Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 2 hours ago
45,602 skills
- kustomizesickn33/agentic-awesome-skillsCustomize Kubernetes manifests without templating using Kustomize.DevOpsNo warnings★ 48.5K↓ —
- bigquery-pipeline-auditgithub/awesome-copilotAudits Python + BigQuery pipelines for cost safety, idempotency, and production readiness. Returns a structured report with exact patch locations.DataNo warnings★ 40.4K↓ —
- integrate-context-maticgithub/awesome-copilotDiscovers and integrates third-party APIs using the context-matic MCP server. Uses `fetch_api` to find available API SDKs, `ask` for integration guidance, `model_search` and `endpoint_search` for SDK details. Use when the user asks to integrate a third-party API, add an API client, implement features with an external API, or work with any third-party API or SDK.ProductivityNo warnings★ 40.4K↓ —
- dhdna-profilerK-Dense-AI/scientific-agent-skillsApplies the DHDNA framework as an exploratory rubric for reasoning and writing patterns in supplied text. Used for explicit requests for DHDNA, cognitive-style reflection, a thinking-pattern profile, or comparisons of textual reasoning. Scores describe evidence in the sample, not validated psychological traits or personal identity.WritingNo warnings★ 54.5K↓ —
- hunt-sstisickn33/agentic-awesome-skillsHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.OtherNo warnings★ 48.5K↓ —
- hunt-sqlisickn33/agentic-awesome-skillsHunting skill for sqli vulnerabilities.SecurityNo warnings★ 48.5K↓ —
- trace-to-training-datawshobson/agentsConvert evaluation traces and production logs into SFT examples and preference pairs. Use when graded traces or failure examples exist and need to become training data, when applying rejection sampling to model outputs, or when building DPO pairs from passing and failing runs.OtherNo warnings★ 41.7K↓ —
- visual-design-foundationswshobson/agentsApply typography, color theory, spacing systems, and iconography principles to create cohesive visual designs. Use when establishing design tokens, building style guides, or improving visual hierarchy and consistency.DesignNo warnings★ 41.7K↓ —
- containerize-aspnetcoregithub/awesome-copilotContainerize an ASP.NET Core project by creating Dockerfile and .dockerfile files customized for the project.OtherNo warnings★ 40.4K↓ —
- gke-ai-troubleshooting-tpu-performance-degradationgoogle/skillsDiagnose GKE Cloud TPU training throughput drops and step-time regressions (15%+ TPU duty-cycle drop) using ML Diagnostics Workload Monitoring (`gcloud alpha mldiagnostics monitored-events` / `hypercomputecluster.googleapis.com/v1alpha`) and 1-minute Cloud Monitoring system metrics (`kubernetes.io/node/accelerator/*`). Distinguishes hardware and network fabric throttling from workload resource bottlenecks (HBM capacity, host memory, or host CPU saturation). Use when TPU training throughput or duty cycle drops without crashing pods, when `PERFORMANCE_DEGRADATION` monitored events fire, or when triaging slow multi-slice training steps. Don't use for complete multi-slice XLA execution stalls with `HANG_DETECTED` logs (use gke-ai-troubleshooting-tpu-mxla-hang) or pod eviction/interruption restarts (use gke-ai-troubleshooting-jobset-interruption).OfficialDevOpsNo warnings★ 21.6K↓ —
- gitlab-ci-patternswshobson/agentsBuild GitLab CI/CD pipelines with multi-stage workflows, caching, and distributed runners for scalable automation. Use when implementing GitLab CI/CD, optimizing pipeline performance, or setting up automated testing and deployment.TestingNo warnings★ 41.7K↓ —
- ima-dai-sdkgoogle/skillsIntegrates the Google Interactive Media Ads (IMA) Dynamic Ad Insertion (DAI) SDK into websites, web apps, mobile apps, or TV apps. Use when: - A video player needs to load and play HLS or DASH streams in web apps, Android apps, iOS apps, tvOS apps, Cast (CAF) receivers, or Roku channels. - The app needs to make use of a Google DAI livestream event asset key, or content source CMS ID, video ID for video on demand. Don't use this skill to load and play a VAST or VMAP URL.OfficialMediaNo warnings★ 21.6K↓ —
