Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
29,862 skills from 1,220 repositories · updated 17 minutes ago
29,860 skills
- k8s-security-policieswshobson/agentsImplement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.SecurityNo warnings★ 41.6K↓ —
- pptx-visual-assetswshobson/agentsUse when selecting and placing approved supporting icons, images, SVGs, diagrams, or infographics in an editable PPTX deck.DocumentsNo warnings★ 41.6K↓ —
- python-type-safetywshobson/agentsPython type safety with type hints, generics, protocols, and strict type checking. Use when adding type annotations, implementing generic classes, defining structural interfaces, or configuring mypy/pyright.EngineeringNo warnings★ 41.6K↓ —
- uv-package-managerwshobson/agentsMaster the uv package manager for fast Python dependency management, virtual environments, and modern Python project workflows. Use when setting up Python projects, managing dependencies, or optimizing Python development workflows with uv.EngineeringNo warnings★ 41.6K↓ —
- offerssickn33/agentic-awesome-skillsWhen the user wants to design, construct, or improve an offer — the thing they actually sell — including value framing, bonus stacking, guarantee design, scarcity/urgency, naming, and payment structure.DesignNo warnings★ 48.4K↓ —
- python-resource-managementwshobson/agentsPython resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.EngineeringNo warnings★ 41.6K↓ —
- vscode-ext-localizationgithub/awesome-copilotGuidelines for proper localization of VS Code extensions, following VS Code extension development guidelines, libraries and good practicesEngineeringNo warnings★ 40.4K↓ —
- cost-optimizationwshobson/agentsOptimize cloud costs across AWS, Azure, GCP, and OCI through resource rightsizing, tagging strategies, reserved instances, and spending analysis. Use when reducing cloud expenses, analyzing infrastructure costs, or implementing cost governance policies.DevOpsNo warnings★ 41.6K↓ —
- data-breach-blast-radiusgithub/awesome-copilotPre-breach impact analysis: inventories sensitive data (PII, PHI, PCI-DSS, credentials), traces data flows, scores exposure vectors, and produces a regulatory blast radius report with fine ranges sourced verbatim from GDPR Art. 83, CCPA § 1798.155(a), and HIPAA 45 CFR § 160.404. Cost benchmarks from IBM Cost of a Data Breach Report (annually updated). All citations in references/SOURCES.md for verification. Use when asked: "assess breach impact", "what data could be exposed", "calculate blast radius", "data exposure analysis", "how bad would a breach be", "quantify data risk", "sensitive data inventory", "data flow security audit", "pre-breach assessment", "worst-case breach scenario", "breach readiness", "data risk report", "/data-breach-blast-radius". For any stack handling user data, health records, or financial information. Output labels law-sourced figures (exact) vs heuristic estimates (planning only). Does not replace legal counsel.SecurityNo warnings★ 40.4K↓ —
- turborepo-cachingwshobson/agentsConfigure Turborepo for efficient monorepo builds with local and remote caching. Use when setting up Turborepo, optimizing build pipelines, or implementing distributed caching.OtherNo warnings★ 41.6K↓ —
- grounded-vaultwshobson/agentsUse when maintaining a durable Markdown knowledge store that agents compile from sources, when every number or quote in a wiki page must trace back to an immutable source, or when compiled pages need cheap drift detection against the code they describe. Teaches the raw/wiki/archive layout, per-claim provenance links, and git fingerprints for zero-token staleness checks.EngineeringNo warnings★ 41.6K↓ —
- database-migrationwshobson/agentsExecute database migrations across ORMs and platforms with zero-downtime strategies, data transformation, and rollback procedures. Use when migrating databases, changing schemas, performing data transformations, or implementing zero-downtime deployment strategies.DataNo warnings★ 41.6K↓ —
- structured-autonomy-plangithub/awesome-copilotStructured Autonomy Planning PromptPlanningNo warnings★ 40.4K↓ —
