Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
29,031 skills from 1,182 repositories · updated 5 minutes ago
29,029 skills
- fal-audiosickn33/agentic-awesome-skillsText-to-speech and speech-to-text using fal.ai audio modelsMediaNo warnings★ 48.4K↓ —
- hunt-corssickn33/agentic-awesome-skillsHunt CORS MisconfigurationOtherNo warnings★ 48.4K↓ —
- hunt-csrfsickn33/agentic-awesome-skillsHunting skill for csrf vulnerabilities.SecurityNo warnings★ 48.4K↓ —
- google-agents-cli-onboardinggoogle/skillsOnboarding entrypoint for agents-cli in Agent Platform. It should be used when the user wants to "create a new agent", "develop an agent", "build an agent using ADK", "run the agent locally", "debug agent code", "test an agent", "evaluate an agent", "deploy an agent", "publish an agent", "monitor an agent", or needs the ADK (Agent Development Kit) development lifecycle.OfficialEngineeringNo warnings★ 21.5K↓ —
- google-cloud-scc-remediationgoogle/skillsRemediates Google Cloud Security Command Center findings, including IAM permission fixes, cloud resource misconfigurations, vulnerabilities, and Toxic Combinations. Use when asked to fix, remediate, or mitigate a Security Command Center finding or address attack paths. Don't use for general IAM policy querying without a Security Command Center finding. For runtime threat detections, this skill provides containment and investigation guidance rather than automated configuration fixes.OfficialSecurityNo warnings★ 21.5K↓ —
- data-manager-api-event-ingestiongoogle/skillsGuides developers through implementing event and conversion ingestion to Google products using the Data Manager API /v1/events/ingest endpoint and its associated client libraries. Use this skill when the user wants to upload offline conversions, enhanced conversions for leads, click conversions, Google Analytics web or app events, or any other event ingestion use case supported by the Data Manager API. Don't use for uploading audience members (use the data-manager-api-audience-ingestion skill).OfficialEngineeringNo warnings★ 21.5K↓ —
- geo-auditsickn33/agentic-awesome-skillsFull website GEO+SEO audit with parallel subagent delegation.MarketingNo warnings★ 48.4K↓ —
- google-analytics-data-api-basicsgoogle/skillsManages Google Analytics reporting data, enables the Analytics Data API via the Cloud CLI, and creates reports using the Google Analytics Data API (v1beta). Use when you need to interact with Google Analytics properties, run customized analytics reports, query metrics (like activeUsers, screenPageViews) and dimensions (like city, date), check metrics and dimensions compatibility, or verify API enablement. Don't use for Google Analytics Admin API operations (e.g., creating properties, managing users) or for front-end tracking installation.OfficialDataNo warnings★ 21.5K↓ —
- paperzillaK-Dense-AI/scientific-agent-skillsReads projects, searches project feeds, and retrieves recommendations and canonical papers in Paperzilla through the pz CLI. Supports recent recommendations, paper details, markdown-based summaries, recommendation feedback, JSON export, and Atom feed URLs.ScienceNo warnings★ 54.4K↓ —
- goal-loopsickn33/agentic-awesome-skillsDraft and explain persistent goal-loop prompts for long-running agent work with clear stop conditions.OtherNo warnings★ 48.4K↓ —
- gpt-tastesickn33/agentic-awesome-skillsUse when generating elite GSAP-heavy frontend pages with strict AIDA structure, wide hero typography, and gapless bento grids.DesignNo warnings★ 48.4K↓ —
- gke-service-networkinggoogle/skillsConfigures GKE edge networking, traffic routing, load balancing, and private service endpoints. Use when configuring Gateway API manifests, standard Ingress, Cloud Armor WAF security policies, Container-Native Load Balancing (NEGs), Private Service Connect (PSC), or Google-managed SSL certificates on GKE, and to troubleshoot Ingress and load-balancer 502/5xx errors, backend health-check failures, connection draining, and TLS/SSL policy enforcement. Don't use for core cluster IP planning, Dataplane V2 network policies, or node NAT egress (use gke-networking instead).OfficialSecurityNo warnings★ 21.5K↓ —
