Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 1 hour ago
48,451 skills
- write-outreachgooseworks-ai/goose-skillsCold outreach a person sends to business buyers: email and LinkedIn sequences, a first line per prospect, reply and objection answers, and a read of replies. Use when the marketer says "write a cold email sequence", "what do I send to this list", "write LinkedIn messages for these leads", "how do I reply to this prospect" or "handle this objection", "reply to this demo request", "win back or reconnect with accounts that churned or went quiet", or "why is nobody replying to my outreach". Drafts only; the marketer sends from their own tool. Not for finding the people — use research-audience; not for emails to subscribers or users, or consumer win-back — use email-lifecycle.WritingNo warnings★ 1.3K↓ —
- asc-screenshot-resizerorkai/app-store-connect-cli-skillsResize and validate App Store screenshots with current asc screenshot-size data and macOS sips. Use when preparing or fixing screenshots for App Store Connect submission.OtherNo warnings★ 1.1K↓ —
- fedrampSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP Certification Classes (A, B, C, D — new baseline labels: A = pilot/transitional, B = LI-SaaS/Low, C = Moderate, D = High, per NTC-0004), FedRAMP 20x (now the primary authorization pathway), OSCAL mandate (September 2026), 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, or architecture reviews for federal cloud. FedRAMP Ready retired July 28, 2026 (Legacy FedRAMP Ready). When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.SecurityNo warnings★ 1K↓ —
- extract-atomic-memorysno-ai/sno-stationRead one conversation window and return every independently mutable claim it states, one record each, with who or what it is about, whether it happened or stands, and the words that carry its time. Used by the memory extraction model on every conversation window; the engine resolves dates, validates keys, and repairs format.ProductivityNo warnings★ 1.1K↓ —
- dac-workflowbrycewang-stanford/Awesome-Journal-SkillsUse to plan a full ACM/IEEE Design Automation Conference (DAC) Research-Manuscript campaign backward from the mid-to-late-November manuscript deadline through the two-stage abstract-then-manuscript submission on Softconf, the winter review, the March notification, the April camera-ready and copyright for the ACM Digital Library, and the July conference in Long Beach — with the Engineering-Track and Late-Breaking-Results side calendars.ProductivityNo warnings★ 1.4K↓ —
- cell-fitbrycewang-stanford/Awesome-Journal-SkillsUse when triaging a study before any writing — stress-tests whether it clears Cell's bar (a complete, mechanistic, hypothesis-driven story with multiple converging lines of evidence) or belongs at a sibling. Use this first to decide Cell vs Molecular Cell vs Cell Reports vs Cell Reports Medicine before investing in framing or figures.TestingNo warnings★ 1.4K↓ —
- iso27701Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert ISO 27701 Privacy Information Management System (PIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 27701:2025, ISO/IEC 27701:2019, privacy information management, PIMS certification, PII controller or processor obligations, privacy risk assessment, Statement of Applicability for privacy, privacy by design, data subject rights, DPIA, records of processing activities, transitioning from ISO 27701:2019, GDPR alignment with ISO 27701, or any privacy management system topic. Also trigger for questions about Annex A.1 (controller controls), A.2 (processor controls), A.3 (shared security controls), or implementing a standalone PIMS without ISO 27001. When in doubt, use this skill — it covers the full ISO 27701 lifecycle from gap assessment through certification.SecurityNo warnings★ 1K↓ —
- judge-rem-memory-updatessno-ai/sno-stationJudge REM memory relations, rewrites, verification, and clause carry by meaning. Use for REM update model calls that decide which older facts are superseded, which facts remain current, and whether a proposed rewrite preserves all surviving facts.ProductivityNo warnings★ 1.1K↓ —
- drive-desktop-appreticlehq/reticleDrive and verify an Electron or Tauri desktop app from the inside, including the main-process and Rust IPC calls a browser tool cannot see. Use when a desktop app needs testing, when a feature works in the browser but not in the packaged app, when an IPC or invoke call needs proving, when a desktop screenshot or visual diff is wanted, or when you need a headless run of a desktop UI in CI.TestingNo warnings★ 1.3K↓ —
- oma-skill-creationNewfirst-fluke/oh-my-agentCreate or revise OMA skills and their references. Use for skill routing, execution contracts, conditional loading, and authoring validation.OtherNo warnings★ 1.4K↓ —
- nist-800-53Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceNIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.SecurityNo warnings★ 1K↓ —
