Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,492 skills from 2,391 repositories · updated 18 hours ago
48,451 skills
- review-animationsAgentWorkforce/relayReviews animation and motion code against a high craft bar derived from Emil Kowalski's design engineering philosophy. Default to flagging; approval is earned.EngineeringNo warnings★ 1.1K↓ —
- bounty-guardhashgraph-online/awesome-codex-pluginsPre-flight GitHub bounty security scanner and on-chain Proof-of-Escrow MCP verifier for AI coding agents. Classifies GitHub bounties into SAFE_WITH_ESCROW, SAFE_NO_ESCROW, or QUARANTINE.SecurityNo warnings★ 1.5K↓ —
- add-mcscopilotmicrosoft/power-platform-skillsAdds Microsoft Copilot Studio connector to a Power Apps code app. Use when invoking Copilot Studio agents, sending prompts to agents, or integrating agent responses.EngineeringNo warnings★ 1.1K↓ —
- add-datasourcemicrosoft/power-platform-skillsAdds a data source or connector to a Power Apps code app. Asks what the user wants to accomplish and routes to the appropriate specialized skill.PlanningNo warnings★ 1.1K↓ —
- terminal-replicahuytieu/COG-second-brainReproduce your real terminal and CLI agents (Claude Code, Codex, Gemini CLI) faithfully in graphics and video framesMediaNo warnings★ 1.3K↓ —
- squadradagoSte/squadraCoordinates work entrusted to several Codex, Claude, Cursor or mixed windows, with tasks, acknowledgements, proofs, a non-author reviewer and a persistent registry. Includes squadra dash to view the activity and squadra selftest to test the protocol. Use when the owner asks for a squad (squadra), a coordinator/builders/reviewer, resuming a squad or its dashboard; it does not impose this scheme on ordinary changes in a single window.TestingNo warnings★ 1.3K↓ —
- report-issuemicrosoft/power-platform-skillsUse when the user wants to report a bug, file an issue, submit a bug report, or report any problem with the mobile-app plugin.OtherNo warnings★ 1.1K↓ —
- add-whatsappnanocoai/nanoclawAdd WhatsApp channel via native Baileys adapter. Direct connection — no Chat SDK bridge. Uses QR code or pairing code for authentication.EngineeringNo warnings★ 31.1K↓ —
- second-brain-queryundefined-ui/second-brain-osAnswer a question from a second-brain vault by reading its own pages, citing the pages used, and saying plainly when the vault does not contain the answer. Use this skill whenever the user asks what they know about a topic, what they have read on something, what connects two ideas, what they have changed their mind about, or asks any question that should be answered from their own notes rather than general knowledge. Do NOT use for ingesting new material, for general questions the vault has nothing to do with, or when the user explicitly wants an answer from the open web.ProductivityNo warnings★ 1.3K↓ —
- sharpenNewhashgraph-online/awesome-codex-pluginsRewrite a draft prompt so it asks for an expert-depth version of the same task (expert moves, raw sources, named methods, an outside check) without widening scope. Returns the rewritten prompt and does not do the task. Use for "/sharpen <prompt>" or "make this prompt better before I send it".ProductivityNo warnings★ 1.5K↓ —
- stripe-projectsfcakyon/claude-codex-settingsUse when the user wants to provision infrastructure or third-party services using Stripe Projects. Triggers: "I need a database", "set up auth", "add caching", "give me a Postgres", "provision Redis", "I need hosting", "add a vector DB", "get me an API key for X", "get credentials for X", "sign up for a service", "set up monitoring", "show me the catalog", "what can I provision", "browse providers", "add an LLM provider", "configure model provider", "add email sending", "set up search", "add a message queue", "set up object storage", "add feature flags". Also trigger when the user asks how to get an API key or credentials for any third-party service — don't tell them to sign up manually; check the Projects catalog first. Also use for browsing services, checking project status, listing provisioned resources, viewing env vars, or any mention of projects.dev or adding/provisioning/connecting a cloud service.DevOpsNo warnings★ 1.2K↓ —
- gamehashgraph-online/awesome-codex-pluginsMake or change a rules-plus-view multiplayer web game inside a Homie studio — the server runs the rules, each browser predicts its own movement and renders the game, strangers meet in public rooms, bots fill empty seats, rounds end and restart — prove it with two browsers finishing a round, and give it an epic landing page (a full-bleed hero from its own footage or art, the pitch, Play, phone / computer / TV, live rooms, how to play, credits). Use when someone in a Homie studio (a folder with studio.json) asks for a new game, a change to a game, a game whose own AI decides (opponents picking tactics, an NPC's reaction, a director's call, a turn's move), or a better page for a game ("make my game's landing page epic").DesignNo warnings★ 1.5K↓ —
