Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 34 minutes ago
45,100 skills
- cs-project-manageralirezarezvani/claude-skills380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations, commercial & finance, and your daily productivity skills.ScienceNo warnings★ 28.7K↓ —
- sprint-planalirezarezvani/claude-skills380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations, commercial & finance, and your daily productivity skills.PlanningNo warnings★ 28.7K↓ —
- rebuttalwanshuiyin/Auto-claude-code-research-in-sleepWorkflow 4: Submission rebuttal pipeline. Parses external reviews, enforces coverage and grounding, drafts a safe text-only rebuttal under venue limits, and manages follow-up rounds. Use when user says "rebuttal", "reply to reviewers", "ICML rebuttal", "OpenReview response", or wants to answer external reviews safely.ProductivityNo warnings★ 18.1K↓ —
- azure-maps-search-dotnetmicrosoft/skillsAzure Maps SDK for .NET. Location-based services including geocoding, routing, rendering, geolocation, and weather. Use for address search, directions, map tiles, IP geolocation, and weather data. Triggers: "Azure Maps", "MapsSearchClient", "MapsRoutingClient", "MapsRenderingClient", "geocoding .NET", "route directions", "map tiles", "geolocation".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-communication-chat-javamicrosoft/skillsBuild real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.OfficialDevOpsNo warnings★ 3.1K↓ —
- writing-systems-paperswanshuiyin/Auto-claude-code-research-in-sleepParagraph-level structural blueprint for 10-12 page systems papers targeting OSDI, SOSP, ASPLOS, NSDI, and EuroSys. Provides page allocation, paragraph templates, and writing patterns. Use when user says "写系统论文", "systems paper structure", "OSDI paper", "SOSP paper", or wants fine-grained structural guidance for a systems conference submission.WritingNo warnings★ 18.1K↓ —
- azure-kustomicrosoft/skillsQuery and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clusters, log analytics, time series data, IoT telemetry, anomaly detection.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 2 other repos
- experiment-auditwanshuiyin/Auto-claude-code-research-in-sleepAudit experiment integrity before claiming results. Uses cross-model review (external reviewer backend) to check for fake ground truth, score normalization fraud, phantom results, and insufficient scope. Use when user says "审计实验", "check experiment integrity", "audit results", "实验诚实度", or after experiments complete before writing claims.WritingNo warnings★ 18.1K↓ —
- azure-speech-to-text-rest-pymicrosoft/skillsAzure Speech to Text REST API for short audio (Python). Use for simple speech recognition of audio files up to 60 seconds without the Speech SDK. Triggers: "speech to text REST", "short audio transcription", "speech recognition REST API", "STT REST", "recognize speech REST". DO NOT USE FOR: Long audio (>60 seconds), real-time streaming, batch transcription, custom speech models, speech translation. Use Speech SDK or Batch Transcription API instead.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-agents-persistent-dotnetmicrosoft/skillsAzure AI Agents Persistent SDK for .NET. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Use for agent CRUD, conversation threads, streaming responses, function calling, file search, and code interpreter. Triggers: "PersistentAgentsClient", "persistent agents", "agent threads", "agent runs", "streaming agents", "function calling agents .NET".OfficialDevOpsNo warnings★ 3.1K↓ —
- wiki-vitepressmicrosoft/skillsPackages generated wiki Markdown into a VitePress static site with dark theme, dark-mode Mermaid diagrams with click-to-zoom, and production build output. Use when the user wants to create a browsable website from generated wiki pages.OfficialOtherNo warnings★ 3.1K↓ —
- azure-security-keyvault-secrets-javamicrosoft/skillsAzure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.OfficialSecurityNo warnings★ 3.1K↓ —
- azure-communication-callautomation-javamicrosoft/skillsBuild call automation workflows with Azure Communication Services Call Automation Java SDK. Use when implementing IVR systems, call routing, call recording, DTMF recognition, text-to-speech, or AI-powered call flows.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-cosmos-rustmicrosoft/skillsAzure Cosmos DB library for Rust (NoSQL API). Document CRUD, containers, and globally distributed data. Triggers: "cosmos db rust", "CosmosClient rust", "document crud rust", "NoSQL rust", "partition key rust".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-anomalydetector-javamicrosoft/skillsBuild anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate/multivariate anomaly detection, time-series analysis, or AI-powered monitoring.OfficialDevOpsNo warnings★ 3.1K↓ —
- dart-migrate-to-checks-packageflutter/agent-pluginsReplace the usage of `expect` and similar functions from `package:matcher` to `package:checks` equivalents.OfficialOtherNo warnings★ 3.1K↓ —
- azure-security-keyvault-keys-dotnetmicrosoft/skillsAzure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification. Triggers: "Key Vault keys", "KeyClient", "CryptographyClient", "RSA key", "EC key", "encrypt decrypt .NET", "key rotation", "HSM".OfficialSecurityNo warnings★ 3.1K↓ —
- azure-keyvault-secrets-rustmicrosoft/skillsAzure Key Vault Secrets library for Rust. Store and retrieve secrets, passwords, and API keys. Triggers: "keyvault secrets rust", "SecretClient rust", "get secret rust", "set secret rust", "list secrets rust".OfficialDevOpsNo warnings★ 3.1K↓ —
- expo-moduleexpo/skillsGuide for creating and writing Expo native modules and views using the Expo Modules API (Swift, Kotlin, TypeScript). Covers module definition DSL, native views, shared objects, config plugins, lifecycle hooks, autolinking, and type system. Use when building or modifying native modules for Expo. Not for migrating an existing Swift module from the definition DSL to the Expo Modules API 2.0 macros; use expo-migrate-module (from the expo-experiments plugin) for that.OfficialWritingNo warnings★ 3K↓ —
- gh-create-prCherryHQ/cherry-studioCreate or update GitHub pull requests using the repository-required workflow and template compliance. Use when asked to create/open/update a PR so the assistant reads `.github/pull_request_template.md`, fills every template section, preserves markdown structure exactly, and marks missing data as N/A or None instead of skipping sections.LegalNo warnings★ 53K↓ —
- azure-ai-contentsafety-javamicrosoft/skillsBuild content moderation applications with Azure AI Content Safety SDK for Java. Use when implementing text/image analysis, blocklist management, or harm detection for hate, violence, sexual content, and self-harm.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-document-intelligence-tsmicrosoft/skillsExtract text, tables, and structured data from documents using Azure Document Intelligence (@azure-rest/ai-document-intelligence). Use when processing invoices, receipts, IDs, forms, or building custom document models.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-search-documents-tsmicrosoft/skillsBuild search applications using Azure AI Search SDK for JavaScript (@azure/search-documents). Use when creating/managing indexes, implementing vector/hybrid search, semantic ranking, or building agentic retrieval with knowledge bases.OfficialDevOpsNo warnings★ 3.1K↓ —
- meta-applywanshuiyin/Auto-claude-code-research-in-sleepPrivileged applier that LANDS meta-optimize / corpus-audit patches the user approved, with a fresh landing review and human approval. Base Codex review is same-family provisional. Use when the user says "meta apply", "/meta-apply", "land the staged patches", "应用优化", after a /meta-optimize run.EngineeringNo warnings★ 18.1K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more