Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,495 skills from 2,391 repositories · updated 17 minutes ago
48,455 skills
- seonix-seoNewhashgraph-online/awesome-codex-pluginsWork on the SEO of a website that is connected to Seonix through the seonix MCP server - audit it, find what to fix, read Search Console traffic, check a draft. Use when the user asks to improve SEO, organic traffic, rankings or content for a site that is in Seonix, mentions Seonix, Site Health, the fix plan or Search Console data from Seonix, or asks which pages or queries to work on next.MarketingNo warnings★ 1.5K↓ —
- vidseedshashgraph-online/awesome-codex-pluginsRegistry fallback entry point for the VidSeeds.ai MCP connector. Use the bundled domain skills for setup, efficiency, thumbnails, projects, analytics, local video, and publishing workflows.DataNo warnings★ 1.5K↓ —
- ibkrhashgraph-online/awesome-codex-pluginsKeep an eye on an Interactive Brokers (IBKR) account or prices and speak up when something changes - new executions, prices crossing a level, option assignments and exercises, deposits and withdrawals, big moves in net asset value. Use when the user wants Codex to watch their IBKR account or IBKR market data, and when handling a fire of an IBKR trigger.OtherNo warnings★ 1.5K↓ —
- baoyu-translateJimLiu/baoyu-skillsThis skill should be used when the user asks to "translate", "翻译", "精翻", "translate article", "translate to Chinese", "translate to English", "改成中文", "改成英文", "convert to Chinese", "localize", "本地化", "refined translation", "精细翻译", "proofread translation", "快速翻译", "快翻", "这篇文章翻译一下", or provides a URL/file with translation intent. Supports three modes (quick/normal/refined) with custom glossary support.WritingNo warnings★ 27.3K↓ —
- gentle-ai-branch-prGentleman-Programming/gentle-shellCreate Gentle AI pull requests with issue-first checks. Trigger: creating, opening, or preparing PRs for review.EngineeringNo warnings★ 1.6K↓ —
- gentle-aiGentleman-Programming/gentle-shellUse Gentle AI harness discipline for Pi work: clarify first, track ODD work, use applicable test-first development by default, delegate when useful, and protect review workload.TestingNo warnings★ 1.6K↓ —
- 404-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for 404 Page construction. This page is now maintained in Pagina; install and use page-builder to build a new 404 Page.OtherNo warnings★ 1.1K↓ —
- blog-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Blog Index construction. This page is now maintained in Pagina; install and use page-builder to build a new Blog Index.WritingNo warnings★ 1.1K↓ —
- homepage-generatorkostja94/marketing-skillsDeprecated compatibility entry for Homepage construction. This page is now maintained in Pagina; install and use page-builder to build a new Homepage.OtherNo warnings★ 1.1K↓ —
- minutes-ingestsilverstein/minutesExtract facts from meetings and update your knowledge base — person profiles, chronological log, and index. Use when the user asks "ingest my meetings", "update my knowledge base", "extract facts from meetings", "sync meetings to wiki", "backfill knowledge", or wants their PARA/Obsidian/wiki profiles updated from conversation data.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- twitter-x-postskostja94/marketing-skillsWhen the user wants to create X (Twitter) post copy, threads, or optimize for X platform. Also use when the user mentions "X post," "X thread," "Twitter post," "Twitter thread," "tweet," "tweet copy," "thread," "X marketing," "X content," "post to X," "create X post," or "X post copy." For long-form source, use article-content.MarketingNo warnings★ 1.1K↓ —
- crabboxopenclaw/crabboxDetect and use Crabbox for repository tests and validation on remote runners. Use when crabbox.yaml or .crabbox.yaml exists, the crabbox CLI is available, or work needs remote compute, a clean or reusable environment, target-platform coverage, or auditable execution evidence.TestingNo warnings★ 1.5K↓ —Also in 1 other repo
- minutes-notesilverstein/minutesAdd a note to the current recording or annotate a past meeting. Use whenever the user says "note that", "remember this", "mark this as important", "add a note about", "annotate the meeting", or wants to capture a thought during or after a recording. Plain text input — no markdown needed.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- generate-prdhuytieu/COG-second-brainGenerate product requirements documents with optional publishing to Confluence or other wiki platformsPlanningNo warnings★ 1.3K↓ —Also in 1 other repo
