Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,604 skills from 2,205 repositories · updated 11 hours ago
45,602 skills
- agent-platform-model-registrygoogle/skillsAgent Platform Model Registry Management. Use when you need to upload, list, describe, update, or delete machine learning models (and their versions) in the Agent Platform Model Registry. Don't use for model training, model deployment to endpoints, or managing non-Agent Platform models.OfficialDevOpsNo warnings★ 21.6K↓ —
- torch-geometricK-Dense-AI/scientific-agent-skillsSupports PyTorch Geometric (PyG) graph neural networks — node/link/graph classification, message passing (GCN, GAT, GraphSAGE, GIN), heterogeneous graphs, neighbor sampling, and custom datasets. Use when working with torch_geometric, not for general NetworkX analytics or non-graph PyTorch models.DataNo warnings★ 54.5K↓ —
- roundup-setupgithub/awesome-copilotInteractive onboarding that learns your communication style, audiences, and data sources to configure personalized status briefings. Paste in examples of updates you already write, answer a few questions, and roundup calibrates itself to your workflow.WritingNo warnings★ 40.4K↓ —
- ui-motionsickn33/agentic-awesome-skillsApply a named StyleSeed motion to a component — either one of the 5 personality seeds (Spring/Silk/Snap/Float/Pulse × entrance/exit/hover/press/layout) or a distinctive keyword move from the motion library (toggle-flip, toggle-curtain, reveal-blur, pop-in, shimmer, …).DesignNo warnings★ 48.5K↓ —
- upstash-redisgithub/awesome-copilotUse Redis over HTTP from serverless and edge runtimes with @upstash/redis, and add rate limiting with @upstash/ratelimit. Use when the user mentions Upstash Redis, needs Redis from a Next.js route handler or middleware, Vercel, Cloudflare Workers, Deno, or Bun without TCP connection pooling, or wants cache-aside with TTLs, a session store, counters, or a 429 rate limiter using fixed window, sliding window, or token bucket. DO NOT use for self-hosted or TCP Redis clients (ioredis, node-redis), Redis Cluster administration, or vector similarity search.DevOpsNo warnings★ 40.4K↓ —
- google-cloud-filestore-autoscalegoogle/skillsInspects Filestore capacity and utilization on Google Cloud, evaluates storage scaling rules, and performs capacity autoscaling (scale UP for low free space or scale DOWN for cost optimization). Use when monitoring Filestore instance headroom, resizing instance shares, configuring automated growth/shrink thresholds (custom thresholds apply globally across projects in session memory), or preventing out-of-space outages. Don't use for Cloud Storage (GCS) buckets, Persistent Disk block storage, or NetApp Volumes.OfficialMarketingNo warnings★ 21.6K↓ —
- google-mobile-ads-get-startedgoogle/skillsProvides instructions for integrating the Google Mobile Ads (GMA) SDK. Use this skill when the user wants to get started with, install, integrate, set up, or configure the SDK for AdMob or Ad Manager, GMA Next-Gen SDK or mobile ads framework in an Android, iOS, or Unity application.OfficialMarketingNo warnings★ 21.6K↓ —
- ui-tokenssickn33/agentic-awesome-skillsView, add, or modify design tokens in the StyleSeed design systemDesignNo warnings★ 48.5K↓ —
- database-lookupK-Dense-AI/scientific-agent-skillsQueries documented public database APIs with explicit endpoints, filters, pagination, and provenance. Used when a scientific, regulatory, financial, or other database-backed fact must be retrieved reproducibly from a named source rather than inferred from general knowledge.DataNo warnings★ 54.5K↓ —
- gke-storage-troubleshootinggoogle/skillsDiagnoses GKE persistent-storage failures — volume attach/mount errors (Regional PD on optimized VMs, fsGroup mount timeouts), disk-performance and node storage-pressure issues, slow-disk Pod-creation failures, volume-expansion problems, Local SSD / Hyperdisk Storage Pool creation errors, and Cloud Storage FUSE OOM. Use when Pods are stuck in ContainerCreating, volumes fail to attach or mount, or nodes report storage pressure. Don't use for routine storage provisioning or StorageClass/PVC authoring (see the gke-storage skill).OfficialOtherNo warnings★ 21.6K↓ —
- viboscopesickn33/agentic-awesome-skillsPsychological compatibility matching — find cofounders, collaborators, and friends with explicit consent and unverified provider scoringOtherNo warnings★ 48.5K↓ —
