Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
49,415 skills from 2,407 repositories · updated 2 hours ago
48,317 skills
- oma-securityNewfirst-fluke/oh-my-agentScan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.SecurityNo warnings★ 1.4K↓ —
- oma-frontendNewfirst-fluke/oh-my-agentImplement or modify web UI in React, Next.js, or Angular. Use for components, pages, styles, forms, and frontend state or data flows.DesignNo warnings★ 1.4K↓ —
- jetson-video-setupNVIDIA/skillsUse when installing, repairing, reusing, inspecting, or verifying readiness of the native NVIDIA Video Codec SDK or PyNvVideoCodec on Jetson, including the one-frame encode/decode smoke test with official samples, and when interpreting what those readiness results, including CPU-buffer and device-memory sample modes, do and do not establish.MediaNo warnings★ 3.9K↓ —
- youtube-video-kithuytieu/COG-second-brainSelf-evolving second brain with 35 AI skills, 10 agents, and people CRM. Closed-loop harness: a V-model verification lifecycle where the worker never grades its own homework. Plus paired anti-slop design skills for marketing and product UI. Works with Claude Code, Cursor, Kiro, Gemini CLI, Codex.MediaNo warnings★ 1.3K↓ —
- oma-imageNewfirst-fluke/oh-my-agentGenerate raster images or reference-guided variations through the OMA image CLI. Use for image assets or explicit vendor comparisons; pixel editing uses an editor.MediaNo warnings★ 1.4K↓ —
- form-croalirezarezvani/claude-skillsUse when a lead, contact, demo or checkout form is underperforming or being designed, before changing fields. Scores field friction with form_field_analyzer.py. Signup forms: signup-flow-cro.MarketingNo warnings★ 29.3K↓ —
- comprehensive-analysishuytieu/COG-second-brainDeep-dive 7-day analysis across all data sources for weekly reviews, board prep, and strategic planningPlanningNo warnings★ 1.3K↓ —
- seonix-seoNewhashgraph-online/awesome-codex-pluginsWork on the SEO of a website that is connected to Seonix through the seonix MCP server - audit it, find what to fix, read Search Console traffic, check a draft. Use when the user asks to improve SEO, organic traffic, rankings or content for a site that is in Seonix, mentions Seonix, Site Health, the fix plan or Search Console data from Seonix, or asks which pages or queries to work on next.MarketingNo warnings★ 1.5K↓ —
- jetson-build-sourceNVIDIA/skillsUse when you need to rebuild the BSP overlay — DT, OOT modules, or kernel — from changes under bsp_sources/. Triggers: build bsp, rebuild dtb, rebuild kernel.OtherNo warnings★ 3.9K↓ —
- baoyu-translateJimLiu/baoyu-skillsThis skill should be used when the user asks to "translate", "翻译", "精翻", "translate article", "translate to Chinese", "translate to English", "改成中文", "改成英文", "convert to Chinese", "localize", "本地化", "refined translation", "精细翻译", "proofread translation", "快速翻译", "快翻", "这篇文章翻译一下", or provides a URL/file with translation intent. Supports three modes (quick/normal/refined) with custom glossary support.WritingNo warnings★ 27.3K↓ —
- minutes-ingestsilverstein/minutesExtract facts from meetings and update your knowledge base — person profiles, chronological log, and index. Use when the user asks "ingest my meetings", "update my knowledge base", "extract facts from meetings", "sync meetings to wiki", "backfill knowledge", or wants their PARA/Obsidian/wiki profiles updated from conversation data.ProductivityNo warnings★ 1.6K↓ —Also in 1 other repo
- crabboxopenclaw/crabboxDetect and use Crabbox for repository tests and validation on remote runners. Use when crabbox.yaml or .crabbox.yaml exists, the crabbox CLI is available, or work needs remote compute, a clean or reusable environment, target-platform coverage, or auditable execution evidence.TestingNo warnings★ 1.5K↓ —Also in 1 other repo
- generate-prdhuytieu/COG-second-brainGenerate product requirements documents with optional publishing to Confluence or other wiki platformsPlanningNo warnings★ 1.3K↓ —Also in 1 other repo
- oma-scmfirst-fluke/oh-my-agentManage Git branches, merges, conflicts, commits, and release baselines. Use for repository history and change-management operations.EngineeringNo warnings★ 1.4K↓ —
- oma-dbfirst-fluke/oh-my-agentDesign schemas and migrations, tune queries, or plan vector retrieval and database operations. Application API implementation uses oma-backend.DataNo warnings★ 1.4K↓ —
