Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,417 skills from 2,407 repositories · updated 27 minutes ago
48,319 skills
- sox-itgcSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams. Covers the four ITGC domains external auditors test for SOX 404 — access to programs and data, program changes, computer operations, and program development — plus scoping in-scope systems from the financial statements, designing risk-and-control matrices (RCMs), writing control narratives and test scripts, evaluating deficiencies (control deficiency vs significant deficiency vs material weakness under AS 2201 and Reg S-X), drafting remediation plans, SOX 404(a)/404(b) applicability and filer status, IPO readiness timelines, and COSO 2013 alignment. Use this skill whenever a user mentions SOX, ITGC, IT general controls, 404(a)/404(b), ICFR, material weakness, user access reviews, segregation of duties in IT, change management controls for financial systems, SOX testing or walkthroughs, PCAOB audits, or quarterly compliance for financial reporting systems.TestingNo warnings★ 1K↓ —
- rss-related-workbrycewang-stanford/Awesome-Journal-SkillsJournal-specific Claude Code/Codex skill packs covering mainstream journals — AER, QJE, Nature, Cell, 管理世界, 经济研究 & 200+ more — your fast track to getting published. ｜ 覆盖主流期刊的 Claude Code/Codex 期刊技能包，从选题、识别策略到表格规范与审稿回复全流程，助你快速发论文。PlanningNo warnings★ 1.4K↓ —
- risk-registermohitagw15856/pm-claude-skillsBuild and maintain a project or product risk register. Use when asked to create a risk register, identify project risks, build a risk matrix, or document risks and mitigations for a programme. Produces a complete risk register with likelihood/impact scoring, RAG status, ownership, and prioritised mitigations.OtherNo warnings★ 1.5K↓ —
- ppopp-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a PPoPP submission campaign end to end, sequencing the summer paper deadline, the author-response rebuttal window, notification, the post-acceptance CGO-shared artifact-evaluation round, the camera-ready, and the presentation inside the co-located HPCA/CGO/PPoPP/CC week.ProductivityNo warnings★ 1.4K↓ —
- rss-camera-readybrycewang-stanford/Awesome-Journal-SkillsJournal-specific Claude Code/Codex skill packs covering mainstream journals — AER, QJE, Nature, Cell, 管理世界, 经济研究 & 200+ more — your fast track to getting published. ｜ 覆盖主流期刊的 Claude Code/Codex 期刊技能包，从选题、识别策略到表格规范与审稿回复全流程，助你快速发论文。PlanningNo warnings★ 1.4K↓ —
- grant-proposalmohitagw15856/pm-claude-skillsWrite a structured grant proposal or funding application for any grant type. Use when asked to write a grant proposal, funding application, research grant, charitable grant, or innovation fund application. Produces a complete proposal with project summary, rationale, methodology, impact, and budget narrative.ScienceNo warnings★ 1.5K↓ —
- pods-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing an ACM PODS research submission for EasyChair readiness, covering the chosen cycle's abstract-then-paper deadlines, the acmsmall[review,anonymous] format and 15-page budget, the at-submission proof appendix, lightweight double-anonymity, the declared conflicts of interest, PACMMOD-track publication, and desk-risk triage before the AoE cutoff.ScienceNo warnings★ 1.4K↓ —
- openspec-proposeMemeMeow-Studio/MemeMeowPropose a new change with all artifacts generated in one step. Use when the user wants to quickly describe what they want to build and get a complete proposal with design, specs, and tasks ready for implementation.DesignNo warnings★ 1.3K↓ —Also in 1 other repo
- rollback-planmohitagw15856/pm-claude-skillsWrite a concrete rollback plan for a risky change (deploy, migration, feature-flag flip, config rollout) so the reverse is one command away — not an improvised debate at 2am. Use when asked to write a rollback plan, back-out plan, revert plan, or 'what if we need to undo this'. Produces a rollback plan with the signals that trigger it, exact reverse commands, verification steps, data-safety notes, and a communications template.PlanningNo warnings★ 1.5K↓ —
- vn-pdplSushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert Vietnam Personal Data Protection Law (PDPL) compliance advisor for Law No. 91/2025/QH15 and implementing Decree 356/2025/ND-CP (effective January 1, 2026). Use this skill for gap analysis against the Vietnam PDPL, data subject rights fulfilment workflows, cross-border data transfer impact assessments, privacy notices and internal policies, breach notification procedures, sector-specific obligations (finance, AI, cloud, blockchain), and DPO qualification reviews. Trigger whenever a user mentions Vietnam data privacy, VN-PDPL, Nghị định 356, Vietnamese personal data, or cross-border transfers involving Vietnamese citizens' data.FinanceNo warnings★ 1K↓ —
- pmla-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when running the final pre-submission preflight for PMLA (Publications of the Modern Language Association) via the ScholarOne site — venue selection, MLA-membership eligibility, anonymous preparation, word range, MLA style, cover sheet, and AI-content disclosure. Final checks; it does not draft content.OtherNo warnings★ 1.4K↓ —
- pldi-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when auditing a PLDI submission for HotCRP readiness — the single annual November deadline, the 20-pages-of-text-excluding-bibliography cap in single-column acmsmall format, double-blind hygiene across tool names and repositories, dual-submission rules, and summary-rejection triggers before the cutoff.ProductivityNo warnings★ 1.4K↓ —
- pnas-submissionbrycewang-stanford/Awesome-Journal-SkillsUse as the final preflight before submitting to PNAS — a complete checklist across significance, track, Significance Statement, abstract, classification + keywords, figures, statistics, data, references, and required files. Bundles a checklist and a PNAS cover-letter template. Emits GO/NO-GO.OtherNo warnings★ 1.4K↓ —
