Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 18 hours ago
48,451 skills
- openmeld-cliamplifthq/openmeldUse OpenMeld when a task needs Organization knowledge or Skills, Center Agent help, shared Spaces or Files, another Agent or computer, or scheduled cloud work. Also use for OpenMeld setup and Wake replies.EngineeringNo warnings★ 1.4K↓ —Also in 3 other repos
- wake-traceamplifthq/openmeldUse when diagnosing a Wake that failed, stalled, or produced no visible reply — dispatch, setup handoff, or reply-path issues. Routes to the deterministic trace evidence path.OtherNo warnings★ 1.4K↓ —
- md-reviewalirezarezvani/claude-skillsUse when converting a markdown code review with diff blocks and severity callouts into a two-column HTML review. Parses diffs with diff_parser.py and annotations with annotation_extractor.py; requires a named reviewer.EngineeringNo warnings★ 29.3K↓ —
- crossposthashgraph-online/awesome-codex-pluginsMulti-platform content distribution across X, LinkedIn, Threads, and Bluesky. Adapts content per platform using content-engine patterns. Never posts identical content cross-platform. Use when the user wants to distribute content across social platforms.MarketingNo warnings★ 1.5K↓ —
- codegraphhashgraph-online/awesome-codex-plugins将 CodeGraph 作为默认内置 MCP-backed 代码图谱能力接入，用于 brownfield 符号搜索、 调用链、影响面和上下文查询。输出必须回落到 `/team-*` 主链和 artifacts。OtherNo warnings★ 1.5K↓ —
- amapnano-muse/nanoMusePlaces, routes, travel times, distances and weather in China through the 高德地图 (Amap) MCP server. Use when the user asks how far, how long, how to get somewhere (car, transit, bike, foot), what is near a place, or about the weather in a Chinese city.OtherNo warnings★ 3.2K↓ —
- web-designhashgraph-online/awesome-codex-pluginsUse for web interfaces, landing pages, product sites, dashboards, React, Next.js, Astro, Tailwind, frontend audits, responsive design, browser interaction, web motion, or requests for a distinctive non-generic website. Select the web surface and implementation track, load a small reference bundle, preserve usability and accessibility, and validate the rendered result. Skip when the target is exclusively native Apple, Android, or Windows.DesignNo warnings★ 1.5K↓ —
- report-issuemicrosoft/power-platform-skillsUse this skill when the user wants to "report a bug", "file an issue", "report an issue", "submit a bug report", or report any problem with the power-pages plugin to the GitHub repository.OtherNo warnings★ 1.1K↓ —
- fixhashgraph-online/awesome-codex-pluginsWhen explicitly invoked with a software defect or unwanted behavior, translate the natural-language report and repository evidence into one compact repair contract, explain it plainly, then fix it in one approved shot. Never invoke implicitly.LegalNo warnings★ 1.5K↓ —
- cloud-storage-webTencentCloudBase/CloudBase-AI-ToolkitComplete guide for CloudBase cloud storage using Web SDK (@cloudbase/js-sdk) - upload, download, temporary URLs, file management, and best practices.OtherNo warnings★ 1.2K↓ —
- add-sharepointmicrosoft/power-platform-skillsAdds SharePoint Online connector to a Power Apps code app. Use when reading lists, managing documents, or integrating with SharePoint sites. Can also create new SharePoint lists.EngineeringNo warnings★ 1.1K↓ —
- test-gaphashgraph-online/awesome-codex-pluginsSurface changed git diff lines that are not covered by testsTestingNo warnings★ 1.5K↓ —
- benchmarkhashgraph-online/awesome-codex-pluginsUse this skill to measure performance baselines, detect regressions before/after PRs, and compare stack alternatives.OtherNo warnings★ 1.5K↓ —
- reflectNewhashgraph-online/awesome-codex-pluginsMine this session's transcript for lessons that will still hold in six months and turn each into an edit to a skill the session used, applied only after the user approves. Use at the end of a session, or on "reflect", "what should we learn from this", "capture lessons".WritingNo warnings★ 1.5K↓ —
- create-prfcakyon/claude-codex-settingsThis skill should be used when user asks to "create a PR", "make a pull request", "open PR for this branch", "submit changes as PR", "push and create PR", or explicitly invokes "create-pr".EngineeringNo warnings★ 1.2K↓ —
- implementhashgraph-online/awesome-codex-pluginsChange or repair code, config or services without weakening tests; report what ran and what did not. Use when: implementing a change or fixing a defect.TestingNo warnings★ 1.5K↓ —Also in 2 other repos
