Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
36,321 skills from 1,649 repositories · updated 3 minutes ago
36,319 skills
- avoid-ai-writingwshobson/agentsAudit and rewrite prose so it stops reading as machine-generated. Use this skill when asked to remove AI-isms, clean up AI writing, edit a draft for AI tells, audit a README, changelog, release note, PR description, or blog post for machine-sounding prose, or make text sound less like AI. Supports a detect-only mode, a rewrite mode, and an edit-in-place mode, with optional voice and context profiles.WritingNo warnings★ 41.6K↓ —
- before-you-buildwshobson/agentsPre-build product and feature risk review for founders, product managers, and AI-assisted builders. Use this skill when the user is about to build a landing page, MVP, SaaS product, internal tool, agent workflow, or major feature and needs to check demand, positioning, monetization, retention, trust, distribution, and adoption risk before implementation starts.DesignNo warnings★ 41.6K↓ —
- usfiscaldataK-Dense-AI/scientific-agent-skillsQueries the U.S. Treasury Fiscal Data REST API for federal financial data. No API key required. Use for national debt (Debt to the Penny), Daily Treasury Statements, Monthly Treasury Statements, Treasury securities auctions, interest rates, foreign exchange rates, savings bonds, or U.S. government revenue and spending statistics.FinanceNo warnings★ 54.4K↓ —
- sql-code-reviewgithub/awesome-copilotUniversal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). Focuses on SQL injection prevention, access control, code standards, and anti-pattern detection. Complements SQL optimization prompt for complete development coverage.DataNo warnings★ 40.4K↓ —
- brag-sheetgithub/awesome-copilotTurn vague "what did I do?" into evidence-backed impact statements for performance reviews, self-reviews, promotion packets, and weekly updates. Uniquely mines Copilot CLI session logs to reconstruct forgotten work, plus git commits and GitHub PRs. Enforces a 3-part impact contract (action → result → evidence). Works standalone with zero dependencies. Trigger for: "brag", "log work", "what did I do", "backfill my work history", "performance review", "self-review", "self assessment", "write impact statement", "review prep", "promo packet", "promotion case", "weekly update", "status report", "accomplishments", "what did I ship", "I forgot to log my work", "summarize my work", "track my wins", "what should I highlight", "end of half", "career growth", "work journal", or any request to document, summarize, or organize work accomplishments.LegalNo warnings★ 40.4K↓ —
- lora-qlora-recipeswshobson/agentsConfigure LoRA and QLoRA supervised fine-tuning with current best-practice hyperparameters. Use when writing or reviewing a LoRA/QLoRA training configuration, choosing rank/alpha/target modules, or deciding between LoRA, QLoRA, and full fine-tuning.WritingNo warnings★ 41.6K↓ —
- legacy-circuit-mockupsgithub/awesome-copilotGenerate breadboard circuit mockups and visual diagrams using HTML5 Canvas drawing techniques. Use when asked to create circuit layouts, visualize electronic component placements, draw breadboard diagrams, mockup 6502 builds, generate retro computer schematics, or design vintage electronics projects. Supports 555 timers, W65C02S microprocessors, 28C256 EEPROMs, W65C22 VIA chips, 7400-series logic gates, LEDs, resistors, capacitors, switches, buttons, crystals, and wires.DesignNo warnings★ 40.4K↓ —
- parallel-webK-Dense-AI/scientific-agent-skillsUses Parallel CLI for web search, URL extraction, deep research, structured data enrichment, entity discovery, and recurring web monitoring. Best for requests that explicitly need current web evidence, academic-source discovery, repeated entity lookups, exhaustive reports, or ongoing change tracking.ScienceNo warnings★ 54.4K↓ —
