Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,409 skills from 2,375 repositories · updated 14 hours ago
48,362 skills
- lancet-ethicsbrycewang-stanford/Awesome-Journal-SkillsUse to satisfy The Lancet's clinical-ethics and research-integrity requirements — ethics-committee approval and informed consent under the Declaration of Helsinki, the Declaration of interests, ICMJE author contributions, the role-of-the-funding-source statement, the data-sharing statement, patient and public involvement, and SAGER sex/gender plus equity reporting.ScienceNo warnings★ 1.4K↓ —
- naacl-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a research project's calendar toward NAACL — handling the chapter's skipped-year rhythm, choosing an ARR cycle when the edition's feeding cycles are not yet announced, backward-planning data and annotation work, and keeping a decision tree for commit-versus-wait-versus-reroute moments.ProductivityNo warnings★ 1.4K↓ —
- iccv-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing the experimental program for an ICCV paper against the early-March deadline, covering benchmark-drift audits across the two-year gap, baseline fairness in the foundation-model era, ablations that isolate mechanisms, qualitative and failure evidence, and sequencing runs so the decisive result lands before the deadline, not after.ScienceNo warnings★ 1.4K↓ —
- gentle-ai-cognitive-doc-designGentleman-Programming/gentle-shellDesign docs that reduce cognitive load. Trigger: writing guides, READMEs, RFCs, onboarding, architecture, or review-facing docs.DesignNo warnings★ 1.5K↓ —
- dag-maphoangsonww/Claude-Code-Agent-MonitorRender the multi-agent orchestration DAG for a session — parent→child subagent edges, tree depth, and fan-out — from the Agent Monitor workflow intelligence API. Cross-checks the orchestration dataset against the raw agent records and session detail. Use when visualizing how a session's agent structure was organized.MediaNo warnings★ 1.1K↓ —
- email-lifecycle-offer-mathgooseworks-ai/goose-skillsPrices one discount, free-shipping threshold or referral reward against contribution margin: cost per order, share of margin used, break-even lift, code leakage risks, and one recommended offer in two plain sentences. Use alone when you already have the offer, average order value and margin per product; otherwise run email-lifecycle.ProductivityNo warnings★ 1.3K↓ —
- prd-templatemohitagw15856/pm-claude-skillsCreate a Product Requirements Document following proven PM template structure. Use when asked to write a PRD, product spec, feature specification, or requirements document for a new feature or product. Produces a complete PRD with problem statement, user stories, functional requirements, technical considerations, and success metrics.PlanningNo warnings★ 1.5K↓ —
- corl-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing experiments for a CoRL robot-learning paper — seeds and evaluation-episode counts, task-suite breadth, real-robot versus simulation evidence, sim-to-real gap measurement, baseline fairness across BC/RL/VLA families, generalization splits, and statistics for success-rate claims.ScienceNo warnings★ 1.4K↓ —
- minutes-x1-send-meetingsilverstein/minutesSend one of the user's own Minutes meetings to their X1 household for review. Use when the user wants a meeting's summary, decisions, action items, and open questions to reach X1 so they can confirm what belongs in their household record. X1 asks the user to approve the send, and nothing reaches the household record until they confirm each item. Never use it for a restricted meeting, a transcript, or someone else's meeting.EngineeringNo warnings★ 1.6K↓ —Also in 1 other repo
- pmla-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when running the final pre-submission preflight for PMLA (Publications of the Modern Language Association) via the ScholarOne site — venue selection, MLA-membership eligibility, anonymous preparation, word range, MLA style, cover sheet, and AI-content disclosure. Final checks; it does not draft content.OtherNo warnings★ 1.4K↓ —
- windfall-planmohitagw15856/pm-claude-skillsMake a smart plan for a lump sum — a bonus, inheritance, tax refund, settlement, or sale — so it builds your future instead of evaporating into lifestyle. Use when asked what should I do with a windfall, I came into some money, how to use a bonus/inheritance/tax refund, or don't want to waste this money. Produces a cool-off-first plan, a tax/obligations check, an allocation across foundation-building, goals, and a guilt-free fun slice, and cautions against the classic windfall traps and the vultures that appear. Educational — not financial advice.PlanningNo warnings★ 1.5K↓ —
- openspec-proposeMemeMeow-Studio/MemeMeowPropose a new change with all artifacts generated in one step. Use when the user wants to quickly describe what they want to build and get a complete proposal with design, specs, and tasks ready for implementation.DesignNo warnings★ 1.3K↓ —Also in 1 other repo
- judge-retired-positionsno-ai/sno-stationJudge whether one stored row states a retired profile position as current.OtherNo warnings★ 1.1K↓ —