- osdi-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when running the final pre-upload audit of an OSDI submission on HotCRP — the December registration and full-paper deadlines at 2:59 pm PST, the 12-page/no-appendix check, institution-level double-blind rules, the renamed-system requirement, track choice, and the eight-submission author cap.ScienceNo warnings★ 1.4K↓ —
- deepfake-drillmohitagw15856/pm-claude-skillsRun a tabletop drill of a voice-clone or deepfake fraud attempt — the 'CEO needs this wire today' call — against your actual approval process, before a real attacker does, then debrief the tells and fix the process gap. Use when someone asks to train the team on deepfake fraud, test wire-transfer controls, run a social-engineering tabletop, or 'could we get CEO-frauded?'. Produces a drill scenario pack, a facilitator script, a tells checklist, and the process fixes the drill exposed. Defensive training only.TestingNo warnings★ 1.5K↓ —
- nsdi-submissionbrycewang-stanford/Awesome-Journal-SkillsUse when running the final pre-upload audit of an NSDI submission — the abstract-then-paper week on the per-deadline HotCRP site, 11:59 pm US Eastern cutoffs, the 12-page cap with references and appendices outside it, track-dependent anonymization, the eight-paper author cap, and the resubmission-ban check.ScienceNo warnings★ 1.4K↓ —
- pnas-statisticsbrycewang-stanford/Awesome-Journal-SkillsUse to enforce PNAS's statistics and reproducibility reporting — n and replication, test choice and assumptions, effect sizes with uncertainty, multiple-comparison control, randomization/blinding, sample-size justification, pre-registration where relevant, and reproducible code.TestingNo warnings★ 1.4K↓ —
- iso27001Sushegaad/Claude-Skills-Governance-Risk-and-ComplianceExpert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.SecurityNo warnings★ 1K↓ —
- debug-live-issuehoangsonww/Claude-Code-Agent-MonitorDebug production-like issues in this repository with disciplined evidence gathering. Use when fixing failing workflows, regressions, flaky behavior, or data inconsistencies across hooks, API, DB, websocket, and UI.EngineeringNo warnings★ 1.1K↓ —
- improve-architecturedaveebbelaar/bamaArchitecture check-in for a growing macOS Swift codebase. Finds hot spots, proposes deeper modules, and refactors one step per commit with behavior proven unchanged. Use at the end of a milestone, before a big feature, when a file passes 600 lines, when one feature touches many files, when bugs repeat in one area, or when the user asks to refactor or clean up the code.PlanningNo warnings★ 1.6K↓ —
- naacl-workflowbrycewang-stanford/Awesome-Journal-SkillsUse when planning a research project's calendar toward NAACL — handling the chapter's skipped-year rhythm, choosing an ARR cycle when the edition's feeding cycles are not yet announced, backward-planning data and annotation work, and keeping a decision tree for commit-versus-wait-versus-reroute moments.ProductivityNo warnings★ 1.4K↓ —
- frontend-component-buildrampstackco/claude-skillsBuild production-ready frontend components with accessible markup, sensible props, defined states, and tested behavior. Use this skill whenever the user wants to build a component from scratch, refactor an existing one, design a component API, or implement a UI element with proper states and accessibility. Triggers on build a component, create a button, create a modal, create a form input, component API, props design, component states, refactor component, accessible component. Also triggers when implementing UI from a design that needs to be reusable.DesignNo warnings★ 1K↓ —
- analyze-performancegooseworks-ai/goose-skillsWeekly performance read across every channel we run: what worked, why, and what to make next, judged on the business's real number (store revenue, qualified pipeline, retained users), not platform claims. Use when: write my Monday report; how are my ads doing — which ad won?; are my ads actually making money (Meta says 4x ROAS but revenue is flat); why did sales drop this week; did the test win; is my tracking working; monthly numbers for the replan; anything on fire today. Not for acting on the recommendations (pausing, scaling, launching) — use run-paid-campaigns; not for replanning the budget — use plan-campaign.TestingNo warnings★ 1.3K↓ —
- lancet-ethicsbrycewang-stanford/Awesome-Journal-SkillsUse to satisfy The Lancet's clinical-ethics and research-integrity requirements — ethics-committee approval and informed consent under the Declaration of Helsinki, the Declaration of interests, ICMJE author contributions, the role-of-the-funding-source statement, the data-sharing statement, patient and public involvement, and SAGER sex/gender plus equity reporting.ScienceNo warnings★ 1.4K↓ —
ciso-advisor
alirezarezvani/claude-skills
SecurityUpdated 14 hours ago
From the author
Use for security leadership decisions: a security program, budget justification in dollars, SOC 2 vs ISO 27001 vs HIPAA roadmap, or board security reporting. Quantifies risk with risk_quantifier.py and tracks compliance with compliance_tracker.py.
Install
npx skills add alirezarezvani/claude-skills --skill ciso-advisor -a claude-code
Installs to .claude/skills/ciso-advisor/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Runs bundled scriptsNo network use seenLicence: MIT
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 88
Security85
Provenance94
Maintenance100
Licence100
Adoption69
Files (6)
- SKILL.md
- references/compliance_roadmap.md
- references/incident_response.md
- references/security_strategy.md
- scripts/compliance_tracker.py
- scripts/risk_quantifier.py