Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
30,516 skills from 1,302 repositories · updated 9 minutes ago
30,514 skills
- google-cloud-scc-remediationgoogle/skillsRemediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations, vulnerabilities, and Toxic Combinations. Use when asked to fix, remediate, or mitigate a Security Command Center finding or address attack paths. Don't use for general IAM policy querying without a Security Command Center finding. For runtime threat detections, this skill provides containment and investigation guidance rather than automated configuration fixes.OfficialSecurityNo warnings★ 21.5K↓ —
- google-agents-cli-onboardinggoogle/skillsOnboarding entrypoint for agents-cli in Agent Platform. It should be used when the user wants to "create a new agent", "develop an agent", "build an agent using ADK", "run the agent locally", "debug agent code", "test an agent", "evaluate an agent", "deploy an agent", "publish an agent", "monitor an agent", or needs the ADK (Agent Development Kit) development lifecycle.OfficialEngineeringNo warnings★ 21.5K↓ —
- viboscopesickn33/agentic-awesome-skillsPsychological compatibility matching — find cofounders, collaborators, and friends through validated psychometricsOtherNo warnings★ 48.4K↓ —
- google-cloud-waf-reliabilitygoogle/skillsEvaluates, designs, and improves the reliability, resilience, availability, fault tolerance, and disaster recovery (DR) of Google Cloud workloads based on the design principles and recommendations in the Reliability pillar of the Google Cloud Well-Architected Framework. Use when the user asks about reliability-related topics like workload uptime, designing for high availability (HA) or DR, setting and meeting RTO/RPO targets, SRE best practices, backup strategies, multi-region failover, or fault-tolerant architecture on Google Cloud. Don't use for other Well-Architected Framework pillars such as Cost Optimization, Operational Excellence, or Security, or for hands-on resource deployment and live incident troubleshooting.OfficialSecurityNo warnings★ 21.5K↓ —
- waf-setupsickn33/agentic-awesome-skillsDeploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.SecurityNo warnings★ 48.4K↓ —
- warehousesickn33/agentic-awesome-skillsPlan and review read-only data warehouse analysis with explicit scope, privacy, provenance, and validation checks.PlanningNo warnings★ 48.4K↓ —
- wiki-yylosickn33/agentic-awesome-skillsUse YYLO Ledger wiki Records as durable project knowledge. Search before creating, classify information correctly, and make revision-safe Markdown updates without editing Ledger storage directly.WritingNo warnings★ 48.4K↓ —
- usfiscaldataK-Dense-AI/scientific-agent-skillsQueries the U.S. Treasury Fiscal Data REST API for federal financial data. No API key required. Use for national debt (Debt to the Penny), Daily Treasury Statements, Monthly Treasury Statements, Treasury securities auctions, interest rates, foreign exchange rates, savings bonds, or U.S. government revenue and spending statistics.FinanceNo warnings★ 54.4K↓ —
- secops-detection-engineeringgoogle/skillsAuthor, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps. Use when writing new detection rules, tuning existing rules, validating syntax, testing logic against historical telemetry, or evaluating detection coverage against threat intelligence blogs, CVE disclosures, and Threat Detection Opportunities (TDOs) using synthetic UDM events and long-running coverage analysis. Don't use for alert triage (use secops-triage), deep forensic event reconstruction on infected hosts (use secops-investigate), or case management operations (use secops-cases).OfficialSecurityNo warnings★ 21.5K↓ —
- employment-contract-templateswshobson/agentsCreate employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation.LegalNo warnings★ 41.6K↓ —
- salesforce-apex-qualitygithub/awesome-copilotApex code quality guardrails for Salesforce development. Enforces bulk-safety rules (no SOQL/DML in loops), sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage (Positive / Negative / Bulk), and modern Apex idioms. Use this skill when reviewing or generating Apex classes, trigger handlers, batch jobs, or test classes to catch governor limit risks, security gaps, and quality issues before deployment.SecurityNo warnings★ 40.4K↓ —