- planning-with-filesOthmanAdi/planning-with-filesPersistent file-based planning for multi-step AI-agent work. Keeps task_plan.md, findings.md, and progress.md on disk; lifecycle hooks inject selected project planning context. Automatic recovery reads project planning files only. Explicit session-catchup.py --metadata reads same-project local agent session records and emits aggregate counts only; --replay may emit bounded nonce-framed excerpts. Optional gated mode can request continuation only when the host supports it and never runs commands declared in Markdown. The skill has no network upload path. Use for research or work needing 5+ tool calls.PlanningNo warnings★ 27.9K↓ —
- hsb-appNVIDIA/skillsDiscover and run Holoscan Sensor Bridge example applications on a connected devkit. Filters available apps by the user's platform, HSB software version, board type, and sensors. Supports timed execution, failure analysis, code-edit suggestions, and iterative re-runs.WritingNo warnings★ 3.9K↓ —
- mcp-stdio-markeralibaba/skill-upMCP stdio marker smoke skill used by skill-up e2e tests.TestingNo warnings★ 1.4K↓ —
- cloudflare-deployfcakyon/claude-codex-settingsDiscover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.DevOpsNo warnings★ 1.2K↓ —
- wake-traceamplifthq/openmeldUse when diagnosing a Wake that failed, stalled, or produced no visible reply — dispatch, setup handoff, or reply-path issues. Routes to the deterministic trace evidence path.OtherNo warnings★ 1.4K↓ —
- scenario-war-roomalirezarezvani/claude-skillsUse for compound what-if questions ('what if X and Y both happen?') with major downside across functions. Models cascading scenarios with scenario_modeler.py.OtherNo warnings★ 29.3K↓ —
- doca-rmaxNVIDIA/skillsDOCA Rivermax (doca_rmax) receive streams for timing-precise media over IP (SMPTE ST 2110 video / audio, market data, scientific feeds) on a target BlueField DPU (DOCA Rivermax apps run only there), once the Rivermax libraries and license are installed; getting them is doca-setup / doca-public-knowledge-map territory. Trigger on "ST 2110 receive isn't getting frames", "sub-microsecond jitter on my media receiver", "NOT_SUPPORTED from doca_rmax_init", "no recv events after stream start", or "license check failing on a media receiver", even without naming Rivermax. Covers doca_rmax_in_stream sessions, the SDK + license precondition check, doca_rmax_get_*_supported capability queries, pairing with doca-eth queues and doca-flow steering, and DOCA_ERROR_* from Rivermax calls. Refuse and route elsewhere for programming the underlying queue (doca-eth), steering rules (doca-flow), PTP / clock sync (doca-firefly), or best-effort packet I/O.MediaNo warnings★ 3.9K↓ —
- subtitlesZeroPointRepo/youtube-skillsUse when subtitles or the spoken text of a YouTube video is needed: pasted video links or IDs, requests to translate a video, read along, follow foreign-language content, or extract what was said. Also use for language learning or accessibility. Fetches timestamped subtitles from any YouTube video. Not for uploading subtitles or account management.MediaNo warnings★ 1.2K↓ —
- youtube-searchZeroPointRepo/youtube-skillsUse when the user wants to find YouTube content on any topic: searching for videos or channels, finding creators who cover a subject, discovering tutorials, talks, or expert discussions, or looking up a channel by name or handle. Also use proactively when the user wants to research a topic and YouTube is a good source. Not for account management or written-source-only research.ScienceNo warnings★ 1.2K↓ —
- youtube-channelsZeroPointRepo/youtube-skillsUse when a YouTube channel is the focus: pasted @handles or channel URLs, requests to browse a creator's uploads, see what a channel has posted recently, search within a channel, or resolve a handle to a channel ID. Also use when the user names a creator and wants to explore their content or monitor their uploads. Not for creating channels or account management.OtherNo warnings★ 1.2K↓ —
senior-security
alirezarezvani/claude-skills
SecurityUpdated 23 hours ago
From the author
Check if a design or code is secure: STRIDE threat model, DREAD risk scores, leaked secret scan. Use whenever the user asks what could be attacked, how risky a feature is, or to find exposed keys.
Install
npx skills add alirezarezvani/claude-skills --skill senior-security -a claude-code
Installs to .claude/skills/senior-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (6)
- SKILL.md
- references/cryptography-implementation.md
- references/security-architecture-patterns.md
- references/threat-modeling-guide.md
- scripts/secret_scanner.py
- scripts/threat_modeler.py