Skill-uri pentru agenți pe care le poți verifica înainte să le instalezi
Skill-uri SKILL.md publice din depozite GitHub cu peste 50 de stele și de la producători, scanate și evaluate. Instalează oricare dintre ele cu o singură comandă în Claude Code, Cursor, Codex, GitHub Copilot sau Gemini CLI.
14.533 de skill-uri din 417 depozite · actualizat acum 17 ore
314 skill-uri
- security-ownership-mapopenai/skillsAnalyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.OficialSecuritateFără avertismente★ 28,2 K↓ —Apare și în 1 alt depozit
- skill-security-auditoreigent-ai/eigentSecurity auditing for code, configs, and infrastructure. Use when the user wants to audit or improve security: scan for vulnerabilities (SQL injection, XSS, command injection, path traversal), detect hardcoded secrets and credentials, review auth and authorization, check dependencies for known CVEs, audit config files for insecure defaults, or generate security reports. Trigger on "security audit", "vulnerability scan", "code review for security", "find secrets", "check for vulnerabilities", "OWASP", "CVE", or questions about code security.SecuritateFără avertismente★ 15,6 K↓ —
- hunt-xsssickn33/agentic-awesome-skillsHunting skill for xss vulnerabilities.SecuritateVerifică întâi★ 48,3 K↓ —
- hunt-domsickn33/agentic-awesome-skillsHunt client-side DOM vulnerabilitiesSecuritateVerifică întâi★ 48,3 K↓ —
- best-practicesaddyosmani/web-quality-skillsApply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".SecuritateFără avertismente★ 3 K↓ —
- reverse-engineeringcoco-research/cocoProvides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.SecuritateFără avertismente★ 911↓ —
- creating-claude-hooksAgentWorkforce/relayUse when creating or publishing Claude Code hooks - covers executable format, event types, JSON I/O, exit codes, security requirements, and PRPM package structureSecuritateFără avertismente★ 893↓ —
- skill-scannergetsentry/skillsScan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.OficialSecuritateFără avertismente★ 1,1 K↓ —
- swift-securitydpearson2699/swift-ios-skillsUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinning (SecTrust, SPKI), keychain sharing across apps/extensions, migrating secrets from UserDefaults or plists, or OWASP MASVS/MASTG mobile compliance on Apple platforms.SecuritateFără avertismente★ 1,2 K↓ —
- thinking-red-teamtjboudreaux/cc-thinking-skillsFor authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.SecuritateFără avertismente★ 1,7 K↓ —
- Burp Suite/Web Security Skilla5c-ai/babysitterWeb application security testing with Burp Suite integrationSecuritateFără avertismente★ 1,9 K↓ —
- CVE/CWE Database Skilla5c-ai/babysitterCVE and CWE database querying and managementSecuritateFără avertismente★ 1,9 K↓ —
- web-securitya5c-ai/babysitterOWASP Top 10, security headers, CSP, XSS prevention, and vulnerability prevention.SecuritateFără avertismente★ 1,9 K↓ —
- constitution-creationa5c-ai/babysitterEstablish project governing principles including dev guidelines, code quality standards, testing policies, UX requirements, performance benchmarks, and security constraints.SecuritateFără avertismente★ 1,9 K↓ —
- expressa5c-ai/babysitterExpress.js middleware patterns, routing, error handling, security, and production best practices.SecuritateFără avertismente★ 1,9 K↓ —
- security-hardeninga5c-ai/babysitterAIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and STRIDE threat modeling.SecuritateFără avertismente★ 1,9 K↓ —
- security-reviewa5c-ai/babysitterSecurity vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.SecuritateFără avertismente★ 1,9 K↓ —
- cspa5c-ai/babysitterContent Security Policy configuration, nonces, and reporting.SecuritateFără avertismente★ 1,9 K↓ —
- jwta5c-ai/babysitterJWT implementation, token management, refresh patterns, and security.SecuritateFără avertismente★ 1,9 K↓ —
- antinet-security-scananbeime/skill信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。SecuritateFără avertismente★ 8,5 K↓ —
- ec2itsmostafa/aws-agent-skillsAWS EC2 virtual machine management — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation. Trigger on ANY of these, even when EC2 isn't named explicitly: - Launching or provisioning: "spin up a server", "create a VM", "new instance", "run-instances", mention of instance types (t3, m5, c5, r6, g5, p4d, t4g, c7g, etc.) - SSH / connectivity problems: "connection refused", "connection timed out", "permission denied publickey", "can't connect to my instance", "SSH not working" - Instance management: resize, stop, start, terminate, reboot, change instance type - Cost optimization: stop dev instances overnight, save money on EC2, spot vs on-demand, reserved instances - Auto Scaling: ASG, launch template, mixed instances policy, scale to zero, scheduled scaling - Spot Instances: spot fleet, spot interruption, capacity-optimized, price-capacity-optimized - AMIs and backups: create image, custom AMI, EBS snapsSecuritateFără avertismente★ 1,2 K↓ —
- repo-auditzebbern/claude-code-guideDeep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Triggered when users ask about Git analysis, code hotspots, who owns what code, secret scanning, security audits of commit history, or optimizing code review assignments.SecuritateFără avertismente★ 4,7 K↓ —
- audit-flowzebbern/claude-code-guideInteractive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document flow, security review, debug flow, brainstorm, architecture review, post-mortem, incident review.SecuritateFără avertismente★ 4,7 K↓ —
- cs-skillsbrycewang-stanford/Auto-Empirical-Research-Skills10 computer science skills. Trigger: algorithms, systems research, software engineering, security papers. Design: theory, complexity analysis, code-centric research, and security methods.SecuritateFără avertismente★ 4,7 K↓ —