- startup-financial-modelingwshobson/agentsBuild comprehensive 3-5 year financial models with revenue projections, cost structures, cash flow analysis, and scenario planning for early-stage startups. Use this skill when creating financial projections, calculating burn rate or runway, modeling fundraising scenarios, or preparing investor-ready financials for a seed or Series A raise.FinanceNo warnings★ 41.6K↓ —
- create-specificationgithub/awesome-copilotCreate a new specification file for the solution, optimized for Generative AI consumption.PlanningNo warnings★ 40.4K↓ —
- python-project-structurewshobson/agentsPython project organization, module architecture, and public API design. Use when setting up new projects, organizing modules, defining public interfaces with __all__, or planning directory layouts.EngineeringNo warnings★ 41.6K↓ —
- signed-audit-trails-recipewshobson/agentsStep-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls. Use when explaining, evaluating, or demonstrating the pattern before committing to the protect-mcp runtime hooks. Covers Cedar policy, Ed25519 receipts, offline verification, tamper detection, CI/CD integration, and SLSA composition.DevOpsNo warnings★ 41.6K↓ —
- cqrs-implementationwshobson/agentsImplement Command Query Responsibility Segregation for scalable architectures. Use when separating read and write models, optimizing query performance, or building event-sourced systems.WritingNo warnings★ 41.6K↓ —
- projection-patternswshobson/agentsBuild read models and projections from event streams. Use when implementing CQRS read sides, building materialized views, or optimizing query performance in event-sourced systems.OtherNo warnings★ 41.6K↓ —
- defi-protocol-templateswshobson/agentsImplement DeFi protocols with production-ready templates for staking, AMMs, governance, and flash loans. Use when building decentralized finance applications or smart contract protocols.FinanceNo warnings★ 41.6K↓ —
- glassersickn33/agentic-awesome-skillsSearch, inspect, and run third-party data APIs through one CLI when the environment has no suitable integration.EngineeringNo warnings★ 48.4K↓ —
- pester-should-migrationgithub/awesome-copilotExperimental (preview) Pester skill for migrating classic Should -Be (v5) assertion syntax to the new Should-* (v6) assertions (note the hyphen, no space), e.g. `Should -Be` -> `Should-Be`, `Should -Not -Be` -> `Should-NotBe`. Tracks Pester 6, which is still a release candidate, so this guidance may change; verified against Pester 6.0.0-rc2. Use when converting Pester v5 assertions to Pester v6 Should-* operators, modernizing a Pester test suite, or when a user asks to migrate, convert, or rewrite `Should -...` calls in .Tests.ps1 / PowerShell files.TestingNo warnings★ 40.4K↓ —
- secops-huntgoogle/skillsExpert guidance for proactive threat hunting in Google SecOps. Use when proactively hunting for threats, retroactively analyzing indicators of compromise (IoCs), performing prevalence searches across enterprise events, hunting for MITRE ATT&CK techniques, or detecting behavioral and statistical outliers using UDM queries. Don't use for incoming alert triage (use secops-triage), active incident response and timeline deep-dives on a known breach (use secops-investigate), or detection rule authoring (use secops-detection-engineering).OfficialFinanceNo warnings★ 21.5K↓ —
- react-modernizationwshobson/agentsUpgrade React applications to latest versions, migrate from class components to hooks, and adopt concurrent features. Use when modernizing React codebases, migrating to React Hooks, or upgrading to latest React versions.EngineeringNo warnings★ 41.6K↓ —
google-cloud-scc-query
google/skills
OfficialSecurityUpdated 22 hours ago
From the author
Queries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks from Security Command Center on Google Cloud. Use when retrieving details for a security finding by its name, validating finding scope (e.g., verifying findingClass is TOXIC_COMBINATION, VULNERABILITY, EXTERNAL_EXPOSURE, or THREAT), or fetching finding details for triage. Don't use to draft remediations, apply patches, or execute configurations.
Install
npx skills add google/skills --skill google-cloud-scc-query -a claude-code
Installs to .claude/skills/google-cloud-scc-query/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance100
Maintenance100
Licence100
Adoption67
Files (2)
- SKILL.md
- references/finding_schema.md