Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 7 hours ago
48,451 skills
- bounty-guardhashgraph-online/awesome-codex-pluginsPre-flight GitHub bounty security scanner and on-chain Proof-of-Escrow MCP verifier for AI coding agents. Classifies GitHub bounties into SAFE_WITH_ESCROW, SAFE_NO_ESCROW, or QUARANTINE.SecurityNo warnings★ 1.5K↓ —
- triagehashgraph-online/awesome-codex-pluginsTurn incoming reports, external PRs and alerts into evidence-based decisions and agent-ready briefs. Use when: intake arrives. For accepted work, use Plan.PlanningNo warnings★ 1.5K↓ —Also in 2 other repos
- social-overlaysNewhashgraph-online/awesome-codex-pluginsEleven conversion overlays for short-form ads, UGC and creator videos, with presets per platform: CTA pill, follow tap prompt, story sticker tag, LIVE badge with viewer count, notification drop, review proof card, story caption bar, photo wall loop, follower counter and goal bar, comment callout (reply-to-comment) and subscribe-and-bell nudge. Presets use one universal 9:16 safe box built from TikTok, Meta Reels, YouTube Shorts and Snap specs, CTA timing from creator analysts (ask after value, never in the intro), native number formats, contrast and motion tokens, plus the FTC rules: reviews, comments and counts come from real data only and paid content is disclosed. Use when an ad or creator video needs a call to action, a subscribe or follow ask, a review or comment on screen, a LIVE badge or a counter. NOT for fake reviews, fake follower counts or copying a platform's logo.MediaNo warnings★ 1.5K↓ —
- code-quality-analyzeralibaba/skill-upTriggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".EngineeringNo warnings★ 1.4K↓ —
- stylehashgraph-online/awesome-codex-pluginsA game's look as a set of decisions that fit together — render style, palette, shape language, proportions, materials, light, camera, fonts and effects; then the cast, its library family, scale and phone budgets — each picked automatically from the person's words with a one-line why, which the person can steer ("warmer", "closer"), lock, or explore on a style board of three directions drawn by the game engine itself (free; a painted mood image only on their own fal account). Locked and pinned decisions keep every asset coherent: change one and the blast radius lists exactly what went stale and what remaking it would cost, and nothing is remade without a yes. Use when someone talks about a game's look or style, "make it look like…", "show me other looks", "keep that palette", "darker", "the art doesn't fit together", or before making any models or art for a game.MediaNo warnings★ 1.5K↓ —
- app-ui-mockupsNewhashgraph-online/awesome-codex-pluginsTen animated UI mockups for product, launch and dev-tool videos, rebuilt as HTML instead of screen recordings: phone message thread, team chat channel, coding-agent terminal session, terminal command run, desktop terminal window, desktop notification banner, code editor walkthrough, 3D code slab, exploded UI panels and an amber CRT console. Presets give typing speed (12-20 characters per second with seeded gaps), reading holds from character count, entrance easing and scale, camera lead before each action, text size as a share of frame height, and theme colors from MIT theme sources, from Charm VHS, Screen Studio, Emil Kowalski, Apple HIG and Netflix timing rules. Use when someone wants a fake text or Slack conversation, a terminal or Claude Code demo, a code walkthrough or an exploded UI shot in a video. NOT for recording a real screen or for real people's messages presented as genuine.DesignNo warnings★ 1.5K↓ —
- greploop-appsmichaelshimeles/rstackRun the greploop workflow with the @greptile-apps trigger when the normal trigger refuses a large PR. Requires the greploop skill installed alongside this entrypoint.ProductivityNo warnings★ 1.4K↓ —
- unslopmichaelshimeles/rstackCut AI tells from text you write or edit for a human reader (commit messages, PR titles and bodies, docs, code comments, replies). Apply before committing, posting, or sending; leave prose you didn't touch alone.WritingNo warnings★ 1.4K↓ —
- toolshashgraph-online/awesome-codex-pluginsAdd studio-owned MCP tools, prompts, app-record resources or signed inbound integrations to a Homie studio, sell goods or priced services to customers' AIs, declare event functions, and connect an AI through browser approval.BrowserNo warnings★ 1.5K↓ —
- ibkrhashgraph-online/awesome-codex-pluginsKeep an eye on an Interactive Brokers (IBKR) account or prices and speak up when something changes - new executions, prices crossing a level, option assignments and exercises, deposits and withdrawals, big moves in net asset value. Use when the user wants Codex to watch their IBKR account or IBKR market data, and when handling a fire of an IBKR trigger.OtherNo warnings★ 1.5K↓ —
- inithashgraph-online/awesome-codex-pluginsSet up docflow in a repo with no docs yet: scaffold the docs tree, write docflow.json, add agent guidance. Use when asked to "set up docflow", "initialize docs", "scaffold docs", or "make this repo use docflow".WritingNo warnings★ 1.5K↓ —
