Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,450 skills from 2,407 repositories · updated 34 minutes ago
48,356 skills
- dogfoodfcakyon/claude-codex-settingsSystematically explore and test a web application to find bugs, UX issues, and other problems. Use when asked to "dogfood", "QA", "exploratory test", "find issues", "bug hunt", "test this app/site/platform", or review the quality of a web application. Produces a structured report with full reproduction evidence -- step-by-step screenshots, repro videos, and detailed repro steps for every issue -- so findings can be handed directly to the responsible teams.TestingNo warnings★ 1.2K↓ —
- rfc-writermohitagw15856/pm-claude-skillsWrite an engineering RFC (Request for Comments) for a technical decision, architectural change, or significant implementation approach. Use when asked to write an RFC, document a technical proposal, create a design doc, write an architecture decision for review, or produce a technical specification for team feedback. Produces a complete RFC document covering problem statement, motivation, proposed solution, alternatives rejected, implementation plan, migration plan, security and performance implications, observability changes, rollout plan, and open questions.WritingNo warnings★ 1.5K↓ —
- ap-verifierSpielewoy/autoprompt-skillReport the compatibility redirect to `ap-independent-checker`; this retired role cannot perform new work.OtherNo warnings★ 1.2K↓ —
- site-checkmohitagw15856/pm-claude-skillsAnswer 'is this site down or is it just me' properly — curl status/timing diagnostics, DNS cross-check, and TLS certificate reads, assembled into a where-it's-broken diagnosis. Use when asked is this website down, why can't I reach this site, check if my site is up, or is the SSL certificate expired. Produces the layered diagnosis (DNS → TLS → HTTP → content), response timing, cert expiry, and the rerunnable commands.OtherNo warnings★ 1.5K↓ —
- cloudflare-apijezweb/claude-skillsHit the Cloudflare REST API directly for operations that wrangler and MCP can't handle well. Bulk DNS, custom hostnames, email routing, cache purge, WAF rules, redirect rules, zone settings, Worker routes, D1 cross-database queries, R2 bulk operations, KV bulk read/write, Vectorize queries, Queues, and fleet-wide resource audits. Produces curl commands or scripts. Triggers: 'cloudflare api', 'bulk dns', 'custom hostname', 'email routing', 'cache purge', 'waf rule', 'd1 query', 'r2 bucket', 'kv bulk', 'vectorize query', 'audit resources', 'fleet operation'.DevOpsNo warnings★ 1.1K↓ —
- review-prfcakyon/claude-codex-settingsThis skill should be used when user asks to "review a PR", "review pull request", "review this pr", "code review this PR", "check PREngineeringNo warnings★ 1.2K↓ —
- design-system-compliancereticlehq/reticleCheck that the UI you actually rendered uses the design system, by reading computed styles in the running app against the project's design tokens. Catches hardcoded hex colors, off-palette backgrounds, invisible or unusable controls, and animations that never ran. Use after building or restyling a component, when a design review is wanted, when a UI looks slightly off but nobody can say why, or when a design system exists and nothing checks whether the code follows it.DesignNo warnings★ 1.2K↓ —
- verify-language-switchreticlehq/reticleProve a language switch translates what the user sees, keeps what they had already typed, and is still in force after a reload. Use when i18n, a locale picker, a language menu or translation files were added or changed, when a string is suspected of staying in the old language or showing a raw translation key, or when a user reports losing their form or their language choice after switching or refreshing.OtherNo warnings★ 1.2K↓ —
- aeofcakyon/claude-codex-settingsThis skill should be used when the user asks to "build an AEO strategy", "improve AI search visibility", "track buyer prompts", "analyze AI citations", or "plan content for answer engines". Apply an evidence-led answer engine optimization (AEO/GEO) feedback loop to any product or service, prioritizing discovery by buyers who have not heard of it.PlanningNo warnings★ 1.2K↓ —
- sun-and-moonmohitagw15856/pm-claude-skillsGet sunrise, sunset, golden hour, day length, and moon phase for any location with zero API keys — sunrise-sunset.org and Open-Meteo via curl, times converted to local. Use when asked when is sunset today, golden hour for a photo shoot, how long is the day, what's the moon phase tonight, or sun times for a date and place. Produces the sun/moon times in the user's local zone (the UTC trap handled), the photography windows, and the rerunnable command.MediaNo warnings★ 1.5K↓ —
- pip-writermohitagw15856/pm-claude-skillsWrite a Performance Improvement Plan a manager can defend and an employee can actually act on — specific concerns, measurable goals, real support, and an honest timeline. Use when asked to write a PIP, put someone on a performance plan, document underperformance, or build a formal improvement plan. Produces the concern statement, the measurable goals with success criteria, the support plan, the check-in cadence, and the consequences — HR/legal-ready. Complements pip-responder (the employee's side).WritingNo warnings★ 1.5K↓ —
- dispute-lettermohitagw15856/pm-claude-skillsWrite a letter to dispute an incorrect charge, bill, or record. Use when asked to dispute a credit-card charge, contest a bill or invoice, challenge a credit-report error, or formally dispute a fee. Produces a clear dispute letter — what's being disputed, why it's wrong, the evidence, and the correction requested — in the firm, paper-trail tone these situations need.ScienceNo warnings★ 1.5K↓ —
