Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 18 hours ago
45,602 skills
- sql-prosickn33/agentic-awesome-skillsMaster modern SQL with cloud-native databases, OLTP/OLAP optimization, and advanced query techniques. Expert in performance tuning, data modeling, and hybrid analytical systems.DataNo warnings★ 48.5K↓ —Also in 1 other repo
- curlshotsickn33/agentic-awesome-skillsCapture web page screenshots, PDFs and scrolling videos, or render HTML/Markdown to images, with the hosted CurlShot API.MediaNo warnings★ 48.5K↓ —
- signed-audit-trails-recipewshobson/agentsStep-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls. Use when explaining, evaluating, or demonstrating the pattern before committing to the protect-mcp runtime hooks. Covers Cedar policy, Ed25519 receipts, offline verification, tamper detection, CI/CD integration, and SLSA composition.DevOpsNo warnings★ 41.7K↓ —
- doc2mathsickn33/agentic-awesome-skillsConvert narrative technical documents into grounded Mathematical Problem Specifications with variables, constraints, objectives, and uncertainty.PlanningNo warnings★ 48.5K↓ —
- varlocksickn33/agentic-awesome-skillsSecure-by-default environment variable management for Claude Code sessions.EngineeringNo warnings★ 48.5K↓ —
- cloudishsickn33/agentic-awesome-skillsDeploy a Dockerfile, source folder, or existing image to Cloudish as a running container at a live URL, built server-side with no local Docker, with confirmation before spending credits.DevOpsNo warnings★ 48.5K↓ —
- riffkitsickn33/agentic-awesome-skillsCreate short videos with Riffkit: Adapt a source formula, Swap approved footage, or generate from an idea. Use for UGC ads and localized video; requires an account and render approval.MediaNo warnings★ 48.5K↓ —
- pricingsickn33/agentic-awesome-skillsWhen the user wants help with pricing decisions, packaging, or monetization strategy.OtherNo warnings★ 48.5K↓ —
- entra-agent-usergithub/awesome-copilotCreate Agent Users in Microsoft Entra ID from Agent Identities, enabling AI agents to act as digital workers with user identity capabilities in Microsoft 365 and Azure environments.DevOpsNo warnings★ 40.4K↓ —
- mkdocs-translationsgithub/awesome-copilotGenerate a language translation for a mkdocs documentation stack.OtherNo warnings★ 40.4K↓ —
- molykitsickn33/agentic-awesome-skillsCRITICAL: Use for MolyKit AI chat toolkit. Triggers on: BotClient, OpenAI, SSE streaming, AI chat, molykit, PlatformSend, spawn(), ThreadToken, cross-platform async, Chat widget, Messages, PromptInput, Avatar, LLMOtherNo warnings★ 48.5K↓ —
- google-mobile-ads-get-startedgoogle/skillsProvides instructions for integrating the Google Mobile Ads (GMA) SDK. Use this skill when the user wants to get started with, install, integrate, set up, or configure the SDK for AdMob or Ad Manager, GMA Next-Gen SDK or mobile ads framework in an Android, iOS, or Unity application.OfficialMarketingNo warnings★ 21.6K↓ —
- penpot-uiux-designgithub/awesome-copilotComprehensive guide for creating professional UI/UX designs in Penpot using MCP tools. Use this skill when: (1) Creating new UI/UX designs for web, mobile, or desktop applications, (2) Building design systems with components and tokens, (3) Designing dashboards, forms, navigation, or landing pages, (4) Applying accessibility standards and best practices, (5) Following platform guidelines (iOS, Android, Material Design), (6) Reviewing or improving existing Penpot designs for usability. Triggers: "design a UI", "create interface", "build layout", "design dashboard", "create form", "design landing page", "make it accessible", "design system", "component library".DesignNo warnings★ 40.4K↓ —
- llm-opssickn33/agentic-awesome-skillsLLM Operations -- RAG, embeddings, vector databases, fine-tuning, prompt engineering avancado, custos de LLM, evals de qualidade e arquiteturas de IA para producao.OtherNo warnings★ 48.5K↓ —
- azure-developer-cligithub/awesome-copilotDesign, create, review, migrate, or troubleshoot Azure Developer CLI (azd) projects using current Microsoft guidance. Use for azd, azure.yaml, AZD templates, Bicep or Terraform under infra, AZD environments and secrets, hooks, deployment workflows, and azd-managed CI/CD.DevOpsNo warnings★ 40.4K↓ —