- baoyu-url-to-markdownJimLiu/baoyu-skillsFetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via Defuddle. Handles login/CAPTCHA via interaction wait modes. Use when user wants to save a webpage as markdown.BrowserNo warnings★ 27.3K↓ —
- sfxmintNewhashgraph-online/awesome-codex-pluginsAdd free CC0 sound effects to a web app or game without an API key, using the SFXMint API (sound roles, sets grouped by event, search) and permanent hotlinkable MP3/WAV URLs. With an SFXMint API key it can also generate a sound the library lacks. Use when the user asks to add sounds, audio feedback or UI sounds to an app, wants click / notification / success / error / alert sounds, game sound effects (coin, jump, hit, explosion, power-up, game over), ambience (rain, forest, drone), sound on a code-driven video or animation (Remotion, motion graphics), or asks where to get free sound effects for an app, game, video, prototype or demo. Not for music, voice or speech.DesignNo warnings★ 1.5K↓ —
- archivehashgraph-online/awesome-codex-pluginsUse at ship time to merge the spec into the living documentation, delete the staging spec and plan, and ask how to finish.PlanningNo warnings★ 1.5K↓ —
- oma-pmfirst-fluke/oh-my-agentTurn product requirements into scoped tasks with dependencies and acceptance criteria. Use for implementation planning and prioritization.PlanningNo warnings★ 1.4K↓ —Also in 1 other repo
- vidseedshashgraph-online/awesome-codex-pluginsRegistry fallback entry point for the VidSeeds.ai MCP connector. Use the bundled domain skills for setup, efficiency, thumbnails, projects, analytics, local video, and publishing workflows.DataNo warnings★ 1.5K↓ —
- gitnexushashgraph-online/awesome-codex-plugins将 GitNexus 作为受控可选代码智能能力接入，用于 brownfield MCP 查询、影响面分析、 detect_changes、多仓分析和更深代码图谱证据。输出必须回落到 `/team-*` 主链和 artifacts。OtherNo warnings★ 1.5K↓ —
- graphifyhashgraph-online/awesome-codex-plugins将 Graphify 作为可选知识图谱能力接入，用于 brownfield 结构扫描、依赖路径分析与架构问答。 不替代 `/team-*` 主链；输出统一回落到 handoff 与 artifacts 证据。OtherNo warnings★ 1.5K↓ —
- sandbox-mcpalibaba/skill-upVerify Sandbox MCP can be installed and called from skill-up.OtherNo warnings★ 1.4K↓ —
- compare-showshashgraph-online/awesome-codex-pluginsCompares two podcasts or YouTube shows side by side: size, latest episode, what each talks about, what both cover, and shared sponsors. Uses arcmira.OtherNo warnings★ 1.5K↓ —
- blueprinthashgraph-online/awesome-codex-pluginsTurn a one-line objective into a step-by-step construction plan for multi-session, multi-agent engineering projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review gate, dependency graph, parallel step detection, anti-pattern catalog, and plan mutation protocol. TRIGGER when: user requests a plan, blueprint, or roadmap for a complex multi-PR task, or describes work that needs multiple sessions. DO NOT TRIGGER when: task is completable in a single PR or fewer than 3 tool calls, or user says "just do it".PlanningNo warnings★ 1.5K↓ —
- renhuahashgraph-online/awesome-codex-pluginsRenhua (人话): write Chinese posts, diaries, product copy and comment replies in a real person's voice and strip AI tells (emoji checklists, parallel triplets, slogan endings, stock closing questions), with a viral Xiaohongshu title library and humor patterns. Use when writing Chinese content for Xiaohongshu, X, WeChat Moments or a product page, or when the user says it sounds like AI and should sound human. Triggers: 太像 AI 了, 说人话, 去 AI 味, 用我的口吻, 写小红书, 写朋友圈, 产品介绍; 中国語の投稿をAIっぽくなく; 중국어 글 AI 티 안 나게; viết bài tiếng Trung tự nhiên; चीनी पोस्ट इंसानी लहजे में.FinanceNo warnings★ 1.5K↓ —
- design-fixhashgraph-online/awesome-codex-pluginsCompare one already-implemented screen or component against its Figma source and fix the deviations you pick -- reads the node live through the figma-bridge MCP, or from the Node Specs of an existing /design plan, then diffs box, layout, typography, fill, stroke, radius, effects, and content against the code that renders it. Reports first, fixes only what you select, and never touches Figma.DesignNo warnings★ 1.5K↓ —
- runhashgraph-online/awesome-codex-pluginsRun a full pipeline for a task. Orchestrates roles through stages (standalone or HOTL-integrated).ProductivityNo warnings★ 1.5K↓ —
mcp-oauth-triage
alirezarezvani/claude-skills
EngineeringUpdated yesterday
From the author
Use when an MCP connector that used to authenticate now fails (tool calls 401 after a good token exchange, breaks after refresh, returns another account's data), before changing code. Classifies the fault with oauth_triage.py.
Install
npx skills add alirezarezvani/claude-skills --skill mcp-oauth-triage -a claude-code
Installs to .claude/skills/mcp-oauth-triage/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (17)
- README.md
- SKILL.md
- assets/fixtures/binding_record.json
- assets/fixtures/clean_events.jsonl
- assets/fixtures/clean_record.json
- assets/fixtures/envelope_record.json
- assets/fixtures/expiry_record.json
- assets/fixtures/negative_cache_events.jsonl
- assets/fixtures/negative_cache_record.json
- assets/fixtures/rotation_events.jsonl
- assets/fixtures/rotation_record.json
- examples/rotation-clobber-walkthrough.md
- +5 more