Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 13 hours ago
48,362 skills
- senior-secopsalirezarezvani/claude-skillsFind and fix application security problems: security reviews, CVE remediation, hardening, secrets and auth, SOC 2, PCI-DSS, HIPAA and GDPR checks. Use whenever the user asks if their app is secure, needs to patch a vulnerable dependency or prepares for an audit.SecurityNo warnings★ 29.2K↓ —
- browser-automationalirezarezvani/claude-skillsAutomate a browser: scrape websites, fill forms, pull structured data from web pages. Use whenever the user wants to grab data from a site, fill a web form or extract a table. Browser testing: playwright-pro.BrowserNo warnings★ 29.2K↓ —
- changelog-generatoralirezarezvani/claude-skillsWrite release notes and CHANGELOG.md from commits and pick the next semver version. Use whenever the user is cutting a release, asks what changed since the last one or what version comes next, or wants commits linted first.WritingNo warnings★ 29.2K↓ —
- jira-expertalirezarezvani/claude-skillsJira setup and queries: JQL, workflows, custom fields, automation, dashboards. Use whenever the user needs a Jira search, filter, dashboard or rule set up, or a workflow fixed.ProductivityNo warnings★ 29.2K↓ —
- ecommerce-video-adsNewhashgraph-online/awesome-codex-pluginsEcommerce video ad skills for Claude Code and AI agents: plans and makes short product videos that sell on TikTok, TikTok Shop, Instagram Reels and Meta ads, with AI or real footage. Asks the four questions that change the rules (where it runs, product facts, assets, budget), picks angle, hook, format and on-camera character, writes a second-by-second script, keeps the real product identical in AI shots, applies platform rules (AI labels, TikTok Shop bans on AI voices, slideshows and price mentions, the FTC fake-testimonial rule, music licensing), quotes cost before generating and plans different-concept variants. Use when someone wants a viral TikTok, Reels or TikTok Shop video for a product, ecommerce ad creatives or "10 ads for my product". Hands off to product-video-hooks, tiktok-shop-video, ai-ugc-ad-video, product-photo-to-video, ad-creative-testing and ecommerce-video-edit. NOT for app launch videos, music videos or brand films with nothing to sell.MediaNo warnings★ 1.5K↓ —
- inithashgraph-online/awesome-codex-pluginsInitialize team config for a project. Creates .agenteam/config.yaml (or legacy agenteam.yaml) and generates .codex/agents/*.toml.OtherNo warnings★ 1.5K↓ —
- code-revieweralirezarezvani/claude-skillsUse for any code review: a pull request, a diff, a commit, or a pasted function, handler or file in TypeScript, JavaScript, Python, Go, Swift, Kotlin, C#/.NET, Java, C, C++, Rust, Ruby, PHP or Dart/Flutter. Applies per-language rule packs (security such as SQL injection and missing auth, async and resource handling, error handling, performance) and scripts that score a PR's risk and complexity, then gives a merge verdict with blocking and non-blocking findings. Use whenever the user asks to review, check or look over code, says 'code review', 'review this PR', 'review this diff' or 'is this safe to merge', or asks what is wrong with a snippet, even a single function.EngineeringNo warnings★ 29.2K↓ —
- teamhashgraph-online/awesome-codex-pluginsOrg-level agent team designer via `epic team` CLI (cross-project, append-merge). Subcommands: list, show, sync, link, unlink, history. Use when setting up agents, designing teams, or /spec yields 3+ requirements.PlanningNo warnings★ 1.5K↓ —
- htmx-js-apihashgraph-online/awesome-codex-pluginsUse the htmx JavaScript API for imperative integration in server-rendered apps. Use when calling htmx.ajax, htmx.process, htmx.trigger, htmx.on, htmx.off, htmx.onLoad, htmx.find, htmx.findAll, htmx.closest, htmx.addClass, htmx.removeClass, htmx.toggleClass, htmx.takeClass, configuring htmx.config, logging htmx events, or integrating non-htmx JavaScript with swapped content.EngineeringNo warnings★ 1.5K↓ —
- oma-skill-creationfirst-fluke/oh-my-agentCreate or revise OMA skills and their references. Use for skill routing, execution contracts, conditional loading, and authoring validation.OtherNo warnings★ 1.4K↓ —
- rpihashgraph-online/awesome-codex-pluginsDrive one accepted change through implementation and checks to done, with one fresh review only where a mistake is costly. Use when: asked to run or orchestrate work through RPI.EngineeringNo warnings★ 1.5K↓ —Also in 2 other repos
- inbox-triagenano-muse/nanoMuseGo through recent mail and sort it into needs-a-reply, waiting-on-others, to-do and can-ignore, with draft replies ready for review. Use when the user asks to triage, sort, catch up on or clear their inbox; never to send anything on its own.EngineeringNo warnings★ 3.1K↓ —
