Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,495 skills from 2,391 repositories · updated 14 minutes ago
48,453 skills
- daily-cash-bookmohitagw15856/pm-claude-skillsKeep simple daily money records for a small trader, stall or home business with no accounting software: a cash book, stock count and weekly summary that show whether the business makes money and keep business and household money apart. Use when someone says 'I don't know if my shop makes money', 'how do I keep records for my small business', 'the bank wants records for a loan', or 'I mix business and home money'. Produces a one-page daily cash book, a weekly summary, a simple stock count, and three rules to keep the habit.FinanceNo warnings★ 1.5K↓ —
- team-onboarding-playbookrampstackco/claude-skillsDesign a structured onboarding experience that gets new team members productive in 30, 60, and 90 days. Use when a new hire is joining, when contractors or agency partners need to ramp up, when an existing team is restructuring and members are switching focus, or when current onboarding feels chaotic and slow. Also triggers when one person owns all the tribal knowledge and you need to capture it, when you keep losing people in their first 90 days, or when a new project has many fresh members joining at once. Useful for engineering, design, product, marketing, and operations roles.DesignNo warnings★ 1K↓ —
- content-migrationrampstackco/claude-skillsMove content between platforms, domains, or URL structures while preserving SEO equity, user bookmarks, and integrations. Use this skill when planning a CMS migration, replatforming, consolidating sites, changing URL structures, or merging content from multiple sources. Triggers on content migration, replatform, CMS migration, domain migration, URL restructure, redirect map, site merge, content consolidation, migration plan, post-migration drop. Also triggers when planning a launch that involves moving existing content.MarketingNo warnings★ 1K↓ —
- experimentation-analyticsrampstackco/claude-skillsHow to read experiment results without fooling yourself. Confidence intervals, p-values, multiple testing, sequential testing, CUPED, heterogeneous treatment effects, ratio metrics, network effects, dashboard reconciliation, and the interpretation failures that produce confidently wrong shipping decisions. Use this skill whenever the user is reading a finished experiment result panel and about to make a ship, kill, or iterate decision, or when an experiment number does not match the dashboard number. Triggers on read experiment results, result panel, ship or kill decision, p-value, confidence interval, statistical significance, multiple testing, peeking, sequential testing, CUPED, variance reduction, heterogeneous treatment effects, ratio metric, network effects, inconclusive test, experiment versus dashboard mismatch. Use `experiment-design` instead when the test has not run yet and the question is hypothesis, sample size, duration, or what to test.DataNo warnings★ 1K↓ —
- x-marketinghashgraph-online/awesome-codex-pluginsPlan, draft, audit, and publish posts and threads for X (Twitter). Use when the user wants to write a single tweet or an auto-numbered thread, build a long-form tweetstorm, remove AI tells from a draft, reverse-engineer the hook from a viral tweet, draft a reply or quote tweet, or plan a week of X content. Tweets and threads publish via the Publora API, which auto-splits long content into a numbered thread. User provides notes or a tweet URL, the skill drafts, the user approves, then it publishes.MarketingNo warnings★ 1.5K↓ —Also in 2 other repos
- oma-pmfirst-fluke/oh-my-agentTurn product requirements into scoped tasks with dependencies and acceptance criteria. Use for implementation planning and prioritization.PlanningNo warnings★ 1.4K↓ —Also in 1 other repo
- edit-appmicrosoft/power-platform-skillsUse when the user wants to iterate on an existing generated Power Apps mobile app after /create-mobile-app: update Application Insights configuration, the plan, data model, native capabilities, design, screens, generated app code, and preview without restarting the full project flow. Natural-language triggers include 'the app already exists', 'edit my app', 'change this screen', and 'add a feature to this app'.WritingNo warnings★ 1.1K↓ —
- ismSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD compliance. Triggers on: ISM controls, ASD compliance, IRAP assessment, PROTECTED system scoping, Essential Eight vs ISM, system authorisation, NC/OS/ PROTECTED/SECRET/TOP SECRET classification markings, security objectives, ISM guidelines or chapters, control applicability markings, cybersecurity documentation for Australian government, the June 2026 ISM update, ISM AI application controls (ISM-2112/2113/2114), and any question about the ASD Information Security Manual framework or Australian government cybersecurity obligations.SecurityNo warnings★ 1K↓ —
