Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
29,888 skills from 1,220 repositories · updated 17 minutes ago
29,886 skills
- bug-bountysickn33/agentic-awesome-skillsComplete bug bounty workflowProductivityNo warnings★ 48.4K↓ —
- parallel-webK-Dense-AI/scientific-agent-skillsUses Parallel CLI for web search, URL extraction, deep research, structured data enrichment, entity discovery, and recurring web monitoring. Best for requests that explicitly need current web evidence, academic-source discovery, repeated entity lookups, exhaustive reports, or ongoing change tracking.ScienceNo warnings★ 54.4K↓ —
- javascript-testing-patternswshobson/agentsImplement comprehensive testing strategies using Jest, Vitest, and Testing Library for unit tests, integration tests, and end-to-end testing with mocking, fixtures, and test-driven development. Use when writing JavaScript/TypeScript tests, setting up test infrastructure, or implementing TDD/BDD workflows.TestingNo warnings★ 41.6K↓ —
- bigtable-basicsgoogle/skillsAssists in provisioning instances/tables, designing performant schemas, and querying data in Bigtable. Use when designing Bigtable row keys, configuring column families, writing SQL queries or client library code (Java, Go, Python) for Bigtable, or diagnosing performance/hotspotting issues. Also use when provisioning Bigtable clusters using gcloud or cbt CLIs. Don't use for generic Cloud SQL administration.OfficialDataNo warnings★ 21.5K↓ —
- career-opssickn33/agentic-awesome-skillsMulti-CLI job-search command center: evaluate offers, scan portals, tailor CVs, track applications, prep interviews. Invoke per mode.PlanningNo warnings★ 48.4K↓ —
- zarr-pythonK-Dense-AI/scientific-agent-skillsStores and queries chunked N-D scientific arrays with Zarr-Python 3, including codecs, sharding, S3/GCS storage, and NumPy/Dask/Xarray integration. Use for array layout, bounded I/O, format migration, or scientific metadata preservation.EngineeringNo warnings★ 54.4K↓ —
- claude-apisickn33/agentic-awesome-skillsBuild apps with the Claude API or Anthropic SDK. TRIGGER when: code imports `anthropic`/`@anthropic-ai/sdk`/`claude_agent_sdk`, or user asks to use Claude API, Anthropic SDKs, or Agent SDK. DO NOT TRIGGER when: code imports `openai`/other AI SDK, general programming, or ML/data-science tasks.EngineeringNo warnings★ 48.4K↓ —
- clean-codesickn33/agentic-awesome-skillsThis skill embodies the principles of "Clean Code" by Robert C. Martin (Uncle Bob). Use it to transform "code that works" into "code that is clean."EngineeringNo warnings★ 48.4K↓ —
- clerk-authsickn33/agentic-awesome-skillsExpert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user syncOtherNo warnings★ 48.4K↓ —
- pester-should-migrationgithub/awesome-copilotExperimental (preview) Pester skill for migrating classic Should -Be (v5) assertion syntax to the new Should-* (v6) assertions (note the hyphen, no space), e.g. `Should -Be` -> `Should-Be`, `Should -Not -Be` -> `Should-NotBe`. Tracks Pester 6, which is still a release candidate, so this guidance may change; verified against Pester 6.0.0-rc2. Use when converting Pester v5 assertions to Pester v6 Should-* operators, modernizing a Pester test suite, or when a user asks to migrate, convert, or rewrite `Should -...` calls in .Tests.ps1 / PowerShell files.TestingNo warnings★ 40.4K↓ —
- cohesivitysickn33/agentic-awesome-skillsProvision headless backend services for AI agents through Cohesivity: hosting, databases, storage, LLMs, and third-party APIs over one HTTP API. Use when a trusted .cohesivity file exists or the user approves a new backend.EngineeringNo warnings★ 48.4K↓ —
- prometheus-configurationwshobson/agentsSet up Prometheus for comprehensive metric collection, storage, and monitoring of infrastructure and applications. Use when implementing metrics collection, setting up monitoring infrastructure, or configuring alerting systems.DevOpsNo warnings★ 41.6K↓ —
- cred-omegasickn33/agentic-awesome-skillsCISO operacional enterprise para gestao total de credenciais e segredos.OtherNo warnings★ 48.4K↓ —
- firebase-basicsgoogle/skillsProvides foundational Firebase CLI setup, CLI installation, version checks (`firebase-tools@latest --version`), CLI login (including --no-localhost), project creation, project selection (`firebase use`), and app config file downloads (`google-services.json`, `GoogleService-Info.plist`). Use ONLY for CLI login, project creation/switching, or downloading app config files. Don't use for Firebase Hosting deploy, Firestore, Auth, App Hosting, Data Connect, Crashlytics, or Remote Config.OfficialDevOpsNo warnings★ 21.5K↓ —