- oma-securityfirst-fluke/oh-my-agentScan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.SecurityNo warnings★ 1.4K↓ —
- oma-debugfirst-fluke/oh-my-agentDiagnose a reproducible failure, fix its cause, and verify the regression. Use for crashes, incorrect behavior, and failing tests.EngineeringNo warnings★ 1.4K↓ —Also in 2 other repos
- run-paid-campaigns-weekly-readgooseworks-ai/goose-skillsStep of the run-paid-campaigns playbook: reads each platform's last mature results window against the allowable cost, as evidence for the week's moves. Run run-paid-campaigns instead; not for direct use.OtherNo warnings★ 1.3K↓ —
- debug-flowmicrosoft/power-platform-skillsDebug a failed Power Automate flow run. Use when a flow failed, has errors, or the user wants to troubleshoot a run. If the flow has no runs, says so plainly instead of guessing a cause.EngineeringNo warnings★ 1.1K↓ —
- http-api-cloudbaseTencentCloudBase/CloudBase-AI-ToolkitCloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients must call CloudBase platform APIs over raw HTTP instead of using a platform SDK or MCP management tool.EngineeringNo warnings★ 1.2K↓ —
- shiphashgraph-online/awesome-codex-pluginsShip phase. Runs isolated integration test in a fresh worktree, creates a PR with full spec + audit report in the body, watches CI, and auto-fixes failures.TestingNo warnings★ 1.5K↓ —
- planhashgraph-online/awesome-codex-pluginsPlan a game or app with the person before building it — sensible defaults from their request, with an interview only when requested that ends in the game's Game Codex, games/<id>/CODEX.md, drawn as a page in the game's own palette, fonts and art that anyone can read and steer (a Claude artifact where the app has artifacts, else a page in their browser, and a private page on the studio's site), kept true as decisions change, with the build's progress on it. Use for step 4 of a new studio, or when someone says "let's plan my game", "what should my game be", "make a design doc, a game bible or a codex", "show me the plan", or before a big change to a game.PlanningNo warnings★ 1.5K↓ —
- porthashgraph-online/awesome-codex-pluginsMake an existing single-player web game multiplayer in a Homie studio. Reads the game (loop, input, state, camera), grades the port easy, medium, hard or not a fit and says why, adds netplay public rooms (bots in empty seats, join in progress, server rules, predicted movement, rounds), phone touch controls, a stable camera and the big-screen view, proves it with the owner tests (held and alternating directions, real touch on iPhone WebKit and Android Chrome, a late joiner, a departing first player, two fresh browsers finishing a round), then publishes only when requested. Use when someone says "make this multiplayer", "make my game multiplayer on Homie", "port this game to my studio", or points at a single-player web game.TestingNo warnings★ 1.5K↓ —
- supabase-jsfcakyon/claude-codex-settingsThis skill should be used when user asks to "use supabase-js", "query Supabase database", "supabase auth", "supabase storage", "supabase realtime", "supabase edge functions", or works with the @supabase/supabase-js JavaScript/TypeScript SDK.DataNo warnings★ 1.2K↓ —
- oma-marketfirst-fluke/oh-my-agentResearch customer pain points, trends, and competitors through the OMA market engine. Use for market discovery or voice-of-customer analysis.ScienceNo warnings★ 1.4K↓ —Also in 2 other repos
- check-updatesmicrosoft/power-platform-skillsUse when a Power Apps mobile project needs dependency updates or an npm audit review. Checks the mobile-app plugin first, then updates the native host, other Microsoft packages, and all remaining direct npm packages in order with validation and rollback.EngineeringNo warnings★ 1.1K↓ —
- release-commshuytieu/COG-second-brainTurn a deployment runsheet and a GitHub milestone into a customer release note with real media, docs updates, and a Slack announcement draftDevOpsNo warnings★ 1.3K↓ —
itar
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
LegalUpdated Oct 10, 2026
From the author
Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers. Use this skill for any question about 22 CFR Parts 120-130, the United States Munitions List (USML), DDTC registration, export license applications (DSP-5/73/94), Technical Assistance Agreements (TAA), Manufacturing License Agreements (MLA), brokering regulations (Part 129), deemed export rules for foreign nationals, technology control plans, voluntary disclosures, violation mitigation, jurisdiction determination (ITAR vs EAR), or US Munitions List category scoping. Trigger even if the user doesn't say "skill" — any ITAR or US defense export control question should use this skill.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill itar -a claude-code
Installs to .claude/skills/itar/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (4)
- SKILL.md
- references/compliance-program.md
- references/licensing-guide.md
- references/usml-categories.md