- msgraph-sdkgithub/awesome-copilotIntegrate Microsoft Graph SDK into any project — .NET, TypeScript/JavaScript, or Python. Covers auth patterns (client credentials, OBO, managed identity), SDK setup, calling Graph APIs, batching, delta queries, change notifications, throttling, and permission scopes. Use when accessing Microsoft 365 data (users, mail, calendar, Teams, files, SharePoint) from any application type.EngineeringNo warnings★ 40.4K↓ —
- llm-evaluationwshobson/agentsImplement comprehensive evaluation strategies for LLM applications using automated metrics, human feedback, and benchmarking. Use when testing LLM performance, measuring AI application quality, or establishing evaluation frameworks.TestingNo warnings★ 41.6K↓ —
- gh-attachgithub/awesome-copilotUploads a local file (screenshot, image, PDF, zip, video) to GitHub user-attachments, downloads GitHub user-attachments, and embeds local files in a PR, issue, or comment. Use when asked to "attach a screenshot to the PR", "add an image to the issue", "embed before/after screenshots", "attach this file", or "download this GitHub attachment". Powered by `gh-attach`.DocumentsNo warnings★ 40.4K↓ —
- freecad-scriptsgithub/awesome-copilotExpert skill for writing FreeCAD Python scripts, macros, and automation. Use when asked to create FreeCAD models, parametric objects, Part/Mesh/Sketcher scripts, workbench tools, GUI dialogs with PySide, Coin3D scenegraph manipulation, or any FreeCAD Python API task. Covers FreeCAD scripting basics, geometry creation, FeaturePython objects, interface tools, and macro development.DesignNo warnings★ 40.4K↓ —
- postgresql-optimizationgithub/awesome-copilotPostgreSQL-specific development assistant focusing on unique PostgreSQL features, advanced data types, and PostgreSQL-exclusive capabilities. Covers JSONB operations, array types, custom types, range/geometric types, full-text search, window functions, and PostgreSQL extensions ecosystem.DataNo warnings★ 40.4K↓ —Also in 1 other repo
- context-mapgithub/awesome-copilotGenerate a map of all files relevant to a task before making changesProductivityNo warnings★ 40.4K↓ —
- openapi-spec-generationwshobson/agentsGenerate and maintain OpenAPI 3.1 specifications from code, design-first specs, and validation patterns. Use when creating API documentation, generating SDKs, or ensuring API contract compliance.PlanningNo warnings★ 41.6K↓ —
- recipe-watch-drive-changesgoogleworkspace/cliSubscribe to change notifications on a Google Drive file or folder.OtherNo warnings★ 31.8K↓ —
- recipe-create-shared-drivegoogleworkspace/cliCreate a Google Shared Drive and add members with appropriate roles.OtherNo warnings★ 31.8K↓ —
- gws-workflow-standup-reportgoogleworkspace/cliGoogle Workflow: Today's meetings + open tasks as a standup summary.ProductivityNo warnings★ 31.8K↓ —
- recipe-bulk-download-foldergoogleworkspace/cliList and download all files from a Google Drive folder.OtherNo warnings★ 31.8K↓ —
- recipe-backup-sheet-as-csvgoogleworkspace/cliExport a Google Sheets spreadsheet as a CSV file for local backup or processing.DataNo warnings★ 31.8K↓ —
- recipe-create-gmail-filtergoogleworkspace/cliCreate a Gmail filter to automatically label, star, or categorize incoming messages.OtherNo warnings★ 31.8K↓ —
- recipe-create-feedback-formgoogleworkspace/cliCreate a Google Form for feedback and share it via Gmail.OtherNo warnings★ 31.8K↓ —
- recipe-create-presentationgoogleworkspace/cliCreate a new Google Slides presentation and add initial slides.DocumentsNo warnings★ 31.8K↓ —
- recipe-draft-email-from-docgoogleworkspace/cliRead content from a Google Doc and use it as the body of a Gmail message.ProductivityNo warnings★ 31.8K↓ —
mcp-security-audit
github/awesome-copilot
SecurityUpdated yesterday
From the author
Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and npm exec references in MCP configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
Install
npx skills add github/awesome-copilot --skill mcp-security-audit -a claude-code
Installs to .claude/skills/mcp-security-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyUses the networkLicence: MIT
Safety checks on SKILL.md
No warnings.
Why 95
Security100
Provenance95
Maintenance100
Licence100
Adoption71
Files (1)
- SKILL.md