Skill-uri pentru agenți pe care le poți verifica înainte să le instalezi
Skill-uri SKILL.md publice din depozite GitHub cu peste 50 de stele și de la producători, scanate și evaluate. Instalează oricare dintre ele cu o singură comandă în Claude Code, Cursor, Codex, GitHub Copilot sau Gemini CLI.
49.409 skill-uri din 2.375 de depozite · actualizat acum 5 ore
49.409 skill-uri
- sci-citationbrycewang-stanford/Awesome-Journal-SkillsUse when converting a reference list to Science (AAAS) numbered style — italic numbers cited in order of appearance, a single continuous list that the Supplementary Materials share, full author lists rather than "et al." in the bibliography, and abbreviated journal titles. Late-stage style pass for the flagship AAAS weekly.ȘtiințăFără avertismente★ 1,4 K↓ —
- wrap-upalirezarezvani/claude-skillsUse when closing out a launched managed agent ('wrap up', 'what do I own now'). Inventories primitives with primitives_inventory.py, regenerates the overview with overview_page.py and suggests next upgrades with upgrade_suggester.py.AlteleFără avertismente★ 29,2 K↓ —
- rag-architectActualizatalirezarezvani/claude-skillsDesign a RAG pipeline: chunk size, embedding model, vector database and retrieval quality metrics. Use whenever the user builds search over their docs, picks a vector store or finds answers miss the right context.PlanificareFără avertismente★ 29,2 K↓ —
- deepfake-drillmohitagw15856/pm-claude-skillsRun a tabletop drill of a voice-clone or deepfake fraud attempt — the 'CEO needs this wire today' call — against your actual approval process, before a real attacker does, then debrief the tells and fix the process gap. Use when someone asks to train the team on deepfake fraud, test wire-transfer controls, run a social-engineering tabletop, or 'could we get CEO-frauded?'. Produces a drill scenario pack, a facilitator script, a tells checklist, and the process fixes the drill exposed. Defensive training only.TestareFără avertismente★ 1,5 K↓ —
- setupfcakyon/claude-codex-settingsThis skill should be used when the user asks "how to setup GitHub CLI", "configure gh", "gh auth not working", "GitHub CLI connection failed", "gh CLI error", or needs help with GitHub authentication.InginerieFără avertismente★ 1,2 K↓ —
- make-static-ads-ad-copygooseworks-ai/goose-skillsStep of make-static-ads: writes the text for each slot the ad's template sets, then the primary texts, headline, description and CTA around the image, from usable facts and customer words. Run make-static-ads instead; not for direct use.MarketingFără avertismente★ 1,3 K↓ —
- ai-model-nodejsActualizatTencentCloudBase/CloudBase-AI-ToolkitUse this skill for Node.js backend AI via @cloudbase/node-sdk (>=3.16.0) — cloud functions, CloudRun, Express/Koa/NestJS, serverless APIs, scheduled jobs, LLM proxies, agent orchestration. The only SDK supporting image generation (ai.createImageModel + generateImage). Text via ai.createModel with groups cloudbase, the legacy hunyuan-v3 / hunyuan-exp, or custom-*; model ids (e.g. deepseek-v4-flash, glm-5, kimi-k2.6) go in the `model` field of generateText/streamText. MUST run two-step preflight before code — see body. NOT for browser/Web (use ai-model-web) or Mini Program (use ai-model-wechat).BrowserFără avertismente★ 1,2 K↓ —Apare și în 5 alte depozite
- handbook-pagemohitagw15856/pm-claude-skillsWrite the handbook page that ends the repeated explanation — the answer-shaped structure (task-first, context second), the ownership and freshness header, and the write-once-point-forever discipline that turns tribal knowledge into infrastructure. Use when asked document how we do X, write the wiki page for this process, I explain this every month, or make this knowledge survive me. Produces the page with task-first structure, the header block, the worked example, and the pointer habit.DevOpsFără avertismente★ 1,5 K↓ —
