Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
30,214 skills from 1,265 repositories · updated 16 minutes ago
30,212 skills
- agentic-workflowsgithub/awesome-copilotRoute gh-aw workflow design/create/debug/upgrade requests to the right prompts.DesignNo warnings★ 40.4K↓ —
- hunt-corssickn33/agentic-awesome-skillsHunt CORS MisconfigurationOtherNo warnings★ 48.4K↓ —
- hunt-csrfsickn33/agentic-awesome-skillsHunting skill for csrf vulnerabilities.SecurityNo warnings★ 48.4K↓ —
- issue-fields-migrationgithub/awesome-copilotBulk-migrate metadata to GitHub issue fields from two sources: repo labels (e.g. priority labels to a Priority field) and Project V2 fields. Use when users say "migrate my labels to issue fields", "migrate project fields to issue fields", "convert labels to issue fields", "copy project field values to issue fields", or ask about adopting issue fields. Issue fields are org-level typed metadata (single select, text, number, date) that replace label-based workarounds with structured, searchable, cross-repo fields.OtherNo warnings★ 40.4K↓ —
- winui3-migration-guidegithub/awesome-copilotUWP-to-WinUI 3 migration reference. Maps legacy UWP APIs to correct Windows App SDK equivalents with before/after code snippets. Covers namespace changes, threading (CoreDispatcher to DispatcherQueue), windowing (CoreWindow to AppWindow), dialogs, pickers, sharing, printing, background tasks, and the most common Copilot code generation mistakes.EngineeringNo warnings★ 40.4K↓ —
- bazel-build-optimizationwshobson/agentsOptimize Bazel builds for large-scale monorepos. Use when configuring Bazel, implementing remote execution, or optimizing build performance for enterprise codebases.OtherNo warnings★ 41.6K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.4K↓ —
- power-platform-architectgithub/awesome-copilotUse this skill when the user needs to transform business requirements, use case descriptions, or meeting transcripts into a technical Power Platform solution architecture, including component selection and Mermaid.js diagrams.PlanningNo warnings★ 40.4K↓ —
- arize-prompt-optimizationgithub/awesome-copilotOptimizes, improves, and debugs LLM prompts using production trace data, evaluations, and annotations. Extracts prompts from spans, gathers performance signal, and runs a data-driven optimization loop using the ax CLI. Use when the user mentions optimize prompt, improve prompt, make AI respond better, improve output quality, prompt engineering, prompt tuning, or system prompt improvement.EngineeringNo warnings★ 40.4K↓ —
- goal-loopsickn33/agentic-awesome-skillsDraft and explain persistent goal-loop prompts for long-running agent work with clear stop conditions.OtherNo warnings★ 48.4K↓ —
- gpt-tastesickn33/agentic-awesome-skillsUse when generating elite GSAP-heavy frontend pages with strict AIDA structure, wide hero typography, and gapless bento grids.DesignNo warnings★ 48.4K↓ —
- secops-triagegoogle/skillsExpert guidance for security alert triage in Google SecOps. Use when investigating and triaging security alerts, determining false positives vs. true positives, assessing entity risk, adjusting alert severity or priority, and closing or escalating alerts and cases. Don't use for deep multi-hop incident investigations across host timelines (use secops-investigate), proactive threat hunting or retroactive IoC sweeps (use secops-hunt), or authoring new detection rules (use secops-detection-engineering).OfficialSecurityNo warnings★ 21.5K↓ —
- github-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, harden, or secure a GitHub Actions workflow, when writing a new workflow, or for any request like "is this workflow safe?", "review my CI for security issues", "why is pull_request_target dangerous here?", "pin my actions", or "lock down GITHUB_TOKEN permissions". Covers script injection via ${{ }} interpolation, pull_request_target / workflow_run privilege escalation, SHA-pinning of third-party actions, least-privilege permissions, GITHUB_ENV/GITHUB_OUTPUT injection, secret exposure, OIDC over long-lived credentials, and self-hosted runner exposure on public repositories.DevOpsNo warnings★ 40.4K↓ —
- changelog-automationwshobson/agentsAutomate changelog generation from commits, PRs, and releases following Keep a Changelog format. Use when setting up release workflows, generating release notes, or standardizing commit conventions.EngineeringNo warnings★ 41.6K↓ —
- gtm-positioning-strategygithub/awesome-copilotFind and own a defensible market position. Use when messaging sounds like competitors, conversion is weak despite awareness, repositioning a product, or testing positioning claims. Includes Crawl-Walk-Run rollout methodology and the word change that improved enterprise deal progression.TestingNo warnings★ 40.4K↓ —
- paperzillaK-Dense-AI/scientific-agent-skillsReads projects, searches project feeds, and retrieves recommendations and canonical papers in Paperzilla through the pz CLI. Supports recent recommendations, paper details, markdown-based summaries, recommendation feedback, JSON export, and Atom feed URLs.ScienceNo warnings★ 54.4K↓ —
- hunt-sstisickn33/agentic-awesome-skillsHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.OtherNo warnings★ 48.4K↓ —
- implementsickn33/agentic-awesome-skillsImplement a piece of work based on a PRD or set of issues.PlanningNo warnings★ 48.4K↓ —
- ui-screenshotsgithub/awesome-copilotCapture screenshots of web apps during development using Playwright and PIL. Supports full-page captures, interactive states, and an iterate-on-crop workflow that avoids slow re-screenshots.DesignNo warnings★ 40.4K↓ —
- startup-metrics-frameworkwshobson/agentsTrack, calculate, and optimize key performance metrics for SaaS, marketplace, consumer, and B2B startups from seed through Series A, including unit economics, growth efficiency, and cash management. Use this skill when defining a metrics framework, calculating CAC/LTV/burn multiple, benchmarking business health, or preparing metrics dashboards for investors or board reporting.FinanceNo warnings★ 41.6K↓ —
- kustomizesickn33/agentic-awesome-skillsCustomize Kubernetes manifests without templating using Kustomize.DevOpsNo warnings★ 48.4K↓ —
- macos-golden-gate-designgithub/awesome-copilotDesign, implement, review, or refactor native macOS 27 Golden Gate interfaces in SwiftUI or AppKit. Use when a Mac app must match Apple's current macOS 27 UI kit and restrained Liquid Glass language: integrated windows, full-height sidebars, native toolbars, flat lists, tables, and forms, clear pane boundaries, accessible materials, and removal of unnecessary nested cards, framed panels, or glassmorphism. Also use for Figma macOS 27 design-to-code work and audits of interfaces that feel too boxed.DesignNo warnings★ 40.4K↓ —
- langgraphsickn33/agentic-awesome-skillsExpert in LangGraph - the production-grade framework for building stateful, multi-actor AI applications. Covers graph construction, state management, cycles and branches, persistence with checkpointers, human-in-the-loop patterns, and the ReAct agent pattern.EngineeringNo warnings★ 48.4K↓ —
- nx-workspace-patternswshobson/agentsConfigure and optimize Nx monorepo workspaces. Use when setting up Nx, configuring project boundaries, optimizing build caching, or implementing affected commands.OtherNo warnings★ 41.6K↓ —
parallel-debugging
wshobson/agents
From the author
Debug complex issues using competing hypotheses with parallel investigation, evidence collection, and root cause arbitration. Use this skill when debugging bugs with multiple potential causes, performing root cause analysis, or organizing parallel investigation workflows.
Install
npx skills add wshobson/agents --skill parallel-debugging -a claude-code
Installs to .claude/skills/parallel-debugging/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 95
Files (2)
- SKILL.md
- references/hypothesis-testing.md