Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 37 minutes ago
45,100 skills
- code-mate-kimi-codeCherryHQ/cherry-studioRun Kimi Code non-interactively for coding tasks. Use when the user asks to delegate work to Kimi Code.EngineeringNo warnings★ 53K↓ —
- keenable-searchNewwanshuiyin/Auto-claude-code-research-in-sleepKeyless web search and page fetch via Keenable. Use when user says "keenable search", "web search without an API key", "fetch this page as markdown", or needs broad web results beyond academic databases (arXiv, Semantic Scholar) with no search API key set up.ScienceNo warnings★ 18.1K↓ —
- sandbox-nextcloudflare/skillsBuild or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.OfficialDevOpsNo warnings★ 3.2K↓ —
- golden-chat-emptyyusufkaraaslan/Skill_SeekersUse when testing the golden_chat_empty golden buildTestingNo warnings★ 15.2K↓ —
- meta-optimizewanshuiyin/Auto-claude-code-research-in-sleepAnalyze ARIS usage logs and propose optimizations to SKILL.md files, reviewer prompts, and workflow defaults. Outer-loop harness optimization inspired by Meta-Harness (Lee et al., 2026). Use when user says "优化技能", "meta optimize", "improve skills", "分析使用记录", or wants to optimize ARIS's own harness components based on accumulated experience.ProductivityNo warnings★ 18.1K↓ —
- azure-security-keyvault-keys-javamicrosoft/skillsAzure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.OfficialSecurityNo warnings★ 3.1K↓ —
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 13.9K↓ —
- azure-aimicrosoft/skillsUse for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 2 other repos
- wiki-qamicrosoft/skillsAnswers questions about a code repository using source file analysis. Use when the user asks a question about how something works, wants to understand a component, or needs help navigating the codebase.OfficialTestingNo warnings★ 3.1K↓ —
- gptqOrchestra-Research/AI-Research-SKILLsPost-training 4-bit quantization for LLMs with minimal accuracy loss. Use for deploying large models (70B, 405B) on consumer GPUs, when you need 4× memory reduction with <2% perplexity degradation, or for faster inference (3-4× speedup) vs FP16. Integrates with transformers and PEFT for QLoRA fine-tuning.DevOpsNo warnings★ 14K↓ —
- cost-governancemicrosoft/skillsGovern Azure costs with budgets, alerts, tags, and policy restrictions. WHEN: "Azure budget health", "configured budget overrun", "list Azure budgets", "create Azure budget", "budget alerts", "budget coverage", "missing CostCenter tags", "allowed VM SKUs", "allowed Azure regions", "would this SKU be denied", "cost guardrails". DO NOT USE FOR: planning-target forecasts, bill investigations, pricing, rightsizing, or commitments.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 1 other repo
- cost-estimationmicrosoft/skillsForecast Azure spend and price planned resources or workloads. WHEN: "forecast Azure spending", "project next month cost", "compare forecast to my planning target", "how much will Azure cost", "estimate VM cost", "compare storage tiers", "compare Azure regions", "retail price", "EA rate card", "negotiated pricesheet". DO NOT USE FOR: configured budget health or alerts, bill analysis, cost spikes, rightsizing, or commitments.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 1 other repo
- wiki-researchermicrosoft/skillsConducts multi-turn iterative deep research on specific topics within a codebase with zero tolerance for shallow analysis. Use when the user wants an in-depth investigation, needs to understand how something works across multiple files, or asks for comprehensive analysis of a specific system or pattern.OfficialScienceNo warnings★ 3.1K↓ —
- azure-resource-visualizermicrosoft/skillsAnalyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources. WHEN: create architecture diagram, visualize Azure resources, show resource relationships, generate Mermaid diagram, analyze resource group, diagram my resources, architecture visualization, resource topology, map Azure infrastructure.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 2 other repos
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 13.9K↓ —
