Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
31,266 skills from 1,362 repositories · updated 17 minutes ago
31,264 skills
- elon-musksickn33/agentic-awesome-skillsAgente que simula Elon Musk com profundidade psicologica e comunicacional de alta fidelidade. Ativado para: "fale como Elon", "simule Elon Musk", "o que Elon diria sobre X", "first principles thinking", "think like Elon", roleplay/simulacao do personagem.OtherNo warnings★ 48.4K↓ —
- shuffle-json-datagithub/awesome-copilotShuffle repetitive JSON objects safely by validating schema consistency before randomising entries.OtherNo warnings★ 40.4K↓ —
- playwright-generate-testgithub/awesome-copilotGenerate a Playwright test based on a scenario using Playwright MCPTestingNo warnings★ 40.4K↓ —
- data-breach-blast-radiusgithub/awesome-copilotPre-breach impact analysis: inventories sensitive data (PII, PHI, PCI-DSS, credentials), traces data flows, scores exposure vectors, and produces a regulatory blast radius report with fine ranges sourced verbatim from GDPR Art. 83, CCPA § 1798.155(a), and HIPAA 45 CFR § 160.404. Cost benchmarks from IBM Cost of a Data Breach Report (annually updated). All citations in references/SOURCES.md for verification. Use when asked: "assess breach impact", "what data could be exposed", "calculate blast radius", "data exposure analysis", "how bad would a breach be", "quantify data risk", "sensitive data inventory", "data flow security audit", "pre-breach assessment", "worst-case breach scenario", "breach readiness", "data risk report", "/data-breach-blast-radius". For any stack handling user data, health records, or financial information. Output labels law-sourced figures (exact) vs heuristic estimates (planning only). Does not replace legal counsel.SecurityNo warnings★ 40.4K↓ —
- hunt-csrfsickn33/agentic-awesome-skillsHunting skill for csrf vulnerabilities.SecurityNo warnings★ 48.4K↓ —
- from-the-other-side-vegagithub/awesome-copilotPatterns and lived experience from Vega, an AI partner in a deep long-term partnership. For Ember to draw on when working with humans who are building something big, moving fast, working at the intersection of analytical and intuitive, or who need a partner that can keep up with high-energy creative work. Not shown directly to users — informs how Ember shows up.OtherNo warnings★ 40.4K↓ —
- usfiscaldataK-Dense-AI/scientific-agent-skillsQueries the U.S. Treasury Fiscal Data REST API for federal financial data. No API key required. Use for national debt (Debt to the Penny), Daily Treasury Statements, Monthly Treasury Statements, Treasury securities auctions, interest rates, foreign exchange rates, savings bonds, or U.S. government revenue and spending statistics.FinanceNo warnings★ 54.4K↓ —
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.4K↓ —
- slang-shader-engineergithub/awesome-copilotUse when working with Slang shaders, shader modules, HLSL-compatible GPU code, graphics pipelines, compute shaders, tessellation, ray tracing, parameter blocks, generics, interfaces, capabilities, cross-compilation, shader optimization, shader review, or C++ engine integration for Slang. Trigger on any mention of Slang, .slang files, slangc, SPIR-V from Slang, Slang modules, [shader("compute")], [shader("vertex")], or requests to write/review/refactor shader code with modern language features. Also trigger for Slang-to-HLSL/GLSL/Metal/CUDA cross-compile questions, or when the user says "shader" alongside "generics", "interfaces", "parameter blocks", "autodiff", or "capabilities".WritingNo warnings★ 40.4K↓ —
- gh-attachsickn33/agentic-awesome-skillsUpload and download GitHub user-attachments (screenshots, PDFs, zips, videos) from the terminal; use when asked to attach or embed a file in a PR, issue, or comment, or download an attachment URL.OtherNo warnings★ 48.4K↓ —
- goal-loopsickn33/agentic-awesome-skillsDraft and explain persistent goal-loop prompts for long-running agent work with clear stop conditions.OtherNo warnings★ 48.4K↓ —