- salesforce-flow-designgithub/awesome-copilotSalesforce Flow architecture decisions, flow type selection, bulk safety validation, and fault handling standards. Use this skill when designing or reviewing Record-Triggered, Screen, Autolaunched, Scheduled, or Platform Event flows to ensure correct type selection, no DML/Get Records in loops, proper fault connectors on all data-changing elements, and appropriate automation density checks before deployment.DesignNo warnings★ 40.4K↓ —
- research-grantsK-Dense-AI/scientific-agent-skillsSupports research proposal preparation and review for NSF, NIH, DOE, DARPA, and Taiwan NSTC, including opportunity-specific requirements, aims, review criteria, budgets, broader impacts, forms, and resubmissions. Use for investigator-authored grant development, compliance matrices, and proposal critiques.ScienceNo warnings★ 54.5K↓ —
- alloydb-basicsgoogle/skillsManages clusters, instances, and backups for AlloyDB for PostgreSQL, and integrates with AlloyDB Model Context Protocol (MCP) tools for automated database operations. Use when creating, configuring, or administering AlloyDB databases. Do NOT use for general PostgreSQL instances (e.g. Cloud SQL) or other GCP databases.OfficialDevOpsNo warnings★ 21.6K↓ —
- bigtable-basicsgoogle/skillsAssists in provisioning instances/tables, designing performant schemas, and querying data in Bigtable. Use when designing Bigtable row keys, configuring column families, writing SQL queries or client library code (Java, Go, Python) for Bigtable, or diagnosing performance/hotspotting issues. Also use when provisioning Bigtable clusters using gcloud or cbt CLIs. Don't use for generic Cloud SQL administration.OfficialDataNo warnings★ 21.6K↓ —
- snowflake-semanticviewgithub/awesome-copilotCreate, alter, and validate Snowflake semantic views using Snowflake CLI (snow). Use when asked to build or troubleshoot semantic views/semantic layer definitions with CREATE/ALTER SEMANTIC VIEW, to validate semantic-view DDL against Snowflake via CLI, or to guide Snowflake CLI installation and connection setup.DataNo warnings★ 40.4K↓ —
- winui3-migration-guidegithub/awesome-copilotUWP-to-WinUI 3 migration reference. Maps legacy UWP APIs to correct Windows App SDK equivalents with before/after code snippets. Covers namespace changes, threading (CoreDispatcher to DispatcherQueue), windowing (CoreWindow to AppWindow), dialogs, pickers, sharing, printing, background tasks, and the most common Copilot code generation mistakes.EngineeringNo warnings★ 40.4K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.5K↓ —
- deployment-pipeline-designwshobson/agentsDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use this skill when designing zero-downtime deployment pipelines, implementing canary rollout strategies, setting up multi-environment promotion workflows, or debugging failed deployment gates in CI/CD.DevOpsNo warnings★ 41.7K↓ —
- find-bugssickn33/agentic-awesome-skillsFind bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.SecurityNo warnings★ 48.5K↓ —
- qdrant-version-upgradegithub/awesome-copilotGuidance on how to upgrade your Qdrant version without interrupting the availability of your application and ensuring data integrity.OtherNo warnings★ 40.4K↓ —
- python-resource-managementwshobson/agentsPython resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.EngineeringNo warnings★ 41.7K↓ —
- accessibility-compliancewshobson/agentsImplement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA patterns, building for screen readers, or ensuring inclusive user experiences.LegalNo warnings★ 41.7K↓ —
mcp-security-audit
github/awesome-copilot
SecurityUpdated 2 days ago
From the author
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and npm exec references in MCP configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
Install
npx skills add github/awesome-copilot --skill mcp-security-audit -a claude-code
Installs to .claude/skills/mcp-security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (1)
- SKILL.md