Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,456 skills from 2,407 repositories · updated 23 minutes ago
48,356 skills
- changelog-page-generatorkostja94/marketing-skillsDeprecated compatibility entry for Changelog Page construction. This page is now maintained in Pagina; install and use page-builder to build a new Changelog Page.OtherNo warnings★ 1.1K↓ —
- baoyu-diagramJimLiu/baoyu-skillsCreate professional diagrams with configurable dark/light theme via CSS custom properties. Use this skill whenever the user asks for any kind of technical or conceptual diagram, visualization of a system, process flow, data flow, component relationship, network topology, decision tree, org chart, state machine, or any visual representation of structure/logic/process. Also trigger when the user says "画个图" "画一个架构图" "diagram" "flowchart" "sequence diagram" "draw me a ..." or uploads content and asks to visualize it. Outputs a dark-theme SVG, a light-theme SVG, and a @2x PNG of each.DesignNo warnings★ 27.3K↓ —
- hero-generatorkostja94/marketing-skillsDeprecated compatibility entry for Hero construction. This component is now maintained in Bricks; install and use component-builder to build a new Hero.OtherNo warnings★ 1.1K↓ —
- operating-livekit-agentsfcakyon/claude-codex-settingsDeploys and operates a LiveKit agent in production: shipping a version to LiveKit Cloud and rolling it back, secrets and configuration, the worker process model and prewarming, safe async inside worker processes, provider timeouts and degradation, graceful shutdown, SDK upgrades, and observability. Use when the user says "deploy my agent", "roll back the deployment", "tail the agent logs", "the first call after a restart is slow", "attached to a different loop / event loop is closed", "prewarm the VAD", "shut down without dropping calls", "upgrade livekit-agents safely", "correlate logs by session", or is changing an agent codebase that is already live. Not for designing the agent (building-livekit-agents) or reproducing one bad conversation locally (debugging-livekit-agents).DevOpsNo warnings★ 1.2K↓ —
- md-reviewalirezarezvani/claude-skillsUse when converting a markdown code review with diff blocks and severity callouts into a two-column HTML review. Parses diffs with diff_parser.py and annotations with annotation_extractor.py; requires a named reviewer.EngineeringNo warnings★ 29.3K↓ —
- web-performance-optimizationfcakyon/claude-codex-settingsAudit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.OtherNo warnings★ 1.2K↓ —
- swift-cspSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (26 mandatory, 6 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.SecurityNo warnings★ 1K↓ —
- pods-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning an ACM PODS project timeline across its multiple submission cycles per year, from venue fit through the EasyChair abstract-then-paper deadlines, the 48-hour rebuttal, the accept/reject/revision decision and shepherded revision round, PACMMOD-track publication, the arXiv full version, and presentation — with backward-planning offsets for a theory paper and honest handling of cycle choice.ProductivityNo warnings★ 1.4K↓ —
- cvpr-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CVPR submission campaign end to end, covering the November abstract/paper/supplement deadline chain, coauthor reviewer-duty scheduling, the January rebuttal sprint, February decisions, camera-ready and June conference logistics, and the resubmission ladder across ICCV, ECCV, and the next CVPR.ProductivityNo warnings★ 1.4K↓ —
- seohashgraph-online/awesome-codex-pluginsFix SEO problems Loomaly ranks first: status → todo (fix is on the top item) → change code on a branch → check target fix with the PR link. For solo and developers.MarketingNo warnings★ 1.5K↓ —
- connect-required-verification-informationfcakyon/claude-codex-settingsUse this skill when the user asks what information a Stripe Connect connected account must provide for verification, onboarding, KYC, or account requirements; when they need to compare requirements between connected-account setups; or when they ask which verification fields, documents, or business details are required for a particular platform country, account country, business type, dashboard, service agreement, or capability.PlanningNo warnings★ 1.2K↓ —
- pr-review-fixTencentCloudBase/CloudBase-AI-ToolkitPeriodically analyze open pull requests for CI failures, code review feedback, and quality issues, then fix them in batch. Use this skill when the user asks to check PR status, triage CI failures, fix review comments, analyze open PRs, or run a scheduled PR health check across the repository.EngineeringNo warnings★ 1.2K↓ —