- webperfnucliweb/webperf-snippetsWeb performance measurement and debugging toolkit. Use when the user asks about web performance, wants to audit a page, or says "analyze performance", "debug lcp", "check ttfb", "measure core web vitals", "audit images", or similar.EngineeringNo warnings★ 1.5K↓ —Also in 1 other repo
- generate-ppmplugin-manifestmicrosoft/power-platform-skillsValidate, reconcile to the chosen target(s), and stage the `manifest.json` for a `.ppmplugin` bundle. In the normal flow the committed `./manifest.json` already exists (authored by /generate-native-extension), so this stage reads it, runs the plugin's upload-compatibility checks locally as a pre-flight gate (name regex, canonical prefix, known incompatible names, method and identifier shapes), reconciles `entrypoints` down to the platform(s) you ship, and writes the gitignored staged copy `ppmplugin/staging/manifest.json` that /assemble-ppmplugin zips. If no committed manifest exists (a hand-authored module) it falls back to deriving every field from the class name and Android module source, writing both the committed file and the staged copy. No toolchain — pure read, validate, write. Target-aware. Run after the native module exists, before the build skills.WritingNo warnings★ 1.1K↓ —
- asc-ad-hoc-distributionrorkai/app-store-connect-cli-skillsPrepare, publish, resume, and verify private iOS release-testing installs with asc distribute. Use when distributing an IPA to registered devices outside TestFlight, reconciling ad hoc profiles, publishing through caller-owned S3-compatible storage, or diagnosing a resumable private distribution run.MarketingNo warnings★ 1.1K↓ —
- design-native-extension-featuremicrosoft/power-platform-skillsCapture a 2-3 line pitch from the user, draft a product overview (PRD.md) and a technical design (ARCHITECTURE.md) for a third-party `.ppmplugin` native control, then walk through every operation's iOS + Android implementation strategy with opinionated recommendations (library choice, hosting, key APIs, edge cases) and capture the agreed spec in ARCHITECTURE.md §3.<n>. The depth of ARCHITECTURE.md is what lets the scaffold skill generate complete working code instead of TODO placeholders. Iterates with the user until they approve both docs. Optionally seeds from a design doc / FRD URL. PRD.md + ARCHITECTURE.md are the source of truth for every downstream skill (generate, build, assemble). Run this BEFORE any code is generated.DesignNo warnings★ 1.1K↓ —
- ergonomicshashgraph-online/awesome-codex-pluginsAudit CLI, API, MCP or SDK discovery, first use and error recovery. Use when: designing an agent-facing tool or investigating misuse, including one command.FinanceNo warnings★ 1.5K↓ —Also in 2 other repos
- macboxNewhashgraph-online/awesome-codex-pluginsBuild, test, run, and tap through native iOS apps on a real remote Mac. Use for iOS build, test, and simulator work when this machine can't run Xcode, or when CLAUDE.md or AGENTS.md says to use macbox.TestingNo warnings★ 1.5K↓ —
- asc-aso-auditrorkai/app-store-connect-cli-skillsRun an offline ASO audit on canonical App Store metadata under `./metadata` and surface keyword gaps using Astro MCP. Use after pulling metadata with `asc metadata pull`.OtherNo warnings★ 1.1K↓ —
- oma-voicefirst-fluke/oh-my-agentGenerate or transcribe speech with Voicebox or VoiceStudio, or process existing audio locally. Use for narration, transcripts, timed speech, and loudness conversion; video editing uses oma-video.MediaNo warnings★ 1.4K↓ —
- asc-workflowrorkai/app-store-connect-cli-skillsDefine, validate, run, resume, and audit repo-local multi-step automations with current `asc workflow` and `.asc/workflow.json`, including step outputs and safe release/TestFlight workflows.ProductivityNo warnings★ 1.1K↓ —
- oma-tf-infrafirst-fluke/oh-my-agentCreate or review Terraform infrastructure and plans. Use for cloud resources, IAM, networking, state management, and infrastructure changes.DevOpsNo warnings★ 1.4K↓ —
- oma-skill-creationfirst-fluke/oh-my-agentCreate or revise OMA skills and their references. Use for skill routing, execution contracts, conditional loading, and authoring validation.OtherNo warnings★ 1.4K↓ —
- oma-securityfirst-fluke/oh-my-agentScan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.SecurityNo warnings★ 1.4K↓ —
oncall-handoff
mohitagw15856/pm-claude-skills
FinanceUpdated 24 hours ago
From the author
Write a structured end-of-shift on-call handoff so the incoming engineer inherits state, not surprises. Use when asked to write an on-call handoff, oncall handover, shift handoff, pager handoff, or end-of-week SRE summary. Produces a handoff note with open incidents, watchlist alerts, in-flight investigations, recent changes, and one-line asks.
Install
npx skills add mohitagw15856/pm-claude-skills --skill oncall-handoff -a claude-code
Installs to .claude/skills/oncall-handoff/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (1)
- SKILL.md