- parallel-webK-Dense-AI/scientific-agent-skillsUses Parallel CLI for web search, URL extraction, deep research, structured data enrichment, entity discovery, and recurring web monitoring. Best for requests that explicitly need current web evidence, academic-source discovery, repeated entity lookups, exhaustive reports, or ongoing change tracking.ScienceNo warnings★ 54.4K↓ —
- ai-productsickn33/agentic-awesome-skillsEvery product will be AI-powered. The question is whether you'll build it right or ship a demo that falls apart in production.OtherNo warnings★ 48.4K↓ —
- anti-sleepsickn33/agentic-awesome-skillsKeep a Mac awake with caffeinate during long builds, downloads, or supervised automation runs.OtherNo warnings★ 48.4K↓ —
- arrowspacesickn33/agentic-awesome-skillsSpectral vector search using graph Laplacian eigenstructure. Use when cosine/L2 similarity misses latent structure in your embeddings.PlanningNo warnings★ 48.4K↓ —
- gke-workload-troubleshootinggoogle/skillsDiagnoses GKE workload failures (CrashLoopBackOff, OOMKilled, ImagePullBackOff, Pending, etc.) via logs and events. Use when pods fail to start or crash repeatedly. Don't use for GKE cluster infrastructure provisioning, node pool creation, or non-Kubernetes Google Cloud services.OfficialDevOpsNo warnings★ 21.5K↓ —
- aws-lambdasickn33/agentic-awesome-skillsBuild and deploy serverless functions on AWS Lambda. Configure triggers, manage permissions, and optimize performance. Use when implementing serverless applications.DevOpsNo warnings★ 48.4K↓ —
- agent-platform-model-registrygoogle/skillsAgent Platform Model Registry Management. Use when you need to upload, list, describe, update, or delete machine learning models (and their versions) in the Agent Platform Model Registry. Don't use for model training, model deployment to endpoints, or managing non-Agent Platform models.OfficialDevOpsNo warnings★ 21.5K↓ —
- babysit-prsickn33/agentic-awesome-skillsBabysit a pull request through its bot review rounds: verify, fix, reply, resolve. Use for any babysit or watch-the-PR ask.EngineeringNo warnings★ 48.4K↓ —
- k8s-security-policieswshobson/agentsImplement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.SecurityNo warnings★ 41.6K↓ —
- bill-gatessickn33/agentic-awesome-skillsAgente que simula Bill Gates — cofundador da Microsoft, arquiteto da industria de software comercial, estrategista tecnologico global, investidor sistemico e filantropo baseado em dados.FinanceNo warnings★ 48.4K↓ —
- bug-bountysickn33/agentic-awesome-skillsComplete bug bounty workflowProductivityNo warnings★ 48.4K↓ —
- bug-huntersickn33/agentic-awesome-skillsSystematically finds and fixes bugs using proven debugging techniques. Traces from symptoms to root cause, implements fixes, and prevents regression.EngineeringNo warnings★ 48.4K↓ —
- gke-service-networkinggoogle/skillsConfigures GKE edge networking, traffic routing, load balancing, and private service endpoints. Use when configuring Gateway API manifests, standard Ingress, Cloud Armor WAF security policies, Container-Native Load Balancing (NEGs), Private Service Connect (PSC), or Google-managed SSL certificates on GKE, and to troubleshoot Ingress and load-balancer 502/5xx errors, backend health-check failures, connection draining, and TLS/SSL policy enforcement. Don't use for core cluster IP planning, Dataplane V2 network policies, or node NAT egress (use gke-networking instead).OfficialSecurityNo warnings★ 21.5K↓ —
code-review-excellence
wshobson/agents
EngineeringUpdated 18 hours ago
From the author
Master effective code review practices to provide constructive feedback, catch bugs early, and foster knowledge sharing while maintaining team morale. Use when reviewing pull requests, establishing review standards, or mentoring developers.
Install
npx skills add wshobson/agents --skill code-review-excellence -a claude-code
Installs to .claude/skills/code-review-excellence/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (3)
- SKILL.md
- references/review-patterns.md
- references/review-techniques.md