- minutes-lintsilverstein/minutesHealth-check your meeting knowledge for contradictions, stale commitments, and decision conflicts. Use when the user asks "any conflicts in my meetings", "check for stale action items", "lint my meetings", "consistency check", "are there contradictions", or wants to audit their decision history.OtherNo warnings★ 1.6K↓ —Also in 1 other repo
- grantsalirezarezvani/claude-skillsUse for any NIH funding question ('find grants for my research', 'which NIH institute'). Maps the idea to institutes, study sections and NOSIs via RePORTER, matches mechanisms with mechanism_matcher.py and writes a .docx strategy. NIH only.DocumentsNo warnings★ 29.3K↓ —
- patentalirezarezvani/claude-skillsUse for prior-art search, freedom-to-operate, patent landscape, acquisition diligence or litigation prior art. Picks the use case with sub_use_case_router.py, searches Google Patents, Espacenet and USPTO and writes a .docx; not legal advice.DocumentsNo warnings★ 29.3K↓ —
- tc-trackeralirezarezvani/claude-skillsUse when tracking technical changes as records, or handing work between AI sessions with a change record. Creates, updates and validates change records with tc_create.py, tc_update.py and tc_validator.py.OtherNo warnings★ 29.3K↓ —
- codebase-auditTencentCloudBase/CloudBase-AI-ToolkitPerform a full codebase review, categorize findings by severity, file GitHub issues, then fix each issue in an isolated git worktree and submit PRs. Use this skill when the user asks to audit the codebase, do a comprehensive code review, find and fix security/quality/reliability issues, or run a proactive health check across the entire repository.SecurityNo warnings★ 1.2K↓ —
- cscw-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a CSCW submission timeline end to end — the PACMHCI journal model, the retired fixed cycles versus the rolling 2027+ pathway, Revise-and-Resubmit rounds that span months, and back-planning so an acceptance lands before the conference-year presentation cutoff.ProductivityNo warnings★ 1.4K↓ —
- doc-freshness-reviewTencentCloudBase/CloudBase-AI-ToolkitUse when auditing repository documentation for drift, stale statements, broken references, or README mismatches, especially across published docs under `doc/` and key entry surfaces such as `README.md` (English default), `README.zh-CN.md`, `mcp/README.md`, and `mcp/README.zh-CN.md` during periodic maintenance or before preparing corrective PRs.EngineeringNo warnings★ 1.2K↓ —
- cyber-essentialsSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update rule, mandatory MFA for cloud services and the new auto-fail questions, CE Plus technical audits, pricing, annual renewal, the included cyber liability insurance, and procurement mandates (PPN 014, MoD Defence Cyber Certification, NHS). Use this skill whenever a user mentions Cyber Essentials, CE Plus, IASME, the UK government cyber certification, Danzell or Willow question sets, UK public-sector or MoD supply-chain security requirements, or wants a readiness gap assessment.SecurityNo warnings★ 1K↓ —
- minehashgraph-online/awesome-codex-pluginsUse only when the user explicitly asks to run, set up, update, re-mine, or deepen Emulo from real local AI coding-session history.EngineeringNo warnings★ 1.5K↓ —Also in 2 other repos
- wrap-upalirezarezvani/claude-skillsUse when closing out a launched managed agent ('wrap up', 'what do I own now'). Inventories primitives with primitives_inventory.py, regenerates the overview with overview_page.py and suggests next upgrades with upgrade_suggester.py.OtherNo warnings★ 29.3K↓ —
- a-philosophy-of-software-designciembor/agent-rules-booksApply John Ousterhout-inspired software design rules when reducing complexity, designing module boundaries, or reviewing APIs and abstractions.DesignNo warnings★ 3.2K↓ —
- code-completeciembor/agent-rules-booksApply Steve McConnell-inspired construction rules when implementing routines, variables, classes, control flow, defensive code, or tests.EngineeringNo warnings★ 3.2K↓ —
security-baseline
rampstackco/claude-skills
SecurityUpdated Oct 27, 2026
From the author
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.
Install
npx skills add rampstackco/claude-skills --skill security-baseline -a claude-code
Installs to .claude/skills/security-baseline/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (3)
- README.md
- SKILL.md
- references/headers-checklist.md