- jd-decodermohitagw15856/pm-claude-skillsDecode a job description to find what they actually want beneath the buzzwords. Use when asked to analyse a job description, decode a JD, assess fit for a role, or figure out what a posting really means before applying. Produces a decode — the real must-haves vs. nice-to-haves, hidden priorities & culture signals, red flags, an honest fit assessment, and the exact phrases to mirror in your application.OtherNo warnings★ 1.5K↓ —
- parcel-trackingjezweb/claude-skillsTrack parcels and check delivery status for Australian and international couriers. Searches Gmail for dispatch/shipping emails and provides tracking links for all major Australian couriers including AusPost, StarTrack, Aramex, CouriersPlease, Sendle, Toll, Team Global Express, DHL, FedEx, TNT, Hunter Express, Border Express, Direct Freight Express, and UPS. Triggers: 'where is my parcel', 'track my order', 'has my package arrived', 'tracking status', 'check tracking', 'where is my delivery'.OtherNo warnings★ 1.1K↓ —
- setupfcakyon/claude-codex-settingsThis skill should be used when user encounters "Azure MCP error", "Azure authentication failed", "az login required", "Azure CLI not found", or needs help configuring Azure MCP integration.DevOpsNo warnings★ 1.2K↓ —
- five-mindsmohitagw15856/pm-claude-skillsAnswer a question five completely different ways — as five independent minds with clashing worldviews — then converge on what survives. Use when asked for multiple perspectives, look at this from every angle, what would different people think, or give me a range of views not one answer. Produces five genuinely distinct takes (each committed to one worldview, not hedged), the tensions between them made explicit, and a final synthesis that keeps what's strongest — deliberately widening the range before narrowing it.OtherNo warnings★ 1.5K↓ —
- quote-cardmohitagw15856/pm-claude-skillsPull the single most shareable quote out of a testimonial, review, interview, or long text and format it as a clean quote card. Use when asked to make a pull-quote, testimonial graphic, or 'quote card' for social/marketing. Produces a tightly-edited quote with attribution and 2-3 alternates, structured to look great exported as a PNG from the playground.MarketingNo warnings★ 1.5K↓ —
- xiaohei-illustrationsdzhng/skillsGenerate Ian-style Xiaohei illustrations for articles, posts, blogs, Notion documents, workflows, methods, processes, structures, states, metaphors, and opinions. Use when the user asks for weird, hand-drawn, Xiaohei, article, editorial, body illustrations, illustration ideas, shot lists, title removal, image edits, or image regeneration. By default, all image text and annotations are English, even when the source article is Chinese; only use another language when the user explicitly asks.MediaNo warnings★ 1.4K↓ —
- sop-writermohitagw15856/pm-claude-skillsWrite a Standard Operating Procedure (SOP) for any operational task. Use when asked to write an SOP, standard operating procedure, work instruction, or operating manual. Produces a formal SOP with purpose, scope, procedure steps, quality checks, and version control.WritingNo warnings★ 1.5K↓ —
- openspec-proposeMemeMeow-Studio/MemeMeowPropose a new change with all artifacts generated in one step. Use when the user wants to quickly describe what they want to build and get a complete proposal with design, specs, and tasks ready for implementation.DesignNo warnings★ 1.3K↓ —Also in 1 other repo
- idea-stormmohitagw15856/pm-claude-skillsGenerate a big, wide spread of ideas for anything by running the prompt through many different lenses at once, then clustering and picking. Use when asked to brainstorm ideas for, give me lots of options, help me come up with, or I need ideas for. Produces a high-volume, deliberately varied idea list generated across multiple angles (safe, wild, cheap, ambitious, weird, opposite), grouped into themes, and a shortlist of the most promising — maximizing range so you're not choosing from three obvious options.PlanningNo warnings★ 1.5K↓ —
- async-insteadmohitagw15856/pm-claude-skillsConvert a meeting into async work that actually decides — the doc-plus-deadline format that replaces the room, the comment-window rules, the decision-closure step that async usually fumbles, and the honest test for what still needs synchronous. Use when asked can this meeting be async, replace our status meeting with a doc, run this decision without a call, or async isn't working for us. Produces the conversion design, the async artifact format, the closure protocol, and the still-needs-a-room list.TestingNo warnings★ 1.5K↓ —
- setupfcakyon/claude-codex-settingsThis skill should be used when user encounters "Tavily MCP error", "Tavily API key invalid", "web search not working", "Tavily failed", or needs help configuring Tavily integration.EngineeringNo warnings★ 1.2K↓ —
- test-auditfcakyon/claude-codex-settingsThis skill should be used when the user asks to "write a test", "review these tests", "audit tests", "prune low-value tests", or "find duplicate tests", and whenever writing, changing, reviewing, or sweeping tests. Gates new tests and audits low-value, implementation-coupled, or duplicative tests and the test-only production seams they demand.TestingNo warnings★ 1.2K↓ —
cis-controls
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
SecurityUpdated Oct 10, 2026
From the author
Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill cis-controls -a claude-code
Installs to .claude/skills/cis-controls/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (4)
- SKILL.md
- references/framework-mappings.md
- references/implementation-guidance.md
- references/safeguards-detail.md