- writing-plansmohitagw15856/pm-claude-skillsWrite an executable work plan BEFORE starting a complex task — decomposed steps with verification points, risks pre-named, and explicit stop conditions — so execution becomes checking boxes instead of improvising. Use when a task will take many steps, when asked to plan before doing, when previous attempts sprawled or stalled, or before delegating work to subagents. Produces a plan document another agent (or future you) could execute without re-deriving the thinking. Pairs with executing-plans.WritingNo warnings★ 1.5K↓ —
- pldi-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a PLDI submission for HotCRP readiness — the single annual November deadline, the 20-pages-of-text-excluding-bibliography cap in single-column acmsmall format, double-blind hygiene across tool names and repositories, dual-submission rules, and summary-rejection triggers before the cutoff.ProductivityNo warnings★ 1.4K↓ —
- openqodexopenqodex/openqodexCode review for the current change, before it is pushed. One command runs the security, secret, dependency and lint scanners that fit the changed files, a separate reviewer that checks every scanner finding and is given every changed line, and prints a short receipt with the path of the full report. Use before every git push, when asked for a code review, a security scan, or to review changes, a diff or a pull request, and when a push was blocked or warned by OpenQodex.SecurityNo warnings★ 1.1K↓ —Also in 2 other repos
- ap-fresh-verifierSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- legacy-lettermohitagw15856/pm-claude-skillsWrite a letter to the people you love, to be read later — the things you'd want them to know, the stories only you hold, the permission and the love that outlive you. Use when someone says 'help me write a letter to my kids/partner', 'legacy letter', 'ethical will', 'something for them to have when I'm gone', or is facing illness, aging, deployment, or simply wants to. Produces a warm, true letter in the writer's own voice — one to each person, or one to all — plus a light plan for when and how it's found. An emotional-legacy tool, not legal (it is not a will).DevOpsNo warnings★ 1.5K↓ —
- rollback-planmohitagw15856/pm-claude-skillsWrite a concrete rollback plan for a risky change (deploy, migration, feature-flag flip, config rollout) so the reverse is one command away — not an improvised debate at 2am. Use when asked to write a rollback plan, back-out plan, revert plan, or 'what if we need to undo this'. Produces a rollback plan with the signals that trigger it, exact reverse commands, verification steps, data-safety notes, and a communications template.PlanningNo warnings★ 1.5K↓ —
- multi-domain-brand-seokostja94/marketing-skillsWhen the user wants to optimize brand search for a company with multiple domains (e.g. parent company.com vs product.ai). Ensure the parent/company domain ranks first for brand queries. Also use when the user mentions "brand search," "multi-domain SEO," "company domain first," "parent vs product domain," "hub-spoke domain," "brand SERP control," or "differentiate company and product domains." For domain structure, use domain-architecture.MarketingNo warnings★ 1.1K↓ —
- churn-analysismohitagw15856/pm-claude-skillsProduce a structured churn analysis that separates avoidable from unavoidable churn. Use when investigating why customers are leaving, identifying at-risk segments, calculating net revenue retention, or building a retention intervention plan. Produces a churn report with rate calculations, categorised reasons by avoidability, segment breakdown, timing analysis, early warning signals, and prioritised interventions ranked by estimated impact.FinanceNo warnings★ 1.5K↓ —
- deploy-to-vercelvercel-labs/agent-skillsDeploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".OfficialDevOpsNo warnings★ 33.5K↓ —
- deepfake-drillmohitagw15856/pm-claude-skillsRun a tabletop drill of a voice-clone or deepfake fraud attempt — the 'CEO needs this wire today' call — against your actual approval process, before a real attacker does, then debrief the tells and fix the process gap. Use when someone asks to train the team on deepfake fraud, test wire-transfer controls, run a social-engineering tabletop, or 'could we get CEO-frauded?'. Produces a drill scenario pack, a facilitator script, a tells checklist, and the process fixes the drill exposed. Defensive training only.TestingNo warnings★ 1.5K↓ —
- icse-experimentsbrycewang-stanford/Awesome-Journal-SkillsUse when designing or auditing the evaluation of an ICSE research-track paper, covering subject and benchmark selection, baseline fairness, statistical tests and effect sizes as SE reviewers expect them, qualitative-methods rigor, ablations for AI-based techniques, and threats-driven study design.TestingNo warnings★ 1.4K↓ —
senior-security
alirezarezvani/claude-skills
SecurityUpdated yesterday
From the author
Check if a design or code is secure: STRIDE threat model, DREAD risk scores, leaked secret scan. Use whenever the user asks what could be attacked, how risky a feature is, or to find exposed keys.
Install
npx skills add alirezarezvani/claude-skills --skill senior-security -a claude-code
Installs to .claude/skills/senior-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (6)
- SKILL.md
- references/cryptography-implementation.md
- references/security-architecture-patterns.md
- references/threat-modeling-guide.md
- scripts/secret_scanner.py
- scripts/threat_modeler.py