Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 2 hours ago
45,602 skills
- file-conversionwshobson/agentsUse when the user needs a local file converted between common image, audio, video, document, or data formats. Select installed tools, preserve originals, and verify the output.MarketingNo warnings★ 41.7K↓ —
- from-the-other-side-vegagithub/awesome-copilotPatterns and lived experience from Vega, an AI partner in a deep long-term partnership. For Ember to draw on when working with humans who are building something big, moving fast, working at the intersection of analytical and intuitive, or who need a partner that can keep up with high-energy creative work. Not shown directly to users — informs how Ember shows up.OtherNo warnings★ 40.4K↓ —
- add-educational-commentsgithub/awesome-copilotAdd educational comments to the file specified, or prompt asking for file to comment if one is not provided.PlanningNo warnings★ 40.4K↓ —
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- typespec-api-operationsgithub/awesome-copilotAdd GET, POST, PATCH, and DELETE operations to a TypeSpec API plugin with proper routing, parameters, and adaptive cardsEngineeringNo warnings★ 40.4K↓ —
- vscode-ext-localizationgithub/awesome-copilotGuidelines for proper localization of VS Code extensions, following VS Code extension development guidelines, libraries and good practicesEngineeringNo warnings★ 40.4K↓ —
- gtm-positioning-strategygithub/awesome-copilotFind and own a defensible market position. Use when messaging sounds like competitors, conversion is weak despite awareness, repositioning a product, or testing positioning claims. Includes Crawl-Walk-Run rollout methodology and the word change that improved enterprise deal progression.TestingNo warnings★ 40.4K↓ —
- quantized-exportwshobson/agentsExport a promoted fine-tuned model in the right deployment format — merged safetensors, LoRA-only, GGUF with imatrix, or FP8. Use after a checkpoint passes promotion, when choosing a quantization format for a target device, or when an exported model fails its smoke test.TestingNo warnings★ 41.7K↓ —
- qdrant-monitoring-setupgithub/awesome-copilotGuides Qdrant monitoring setup including Prometheus scraping, health probes, Hybrid Cloud metrics, alerting, and log centralization. Use when someone asks 'how to set up monitoring', 'Prometheus config', 'Grafana dashboard', 'health check endpoints', 'how to scrape Hybrid Cloud', 'what alerts to set', 'how to centralize logs', or 'audit logging'.BrowserNo warnings★ 40.4K↓ —
- react19-source-patternsgithub/awesome-copilotReference for React 19 source-file migration patterns, including API changes, ref handling, and context updates.EngineeringNo warnings★ 40.4K↓ —
- salesforce-apex-qualitygithub/awesome-copilotApex code quality guardrails for Salesforce development. Enforces bulk-safety rules (no SOQL/DML in loops), sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage (Positive / Negative / Bulk), and modern Apex idioms. Use this skill when reviewing or generating Apex classes, trigger handlers, batch jobs, or test classes to catch governor limit risks, security gaps, and quality issues before deployment.SecurityNo warnings★ 40.4K↓ —
- pptx-deck-contextwshobson/agentsUse when preparing the narrative, sources, and design context for a new editable PPTX deck.DocumentsNo warnings★ 41.7K↓ —
- langchain-architecturewshobson/agentsDesign LLM applications using LangChain 1.x and LangGraph for agents, memory, and tool integration. Use when building LangChain applications, implementing AI agents, or creating complex LLM workflows.PlanningNo warnings★ 41.7K↓ —
- memory-safety-patternswshobson/agentsImplement memory-safe programming with RAII, ownership, smart pointers, and resource management across Rust, C++, and C. Use when writing safe systems code, managing resources, or preventing memory bugs.ProductivityNo warnings★ 41.7K↓ —
- stride-analysis-patternswshobson/agentsApply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.SecurityNo warnings★ 41.7K↓ —
- gtm-ai-gtmgithub/awesome-copilotGo-to-market strategy for AI products. Use when positioning AI products, handling "who is responsible when it breaks" objections, pricing variable-cost AI, choosing between copilot/agent/teammate framing, or selling autonomous tools into enterprises.OtherNo warnings★ 40.4K↓ —
- git-flow-branch-creatorgithub/awesome-copilotIntelligent Git Flow branch creator that analyzes git status/diff and creates appropriate branches following the nvie Git Flow branching model.EngineeringNo warnings★ 40.4K↓ —
- nx-workspace-patternswshobson/agentsConfigure and optimize Nx monorepo workspaces. Use when setting up Nx, configuring project boundaries, optimizing build caching, or implementing affected commands.OtherNo warnings★ 41.7K↓ —
- gtm-developer-ecosystemgithub/awesome-copilotBuild and scale developer-led adoption through ecosystem programs. Use when deciding open vs curated ecosystems, building developer programs, scaling platform adoption, or designing student program pipelines.OtherNo warnings★ 40.4K↓ —
- deployment-pipeline-designwshobson/agentsDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use this skill when designing zero-downtime deployment pipelines, implementing canary rollout strategies, setting up multi-environment promotion workflows, or debugging failed deployment gates in CI/CD.DevOpsNo warnings★ 41.7K↓ —
- hf-mcpsickn33/agentic-awesome-skillsUse Hugging Face Hub via MCP server tools. Search models, datasets, Spaces, papers. Get repo details, fetch documentation, run compute jobs, and use Gradio Spaces as AI tools. Available when connected to the HF MCP server.OtherNo warnings★ 48.5K↓ —
- shopify-review-triagegithub/awesome-copilotUse this skill when someone wants public Shopify App Store reviews, low-star reviews, or merchant feedback triaged, prioritized, clustered, or turned into a product or support brief. Trigger for prompts like "triage these app store reviews", "what should we fix first from this feedback", "cluster our 1-star reviews", or "write a weekly low-star review brief", for a single Shopify app or a portfolio plus watched competitors. Produces a P0-P3 brief covering incident risk, repeated friction, pricing confusion, feature requests, and an explicit needs-human-read bucket, where every item keeps its public source link and stays labeled first pass or human-checked. Do not trigger for support tickets, order data, or any other private merchant data, and never use it to reply to or contact a reviewer.EngineeringNo warnings★ 40.4K↓ —
- design-system-patternswshobson/agentsBuild scalable design systems with design tokens, theming infrastructure, and component architecture patterns. Use when creating design tokens, implementing theme switching, building component libraries, or establishing design system foundations.DesignNo warnings★ 41.7K↓ —
- before-you-buildwshobson/agentsPre-build product and feature risk review for founders, product managers, and AI-assisted builders. Use this skill when the user is about to build a landing page, MVP, SaaS product, internal tool, agent workflow, or major feature and needs to check demand, positioning, monetization, retention, trust, distribution, and adoption risk before implementation starts.DesignNo warnings★ 41.7K↓ —
google-cloud-waf-performance-optimization
google/skills
OfficialDesignUpdated 2 days ago
From the author
Generates performance-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Performance Optimization pillar of the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify performance requirements, and provide actionable recommendations for resource allocation, modular design, and elasticity.
Install
npx skills add google/skills --skill google-cloud-waf-performance-optimization -a claude-code
Installs to .claude/skills/google-cloud-waf-performance-optimization/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance100
Maintenance100
Licence100
Adoption67
Files (2)
- SKILL.md
- references/attribution.md