Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 10 hours ago
48,362 skills
- add-pdf-reportmicrosoft/power-platform-skillsInternal implementation skill invoked by /add-native for app-generated PDF report workflows using expo-print and, when present, expo-sharing.DocumentsNo warnings★ 1.1K↓ —
- changelog-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Changelog Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Changelog Page.OtherNo warnings★ 1.1K↓ —
- gohashgraph-online/awesome-codex-pluginsGo phase. Reads the approved SPEC file, maps Requirements to tasks (plan), executes via TDD (build), and integrates results verifying all Acceptance Criteria.TestingNo warnings★ 1.5K↓ —
- programmatic-seofcakyon/claude-codex-settingsUse when planning many similar pages from a template and a data set: choosing the pattern, deciding whether the data can carry it, and avoiding the thin-content failure that gets page sets deindexed.MarketingNo warnings★ 1.2K↓ —
- seohashgraph-online/awesome-codex-pluginsComprehensive SEO analysis for any website or business type. Full site audits, single-page analysis, technical SEO (crawlability, indexability, Core Web Vitals with INP), schema markup, content quality (E-E-A-T), image optimization, sitemap analysis, and GEO for AI Overviews/ChatGPT/Perplexity. Industry detection for SaaS, e-commerce, local, publishers, agencies. Triggers on: SEO, audit, schema, Core Web Vitals, sitemap, E-E-A-T, AI Overviews, GEO, technical SEO, content quality, page speed, structured data.MarketingNo warnings★ 1.5K↓ —
- vector-coverhuytieu/COG-second-brainFlat vector editorial cover illustrations in HTML and SVG, rendered to a 2400x960 PNG with headless ChromeBrowserNo warnings★ 1.3K↓ —
- using-gchashgraph-online/awesome-codex-pluginsOperate Gas City through its own doors: Mayor, doctor and native run state. Use when: Gas City is selected or a gc run looks stuck.OtherNo warnings★ 1.5K↓ —Also in 2 other repos
- auth-web-cloudbaseUpdatedTencentCloudBase/CloudBase-AI-ToolkitCloudBase Web Authentication Quick Guide for frontend integration after auth-tool has already been checked. Provides concise and practical Web authentication solutions with multiple login methods and complete user management.DesignNo warnings★ 1.2K↓ —
- animatehashgraph-online/awesome-codex-pluginsGive a game's characters rigs and clips that move well on a phone — the skeleton standard (one humanoid vocabulary, a mini and a quadruped family), free CC0 animated characters from Homie's starter library made phone-sized (one draw call, helper bones gone) with their clips in one shared clip library per skeleton, the library's CC0 humanoid clips retargeted at build time onto any other rig (a generated character, the person's own), the shared runtime @homie-rocks/studio/animate (idle, walk and run blended by speed, actions on the upper body while running, additive hits, hit-stop, jump, fall and land with squash and stretch, lean, look-at, springs, foot planting, crowd mode), the animation card with looping previews, and tuning a move's feel in the Game Lab. Use when someone wants characters that walk, run, jump, attack or die, asks about rigs, skeletons, bones or retargeting, says the animation looks stiff, floaty or slides, or wants a jump or a hit to feel better.DocumentsNo warnings★ 1.5K↓ —
- manage-desktop-flowsmicrosoft/power-platform-skillsManage and run Power Automate Desktop (RPA) flows and machine groups. Use when the user asks about desktop flows, RPA, or machine groups.OtherNo warnings★ 1.1K↓ —
- anthropic-frontend-designfcakyon/claude-codex-settingsGuidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.DesignNo warnings★ 1.2K↓ —
- ultralytics-brandingfcakyon/claude-codex-settingsThis skill should be used when creating Ultralytics-branded content of any kind, including PDF, PPTX, Canva, or Google Slides presentations, DOCX documents, marketing or newsletter HTML emails, social media post copy or visuals, website or landing page designs, and dataset or model result visuals. Provides official colors, typography, logo rules, naming rules, and tone of voice from ultralytics.com/brand.DocumentsNo warnings★ 1.2K↓ —
- assign-offline-profilemicrosoft/power-platform-skillsUse when the user needs to bind users or teams to a Mobile Offline Profile so they actually receive offline sync on their devices. Without this, the profile exists in Dataverse but no one's app uses it.OtherNo warnings★ 1.1K↓ —
- frontend-testing-debuggingfcakyon/claude-codex-settingsThis skill should be used when user asks to "debug this UI", "verify a rendered frontend change", or "check responsive layouts". Diagnose visual and interaction problems, compare reference screenshots, and reuse project QA journeys when available.TestingNo warnings★ 1.2K↓ —
- cloudflare-email-servicefcakyon/claude-codex-settingsImplement or troubleshoot Cloudflare Email Sending and Email Routing integrations and their delivery configuration.DevOpsNo warnings★ 1.2K↓ —
- running-livekit-simulationsfcakyon/claude-codex-settingsRuns LiveKit agent simulations and acts on the results. Use when the user says "run my simulations", "regression test my agent before deploying", "run the scenarios", "use lk agent simulate", "did my agent pass", "why did this scenario fail", "run simulations in CI", "test the audio pipeline", "check turn-taking and interruptions", or wants to check whole-conversation behavior before shipping. Covers text and audio mode and what each catches, running against a local or deployed agent, degraded-audio flags, automating a pre-release run, and triaging failures with list, view and export. For writing the scenarios use writing-livekit-scenarios. Not the default for a bare "test my agent", which goes to debugging-livekit-agents. Use this skill when the user names simulations, scenarios, a run, CI, or shipping.TestingNo warnings★ 1.2K↓ —Also in 1 other repo
