Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 3 hours ago
45,602 skills
- hunt-sstisickn33/agentic-awesome-skillsHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.OtherNo warnings★ 48.5K↓ —
- hunt-sqlisickn33/agentic-awesome-skillsHunting skill for sqli vulnerabilities.SecurityNo warnings★ 48.5K↓ —
- trace-to-training-datawshobson/agentsConvert evaluation traces and production logs into SFT examples and preference pairs. Use when graded traces or failure examples exist and need to become training data, when applying rejection sampling to model outputs, or when building DPO pairs from passing and failing runs.OtherNo warnings★ 41.7K↓ —
- dhdna-profilerK-Dense-AI/scientific-agent-skillsApplies the DHDNA framework as an exploratory rubric for reasoning and writing patterns in supplied text. Used for explicit requests for DHDNA, cognitive-style reflection, a thinking-pattern profile, or comparisons of textual reasoning. Scores describe evidence in the sample, not validated psychological traits or personal identity.WritingNo warnings★ 54.5K↓ —
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- firebase-basicsgoogle/skillsProvides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including --no-localhost), project creation, project selection (`firebase use`), and app config file downloads (`google-services.json`, `GoogleService-Info.plist`). Use ONLY for CLI login, project creation/switching, or downloading app config files. Don't use for Firebase Hosting deploy, Firestore, Auth, App Hosting, Data Connect, Crashlytics, or Remote Config.OfficialDevOpsNo warnings★ 21.6K↓ —
- vscode-ext-localizationgithub/awesome-copilotGuidelines for proper localization of VS Code extensions, following VS Code extension development guidelines, libraries and good practicesEngineeringNo warnings★ 40.4K↓ —
- visual-design-foundationswshobson/agentsApply typography, color theory, spacing systems, and iconography principles to create cohesive visual designs. Use when establishing design tokens, building style guides, or improving visual hierarchy and consistency.DesignNo warnings★ 41.7K↓ —
- add-educational-commentsgithub/awesome-copilotAdd educational comments to the file specified, or prompt asking for file to comment if one is not provided.PlanningNo warnings★ 40.4K↓ —
- playwright-generate-testgithub/awesome-copilotGenerate a Playwright test based on a scenario using Playwright MCPTestingNo warnings★ 40.4K↓ —
- gitlab-ci-patternswshobson/agentsBuild GitLab CI/CD pipelines with multi-stage workflows, caching, and distributed runners for scalable automation. Use when implementing GitLab CI/CD, optimizing pipeline performance, or setting up automated testing and deployment.TestingNo warnings★ 41.7K↓ —
- bigquery-observabilitygoogle/skillsProvides data-retrieval best practices, tool selection guidance, and performant SQL query syntax for BigQuery telemetry across INFORMATION_SCHEMA, Cloud Monitoring, and the REST API. Use when the telemetry to fetch is already known, selecting telemetry tools, writing performant INFORMATION_SCHEMA queries, retrieving telemetry for diagnosing single-job performance bottlenecks, investigating slot contention, job concurrency and queue latency, analyzing reservation capacity, utilization and autoscaling saturation, or auditing capacity-based and on-demand compute and storage resource billable usage. Don't use for root-cause diagnosis or symptom troubleshooting when the cause is unknown (use bigquery-troubleshooting first), or for writing or optimizing business logic SQL (use bigquery-optimization).OfficialDevOpsNo warnings★ 21.6K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.5K↓ —
- research-grantsK-Dense-AI/scientific-agent-skillsSupports research proposal preparation and review for NSF, NIH, DOE, DARPA, and Taiwan NSTC, including opportunity-specific requirements, aims, review criteria, budgets, broader impacts, forms, and resubmissions. Use for investigator-authored grant development, compliance matrices, and proposal critiques.ScienceNo warnings★ 54.5K↓ —
- fp-errorssickn33/agentic-awesome-skillsStop throwing everywhere - handle errors as values using Either and TaskEither for cleaner, more predictable codeEngineeringNo warnings★ 48.5K↓ —
- find-bugssickn33/agentic-awesome-skillsFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.SecurityNo warnings★ 48.5K↓ —
- typespec-api-operationsgithub/awesome-copilotAdd GET, POST, PATCH, and DELETE operations to a TypeSpec API plugin with proper routing, parameters, and adaptive cardsEngineeringNo warnings★ 40.4K↓ —
- billing-automationwshobson/agentsBuild automated billing systems for recurring payments, invoicing, subscription lifecycle, and dunning management. Use when implementing subscription billing, automating invoicing, or managing recurring payment systems.OtherNo warnings★ 41.7K↓ —
- hunt-corssickn33/agentic-awesome-skillsHunt CORS MisconfigurationOtherNo warnings★ 48.5K↓ —
- fal-audiosickn33/agentic-awesome-skillsText-to-speech and speech-to-text using fal.ai audio modelsMediaNo warnings★ 48.5K↓ —
- design-uxsickn33/agentic-awesome-skillsUX / usability audit — heuristic evaluation of INTERACTIVE UIs (not just visual polish). Load with design when a UI "feels off", "sucks to use", is hard to learn, needs an instruction wall, or before shipping an interactive tool/editor/app.DesignNo warnings★ 48.5K↓ —
- elk-stacksickn33/agentic-awesome-skillsDeploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for log aggregation and analysis.DevOpsNo warnings★ 48.5K↓ —
- python-resource-managementwshobson/agentsPython resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.EngineeringNo warnings★ 41.7K↓ —
- accessibility-compliancewshobson/agentsImplement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA patterns, building for screen readers, or ensuring inclusive user experiences.LegalNo warnings★ 41.7K↓ —
cqrs-implementation
wshobson/agents
WritingUpdated 2 days ago
From the author
Implement Command Query Responsibility Segregation for scalable architectures. Use when separating read and write models, optimizing query performance, or building event-sourced systems.
Install
npx skills add wshobson/agents --skill cqrs-implementation -a claude-code
Installs to .claude/skills/cqrs-implementation/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (2)
- SKILL.md
- references/details.md