- earth2studio-installNVIDIA/skillsGuide installing Earth2Studio via uv or pip, selecting model extras, and configuring the environment. Do NOT use for writing inference code, choosing models, or PhysicsNeMo questions.WritingNo warnings★ 3.9K↓ —
- oma-tf-infraUpdatedfirst-fluke/oh-my-agentCreate or review Terraform infrastructure and plans. Use for cloud resources, IAM, networking, state management, and infrastructure changes.DevOpsNo warnings★ 1.4K↓ —Also in 2 other repos
- build-flowmicrosoft/power-platform-skillsAutonomously build a complete Power Automate flow from a description. Use when you need to generate a full flow definition and create it. Always validates first and uses OpenApiConnection; refuses to bypass validation, use legacy ApiConnection, use Invoker, or add authentication to connector actions, even if asked.OtherNo warnings★ 1.1K↓ —
- refactoring-guruciembor/agent-rules-booksApply Refactoring.Guru-inspired rules when diagnosing code smells, choosing refactoring techniques, and stopping cleanup before uncontrolled redesign.EngineeringNo warnings★ 3.2K↓ —
- jetson-promote-imageNVIDIA/skillsUse to promote overlay files and built artifacts into the staged BSP image. Do NOT use to flash or build. Triggers: promote bsp image.MediaNo warnings★ 3.9K↓ —
- the-pragmatic-programmerciembor/agent-rules-booksApply Hunt and Thomas-inspired pragmatic programming rules when improving engineering judgment, feedback loops, DRY knowledge, orthogonality, automation, or adaptability.OtherNo warnings★ 3.2K↓ —
- image-to-uihashgraph-online/awesome-codex-pluginsRecreate an image, screenshot, or mockup as a 1:1 UI implementation. Match the reference rather than redesigning it, then render and compare the result to correct visible differences.DesignNo warnings★ 1.5K↓ —Also in 1 other repo
- ux-designhashgraph-online/awesome-codex-pluginsUse when the user asks for UX, product flow, user journey, wireframes, usability, conversion, onboarding, checkout, signup, navigation, forms, state design, dashboard workflows, command palettes, settings, permissions, long-running task progress, admin/internal tools, activation, retention, or making an app easier to use over time. Designs and audits user experience flows, information architecture, content hierarchy, forms, onboarding, dashboards, settings, empty/loading/error/permission/success states, recovery paths, and repeated-use product ergonomics before visual polish. Pair with platform UI skills after the UX flow is clear.DesignNo warnings★ 1.5K↓ —
- krexahashgraph-online/awesome-codex-pluginsUse this skill when the user wants to research a trading idea, or turn an idea, post, reel or video into a tested strategy and deploy it as a live trading agent on Krexa. Covers Solana spot and tokenized stocks (xStocks), perps (Hyperliquid, Jupiter Perps, Polymarket Perps), Polymarket prediction markets, and perps in the user's own Binance, Bybit, OKX, Kraken or Coinbase account. Krexa runs the research, backtests and agents on its own servers and enforces trading limits in code. The key can ask for a deploy but cannot move money; the user approves every live deploy in the Krexa app.DevOpsNo warnings★ 1.5K↓ —
fedramp
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
SecurityUpdated Oct 10, 2026
From the author
Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document types: SSP, SAP, SAR, POA&M, CIS/CRM workbooks. Also trigger for questions about FedRAMP Certification Classes (A, B, C, D — new baseline labels: A = pilot/transitional, B = LI-SaaS/Low, C = Moderate, D = High, per NTC-0004), FedRAMP 20x (now the primary authorization pathway), OSCAL mandate (September 2026), 3PAO assessments, continuous monitoring (ConMon), gap assessments, system boundary definition, or architecture reviews for federal cloud. FedRAMP Ready retired July 28, 2026 (Legacy FedRAMP Ready). When in doubt, use this skill — it covers the full FedRAMP lifecycle from readiness through continuous monitoring.
Install
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill fedramp -a claude-code
Installs to .claude/skills/fedramp/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 88
Security100
Provenance76
Maintenance100
Licence100
Adoption49
Files (7)
- SKILL.md
- references/appendices-guide.md
- references/control-families.md
- references/poam-guide.md
- references/readiness-checklist.md
- references/sap-sar-guide.md
- references/ssp-guide.md