- run-paid-campaigns-draft-movesgooseworks-ai/goose-skillsStep of the run-paid-campaigns playbook: turns the weekly read into scale, pause, hold, rotate and fix recommendations within the spend ceiling. Run run-paid-campaigns instead; not for direct use.AlteleFără avertismente★ 1,3 K↓ —
- cloudbase-document-database-web-sdkActualizatTencentCloudBase/CloudBase-AI-ToolkitUse CloudBase document database Web SDK only for confirmed NoSQL collection work. Query, create, update, and delete document data; if the task mentions PostgreSQL / CloudBase PG / app.rdb(), route to postgresql-development instead.DateFără avertismente★ 1,2 K↓ —Apare și în 5 alte depozite
- minutes-setupsilverstein/minutesGuided first-time setup for Minutes — download whisper model, create directories, configure audio input. Use when the user says "set up minutes", "install minutes", "first time setup", "configure minutes", "get started with minutes", "how do I start using minutes", or when verify shows missing components.MediaFără avertismente★ 1,6 K↓ —Apare și în 1 alt depozit
- creating-agent-skillsAgentWorkforce/relayUse when creating Agent Skills packages (SKILL.md format) for Codex CLI, GitHub Copilot, or Amp - provides the agentskills.io specification with frontmatter constraints, directory structure, and validation rulesPlanificareFără avertismente★ 1,1 K↓ —
- creating-claude-hooksAgentWorkforce/relayUse when creating or publishing Claude Code hooks - covers executable format, event types, JSON I/O, exit codes, security requirements, and PRPM package structureSecuritateFără avertismente★ 1,1 K↓ —
- masking-budgetmohitagw15856/pm-claude-skillsTreat neurodivergent masking as a daily energy budget — audit what passing as neurotypical actually costs you, where the spend is worth it, where you can safely drop the mask, and how to plan a heavy-masking day so you don't crash after. Use when someone says 'I'm exhausted from masking', 'work drains me and I don't know why', 'how do I unmask safely', or is autistic/AuDHD/ADHD and burning out socially. Produces a mask-cost audit, a spend/drop map, and a recovery plan. A self-knowledge tool, not a diagnosis or therapy.PlanificareFără avertismente★ 1,5 K↓ —
- run-organic-social-account-auditgooseworks-ai/goose-skillsReviews a brand's own social accounts: what each is for, the last ~30 posts ranked against the account's own median with the likely reason for top and bottom posts, cadence actually kept, best posting times, and bio and pinned-post fixes. Use alone when you already know which accounts to review and can read their posts; otherwise run run-organic-social.InginerieFără avertismente★ 1,3 K↓ —
- deal-deskalirezarezvani/claude-skillsUse before closing a deal that needs a discount beyond AE authority, has a redlined MSA or unclear per-deal economics. Scores it with deal_scorer.py, names approvers with discount_approval_router.py and flags risky terms with terms_redliner.py. Never auto-approves.AlteleFără avertismente★ 29,2 K↓ —
- goose-graphics-create-stylegooseworks-ai/goose-skillsEnd-to-end skill that turns a single reference image into a published Gooseworks style — analyzes the image, drafts the slim style spec, renders a hero example plus 2-3 additional formats via Playwright, writes the `gooseworks-style.json` manifest, and publishes via `npx gooseworks styles publish` so other agents can discover it. Mirrors goose-graphics-create-format but for styles.TestareFără avertismente★ 1,3 K↓ —
