Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 21 minutes ago
48,317 skills
- cav-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted CAV (Computer Aided Verification) paper for its Springer LNCS open-access camera-ready, covering de-anonymization for the previously double-blind categories, the LNCS llncs template and Springer metadata (ORCID, author order, running heads), the copyright/open-access forms, integrating reviewer-required changes without scope creep, permanentizing artifact links, and the AEC badge handoff.ScienceNo warnings★ 1.4K↓ —
- cvpr-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a CVPR submission before the OpenReview deadline, covering abstract registration and profile requirements, the 8-page limit including figures and tables, the Compute Reporting Form, anonymity and external-link bans, dual-submission attestations, reviewer-duty enrollment, and desk-reject triage.PlanningNo warnings★ 1.4K↓ —
- atc-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when writing or auditing the related-work and positioning of an ATC (ACM SIGOPS Annual Technical Conference, formerly USENIX ATC) systems paper — covering the systems literature lanes, positioning against OSDI/SOSP/NSDI/EuroSys/FAST, writing delta-first comparisons, and keeping self-citation double-blind.ScienceNo warnings★ 1.4K↓ —
- d1-migrationjezweb/claude-skillsCloudflare D1 migration workflow: generate with Drizzle, inspect SQL for gotchas, apply to local and remote, fix stuck migrations, handle partial failures. Use when running migrations, fixing migration errors, or setting up D1 schemas.DevOpsNo warnings★ 1.1K↓ —
- react-nativejezweb/claude-skillsReact Native and Expo patterns for building performant mobile apps. Covers list performance, animations with Reanimated, navigation, UI patterns, state management, platform-specific code, and Expo workflows. Use when building or reviewing React Native code. Triggers: 'react native', 'expo', 'mobile app', 'react native performance', 'flatlist', 'reanimated', 'expo router', 'mobile development', 'ios app', 'android app'.EngineeringNo warnings★ 1.1K↓ —
- icdm-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ICDM (IEEE International Conference on Data Mining) submission for readiness, covering Research-vs-Applied track choice and its anonymity regime, the triple-blind sweep, the 10-page IEEE all-inclusive cap, the single June deadline, in-paper artifact references, and the desk-level triggers that get an ICDM paper rejected without review.ScienceNo warnings★ 1.4K↓ —
- web-perffcakyon/claude-codex-settingsAudit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.OtherNo warnings★ 1.2K↓ —
- fse-related-workbrycewang-stanford/Awesome-Journal-SkillsUse when positioning an ESEC/FSE submission against the software-engineering literature across ICSE, FSE, ASE, ISSTA, MSR, and the SE journals (EMSE, TSE, TOSEM), writing delta-first contrast rather than a citation catalog, keeping self-citations double-anonymous, and handling concurrent, preprint, and prior-version overlap.WritingNo warnings★ 1.4K↓ —
- minehashgraph-online/awesome-codex-pluginsUse only when the user explicitly asks to run, set up, update, re-mine, or deepen Emulo from real local AI coding-session history.EngineeringNo warnings★ 1.5K↓ —Also in 2 other repos
- django-htmxhashgraph-online/awesome-codex-pluginsBuild and review HTMX interactions in Django server-rendered projects, especially generated django-saas-starter apps. Use when adding hx attributes, partial template responses, request.htmx branching, django-htmx response headers, forms, swaps, triggers, redirects, polling, boosted links or forms, or coordinating HTMX with Alpine.js local state.MediaNo warnings★ 1.5K↓ —
- coding-agent-rolloutalirezarezvani/claude-skillsRoll out Claude Code to a team: shared or managed settings, MCP and plugin approval, layered CLAUDE.md, adoption. Use whenever the user sets up Claude Code for their team or org, or asks if a rollout or settings file is right.EngineeringNo warnings★ 29.3K↓ —
- referral-programalirezarezvani/claude-skillsUse when designing or fixing a referral, affiliate or ambassador program, before setting rewards. Models payout and ROI with referral_roi_calculator.py and designs the mechanics end to end.OtherNo warnings★ 29.3K↓ —
