Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 17 hours ago
48,451 skills
- ui-designhashgraph-online/awesome-codex-pluginsDesign, build, or improve web and mobile interfaces using real product examples from UIZZE’s 800,000+ web and iOS screens. Use for UI design, UX design, frontend or web design, mobile app UI, responsive layouts, design systems, redesigns, visual polish, interface critique, and requests like “make this UI better.”DesignNo warnings★ 1.5K↓ —Also in 1 other repo
- soc2-compliancealirezarezvani/claude-skillsUse when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.LegalNo warnings★ 29.3K↓ —
- cold-emailalirezarezvani/claude-skillsUse for any cold outreach or SDR email or follow-up sequence to prospects who did not opt in, before drafting. Scores the sequence for length, personalization and spam risk with email_sequence_analyzer.py. Opted-in nurture: email-sequence.ProductivityNo warnings★ 29.3K↓ —
- setup-app-insightsmicrosoft/power-platform-skillsConfigure optional customer-owned Application Insights telemetry for a Power Apps mobile app — enable it against an existing Azure resource, change the resource, or disable it. Standalone, and invoked by /edit-app.DevOpsNo warnings★ 1.1K↓ —
- saas-metrics-coachalirezarezvani/claude-skillsUse when someone shares SaaS revenue or customer numbers, or asks about ARR, MRR, churn, LTV, CAC, NRR or how their SaaS is doing. Computes metrics with metrics_calculator.py, quick ratio and unit economics.OtherNo warnings★ 29.3K↓ —
- stripe-appsfcakyon/claude-codex-settingsBuild, modify, or review Stripe Apps and extensions using the relevant documentation and reference guides. Use for custom Stripe Dashboard UI, stripe-app.yaml, @stripe/ui-extension-sdk, @stripe/extensibility-sdk, script extensions, extension interfaces, custom workflow actions, and apps that authenticate to Stripe or react to events. Also use when deciding whether a Stripe extension can support the user's billing or workflow requirements.DesignNo warnings★ 1.2K↓ —
- stripe-docsfcakyon/claude-codex-settingsUse when the user or agent needs to read, search, or look up Stripe documentation or API reference. Prefer this over curl or WebFetch for any docs.stripe.com content. Use to fetch gated documentation.EngineeringNo warnings★ 1.2K↓ —
- cav-camera-readybrycewang-stanford/Awesome-Journal-SkillsUse when preparing an accepted CAV (Computer Aided Verification) paper for its Springer LNCS open-access camera-ready, covering de-anonymization for the previously double-blind categories, the LNCS llncs template and Springer metadata (ORCID, author order, running heads), the copyright/open-access forms, integrating reviewer-required changes without scope creep, permanentizing artifact links, and the AEC badge handoff.ScienceNo warnings★ 1.4K↓ —
- ui-regressionfcakyon/claude-codex-settingsThis skill should be used when the user asks to "verify UI changes", "audit UI quality", "test every screen and action", "run regression QA", "check a deployed UI", or "validate an extension release". Test known web and browser-extension workflows on localhost, staging, or production with action coverage, recovery, localization, accessibility, and real integration evidence. Use dogfood for open-ended bug discovery.DesignNo warnings★ 1.2K↓ —
- polar-billingfcakyon/claude-codex-settingsThis skill should be used when working on Polar billing system, Stripe integration, subscription lifecycle, checkout flows, or benefit provisioning.OtherNo warnings★ 1.2K↓ —
- dokploy-deployfcakyon/claude-codex-settingsThis skill should be used when user asks to "deploy with Dokploy", "use Dokploy Cloud", "manage self-hosted Dokploy", "deploy Docker Compose on Dokploy", "manage Dokploy databases", "configure Dokploy domains", or "look up Dokploy CLI commands".DevOpsNo warnings★ 1.2K↓ —
- review-overleaffcakyon/claude-codex-settingsThis skill should be used when user asks to "fetch overleaf review comments", "address overleaf reviews", "apply overleaf comments", "review my overleaf paper", "sync overleaf feedback to local", "what comments are on my overleaf doc", or wants to act on Overleaf reviewer feedback in a local git-tracked LaTeX repo.EngineeringNo warnings★ 1.2K↓ —