- social-overlaysNewhashgraph-online/awesome-codex-pluginsEleven conversion overlays for short-form ads, UGC and creator videos, with presets per platform: CTA pill, follow tap prompt, story sticker tag, LIVE badge with viewer count, notification drop, review proof card, story caption bar, photo wall loop, follower counter and goal bar, comment callout (reply-to-comment) and subscribe-and-bell nudge. Presets use one universal 9:16 safe box built from TikTok, Meta Reels, YouTube Shorts and Snap specs, CTA timing from creator analysts (ask after value, never in the intro), native number formats, contrast and motion tokens, plus the FTC rules: reviews, comments and counts come from real data only and paid content is disclosed. Use when an ad or creator video needs a call to action, a subscribe or follow ask, a review or comment on screen, a LIVE badge or a counter. NOT for fake reviews, fake follower counts or copying a platform's logo.MediaNo warnings★ 1.5K↓ —
- varg-ad-localizeNewhashgraph-online/awesome-codex-pluginsTurns one video ad into versions for 8+ TikTok Shop and Meta markets on varg: transcreates the script per market (hook, slang, claims, units, local price and currency from an offer card, each line fitted to its time slot), voices it with ElevenLabs v4 in the same voice, lip-syncs only shots where a face talks for more than 1.5 s (Sync v3), rebuilds captions and on-screen text in the target language instead of inpainting them, re-cuts every shot on the new language's words, and ends with a native-review checklist. Use when a seller asks to translate an ad, dub a video ad, localize for TikTok Shop markets (UK, DE, FR, IT, ES, ID, TH, VN, MY, PH, JP, MX, BR, SA), make a Spanish or German version of a winner, or sell cross-border. Not for subtitles on a long video (use a captions skill) or dubbing films and podcasts (see video-skills).MarketingNo warnings★ 1.5K↓ —
- write-outreachgooseworks-ai/goose-skillsCold outreach a person sends to business buyers: email and LinkedIn sequences, a first line per prospect, reply and objection answers, and a read of replies. Use when the marketer says "write a cold email sequence", "what do I send to this list", "write LinkedIn messages for these leads", "how do I reply to this prospect" or "handle this objection", "reply to this demo request", "win back or reconnect with accounts that churned or went quiet", or "why is nobody replying to my outreach". Drafts only; the marketer sends from their own tool. Not for finding the people — use research-audience; not for emails to subscribers or users, or consumer win-back — use email-lifecycle.WritingNo warnings★ 1.3K↓ —
- blueprinthashgraph-online/awesome-codex-pluginsTurn a one-line objective into a step-by-step construction plan for multi-session, multi-agent engineering projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review gate, dependency graph, parallel step detection, anti-pattern catalog, and plan mutation protocol. TRIGGER when: user requests a plan, blueprint, or roadmap for a complex multi-PR task, or describes work that needs multiple sessions. DO NOT TRIGGER when: task is completable in a single PR or fewer than 3 tool calls, or user says "just do it".PlanningNo warnings★ 1.5K↓ —
- cloudflare-one-migrationsfcakyon/claude-codex-settingsAssess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.DevOpsNo warnings★ 1.2K↓ —
- os-check-workkharmanskyi/open-stepsALWAYS invoke this skill when the user asks about work done outside this session - "check work", "check the others", "check other sessions" - or to accept one: "the session is done, check it", "can we merge it" - in any language. You are the receiving party: treat the report as a claim, verify each part against machine state, name every gap between claimed and true. Verified-ready work merges in the same pass. End with what is left, one next step, and any reply another session needs, ready to paste.OtherNo warnings★ 1.3K↓ —
- seo-content-auditrampstackco/claude-skillsAudit existing content across a site to decide what to keep, update, merge, redirect, or delete. Use this skill whenever the user wants to audit existing content, fix content decay, resolve keyword cannibalization, prune underperforming pages, prioritize content updates, or apply a keep/update/merge/redirect/delete framework to a content library. Triggers on content audit, content decay, content refresh, cannibalization, keyword cannibalization, prune content, delete pages, redirect old pages, content inventory, what to keep, what to update, content scorecard, evergreen refresh. Also triggers when traffic is dropping site-wide and the cause might be content quality, even if 'audit' is not said explicitly.MarketingNo warnings★ 1K↓ —
- itcs-workflowbrycewang-stanford/Awesome-Journal-SkillsUse to plan an ITCS campaign end to end on its single annual cycle — backward from the early-September deadline through the no-rebuttal review, the November notification, the LIPIcs camera-ready, and the January conference with its Graduating Bits session.ProductivityNo warnings★ 1.4K↓ —
oma-security
first-fluke/oh-my-agent
NewSecurityUpdated 19 hours ago
From the author
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.
Install
npx skills add first-fluke/oh-my-agent --skill oma-security -a claude-code
Installs to .claude/skills/oma-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (12)
- SKILL.md
- resources/artex.md
- resources/ci.md
- resources/cisco-source.md
- resources/deepsec-config.md
- resources/deepsec-matchers.md
- resources/deepsec-scanning.md
- resources/deepsec-setup.md
- resources/findings-contract.md
- resources/mcp-scanning.md
- resources/skill-scanning.md
- resources/validation.md