- <provider-id>Anil-matcha/awesome-muse-connectors<What it does, one line>. Trigger phrases: <phrases>.OtherNo warnings★ 1.4K↓ —
- full-page-screenshotalirezarezvani/claude-skillsUse when asked for a full-page or long screenshot of a web page. Captures SPA scroll containers, lazy images and very tall pages through Chrome DevTools Protocol with no extra dependencies.BrowserNo warnings★ 29.3K↓ —
- kdd-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted KDD paper for ACM proceedings, covering the 12-page proceedings budget with 9 content pages, the extra content page over the submission, the 3-page cap on references plus appendix, ACM e-rights and TAPS source processing, ACM Open APC status, de-anonymization, and Digital Library metadata for SIGKDD.ScienceNo warnings★ 1.4K↓ —
- email-lifecycle-broadcast-plannergooseworks-ai/goose-skillsStep of the email-lifecycle playbook: builds the month's send calendar and writes this week's email and SMS broadcasts against the approved cadence and segments. Run email-lifecycle instead; not for direct use.PlanningNo warnings★ 1.3K↓ —
- make-static-ads-fix-rejectedgooseworks-ai/goose-skillsStep of the make-static-ads playbook: fixes a static image ad the platform rejected — finds the ad, maps the platform's reason to the line or element at fault, fixes copy for free or re-composes the image text on a quote, re-runs the claims and policy checks, and answers the request. A rejected video is the video playbook's job. Run make-static-ads instead; not for direct use.MarketingNo warnings★ 1.3K↓ —
- ndss-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when performing the final pre-upload audit of an NDSS submission — HotCRP fields, the AoE deadline, NDSS template and 13-page compliance, double-blind sweep, ethics readiness, the six-per-author cap, overlap rules, and desk-reject triage in the last week.LegalNo warnings★ 1.4K↓ —
- improve-search-visibility-question-setgooseworks-ai/goose-skillsStep of the improve-search-visibility playbook: drafts and scores the buyer-question set in AI and Google forms and groups it into page clusters. Run improve-search-visibility instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- analyze-performance-diagnosegooseworks-ai/goose-skillsStep of the analyze-performance playbook: flags tracking breaks with fixes and explains each big metric move with evidence, confidence and ruled-out causes. Run analyze-performance instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- oma-architecturefirst-fluke/oh-my-agentEvaluate system boundaries and architectural tradeoffs. Use for architecture decisions, design reviews, and ADRs.PlanningNo warnings★ 1.4K↓ —
- run-paid-campaigns-health-gategooseworks-ai/goose-skillsChecks that ads are safe to spend on: conversion tracking recording, landing pages loading on mobile with the right product, price and offer, enough stock behind promoted products, no disapproved ads, and no account or payment stop. Marks each pass, fail or unknown and turns fails into fixes. Use alone when you already have the live or planned ads and their landing pages; otherwise run run-paid-campaigns.FinanceNo warnings★ 1.3K↓ —
- oma-explanationfirst-fluke/oh-my-agentCreate an offline HTML explanation of a code change (diff, PR, branch) or of a topic, system, or question. Use when a visual walkthrough document is requested.EngineeringNo warnings★ 1.4K↓ —
- research-market-market-passgooseworks-ai/goose-skillsStep of the research-market playbook: the worker brief for researching the market itself, including category, size, changes, pricing norms and demand. Run research-market instead; not for direct use.ScienceNo warnings★ 1.3K↓ —
security-audit
cloudflare/security-audit-skill
OfficialSecurityUpdated Sep 14, 2026
From the author
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
Install
npx skills add cloudflare/security-audit-skill --skill security-audit -a claude-code
Installs to .claude/skills/security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance100
Maintenance85
Licence100
Adoption72
Files (20)
- AI-AND-LLM.md
- ATTACK-CLASSES.md
- CLIENT-SIDE.md
- CLOUD-AND-DEPLOYMENT.md
- DATA-ISOLATION-AND-LIFECYCLE.md
- DESKTOP-MOBILE-AND-LOCAL-IPC.md
- HUNTING.md
- MEMORY-SAFETY-AND-BINARY.md
- PROTOCOLS-RPC-AND-MESSAGING.md
- RECONNAISSANCE.md
- RESOURCE-EXHAUSTION-AND-AVAILABILITY.md
- SKILL.md
- +8 more