- open-code-reviewalibaba/open-code-reviewPerforms AI-powered code review on Git changes using the `ocr` CLI from alibaba/open-code-review. Use when the user asks to review code, review a pull request, review staged/unstaged changes, review a commit, or compare branches for code quality issues. Produces line-level review comments and can automatically apply fixes when requested. With appropriate review rules, can detect various types of issues including bugs, security vulnerabilities, performance problems, and code quality concerns.EngineeringNo warnings★ 48.2K↓ —
- open-code-review-delegatealibaba/open-code-reviewDelegation mode for open-code-review (OCR). Instead of OCR calling an LLM endpoint, this skill instructs the host agent to perform the code review itself, using OCR only for deterministic engineering: file selection and rule resolution. Use when the host agent should drive the review with its own LLM capabilities.EngineeringNo warnings★ 48.2K↓ —
- open-code-reviewalibaba/open-code-reviewPerforms AI-powered code review on Git changes using the `ocr` CLI from alibaba/open-code-review. Use when the user asks to review code, review a pull request, review staged/unstaged changes, review a commit, or compare branches for code quality issues. Produces line-level review comments and can automatically apply fixes when requested. With appropriate review rules, can detect various types of issues including bugs, security vulnerabilities, performance problems, and code quality concerns.EngineeringNo warnings★ 48.2K↓ —
- security-requirement-extractionwshobson/agentsDerive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.SecurityNo warnings★ 41.6K↓ —
- paperzillaK-Dense-AI/scientific-agent-skillsReads projects, searches project feeds, and retrieves recommendations and canonical papers in Paperzilla through the pz CLI. Supports recent recommendations, paper details, markdown-based summaries, recommendation feedback, JSON export, and Atom feed URLs.ScienceNo warnings★ 54.4K↓ —
- react-native-architecturewshobson/agentsBuild production React Native apps with Expo, navigation, native modules, offline sync, and cross-platform patterns. Use when developing mobile apps, implementing native integrations, or architecting React Native projects.PlanningNo warnings★ 41.6K↓ —
- error-handling-patternswshobson/agentsMaster error handling patterns across languages including exceptions, Result types, error propagation, and graceful degradation to build resilient applications. Use when implementing error handling, designing APIs, or improving application reliability.OtherNo warnings★ 41.6K↓ —
- polars-bioK-Dense-AI/scientific-agent-skillsPerforms genomic interval overlap, nearest, merge, coverage, complement and subtraction on Polars DataFrames, and reads or writes BED, VCF, BCF, BAM, CRAM, GFF, GTF, FASTA and FASTQ data. Use for coordinate-aware genomic joins, read-depth analysis, lazy bioinformatics I/O, SQL queries or migration from bioframe.DataNo warnings★ 54.4K↓ —
- offer-negotiationreactive-resume/reactive-resumeEvaluates and negotiates job offers. Decodes base, bonus, equity, sign-on, level and terms with unknowns kept unknown and each offer in its own currency, benchmarks against checkable pay data, finds true leverage, drafts one counter as email and call script, role-plays the recruiter, and handles the salary-expectations number, deadlines and extensions, "best and final", competing offers, counteroffers and written acceptance or decline. Country-aware (India CTC, 13th-month pay, public-sector scales). Use when the user says "I got an offer of...", "is this offer good", "should I negotiate", "how do I counter", "compare my offers", "what is my equity worth", "they asked my salary expectations", "they want an answer by Friday", "can I ask for more time", "should I accept" or "practice the negotiation call". Uses Reactive Resume MCP tools when connected. For logging the offer, its deadline and withdrawal notes, job-application-manager; for other interview answers, interview-prep.WritingNo warnings★ 44.8K↓ —
- hunt-ldapsickn33/agentic-awesome-skillsHunt LDAP Injection and XPath InjectionOtherNo warnings★ 48.4K↓ —
hunt-cors
sickn33/agentic-awesome-skills
OtherUpdated 9 hours ago
From the author
Hunt CORS Misconfiguration
Install
npx skills add sickn33/agentic-awesome-skills --skill hunt-cors -a claude-code
Installs to .claude/skills/hunt-cors/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption72
Files (1)
- SKILL.md