- product-analytics-setuprampstackco/claude-skillsHow to actually instrument product analytics correctly. Event taxonomy, property design, naming conventions, schema versioning, identity stitching, funnel design, retention cohorts, North Star metric selection, dashboard hygiene, instrumentation debt, and the failure modes that produce data nobody trusts. Triggers on product analytics setup, event taxonomy, tracking plan, instrumentation, schema versioning, North Star metric, retention cohorts, funnel design, naming conventions, instrument new feature, audit existing analytics, dashboard reconciliation, instrumentation debt, Mixpanel setup, Amplitude setup, PostHog setup, warehouse-native analytics. Also triggers when the team has data but cannot trust it, or when designing instrumentation for a new feature, or when auditing an existing setup that has drifted.DataNo warnings★ 1K↓ —
- make-video-adsgooseworks-ai/goose-skillsUse when the marketer says: make me a video ad, a 30-second ad for paid social, a Reel / TikTok / Shorts ad, a UGC-style video made with AI (no real creator), a product demo video, remake this ad I like for my brand, cut our best organic video into an ad, more like my winning video with new hooks, my video ad got rejected — fix it. Delivers a produced, ready-to-post video ad grounded in a researched angle: one message, a hook for the first two seconds, every claim traced to the brand's signed-off claims, no generated person posing as a customer, the exact words and the price approved before anything renders (one video, or one plus two hook variants), an honest review of the result, priced fixes only on a yes, and launch copy and notes for the ads team. Works in chat apps. Never publishes or spends ad budget. Not for real creators filming for you — work-with-creators (unsure? ask: AI-made or a real person); not for a phone-shot organic post — run-organic-social; not for static ads — make-static-ads.MediaNo warnings★ 1.3K↓ —
- contract-reviewmohitagw15856/pm-claude-skillsReview and summarise any contract or legal agreement. Use when asked to review a contract, check an agreement, flag legal risks, or summarise key clauses. Produces a structured review with key terms, flagged clauses, risk rating, and plain English summary. Not a substitute for qualified legal advice.LegalNo warnings★ 1.5K↓ —
- upgrade-flow-designrampstackco/claude-skillsDesigning free-to-paid conversion flows for SaaS products. Trigger moments, paywall design, value demonstration, upsell vs downsell, win-back flows, churn prevention. Honest about paywall-everywhere (gates everything aggressively), free-forever-trap (no upgrade path surfaces), and value-triggered-upgrade (paywall surfaces at moments of demonstrated value) patterns. Triggers on upgrade flow, paywall, free-to-paid, freemium conversion, trial conversion, plan upgrade, subscription upgrade, win-back flow, churn prevention. Also triggers when free-to-paid conversion is low, when paywalls are blocking the wrong moments, or when upgrade flows are being scoped for the first time.DesignNo warnings★ 1K↓ —
- roastalirezarezvani/claude-skillsRoast an idea: a 5-angle panel (Critic, Champion, Analyst, Investigator, Customer) attacks it, then a Judge returns one GO / RESHAPE / KILL verdict with the cheapest test to de-risk it. Use whenever the user wants to pressure-test or validate a business idea, asks for a brutal second opinion before building, asks is this a good idea, says convene the panel, or runs /roast.TestingNo warnings★ 29.3K↓ —
- brooks-healthhyhmrright/brooks-lintCombined codebase health dashboard that scores a project across all four quality dimensions — PR quality, architecture, tech debt, and test quality — in a single pass, drawing on twelve classic engineering books. Triggers when: user wants an overall quality assessment, asks "how healthy is this codebase?", "run all the checks", "I need a health score before the release", or wants to onboard a new team with a quality overview. Do NOT trigger for: server health checks, HTTP health endpoints, Kubernetes liveness/readiness probes, database health, or application uptime. Also do not trigger when the user specifically requests only one dimension — use the corresponding focused skill instead (brooks-review / brooks-audit / brooks-debt / brooks-test).TestingNo warnings★ 1.6K↓ —
- minutes-recapsilverstein/minutesGenerate a daily digest of today's policy-authorized meetings and voice memos — key decisions, action items, and themes across available recordings. Use when the user asks "recap my day", "what happened in my meetings today", "daily summary", "what did I discuss today", "any action items from today", or wants a consolidated view of the day's conversations.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- education-programkostja94/marketing-skillsWhen the user wants to plan, implement, or optimize student and education discount programs. Also use when the user mentions "student discount," "education discount," "student plan," "for students," ".edu discount," "academic pricing," "student verification," "SheerID," "UNiDAYS," or "education program." For startup pricing page, use startups-page-generator.PlanningNo warnings★ 1.1K↓ —
