNewhashgraph-online/awesome-codex-pluginsTurn one winning ad into a creative testing plan for TikTok and Meta. Decodes why an ad won (hook, argument, buyer, format), plans concepts that Meta's Andromeda and TikTok treat as genuinely different (buyer × angle × format × first frame, not caption swaps), sets how many creatives to launch, the budget per test and when to judge, writes file and ad names that make results readable, reads hook rate, hold rate, CTR and CPA to find which part failed, and says when to kill, iterate or scale. Use when someone asks how many ads to test, how to make ad variants, why their variants all perform the same, whether an ad is fatigued, when to kill an ad, or how to scale a winner. NOT for producing the videos (use ecommerce-video-ads, ecommerce-video-edit or product-video-hooks) or for media-buying account setup.TestingNo warnings★ 1.5K↓ —
- analyzing-projectsCloudAI-X/claude-workflow-v2Analyzes codebases to understand structure, tech stack, patterns, and conventions. Use when onboarding to a new project, exploring unfamiliar code, or when asked "how does this work?" or "what's the architecture?"PlanningNo warnings★ 1.4K↓ —
- optimizing-performanceCloudAI-X/claude-workflow-v2Analyzes and optimizes application performance across frontend, backend, and database layers. Use when diagnosing slowness, improving load times, optimizing queries, reducing bundle size, or when asked about performance issues.DataNo warnings★ 1.4K↓ —
- planhashgraph-online/awesome-codex-pluginsUse after design approval for milestone plans with executable acceptance.PlanningNo warnings★ 1.5K↓ —
- os-say-simplekharmanskyi/open-stepsALWAYS invoke this skill when the user asks for simpler or shorter about something said or written - "say it simply", "what does this mean", "I don't understand your answer", "too long", "wait, what?", "bro" - in any language, about any text: your own answer, a report, a review comment, an error. "I don't understand what to DO" is os-step-by-step; this skill restates text. It restates for a reader who does not read code: leads with the point, keeps every number, warning and caveat - no facts added, no bad news dropped. A number returns exactly that many points, most important first.WritingNo warnings★ 1.3K↓ —
- atc-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing the ATC (ACM SIGOPS Annual Technical Conference, formerly USENIX ATC) camera-ready after a conditional accept — de-anonymizing systematically, folding in the shepherd's required revisions, permanentizing artifact links, completing ACM Open Access metadata and the transition APC, and passing production checks for the November Hong Kong proceedings.OtherNo warnings★ 1.4K↓ —
- cell-highlightsbrycewang-stanford/Awesome-Journal-SkillsUse to produce the three signature Cell front-matter artifacts — Highlights (3–4 bullets, each ≤85 characters), the eTOC/In Brief blurb (~50 words, third-person), and the Graphical Abstract (single-panel visual summary). Late-stage polish.ProductivityNo warnings★ 1.4K↓ —
- cikm-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a CIKM submission for EasyChair readiness across the five tracks, covering page budgets with appendices counted inside, the mandatory GenAI Usage Disclosure section, author-reviewer nomination, double-blind rules with arXiv declaration, the abstract-gate authorship freeze, and desk-reject triggers.ScienceNo warnings★ 1.4K↓ —
- gitnexushashgraph-online/awesome-codex-plugins将 GitNexus 作为受控可选代码智能能力接入,用于 brownfield MCP 查询、影响面分析、 detect_changes、多仓分析和更深代码图谱证据。输出必须回落到 `/team-*` 主链和 artifacts。OtherNo warnings★ 1.5K↓ —
- cvpr-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing the experimental program of a CVPR paper, covering benchmark and baseline selection under matched-compute fairness, the ablation study reviewers treat as mandatory, qualitative and failure-case evidence, efficiency metrics tied to the Compute Reporting Form, and generalization tests beyond a single dataset.TestingNo warnings★ 1.4K↓ —
- ap-scope-coordinatorSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-run-coordinator`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- asc-testflight-orchestrationrorkai/app-store-connect-cli-skillsOrchestrate TestFlight distribution, groups, testers, and What to Test notes using asc. Use when rolling out betas.TestingNo warnings★ 1.1K↓ —
- dac-writing-stylebrycewang-stanford/Awesome-Journal-SkillsUse when drafting or tightening the prose of an ACM/IEEE Design Automation Conference (DAC) Research Manuscript, covering the QoR-forward first-page arc, stating the design-automation contribution as a measured delta, fitting a complete argument into six double-column pages plus a references-only page, building column-width EDA figures, and third-person self-citation for double-blind review.WritingNo warnings★ 1.4K↓ —
- evalhashgraph-online/awesome-codex-pluginsEval-Driven Development (EDD) for AI workflows. pass@k metrics, capability evals, regression evals. Triggers: eval, edd, pass@k, capability, regression, benchmark.OtherNo warnings★ 1.5K↓ —
- asc-build-lifecyclerorkai/app-store-connect-cli-skillsTrack build processing, find latest builds, and clean up old builds with asc. Use when managing build retention or waiting on processing.OtherNo warnings★ 1.1K↓ —
- planning-with-filesOthmanAdi/planning-with-filesPersistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk; lifecycle hooks inject selected project planning context. Automatic recovery reads project planning files only. Explicit session-catchup.py --metadata reads same-project local agent session records and emits aggregate counts only; --replay may emit bounded nonce-framed excerpts. Optional gated mode can request continuation only when the host supports it and never runs commands declared in Markdown. The skill has no network upload path. Use for research or work needing 5+ tool calls.PlanningNo warnings★ 27.9K↓ —Also in 1 other repo
- asc-in-app-eventsrorkai/app-store-connect-cli-skillsCreate and localize App Store in-app events, upload event media, and submit or recover event review submissions with asc. Use when managing in-app events, event card or details page assets, or event-specific submission errors.PlanningNo warnings★ 1.1K↓ —
- reviewhashgraph-online/awesome-codex-pluginsUse before merge, after subagents, or for spec/plan review.EngineeringNo warnings★ 1.5K↓ —
senior-security
alirezarezvani/claude-skills
UpdatedSecurityUpdated 20 hours ago
From the author
Check if a design or code is secure: STRIDE threat model, DREAD risk scores, leaked secret scan. Use whenever the user asks what could be attacked, how risky a feature is, or to find exposed keys.
Install
npx skills add alirezarezvani/claude-skills --skill senior-security -a claude-code
Installs to .claude/skills/senior-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (6)
- SKILL.md
- references/cryptography-implementation.md
- references/security-architecture-patterns.md
- references/threat-modeling-guide.md
- scripts/secret_scanner.py
- scripts/threat_modeler.py