- bigquery-observabilitygoogle/skillsProvides data-retrieval best practices, tool selection guidance, and performant SQL query syntax for BigQuery telemetry across INFORMATION_SCHEMA, Cloud Monitoring, and the REST API. Use when the telemetry to fetch is already known, selecting telemetry tools, writing performant INFORMATION_SCHEMA queries, retrieving telemetry for diagnosing single-job performance bottlenecks, investigating slot contention, job concurrency and queue latency, analyzing reservation capacity, utilization and autoscaling saturation, or auditing capacity-based and on-demand compute and storage resource billable usage. Don't use for root-cause diagnosis or symptom troubleshooting when the cause is unknown (use bigquery-troubleshooting first), or for writing or optimizing business logic SQL (use bigquery-optimization).OfficialDevOpsNo warnings★ 21.5K↓ —
- google-cloud-scc-querygoogle/skillsQueries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks from Security Command Center on Google Cloud. Use when retrieving details for a security finding by its name, validating finding scope (e.g., verifying findingClass is TOXIC_COMBINATION, VULNERABILITY, EXTERNAL_EXPOSURE, or THREAT), or fetching finding details for triage. Don't use to draft remediations, apply patches, or execute configurations.OfficialSecurityNo warnings★ 21.5K↓ —
- hunt-sqlisickn33/agentic-awesome-skillsHunting skill for sqli vulnerabilities.SecurityNo warnings★ 48.4K↓ —
- typescript-advanced-typeswshobson/agentsMaster TypeScript's advanced type system including generics, conditional types, mapped types, template literals, and utility types for building type-safe applications. Use when implementing complex type logic, creating reusable type utilities, or ensuring compile-time type safety in TypeScript projects.EngineeringNo warnings★ 41.6K↓ —
- hunt-sstisickn33/agentic-awesome-skillsHunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.OtherNo warnings★ 48.4K↓ —
- implementsickn33/agentic-awesome-skillsImplement a piece of work based on a PRD or set of issues.PlanningNo warnings★ 48.4K↓ —
- freecad-scriptsgithub/awesome-copilotExpert skill for writing FreeCAD Python scripts, macros, and automation. Use when asked to create FreeCAD models, parametric objects, Part/Mesh/Sketcher scripts, workbench tools, GUI dialogs with PySide, Coin3D scenegraph manipulation, or any FreeCAD Python API task. Covers FreeCAD scripting basics, geometry creation, FeaturePython objects, interface tools, and macro development.DesignNo warnings★ 40.4K↓ —
- polars-bioK-Dense-AI/scientific-agent-skillsPerforms genomic interval overlap, nearest, merge, coverage, complement and subtraction on Polars DataFrames, and reads or writes BED, VCF, BCF, BAM, CRAM, GFF, GTF, FASTA and FASTQ data. Use for coordinate-aware genomic joins, read-depth analysis, lazy bioinformatics I/O, SQL queries or migration from bioframe.DataNo warnings★ 54.4K↓ —
- hunt-ldapsickn33/agentic-awesome-skillsHunt LDAP Injection and XPath InjectionOtherNo warnings★ 48.4K↓ —
- google-mobile-ads-bannergoogle/skillsProvides instructions to implement, integrate, or configure Google Mobile Ads (GMA) banner ads in Android, iOS, or Unity mobile applications. Use when the task involves setting up banner ads in a mobile application. Don't use for other ad formats like interstitial or rewarded ads.OfficialMarketingNo warnings★ 21.5K↓ —
- gemini-interactions-apigoogle/skillsGuides the usage of Gemini Interactions API on Gemini Enterprise Agent Platform. Use when the user wants to use the stateful, server-managed Interactions API for multi-turn conversations, background execution, streaming, structured output, and function calling on the Agent Platform.OfficialEngineeringNo warnings★ 21.5K↓ —
- python-resource-managementwshobson/agentsPython resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.EngineeringNo warnings★ 41.6K↓ —
google-cloud-waf-security
google/skills
OfficialSecurityUpdated 21 hours ago
From the author
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workloads, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.
Install
npx skills add google/skills --skill google-cloud-waf-security -a claude-code
Installs to .claude/skills/google-cloud-waf-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance100
Maintenance100
Licence100
Adoption67
Files (1)
- SKILL.md