- sno-mem-claudesno-ai/sno-stationUse Sno memory from Claude through four explicit commands.ProductivityNo warnings★ 1.1K↓ —
- audit-decisionsdzhng/skillsAudit the decisions an implementing agent made, not its diff — a pure audit that traces the session's history into a decisions ledger, changes no code, and never blocks an unsupervised run. Working code still embeds architecture the user never chose; surface it because future work inherits it. Use when the user wants to review the decisions the AI made on their behalf, before merging or committing AI-implemented work, when integrating a delegated subagent's pass, or when a fix "works" but might be a point fix.PlanningNo warnings★ 1.4K↓ —
- sfxmintNewhashgraph-online/awesome-codex-pluginsAdd free CC0 sound effects to a web app or game without an API key, using the SFXMint API (sound roles, sets grouped by event, search) and permanent hotlinkable MP3/WAV URLs. With an SFXMint API key it can also generate a sound the library lacks. Use when the user asks to add sounds, audio feedback or UI sounds to an app, wants click / notification / success / error / alert sounds, game sound effects (coin, jump, hit, explosion, power-up, game over), ambience (rain, forest, drone), sound on a code-driven video or animation (Remotion, motion graphics), or asks where to get free sound effects for an app, game, video, prototype or demo. Not for music, voice or speech.DesignNo warnings★ 1.5K↓ —
- renhuahashgraph-online/awesome-codex-pluginsRenhua (人话): write Chinese posts, diaries, product copy and comment replies in a real person's voice and strip AI tells (emoji checklists, parallel triplets, slogan endings, stock closing questions), with a viral Xiaohongshu title library and humor patterns. Use when writing Chinese content for Xiaohongshu, X, WeChat Moments or a product page, or when the user says it sounds like AI and should sound human. Triggers: 太像 AI 了, 说人话, 去 AI 味, 用我的口吻, 写小红书, 写朋友圈, 产品介绍; 中国語の投稿をAIっぽくなく; 중국어 글 AI 티 안 나게; viết bài tiếng Trung tự nhiên; चीनी पोस्ट इंसानी लहजे में.FinanceNo warnings★ 1.5K↓ —
- releasehyhmrright/brooks-lintCut a brooks-lint release: set the version in package.json, propagate it across all four plugin manifests and every version-bearing text file (README badges, docs site metadata), write the CHANGELOG entry, validate, then commit, push, tag, and publish the GitHub release. Triggers when the maintainer asks to "release", "cut a release", "ship a new version", or "bump and publish" brooks-lint. Do NOT trigger for: propagating an already-decided version without releasing (use `npm run bump` directly), CHANGELOG edits alone, or questions about the release process that don't ask to perform it.WritingNo warnings★ 1.6K↓ —
- planning-with-filesOthmanAdi/planning-with-filesPersistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk; Kiro skill instructions and steering state read selected project planning context. Recovery reads project planning files and their timestamps only, not agent transcript stores. This adapter registers no Stop hook, never requests continuation, and never runs commands declared in Markdown. The skill has no network upload path. Use for research or work needing 5+ tool calls.PlanningNo warnings★ 27.9K↓ —
- tddhashgraph-online/awesome-codex-pluginsTest-Driven Development enforcer. Red→Green→Refactor cycle with no production code without a failing test first. Use for new features and bug fixes.TestingNo warnings★ 1.5K↓ —
- marketing-pagesdzhng/skillsBest-practice rulebook for a marketing site's pages, organized by page class — campaign landers, product pages, programmatic SEO trees, editorial. Use when writing or updating a landing/marketing page, wiring a campaign lander to an attribution identifier, changing site-wide nav/footer links, touching sitemap/robots/agent-readable surfaces, or auditing a public site's indexing, reachability, and conversion setup.MarketingNo warnings★ 1.4K↓ —
pentest-report
mohitagw15856/pm-claude-skills
SecurityUpdated 5 hours ago
From the author
Write a clear penetration-test report from findings of an authorized engagement. Use when documenting a pentest, security assessment, or authorized red-team engagement — turning findings into a report clients act on. Produces an executive summary, scope & methodology, findings with severity/evidence/reproduction/remediation, and a risk-ranked remediation plan. For authorized testing only.
Install
npx skills add mohitagw15856/pm-claude-skills --skill pentest-report -a claude-code
Installs to .claude/skills/pentest-report/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance78
Maintenance100
Licence100
Adoption51
Files (1)
- SKILL.md