- cmmc-readinessalirezarezvani/claude-skillsUse when a defense contractor or subcontractor is preparing for a CMMC 2.0 Level 2 self-assessment or C3PAO assessment, calculating or checking an SPRS score against NIST SP 800-171 Rev 2, deciding what can go on a POA&M, tracking POA&M closeout before Conditional status expires, or scoping assets, enclaves and cloud providers that handle CUI. Scores all 110 requirements with the 32 CFR 170.24 weights, blocks gaps that can never be deferred, and classifies the asset inventory into CMMC asset categories.PlanningNo warnings★ 29.3K↓ —
- sandbox-stablefcakyon/claude-codex-settingsBuild or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package. Use sandbox-next for preview apps and sandbox-migrate-to-next for stable-to-preview migrations.DevOpsNo warnings★ 1.2K↓ —
- connect-recommendfcakyon/claude-codex-settingsUse this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.OtherNo warnings★ 1.2K↓ —
- landingalirezarezvani/claude-skillsUse when asked for a premium single-file HTML landing page with 3D CSS, GSAP scroll effects and parallax. Locks positioning in a short intake, validates the palette with brand_palette_validator.py and the output with html_validator.py.DesignNo warnings★ 29.3K↓ —
- seo-opshashgraph-online/awesome-codex-pluginsOps loop: weekly report, hand work to developers, track fix progress, and read charts from tool text (tables and sparklines).MarketingNo warnings★ 1.5K↓ —
- project-healthjezweb/claude-skillsAll-in-one project configuration and health management. Sets up new projects (settings.local.json, CLAUDE.md, .gitignore), audits existing projects (permissions, context quality, MCP coverage, leaked secrets, stale docs), tidies accumulated cruft, captures session learnings, and adds permission presets. Uses sub-agents for heavy analysis to keep main context clean. Trigger with 'project health', 'check project', 'setup project', 'kickoff', 'bootstrap', 'tidy permissions', 'clean settings', 'capture learnings', 'audit context', 'add python permissions', or 'init project'.EngineeringNo warnings★ 1.1K↓ —
- domain-selectionkostja94/marketing-skillsWhen the user wants to choose an SEO-friendly domain for a new site—brand vs keyword domain, TLD selection, or domain best practices. Also use when the user mentions "domain choice," "pick domain," "SEO-friendly domain," "brand domain," "EMD," "PMD," "exact match domain," "partial match domain," "TLD," ".ai domain," ".com vs .io," "domain length," "domain history," or "defensive domain registration." For migration, use rebranding-strategy.MarketingNo warnings★ 1.1K↓ —
- resolve-entity-identitysno-ai/sno-stationResolve a new entity display name to an existing entity id or to a new entity.OtherNo warnings★ 1.1K↓ —
- md-documentalirezarezvani/claude-skillsUse when converting long-form markdown (spec, RFC, report, plan) into a single-file HTML page with sticky TOC, search and code-copy. Parses with markdown_parser.py and renders with html_renderer.py using the design-system brand.DesignNo warnings★ 29.3K↓ —
- subagentshashgraph-online/awesome-codex-pluginsUse when a plan has parallel tasks and the harness supports dispatching subagents.PlanningNo warnings★ 1.5K↓ —
- red-teamalirezarezvani/claude-skillsUse when planning or running an authorized red team engagement or attack path analysis. Plans the kill chain with engagement_planner.py: MITRE ATT&CK techniques, choke points, OPSEC risk and crown jewels.PlanningNo warnings★ 29.3K↓ —
- social-media-kithuytieu/COG-second-brainAttach native media (teaser video, GIF, card images) to every social post, with per-platform upload stepsMarketingNo warnings★ 1.3K↓ —
security-baseline
rampstackco/claude-skills
SecurityUpdated Oct 27, 2026
From the author
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.
Install
npx skills add rampstackco/claude-skills --skill security-baseline -a claude-code
Installs to .claude/skills/security-baseline/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (3)
- README.md
- SKILL.md
- references/headers-checklist.md