- pytorch-lightningOrchestra-Research/AI-Research-SKILLsHigh-level PyTorch framework with Trainer class, automatic distributed training (DDP/FSDP/DeepSpeed), callbacks system, and minimal boilerplate. Scales from laptop to supercomputer with same code. Use when you want clean training loops with built-in best practices.EngineeringNo warnings★ 14K↓ —
- azure-storage-file-share-pymicrosoft/skillsAzure Storage File Share SDK for Python. Use for SMB file shares, directories, and file operations in the cloud. Triggers: "azure-storage-file-share", "ShareServiceClient", "ShareClient", "file share", "SMB".OfficialDevOpsNo warnings★ 3.1K↓ —
- applicationinsights-web-tsmicrosoft/skillsInstrument browser/web apps with the Application Insights JavaScript SDK (@microsoft/applicationinsights-web). Use for Real User Monitoring (RUM) — page views, clicks, AJAX/fetch dependencies, exceptions, custom events, and browser-side GenAI agent traces correlated to backend OpenTelemetry traces. Covers SDK Loader Script and npm setup, framework extensions (React, React Native, Angular), Click Analytics, telemetry initializers, and OTel GenAI semantic conventions for agent/tool/model spans emitted from the browser.OfficialDataNo warnings★ 3.1K↓ —Also in 1 other repo
- skillkrillinai/OpenCreatorFormerly KrillinAI, VideoTranslation and Dubbing Tool. Open-source AI workspace for creators, powered by Codex. Video downloading, video translation, create videos, images, voice, avatars, and edits with Agents in one place. Suitable for your Social Media like YouTube, TikTok, Instagram, etc.MediaNo warnings★ 13.9K↓ —
- azure-aigatewaymicrosoft/skillsConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 2 other repos
- eas-simulatorexpo/skillsRun and control a user's app on a remote iOS/Android simulator hosted on EAS cloud. Read before running any `eas simulator:*` commands - it has the current syntax for this experimental API. Use whenever the user needs a simulator they can't run locally - 'run my app on a cloud simulator', 'use eas simulator to run/install/screenshot my app', 'I'm on Linux/Cursor and need an iOS device', 'no sim on this box / headless CI', 'let an agent click through my app and screenshot it', 'test my dev build on a remote sim with live reload', 'stream a sim to my browser' - even when they don't say 'EAS Simulator' or 'cloud'. On a host WITHOUT a local simulator (Linux, CI, cloud sandbox) it's the default; on macOS, do NOT auto-trigger for a plain 'run on the simulator' - use it only for a cloud/remote/shareable sim, an iOS version they lack, or an agent-driven session. NOT for local sims (expo run:ios, Xcode, Android Studio), EAS Build/Update, web preview, or physical devices.OfficialTestingNo warnings★ 3K↓ —
- azure-ai-translation-tsmicrosoft/skillsBuild translation applications using Azure Translation SDKs for JavaScript (@azure-rest/ai-translation-text, @azure-rest/ai-translation-document). Use when implementing text translation, transliteration, language detection, or batch document translation.OfficialDevOpsNo warnings★ 3.1K↓ —
- miles-rl-trainingOrchestra-Research/AI-Research-SKILLsProvides guidance for enterprise-grade RL training using miles, a production-ready fork of slime. Use when training large MoE models with FP8/INT4, needing train-inference alignment, or requiring speculative RL for maximum throughput.PlanningNo warnings★ 14K↓ —
- basincloudflare/skillsBuild and troubleshoot Cloudflare Basin analytics workflows with Basin Pipelines, Basin Catalog, and Basin SQL. Use for streaming data into R2 Iceberg tables, managing catalogs, or querying those tables; also use for requests using the former Data Platform, Pipelines, R2 Data Catalog, or R2 SQL names.OfficialDevOpsNo warnings★ 3.2K↓ —Also in 1 other repo
security-threat-model
openai/skills
From the author
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.
Install
npx skills add openai/skills --skill security-threat-model -a claude-code
Installs to .claude/skills/security-threat-model/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 93
Files (5)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/prompt-template.md
- references/security-controls-and-assets.md