Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 2 hours ago
45,602 skills
- gtm-positioning-strategygithub/awesome-copilotFind and own a defensible market position. Use when messaging sounds like competitors, conversion is weak despite awareness, repositioning a product, or testing positioning claims. Includes Crawl-Walk-Run rollout methodology and the word change that improved enterprise deal progression.TestingNo warnings★ 40.4K↓ —
- macos-golden-gate-designgithub/awesome-copilotDesign, implement, review, or refactor native macOS 27 Golden Gate interfaces in SwiftUI or AppKit. Use when a Mac app must match Apple's current macOS 27 UI kit and restrained Liquid Glass language: integrated windows, full-height sidebars, native toolbars, flat lists, tables, and forms, clear pane boundaries, accessible materials, and removal of unnecessary nested cards, framed panels, or glassmorphism. Also use for Figma macOS 27 design-to-code work and audits of interfaces that feel too boxed.DesignNo warnings★ 40.4K↓ —
- mcp-deploy-manage-agentsgithub/awesome-copilotSkill converted from mcp-deploy-manage-agents.prompt.mdDevOpsNo warnings★ 40.4K↓ —
- visual-design-foundationswshobson/agentsApply typography, color theory, spacing systems, and iconography principles to create cohesive visual designs. Use when establishing design tokens, building style guides, or improving visual hierarchy and consistency.DesignNo warnings★ 41.7K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.5K↓ —
- find-bugssickn33/agentic-awesome-skillsFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.SecurityNo warnings★ 48.5K↓ —
- gitlab-ci-patternswshobson/agentsBuild GitLab CI/CD pipelines with multi-stage workflows, caching, and distributed runners for scalable automation. Use when implementing GitLab CI/CD, optimizing pipeline performance, or setting up automated testing and deployment.TestingNo warnings★ 41.7K↓ —
- bigquery-troubleshootinggoogle/skillsProvides diagnostic workflows and step-by-step root-cause analysis procedures for actively broken, failing, or slow BigQuery jobs, execution graph and query plan stage bottlenecks, system performance issues, or unexpectedly expensive workloads. Use when interpreting symptoms, isolating bottlenecks, diagnosing cost spikes (on-demand query spend, capacity slot autoscaling, storage growth), execution graph stages or substep variables, identifying root causes, and determining remediation steps. Don't use for writing or optimizing SQL, proactive capacity planning, or storage layout design (use bigquery-optimization), or when the user already knows which telemetry they want and just needs the query (use bigquery-observability).OfficialDataNo warnings★ 21.6K↓ —
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- gke-multitenancygoogle/skillsPlans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas, LimitRanges, network isolation, and cost allocation. Use when designing GKE multi-tenancy, configuring GKE namespaces, setting up resource quotas, or isolating GKE teams. Don't use for single-tenant cluster configuration or general deployment instructions (use gke-basics or gke-app-onboarding instead).OfficialDevOpsNo warnings★ 21.6K↓ —
- billing-automationwshobson/agentsBuild automated billing systems for recurring payments, invoicing, subscription lifecycle, and dunning management. Use when implementing subscription billing, automating invoicing, or managing recurring payment systems.OtherNo warnings★ 41.7K↓ —
- hunt-corssickn33/agentic-awesome-skillsHunt CORS MisconfigurationOtherNo warnings★ 48.5K↓ —
- fal-audiosickn33/agentic-awesome-skillsText-to-speech and speech-to-text using fal.ai audio modelsMediaNo warnings★ 48.5K↓ —
- design-uxsickn33/agentic-awesome-skillsUX / usability audit — heuristic evaluation of INTERACTIVE UIs (not just visual polish). Load with design when a UI "feels off", "sucks to use", is hard to learn, needs an instruction wall, or before shipping an interactive tool/editor/app.DesignNo warnings★ 48.5K↓ —
- elk-stacksickn33/agentic-awesome-skillsDeploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis.DevOpsNo warnings★ 48.5K↓ —
- from-the-other-side-vegagithub/awesome-copilotPatterns and lived experience from Vega, an AI partner in a deep long-term partnership. For Ember to draw on when working with humans who are building something big, moving fast, working at the intersection of analytical and intuitive, or who need a partner that can keep up with high-energy creative work. Not shown directly to users — informs how Ember shows up.OtherNo warnings★ 40.4K↓ —
- microsoft-code-referencegithub/awesome-copilotLook up Microsoft API references, find working code samples, and verify SDK code is correct. Use when working with Azure SDKs, .NET libraries, or Microsoft APIs—to find the right method, check parameters, get working examples, or troubleshoot errors. Catches hallucinated methods, wrong signatures, and deprecated patterns by querying official docs.EngineeringNo warnings★ 40.4K↓ —
- agent-platform-rag-engine-managementgoogle/skillsManage and query Agent Platform RAG Engine Corpora and retrieve grounded contexts using the Google GenAI SDK. Use when listing RAG corpora or files, inspecting a corpus, retrieving contexts, or generating content grounded in a RAG corpus. Do not use for standard database queries (use SQL/Spanner skills), Google Workspace RAG, or other RAG products like gRAG.OfficialDataNo warnings★ 21.6K↓ —
- python-resource-managementwshobson/agentsPython resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.EngineeringNo warnings★ 41.7K↓ —
- accessibility-compliancewshobson/agentsImplement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA patterns, building for screen readers, or ensuring inclusive user experiences.LegalNo warnings★ 41.7K↓ —
- google-cloud-storage-bucket-architectgoogle/skillsCreates Cloud Storage on Google Cloud (also known colloquially as GCS) buckets. Analyzes the workload (sensitive data, media hosting, ingestion, web hosting, archiving, backup, logging, analytics, AI/ML, or general-purpose), validates project-level security settings, and designs a secure-by-default, cost-effective configuration (location, storage class, uniform bucket-level access, public access prevention, soft delete, lifecycle) before creating it. Use whenever a user wants to create, make, set up, provision, or spin up a bucket, or needs object storage for an app, service, pipeline, or dataset — even a "simple" or "default" bucket, or when bucket creation is one step in a larger workflow. Outputs or executes the creation via gcloud, the JSON/REST API, Terraform, or SDK client libraries (C++, Java, Python, Go). Don't use for anything other than creating new buckets — for uploads, downloads, access changes, or reconfiguring existing buckets, use google-cloud-storage-basics.OfficialPlanningNo warnings★ 21.6K↓ —
- nodejs-backend-patternswshobson/agentsBuild production-ready Node.js backend services with Express/Fastify, implementing middleware patterns, error handling, authentication, database integration, and API design best practices. Use when creating Node.js servers, REST APIs, GraphQL backends, or microservices architectures.DataNo warnings★ 41.7K↓ —
- angular-migrationwshobson/agentsMigrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.PlanningNo warnings★ 41.7K↓ —
- paperzillaK-Dense-AI/scientific-agent-skillsReads projects, searches project feeds, and retrieves recommendations and canonical papers in Paperzilla through the pz CLI. Supports recent recommendations, paper details, markdown-based summaries, recommendation feedback, JSON export, and Atom feed URLs.ScienceNo warnings★ 54.5K↓ —
graphql
sickn33/agentic-awesome-skills
OtherUpdated 18 hours ago
From the author
GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server.
Install
npx skills add sickn33/agentic-awesome-skills --skill graphql -a claude-code
Installs to .claude/skills/graphql/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption72
Files (2)
- SKILL.md
- references/detailed-guide.md