- swift-cspSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (26 mandatory, 6 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.SecurityNo warnings★ 1K↓ —
- cvpr-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CVPR submission campaign end to end, covering the November abstract/paper/supplement deadline chain, coauthor reviewer-duty scheduling, the January rebuttal sprint, February decisions, camera-ready and June conference logistics, and the resubmission ladder across ICCV, ECCV, and the next CVPR.ProductivityNo warnings★ 1.4K↓ —
- cscw-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CSCW submission timeline end to end — the PACMHCI journal model, the retired fixed cycles versus the rolling 2027+ pathway, Revise-and-Resubmit rounds that span months, and back-planning so an acceptance lands before the conference-year presentation cutoff.ProductivityNo warnings★ 1.4K↓ —
- cyber-essentialsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update rule, mandatory MFA for cloud services and the new auto-fail questions, CE Plus technical audits, pricing, annual renewal, the included cyber liability insurance, and procurement mandates (PPN 014, MoD Defence Cyber Certification, NHS). Use this skill whenever a user mentions Cyber Essentials, CE Plus, IASME, the UK government cyber certification, Danzell or Willow question sets, UK public-sector or MoD supply-chain security requirements, or wants a readiness gap assessment.SecurityNo warnings★ 1K↓ —
- oma-coordinationNewfirst-fluke/oh-my-agentCoordinate assigned specialist tasks and handoffs manually. Use when supervising a multi-agent project step by step.PlanningNo warnings★ 1.4K↓ —
- cis-controlsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.SecurityNo warnings★ 1K↓ —
- varg-tryon-videoNewhashgraph-online/awesome-codex-pluginsTurns a flat-lay or product photo of clothing into a try-on video on varg: clean the garment photo, dress a model photo in it with Bria Virtual Try-On (or a Nano Banana / GPT Image edit for harder garments), keep the same model across shots, then animate fit-check motions that sell clothes (slow turn, tug and let fall, walk to camera, mirror selfie, fabric close-up) on Kling 4 or Seedance 2.5 with the garment kept intact, and add size captions so the fit is honest. Use when a fashion or apparel seller (Shopify, TikTok Shop, Amazon, dropshipping) asks for a try-on video, "my clothes on a model", an AI model wearing their product, a fit-check or outfit video, a try-on haul, or virtual try-on from flat-lays. Not for accessories that need no body (use product-photo-to-video) or for consistent characters across a story (varg-character-design).MediaNo warnings★ 1.5K↓ —
- mcp-server-builderalirezarezvani/claude-skillsUse when exposing an API as an MCP server or scaffolding a new MCP server in Python or TypeScript, before hand-writing tool wrappers. Generates tools from OpenAPI with openapi_to_mcp.py and validates them with mcp_validator.py.WritingNo warnings★ 29.3K↓ —
- oma-academic-writingfirst-fluke/oh-my-agentDraft and revise academic prose against a rubric, evidence, and citation requirements. Use for essays, reports, literature reviews, or academic style audits.WritingNo warnings★ 1.4K↓ —
- oma-docsNewfirst-fluke/oh-my-agentCheck documentation references, sync docs to code changes, and detect translation drift. Use for documentation maintenance in a repository.EngineeringNo warnings★ 1.4K↓ —
- oma-architecturefirst-fluke/oh-my-agentEvaluate system boundaries and architectural tradeoffs. Use for architecture decisions, design reviews, and ADRs.PlanningNo warnings★ 1.4K↓ —
- kubernetes-operatoralirezarezvani/claude-skillsUse when building a Kubernetes operator or CRD (controller-runtime, kubebuilder, operator-sdk, KOPF), before writing the controller. Validates CRDs with crd_validator.py, lints reconcile loops with reconcile_lint.py and scores OperatorHub capability level.DevOpsNo warnings★ 29.3K↓ —
- oma-docsfirst-fluke/oh-my-agentCheck documentation references, sync docs to code changes, and detect translation drift. Use for documentation maintenance in a repository.EngineeringNo warnings★ 1.4K↓ —
eu-ai-act-specialist
alirezarezvani/claude-skills
PlanningUpdated yesterday
From the author
Use for EU AI Act (Regulation 2024/1689) compliance work: classifying an AI system's risk tier, planning the Art. 43 conformity route and Annex IV file, or listing obligations by role. Runs ai_system_risk_classifier.py, conformity_assessment_planner.py and ai_act_obligation_tracker.py, citing Articles.
Install
npx skills add alirezarezvani/claude-skills --skill eu-ai-act-specialist -a claude-code
Installs to .claude/skills/eu-ai-act-specialist/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (8)
- SKILL.md
- references/cross_framework_mapping_ai_act.md
- references/eu_ai_act_titles.md
- references/gpai_obligations.md
- references/high_risk_systems_annex_iii.md
- scripts/ai_act_obligation_tracker.py
- scripts/ai_system_risk_classifier.py
- scripts/conformity_assessment_planner.py