Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 37 minutes ago
45,100 skills
- golden-htmlyusufkaraaslan/Skill_SeekersUse when testing the html golden buildTestingNo warnings★ 15.2K↓ —
- golden-epubyusufkaraaslan/Skill_SeekersUse when testing the epub golden buildTestingNo warnings★ 15.2K↓ —
- golden-chatyusufkaraaslan/Skill_SeekersUse when testing the golden_chat golden buildTestingNo warnings★ 15.2K↓ —
- golden-manyusufkaraaslan/Skill_SeekersUse when testing the man golden buildTestingNo warnings★ 15.2K↓ —
- frontend-design-reviewmicrosoft/skillsReview and create distinctive, production-grade frontend interfaces with high design quality and design system compliance. Evaluates using three pillars: frictionless insight-to-action, quality craft, and trustworthy building. USE FOR: PR reviews, design reviews, accessibility audits, design system compliance checks, creative frontend design, UI code review, component reviews, responsive design checks, theme testing, and creating memorable UI. DO NOT USE FOR: Backend API reviews, database schema reviews, infrastructure or DevOps work, pure business logic without UI, or non-frontend code.OfficialDesignNo warnings★ 3.1K↓ —
- skill-builderyusufkaraaslan/Skill_SeekersAutomatically detect source types and build AI skills using Skill Seekers. Use when the user wants to create skills from documentation, repos, PDFs, videos, or other knowledge sources.OtherNo warnings★ 15.2K↓ —
- eas-hostingexpo/skillsDeploy Expo websites and Expo Router API routes to EAS Hosting - export the web bundle, run eas deploy for production and PR preview URLs, manage environment secrets and custom domains, and work within the Cloudflare Workers runtime. Also covers authoring API routes (+api.ts handlers, HTTP methods, request handling, CORS). Use when deploying an Expo web app or API routes, setting up EAS Hosting, or configuring hosting environments and domains. Not for native builds or store releases - use the eas-app-stores skill for those.OfficialDevOpsNo warnings★ 3K↓ —
- wiki-qamicrosoft/skillsAnswers questions about a code repository using source file analysis. Use when the user asks a question about how something works, wants to understand a component, or needs help navigating the codebase.OfficialTestingNo warnings★ 3.1K↓ —
- mysqlsickn33/agentic-awesome-skillsAdminister MySQL/MariaDB databases. Configure replication and optimize performance. Use when managing MySQL deployments.DataNo warnings★ 48.5K↓ —
- academic-plottingOrchestra-Research/AI-Research-SKILLsGenerates publication-quality figures for ML papers from research context. Given a paper section or description, extracts system components and relationships to generate architecture diagrams via Gemini. Given experiment results or data, auto-selects chart type and generates data-driven figures via matplotlib/seaborn. Use when creating any figure for a conference paper.ScienceNo warnings★ 14K↓ —Also in 1 other repo
- brainstorming-research-ideasOrchestra-Research/AI-Research-SKILLsGuides researchers through structured ideation frameworks to discover high-impact research directions. Use when exploring new problem spaces, pivoting between projects, or seeking novel angles on existing work.ScienceNo warnings★ 14K↓ —Also in 1 other repo
- cost-governancemicrosoft/skillsGovern Azure costs with budgets, alerts, tags, and policy restrictions. WHEN: "Azure budget health", "configured budget overrun", "list Azure budgets", "create Azure budget", "budget alerts", "budget coverage", "missing CostCenter tags", "allowed VM SKUs", "allowed Azure regions", "would this SKU be denied", "cost guardrails". DO NOT USE FOR: planning-target forecasts, bill investigations, pricing, rightsizing, or commitments.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 1 other repo
- redissickn33/agentic-awesome-skillsConfigure Redis for caching and data storage. Set up clustering, persistence, and Sentinel. Use when implementing Redis caching or queues.OtherNo warnings★ 48.5K↓ —
- cost-estimationmicrosoft/skillsForecast Azure spend and price planned resources or workloads. WHEN: "forecast Azure spending", "project next month cost", "compare forecast to my planning target", "how much will Azure cost", "estimate VM cost", "compare storage tiers", "compare Azure regions", "retail price", "EA rate card", "negotiated pricesheet". DO NOT USE FOR: configured budget health or alerts, bill analysis, cost spikes, rightsizing, or commitments.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 1 other repo
- applicationinsights-web-tsmicrosoft/skillsInstrument browser/web apps with the Application Insights JavaScript SDK (@microsoft/applicationinsights-web). Use for Real User Monitoring (RUM) — page views, clicks, AJAX/fetch dependencies, exceptions, custom events, and browser-side GenAI agent traces correlated to backend OpenTelemetry traces. Covers SDK Loader Script and npm setup, framework extensions (React, React Native, Angular), Click Analytics, telemetry initializers, and OTel GenAI semantic conventions for agent/tool/model spans emitted from the browser.OfficialDataNo warnings★ 3.1K↓ —Also in 1 other repo