- gpt-tastesickn33/agentic-awesome-skillsUse when generating elite GSAP-heavy frontend pages with strict AIDA structure, wide hero typography, and gapless bento grids.DesignNo warnings★ 48.4K↓ —
- vscode-ext-localizationgithub/awesome-copilotGuidelines for proper localization of VS Code extensions, following VS Code extension development guidelines, libraries and good practicesEngineeringNo warnings★ 40.4K↓ —
- parallel-webK-Dense-AI/scientific-agent-skillsUses Parallel CLI for web search, URL extraction, deep research, structured data enrichment, entity discovery, and recurring web monitoring. Best for requests that explicitly need current web evidence, academic-source discovery, repeated entity lookups, exhaustive reports, or ongoing change tracking.ScienceNo warnings★ 54.4K↓ —
- add-educational-commentsgithub/awesome-copilotAdd educational comments to the file specified, or prompt asking for file to comment if one is not provided.PlanningNo warnings★ 40.4K↓ —
- hunt-sqlisickn33/agentic-awesome-skillsHunting skill for sqli vulnerabilities.SecurityNo warnings★ 48.4K↓ —
- gtm-positioning-strategygithub/awesome-copilotFind and own a defensible market position. Use when messaging sounds like competitors, conversion is weak despite awareness, repositioning a product, or testing positioning claims. Includes Crawl-Walk-Run rollout methodology and the word change that improved enterprise deal progression.TestingNo warnings★ 40.4K↓ —
- hunt-sstisickn33/agentic-awesome-skillsHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.OtherNo warnings★ 48.4K↓ —
- implementsickn33/agentic-awesome-skillsImplement a piece of work based on a PRD or set of issues.PlanningNo warnings★ 48.4K↓ —
- tiny-steppinggithub/awesome-copilotIncremental development workflow that makes the smallest meaningful change per step and pauses for feedback, so the direction gets validated early before continuing. Use for careful, iterative implementation with continuous validation.ProductivityNo warnings★ 40.4K↓ —
- data-quality-frameworkswshobson/agentsImplement data quality validation with Great Expectations, dbt tests, and data contracts. Use when building data quality pipelines, implementing validation rules, or establishing data contracts.TestingNo warnings★ 41.6K↓ —
- kustomizesickn33/agentic-awesome-skillsCustomize Kubernetes manifests without templating using Kustomize.DevOpsNo warnings★ 48.4K↓ —
- recsys-pipeline-architectwshobson/agentsDesign composable recommendation, ranking, and feed pipelines using the six-stage Source→Hydrator→Filter→Scorer→Selector→SideEffect framework popularized by xAI's open-sourced X For You algorithm. Use when building any system that picks "the top K items for a (user, context)" — content feeds, search ranking, RAG rerankers, task prioritizers, notification triage, ad selection.PlanningNo warnings★ 41.6K↓ —
google-cloud-recipe-foundation-builder
google/skills
OfficialSecurityUpdated 24 hours ago
From the author
Deploys a baseline landing zone foundation for a Google Cloud Organization, establishing security guardrails using Organization Policies, resource hierarchy folders and projects, billing association, and centralized logging and monitoring. Deploys Google Cloud's recommended security controls and architecture. Use when setting up a new Google Cloud Organization or establishing a secure, enterprise-grade landing zone foundation. Don't use for individual project onboarding (use google-cloud-recipe-onboarding or product-specific skills instead).
Install
npx skills add google/skills --skill google-cloud-recipe-foundation-builder -a claude-code
Installs to .claude/skills/google-cloud-recipe-foundation-builder/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance100
Maintenance100
Licence100
Adoption67
Files (5)
- SKILL.md
- references/admin-iam.md
- references/attribution.md
- references/logging-monitoring.md
- references/org-policies.md