Agent skills you can check before you install
Public SKILL.md skills from GitHub repositories with 50+ stars and from the vendors themselves, scanned and scored. Install any of them with one command in Claude Code, Cursor, Codex, GitHub Copilot or Gemini CLI.
45,100 skills from 2,196 repositories · updated 5 hours ago
45,100 skills
- azure-microsoft-playwright-testing-tsmicrosoft/skillsRun Playwright tests at scale using Azure Playwright Workspaces (formerly Microsoft Playwright Testing). Use when scaling browser tests across cloud-hosted browsers, integrating with CI/CD pipelines, or publishing test results to the Azure portal.OfficialTestingNo warnings★ 3.1K↓ —
- azure-security-keyvault-keys-dotnetmicrosoft/skillsAzure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification. Triggers: "Key Vault keys", "KeyClient", "CryptographyClient", "RSA key", "EC key", "encrypt decrypt .NET", "key rotation", "HSM".OfficialSecurityNo warnings★ 3.1K↓ —
- azure-monitor-ingestion-javamicrosoft/skillsAzure Monitor Ingestion SDK for Java. Send custom logs to Azure Monitor via Data Collection Rules (DCR) and Data Collection Endpoints (DCE). Triggers: "LogsIngestionClient java", "azure monitor ingestion java", "custom logs java", "DCR java", "data collection rule java".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-mgmt-apicenter-dotnetmicrosoft/skillsAzure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. Triggers: "API Center", "ApiCenterService", "ApiCenterWorkspace", "ApiCenterApi", "API inventory", "API governance", "API versioning", "API catalog", "API discovery".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-communication-sms-javamicrosoft/skillsSend SMS messages with Azure Communication Services SMS Java SDK. Use when implementing SMS notifications, alerts, OTP delivery, bulk messaging, or delivery reports.OfficialDevOpsNo warnings★ 3.1K↓ —
- grant-proposalwanshuiyin/Auto-claude-code-research-in-sleepDraft a structured grant proposal from research ideas and literature. Supports KAKENHI (Japan), NSF (US), NSFC (China, including 面上/青年/优青/杰青/海外优青/重点), ERC (EU), DFG (Germany), SNSF (Switzerland), ARC (Australia), NWO (Netherlands), and generic formats. Use when user says "write grant", "grant proposal", "申請書", "write KAKENHI", "科研費", "基金申请", "写基金", "NSF proposal", or wants to turn research ideas into a funding application.ScienceNo warnings★ 18.1K↓ —
- azure-ai-transcription-pymicrosoft/skillsAzure AI Transcription SDK for Python. Use for real-time and batch speech-to-text transcription with timestamps and diarization. Triggers: "transcription", "speech to text", "Azure AI Transcription", "TranscriptionClient".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-storage-queue-tsmicrosoft/skillsAzure Queue Storage JavaScript/TypeScript SDK (@azure/storage-queue) for message queue operations. Use for sending, receiving, peeking, and deleting messages in queues. Supports visibility timeout, message encoding, and batch operations. Triggers: "queue storage", "@azure/storage-queue", "QueueServiceClient", "QueueClient", "send message", "receive message", "dequeue", "visibility timeout".OfficialDevOpsNo warnings★ 3.1K↓ —
- prepare-releaseCherryHQ/cherry-studioPrepare a new release by collecting commits, generating bilingual release notes, updating version files, and creating a release branch. Use when asked to prepare/create a release, bump version, or run `/prepare-release`.ProductivityNo warnings★ 53K↓ —
- hunt-lfisickn33/agentic-awesome-skillsHunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path TraversalOtherNo warnings★ 48.5K↓ —
- azure-ai-textanalytics-pymicrosoft/skillsAzure AI Text Analytics SDK for sentiment analysis, entity recognition, key phrases, language detection, PII, and healthcare NLP. Use for natural language processing on text. Triggers: "text analytics", "sentiment analysis", "entity recognition", "key phrase", "PII detection", "TextAnalyticsClient".OfficialDevOpsNo warnings★ 3.1K↓ —
- install-atkmicrosoft/skillsInstall or update the M365 Agents Toolkit (ATK) CLI and VS Code extension. Triggers: "install atk", "update atk", "install agents toolkit", "update agents toolkit", "install the toolkit", "setup atk", "get atk", "install atk cli", "install atk extension", "install atk vsix", "update the vs code extension", "install latest atk", "upgrade atk"OfficialEngineeringNo warnings★ 3.1K↓ —
- azure-storage-queue-rustmicrosoft/skillsAzure Queue Storage library for Rust. Send, receive, and manage queue messages. Triggers: "queue storage rust", "QueueClient rust", "send message rust", "receive messages rust", "QueueServiceClient rust", "queue rust".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-web-pubsub-tsmicrosoft/skillsBuild real-time messaging applications using Azure Web PubSub SDKs for JavaScript (@azure/web-pubsub, @azure/web-pubsub-client). Use when implementing WebSocket-based real-time features, pub/sub messaging, group chat, or live notifications.OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-ai-projects-dotnetmicrosoft/skillsAzure AI Projects SDK for .NET. High-level client for Azure AI Foundry projects including agents, connections, datasets, deployments, evaluations, and indexes. Use for AI Foundry project management, versioned agents, and orchestration. Triggers: "AI Projects", "AIProjectClient", "Foundry project", "versioned agents", "evaluations", "datasets", "connections", "deployments .NET".OfficialDevOpsNo warnings★ 3.1K↓ —
