Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 6 hours ago
45,098 skills
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- fp-reactsickn33/agentic-awesome-skillsPractical patterns for using fp-ts with React - hooks, state, forms, data fetching. Includes version-specific React examples; verify framework/client boundaries.EngineeringNo warnings★ 48.5K↓ —
- bash-prosickn33/agentic-awesome-skillsMaster of defensive Bash scripting for production automation, CI/CD pipelines, and system utilities. Expert in safe, portable, and testable shell scripts.DevOpsNo warnings★ 48.5K↓ —
- ask-mattsickn33/agentic-awesome-skillsAsk which skill or flow fits your situation. A router over the user-invoked skills in this repo.OtherNo warnings★ 48.5K↓ —
- anywritesickn33/agentic-awesome-skillsCompiled CLI covering all 52 endpoints of the Anytype local API — objects, properties, tags, search, chat, files — one binary, no MCP server needed.EngineeringNo warnings★ 48.5K↓ —
- incident-runbook-templateswshobson/agentsCreate structured incident response runbooks with step-by-step procedures, escalation paths, and recovery actions. Use this skill when building a service outage runbook for a payment processing system; creating database incident procedures covering connection pool exhaustion, replication lag, and disk space alerts; onboarding new on-call engineers who need step-by-step recovery guides written for a 3 AM brain; or standardizing escalation matrices across multiple engineering teams.DataNo warnings★ 41.7K↓ —
- build-uisickn33/agentic-awesome-skillsStep-by-step workflow for UI work: read the project, follow the plan for the job (new screen, dashboard, polish, simplify, review), then render, fix and check again.DesignNo warnings★ 48.5K↓ —
- security-requirement-extractionwshobson/agentsDerive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.SecurityNo warnings★ 41.7K↓ —
- gke-multitenancygoogle/skillsPlans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas, LimitRanges, network isolation, and cost allocation. Use when designing GKE multi-tenancy, configuring GKE namespaces, setting up resource quotas, or isolating GKE teams. Don't use for single-tenant cluster configuration or general deployment instructions (use gke-basics or gke-app-onboarding instead).OfficialDevOpsNo warnings★ 21.6K↓ —
- manifestsickn33/agentic-awesome-skillsInstall and configure the Manifest observability plugin for your agents. Use when setting up telemetry, configuring API keys, or troubleshooting the plugin.DevOpsNo warnings★ 48.5K↓ —
- gke-node-notreadygoogle/skillsDiagnoses GKE nodes reporting NotReady or Unknown status by inspecting node conditions, events, kubelet/containerd logs, and node metrics, then proposing safe remediations. Use when nodes show NotReady, when the kubelet stops posting node status, or when workloads are evicted or stuck Pending due to node health. Don't use for pod-level application failures (use gke-workload-troubleshooting), autoscaler scale-up/scale-down decisions (use gke-cluster-autoscaler), or non-GKE compute.OfficialOtherNo warnings★ 21.6K↓ —
- google-cloud-storage-bucket-architectgoogle/skillsCreates Cloud Storage on Google Cloud (also known colloquially as GCS) buckets. Analyzes the workload (sensitive data, media hosting, ingestion, web hosting, archiving, backup, logging, analytics, AI/ML, or general-purpose), validates project-level security settings, and designs a secure-by-default, cost-effective configuration (location, storage class, uniform bucket-level access, public access prevention, soft delete, lifecycle) before creating it. Use whenever a user wants to create, make, set up, provision, or spin up a bucket, or needs object storage for an app, service, pipeline, or dataset — even a "simple" or "default" bucket, or when bucket creation is one step in a larger workflow. Outputs or executes the creation via gcloud, the JSON/REST API, Terraform, or SDK client libraries (C++, Java, Python, Go). Don't use for anything other than creating new buckets — for uploads, downloads, access changes, or reconfiguring existing buckets, use google-cloud-storage-basics.OfficialPlanningNo warnings★ 21.6K↓ —
- ux-flowsickn33/agentic-awesome-skillsDesign user flows and navigation structure following proven UX patternsDesignNo warnings★ 48.5K↓ —
- ux-copysickn33/agentic-awesome-skillsGenerate UX microcopy (button labels, error messages, empty states, toasts) following a casual-but-polite voice and toneDesignNo warnings★ 48.5K↓ —
- react19-source-patternsgithub/awesome-copilotReference for React 19 source-file migration patterns, including API changes, ref handling, and context updates.EngineeringNo warnings★ 40.4K↓ —
- rust-prosickn33/agentic-awesome-skillsMaster Rust 1.75+ with modern async patterns, advanced type system features, and production-ready systems programming.OtherNo warnings★ 48.5K↓ —
- ui-pagesickn33/agentic-awesome-skillsScaffold a new mobile page/screen using the StyleSeed layout patternsDesignNo warnings★ 48.5K↓ —
- remotionsickn33/agentic-awesome-skillsGenerate walkthrough videos from Stitch projects using Remotion with smooth transitions, zooming, and text overlaysOtherNo warnings★ 48.5K↓ —
- ui-lintsickn33/agentic-awesome-skillsQuick automated lint — detects common design system violations in secondsDesignNo warnings★ 48.5K↓ —
- typespec-api-operationsgithub/awesome-copilotAdd GET, POST, PATCH, and DELETE operations to a TypeSpec API plugin with proper routing, parameters, and adaptive cardsEngineeringNo warnings★ 40.4K↓ —
- ui-a11ysickn33/agentic-awesome-skillsAudit a component or page for accessibility issues and fix themDesignNo warnings★ 48.5K↓ —
- beatrasickn33/agentic-awesome-skillsInstall and use the official AI Media Generator package, pinned by digest, for paid hosted work on the Beatra service.OtherNo warnings★ 48.5K↓ —
- sql-prosickn33/agentic-awesome-skillsMaster modern SQL with cloud-native databases, OLTP/OLAP optimization, and advanced query techniques. Expert in performance tuning, data modeling, and hybrid analytical systems.DataNo warnings★ 48.5K↓ —Also in 1 other repo
- supabasesickn33/agentic-awesome-skillsUse when doing ANY task involving Supabase.ProductivityNo warnings★ 48.5K↓ —
refactor-plan
github/awesome-copilot
PlanningUpdated 20 hours ago
From the author
Create a concrete plan before starting a multi-file refactor. Use when the user asks to plan, sequence, scope, or safely execute a refactor across multiple files; always investigate first, output the plan, and wait for confirmation before making code changes.
Install
npx skills add github/awesome-copilot --skill refactor-plan -a claude-code
Installs to .claude/skills/refactor-plan/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (1)
- SKILL.md