- vpn-setupsickn33/agentic-awesome-skillsConfigure WireGuard, OpenVPN, and cloud VPNs. Implement secure remote access and site-to-site connectivity. Use when setting up secure network tunnels.OtherNo warnings★ 48.5K↓ —
- krexasickn33/agentic-awesome-skillsTurn a trading idea, post or video into fixed rules, backtest and paper-trade them, and request a user-approved live agent through Krexa's MCP server. Cannot move funds.MediaNo warnings★ 48.5K↓ —
- managed-airflow-migrationsgoogle/skillsProvides guidance for migrating Apache Airflow DAGs in Managed Service for Apache Airflow (MSAA; formerly Cloud Composer). Covers migration to Airflow 2.11.1 (MSAA Gen 2 and 3) and Airflow 3 (MSAA Gen 3), including environment inspection, GCS download/upload and scanning patterns for breaking changes. Use when migrating the DAG code to newer Airflow version. Don't use when checking DAG run failures unrelated to code migration.OfficialEngineeringNo warnings★ 21.6K↓ —
- wiki-yylosickn33/agentic-awesome-skillsUse YYLO Ledger wiki Records as durable project knowledge. Search before creating, classify information correctly, and make revision-safe Markdown updates without editing Ledger storage directly.WritingNo warnings★ 48.5K↓ —
- wordpresssickn33/agentic-awesome-skillsWordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.SecurityNo warnings★ 48.5K↓ —
- google-cloud-storage-basicsgoogle/skillsStores, retrieves, and manages data as objects in Cloud Storage on Google Cloud (also known colloquially as GCS) buckets. Use when you need to interact with Cloud Storage — set up a Storage MCP server (remote or local Toolbox), create or configure buckets, upload, download, stream, or transfer data, organize objects with folders, generate signed URLs, control access (IAM, ACLs, public access prevention), set storage classes (Standard, Nearline, Coldline, Archive), manage lifecycle and cost, protect data (versioning, CMEK, retention, Bucket Lock, holds, soft delete), host static websites, trigger Pub/Sub notifications, mount buckets (gcsfuse), or optimize performance. Covers gcloud storage / gsutil, JSON/XML APIs, client libraries, Terraform, and Cloud Storage MCP servers. Don't use for generic MCP setup that doesn't mention Cloud Storage, other MCP servers, block storage (Persistent Disk), BigQuery, or databases (Cloud SQL, Spanner, Bigtable, Firestore).OfficialDevOpsNo warnings★ 21.6K↓ —
- conventional-commitgithub/awesome-copilotPrompt and workflow for generating conventional commit messages using a structured XML format. Guides users to create standardized, descriptive commit messages in line with the Conventional Commits specification, including instructions, examples, and validation.EngineeringNo warnings★ 40.4K↓ —
- developing-genkit-pythongoogle/skillsDevelop AI-powered applications using Genkit in Python. Use when the user asks about Genkit, AI agents, flows, or tools in Python, or when encountering Genkit errors, import issues, or API problems.OfficialEngineeringNo warnings★ 21.6K↓ —
- anti-sleepsickn33/agentic-awesome-skillsKeep a Mac awake with caffeinate during long builds, downloads, or supervised automation runs.OtherNo warnings★ 48.5K↓ —
- desk-journalgithub/awesome-copilotWrite, append, or read desk journal entries. The journal is persistent memory — what survives session boundaries. A good entry has: what was done, current state, next step.WritingNo warnings★ 40.4K↓ —
- google-cloud-waf-securitygoogle/skillsGenerates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workloads, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.OfficialSecurityNo warnings★ 21.6K↓ —
- aws-lambdasickn33/agentic-awesome-skillsBuild and deploy serverless functions on AWS Lambda. Configure triggers, manage permissions, and optimize performance. Use when implementing serverless applications.DevOpsNo warnings★ 48.5K↓ —
- aws-skillssickn33/agentic-awesome-skillsPlan and review AWS architecture and infrastructure changes using the upstream AWS skill collection.DevOpsNo warnings★ 48.5K↓ —
mcp-security-audit
github/awesome-copilot
SecurityUpdated 2 days ago
From the author
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and npm exec references in MCP configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
Install
npx skills add github/awesome-copilot --skill mcp-security-audit -a claude-code
Installs to .claude/skills/mcp-security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (1)
- SKILL.md