- jenkinssickn33/agentic-awesome-skillsCreate and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds.DevOpsNo warnings★ 48.5K↓ —
- inngestsickn33/agentic-awesome-skillsInngest expert for serverless-first background jobs, event-driven workflows, and durable execution without managing queues or workers.OtherNo warnings★ 48.5K↓ —
- web-design-reviewergithub/awesome-copilotThis skill enables visual inspection of websites running locally or remotely to identify and fix design issues. Triggers on requests like "review website design", "check the UI", "fix the layout", "find design problems". Detects issues with responsive design, accessibility, visual consistency, and layout breakage, then performs fixes at the source code level.DesignNo warnings★ 40.4K↓ —
- mcp-security-auditgithub/awesome-copilotAudit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and npm exec references in MCP configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]SecurityNo warnings★ 40.4K↓ —
- gtm-operating-cadencegithub/awesome-copilotDesign meeting rhythms, metric reporting, quarterly planning, and decision-making velocity for scaling companies. Use when decisions are slow, planning is broken, the company is growing but alignment is worse, or leadership meetings consume all time without producing decisions.DesignNo warnings★ 40.4K↓ —
- mentoring-juniorsgithub/awesome-copilotSocratic mentoring for junior developers and AI newcomers. Guides through questions, never answers. Triggers: "help me understand", "explain this code", "I'm stuck", "Im stuck", "I'm confused", "Im confused", "I don't understand", "I dont understand", "can you teach me", "teach me", "mentor me", "guide me", "what does this error mean", "why doesn't this work", "why does not this work", "I'm a beginner", "Im a beginner", "I'm learning", "Im learning", "I'm new to this", "Im new to this", "walk me through", "how does this work", "what's wrong with my code", "what's wrong", "can you break this down", "ELI5", "step by step", "where do I start", "what am I missing", "newbie here", "junior dev", "first time using", "how do I", "what is", "is this right", "not sure", "need help", "struggling", "show me", "help me debug", "best practice", "too complex", "overwhelmed", "lost", "debug this", "/socratic", "/hint", "/concept", "/pseudocode". Progressive clue systems, teaching techniques, and success metrics.EngineeringNo warnings★ 40.4K↓ —
- google-cloud-storage-basicsgoogle/skillsStores, retrieves, and manages data as objects in Cloud Storage on Google Cloud (also known colloquially as GCS) buckets. Use when you need to interact with Cloud Storage — set up a Storage MCP server (remote or local Toolbox), create or configure buckets, upload, download, stream, or transfer data, organize objects with folders, generate signed URLs, control access (IAM, ACLs, public access prevention), set storage classes (Standard, Nearline, Coldline, Archive), manage lifecycle and cost, protect data (versioning, CMEK, retention, Bucket Lock, holds, soft delete), host static websites, trigger Pub/Sub notifications, mount buckets (gcsfuse), or optimize performance. Covers gcloud storage / gsutil, JSON/XML APIs, client libraries, Terraform, and Cloud Storage MCP servers. Don't use for generic MCP setup that doesn't mention Cloud Storage, other MCP servers, block storage (Persistent Disk), BigQuery, or databases (Cloud SQL, Spanner, Bigtable, Firestore).OfficialDevOpsNo warnings★ 21.6K↓ —
- falsifysickn33/agentic-awesome-skillsThe scientific thinking protocol for AI agents. Use when facing complex, ambiguous, or high-stakes questions where guessing is costly: hypothesis → attempt to break it → evidence → calibrated conclusion.ScienceNo warnings★ 48.5K↓ —
- deepapisickn33/agentic-awesome-skillsUse DeepAPI for supported scraping, research, and email workflows with explicit credentials and approval.BrowserNo warnings★ 48.5K↓ —
security-requirement-extraction
wshobson/agents
SecurityUpdated 2 days ago
From the author
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
Install
npx skills add wshobson/agents --skill security-requirement-extraction -a claude-code
Installs to .claude/skills/security-requirement-extraction/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (2)
- SKILL.md
- references/details.md