- azure-kubernetesmicrosoft/skillsPlan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis). WHEN: create AKS environment, provision AKS, enable AKS observability, design AKS networking, choose AKS SKU, secure AKS, optimize AKS, AKS spot nodes, AKS cluster-autoscaler, rightsize AKS pod, pod rightsizing, over-provisioned AKS pod, pod resource requests and limits, Vertical Pod Autoscaler, VPA recommendations.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 2 other repos
- expo-app-clipexpo/skillsAdd an iOS App Clip target to an Expo app. Use when the user mentions App Clip, AASA, apple-app-site-association, appclips, smart app banner, or wants to ship a lightweight iOS Clip invoked from a URL alongside their parent app.OfficialOtherNo warnings★ 3K↓ —
- azure-eventgrid-dotnetmicrosoft/skillsAzure Event Grid SDK for .NET. Client library for publishing and consuming events with Azure Event Grid. Use for event-driven architectures, pub/sub messaging, CloudEvents, and EventGridEvents. Triggers: "Event Grid", "EventGridPublisherClient", "CloudEvent", "EventGridEvent", "publish events .NET", "event-driven", "pub/sub".OfficialDevOpsNo warnings★ 3.1K↓ —
- ui-widget-developermicrosoft/skillsBuild MCP servers for Copilot Chat using the OpenAI Apps SDK or MCP Apps SDK widget rendering support (any language). Use this skill when: - Creating MCP servers that integrate with M365 Copilot declarative agents - Building rich interactive widgets (React + Fluent UI) that render in Copilot Chat - Implementing tools that return structuredContent for widget rendering - Adapting an existing MCP server to support Copilot widget rendering - Setting up devtunnels for localhost MCP server exposure - Configuring mcpPlugin.json manifests with RemoteMCPServer runtime Do NOT use this skill for general agent development (scaffolding, manifests, deployment) — use declarative-agent-developer instead. This skill is ONLY for MCP server + widget development. Triggers: "MCP server for Copilot", "OpenAI Apps SDK", "Copilot widget", "structuredContent", "MCP plugin", "devtunnels MCP", "OAI app", "widget rendering", "UI widget"OfficialDesignNo warnings★ 3.1K↓ —
- azure-kusto-irql-graphmicrosoft/skillsApply IRQL graph functions to KQL or IRQL query results for Kusto Explorer visualization. Generates Lift_To_Graph mappings and composes Graph_Render_View, Graph_Fold_By_Property, Extract_Node_*, Enrich_Node_*, and Enrich_Graph_* calls. Accepts a supplied query or limited basic natural-language source request; it is not a general natural-language-to-KQL/IRQL skill. WHEN: Lift_To_Graph, Graph_Render_View, Graph_Fold_By_Property, IRQL graph enrichment, graph mapping for existing query results, icon-decorated graph, fold graph nodes. Use azure-kusto-graph for native make-graph analysis, graph-match, shortest paths, components, or persistent graphs.OfficialDevOpsNo warnings★ 3.1K↓ —Also in 1 other repo
- azure-servicebus-dotnetmicrosoft/skillsAzure Service Bus SDK for .NET. Enterprise messaging with queues, topics, subscriptions, and sessions. Use for reliable message delivery, pub/sub patterns, dead letter handling, and background processing. Triggers: "Service Bus", "ServiceBusClient", "ServiceBusSender", "ServiceBusReceiver", "ServiceBusProcessor", "message queue", "pub/sub .NET", "dead letter queue".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-monitor-ingestion-pymicrosoft/skillsAzure Monitor Ingestion SDK for Python. Use for sending custom logs to Log Analytics workspace via Logs Ingestion API. Triggers: "azure-monitor-ingestion", "LogsIngestionClient", "custom logs", "DCR", "data collection rule", "Log Analytics".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-contentsafety-pymicrosoft/skillsAzure AI Content Safety SDK for Python. Use for detecting harmful content in text and images with multi-severity classification. Triggers: "azure-ai-contentsafety", "ContentSafetyClient", "content moderation", "harmful content", "text analysis", "image analysis".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-mgmt-apimanagement-dotnetmicrosoft/skillsAzure Resource Manager SDK for API Management in .NET. Use for MANAGEMENT PLANE operations: creating/managing APIM services, APIs, products, subscriptions, policies, users, groups, gateways, and backends via Azure Resource Manager. Triggers: "API Management", "APIM service", "create APIM", "manage APIs", "ApiManagementServiceResource", "API policies", "APIM products", "APIM subscriptions".OfficialDevOpsNo warnings★ 3.1K↓ —
security-threat-model
openai/skills
From the author
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.
Install
npx skills add openai/skills --skill security-threat-model -a claude-code
Installs to .claude/skills/security-threat-model/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Safety checks on SKILL.md
No warnings.
Why 93
Files (5)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/prompt-template.md
- references/security-controls-and-assets.md