- run-qafcakyon/claude-codex-settingsThis skill should be used when user asks to "run QA", "verify real playback", "test provider connections", or "check website, extension or Android flows" with tracked journeys.TestingNo warnings★ 1.2K↓ —
- clinical-researchalirezarezvani/claude-skillsUse when designing a prospective clinical study: choosing primary and secondary endpoints, estimating sample size and power, or scoring feasibility before submission. Runs endpoint_selector.py, sample_size_estimator.py and phase_gate_scorer.py; outputs are estimates for a biostatistician to confirm.ScienceNo warnings★ 29.3K↓ —
- iso42001-specialistalirezarezvani/claude-skillsUse for ISO/IEC 42001 AI management system work: gap analysis against Clauses 4-10, the AI risk register and Annex A controls, or the internal audit plan. Runs aims_gap_analyzer.py, ai_risk_register_builder.py and aims_audit_scheduler.py.PlanningNo warnings★ 29.3K↓ —
- minimal-web-baas-demoTencentCloudBase/CloudBase-AI-ToolkitFast path for a minimal CloudBase Web + database demo (最小前后端 / 最小可用 fullstack / Lovable-like BaaS). Defaults to @cloudbase/js-sdk client CRUD (NoSQL app.database / PG app.rdb), MCP-only schema, preview-first, and forbids cloud functions unless secrets, cron/background jobs, or logic that security rules/RLS cannot express. Use for 搭一套 demo、留言板、Todo、Notes、Kanban, or when users say 带云函数+云数据库 but only need CRUD. NOT for production multi-service backends, CloudRun, WeChat Mini Programs, or tasks that truly need server secrets.SecurityNo warnings★ 1.2K↓ —Also in 5 other repos
- cloudbase-document-database-in-wechat-miniprogramTencentCloudBase/CloudBase-AI-ToolkitUse CloudBase document database WeChat MiniProgram SDK to query, create, update, and delete data. Supports complex queries, pagination, aggregation, and geolocation queries.DataNo warnings★ 1.2K↓ —Also in 5 other repos
- render-cartoon-music-videogooseworks-ai/goose-skillsAssemble a cartoon / animated / hand-crafted music-video ad from a config — a sung song carries the whole narrative while N per-bar i2v clips (one recurring animated character, one look pack) are each cut to their BAR window from librosa beat-tracking and hard-concatenated on the bar, VEED-whisper white bold-sans captions in the BOTTOM third (Alignment 2, above the logo bug, no pill) burned from the song's word timings re-spelled against the locked lyrics, a persistent brand logo bug held over the body (suppressed on the end card), and closed on a solid-brand-color PIL end card with the song still playing under it — never AI-rendered text. This is the FREE deterministic assembly stage (cut-to-bar + hard concat + logo bug + captions + end card + song mux); the song, character, keyframes, and clips come from create-music-elevenlabs / create-image-fal / create-video-fal. Use for the cartoon-music-video format.MediaNo warnings★ 1.3K↓ —
- verify-keyboard-accessreticlehq/reticleVerify that every interactive control on a page can take keyboard focus and that its primary action fires from the keyboard rather than only the mouse, and say plainly that Tab order cannot be verified today. Use when a component was hand-tested with a mouse, a custom dropdown/modal/combobox was added, or an accessibility report flags an unreachable control.OtherNo warnings★ 1.3K↓ —
- add-atomic-chat-toolnanocoai/nanoclawAdd Atomic Chat MCP server so the container agent can call local models served by the Atomic Chat desktop app via its OpenAI-compatible API.EngineeringNo warnings★ 31.1K↓ —
security-baseline
rampstackco/claude-skills
SecurityUpdated Oct 27, 2026
From the author
Establish a security baseline for a website or web app. Use this skill when configuring HTTPS and TLS, setting security headers, planning secrets management, evaluating CSP policies, doing a basic security audit, or hardening a site before launch. Triggers on security headers, HTTPS, TLS, CSP, content security policy, HSTS, secrets management, vulnerability scan, security audit, harden, OWASP, security baseline. Also triggers when a security review is required for compliance or before going live.
Install
npx skills add rampstackco/claude-skills --skill security-baseline -a claude-code
Installs to .claude/skills/security-baseline/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (3)
- README.md
- SKILL.md
- references/headers-checklist.md