- code-mate-qwen-codeCherryHQ/cherry-studioRun Qwen Code non-interactively for coding tasks. Use when the user asks to delegate work to Qwen Code.EngineeringNo warnings★ 53K↓ —
- code-mate-kimi-codeCherryHQ/cherry-studioRun Kimi Code non-interactively for coding tasks. Use when the user asks to delegate work to Kimi Code.EngineeringNo warnings★ 53K↓ —
- azure-mgmt-weightsandbiases-dotnetmicrosoft/skillsAzure Weights & Biases SDK for .NET. ML experiment tracking and model management via Azure Marketplace. Use for creating W&B instances, managing SSO, marketplace integration, and ML observability. Triggers: "Weights and Biases", "W&B", "WeightsAndBiases", "ML experiment tracking", "model registry", "experiment management", "wandb".OfficialDevOpsNo warnings★ 3.1K↓ —
- stripe-directorystripe/aiIdentifies external providers, merchants, nonprofits, platforms, APIs, and software services, and resolves the documented way to engage them — to pay, donate, subscribe, book, provision, or integrate with them. MUST be used BEFORE web search, model memory, or any other directory/vendor-lookup skill for ANY request that requires selecting, finding, or engaging an external provider or organization — whether a specific one is named ("pay my Twilio bill"), implied ("donate to the Red Cross"), or only a category is stated ("set up a mailing client", "I need a database", "find me a CRM"). Directory supplies verified recipients and their documented payment or engagement path. Results are ranked by agent-readiness (how reliably an agent can complete the interaction), relevance and popularity. Don't treat this as a search-only tool. Examples: "setup a database", "find hosting", "pay X", "use Twilio", "donate $50 to the Red Cross", "book a table at Y", "subscribe to a CRM".OfficialDataNo warnings★ 2K↓ —Also in 4 other repos
- azure-keyvault-keys-rustmicrosoft/skillsAzure Key Vault Keys library for Rust. Create, manage, and use cryptographic keys including RSA, EC, and HSM-protected keys. Triggers: "keyvault keys rust", "KeyClient rust", "create key rust", "encrypt rust", "wrap key rust", "sign rust".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-storage-blob-pymicrosoft/skillsAzure Blob Storage SDK for Python. Use for uploading, downloading, listing blobs, managing containers, and blob lifecycle. Triggers: "blob storage", "BlobServiceClient", "ContainerClient", "BlobClient", "upload blob", "download blob".OfficialDevOpsNo warnings★ 3.1K↓ —
- azure-messaging-webpubsubservice-pymicrosoft/skillsAzure Web PubSub Service SDK for Python. Use for real-time messaging, WebSocket connections, and pub/sub patterns. Triggers: "azure-messaging-webpubsubservice", "WebPubSubServiceClient", "real-time", "WebSocket", "pub/sub".OfficialDevOpsNo warnings★ 3.1K↓ —
- cherry-skill-marketplaceCherryHQ/cherry-studio用户要求搜索、安装、查看或卸载 Skill，或内置能力不足时使用：先 search_skills，再 install_skill；无结果用 skill-creator 创建。OtherNo warnings★ 53K↓ —
- azure-eventhub-dotnetmicrosoft/skillsAzure Event Hubs SDK for .NET. Use for high-throughput event streaming: sending events (EventHubProducerClient, EventHubBufferedProducerClient), receiving events (EventProcessorClient with checkpointing), partition management, and real-time data ingestion. Triggers: "Event Hubs", "event streaming", "EventHubProducerClient", "EventProcessorClient", "send events", "receive events", "checkpointing", "partition".OfficialDevOpsNo warnings★ 3.1K↓ —
security-best-practices
openai/skills
OfficialSecurityUpdated Sep 8, 2026
From the author
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Install
npx skills add openai/skills --skill security-best-practices -a claude-code
Installs to .claude/skills/security-best-practices/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
What it can touch
Instructions onlyNo network use seenLicence: APACHE-2.0
Safety checks on SKILL.md
No warnings.
Why 93
Security100
Provenance100
Maintenance85
Licence100
Adoption69
Files (13)
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- references/golang-general-backend-security.md
- references/javascript-express-web-server-security.md
- references/javascript-general-web-frontend-security.md
- references/javascript-jquery-web-frontend-security.md
- references/javascript-typescript-nextjs-web-server-security.md
- references/javascript-typescript-react-web-frontend-security.md
- references/javascript-typescript-vue-web-frontend-security.md
- references/python-django-web-server-security.md
- references/python-fastapi-web-server-security.md
- +1 more