- render-stopmotion-hand-swatch-cyclegooseworks-ai/goose-skillsAssemble a stop-motion hand-swatch-cycle product-demo ad from a config — a sequence of still PLATES (one hand swiping a single-barrel product across a test surface, the barrel + swatch changing per plate while the hand, background, crop, and lighting stay locked) is PNG→mp4 loop-encoded at each plate's own stop-motion hold (fast motion frames 150–250ms, per-shade ~380ms, hero beats 1100–1800ms), concat-demuxed with HARD cuts into a silent master, closed on a Playwright HTML-rendered branded end card (serif tagline + sans subtitle + real logo SVG over a hero BG, never AI-rendered text), and muxed with a pre-sourced music track playing under the end card with a fade tail (no VO). This is the FREE deterministic assembly stage (loop-encode + concat-demux + end-card render + music mux); the master-anchor plate, shade plates, and end-card BG come from create-image-gpt-image-fal and the track from create-music-elevenlabs. Use for the stopmotion-hand-swatch-cycle format.MediaFără avertismente★ 1,3 K↓ —
- casefilehashgraph-online/awesome-codex-pluginsUse when tracking security investigations, bug bounty findings, CTF leads, audit evidence, exploit chains, dead ends, or reports in the Casefile ledger through Codex.SecuritateFără avertismente★ 1,5 K↓ —
- oma-tf-infrafirst-fluke/oh-my-agentCreate or review Terraform infrastructure and plans. Use for cloud resources, IAM, networking, state management, and infrastructure changes.DevOpsFără avertismente★ 1,4 K↓ —
- relational-database-mcp-cloudbaseActualizatTencentCloudBase/CloudBase-AI-Toolkit[Deprecated] Existing CloudBase MySQL only. Do not recommend MySQL for new relational work — use postgresql-development. Read this when the environment already has a MySQL instance and the task is queryMysqlDatabase, manageMysqlDatabase, queryPermissions, or managePermissions (inspect, write SQL, schema, permissions, destroy). Do not provision MySQL.DateFără avertismente★ 1,2 K↓ —Apare și în 5 alte depozite
- make-static-ads-fix-rejectedgooseworks-ai/goose-skillsStep of the make-static-ads playbook: fixes a static image ad the platform rejected — finds the ad, maps the platform's reason to the line or element at fault, fixes copy for free or re-composes the image text on a quote, re-runs the claims and policy checks, and answers the request. A rejected video is the video playbook's job. Run make-static-ads instead; not for direct use.MarketingFără avertismente★ 1,3 K↓ —
- agent-designerActualizatalirezarezvani/claude-skillsDesign multi-agent systems (supervisor, swarm, pipeline) and tool schemas; find bottlenecks in run logs. Use whenever agents split work or a run is slow or costly. Not for Claude Code workflow files (workflow-builder).DesignFără avertismente★ 29,2 K↓ —
- improve-search-visibility-question-setgooseworks-ai/goose-skillsStep of the improve-search-visibility playbook: drafts and scores the buyer-question set in AI and Google forms and groups it into page clusters. Run improve-search-visibility instead; not for direct use.AlteleFără avertismente★ 1,3 K↓ —
security-audit
cloudflare/security-audit-skill
OficialSecuritateActualizat 14 sept. 2026
De la autor
Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/comprehensive/end-to-end reviews, or requested report artifacts.
Instalare
npx skills add cloudflare/security-audit-skill --skill security-audit -a claude-code
Se instalează în .claude/skills/security-audit/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Descarcă .zip
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
La ce are acces
Rulează scripturile incluseNu am văzut acces la rețeaLicență: MIT
Verificări de siguranță pe SKILL.md
- Include scripturi pe care nu le-am verificatScăzut
De ce 88
Securitate85
Proveniență100
Întreținere85
Licență100
Adopție72
Fișiere (20)
- AI-AND-LLM.md
- ATTACK-CLASSES.md
- CLIENT-SIDE.md
- CLOUD-AND-DEPLOYMENT.md
- DATA-ISOLATION-AND-LIFECYCLE.md
- DESKTOP-MOBILE-AND-LOCAL-IPC.md
- HUNTING.md
- MEMORY-SAFETY-AND-BINARY.md
- PROTOCOLS-RPC-AND-MESSAGING.md
- RECONNAISSANCE.md
- RESOURCE-EXHAUSTION-AND-AVAILABILITY.md
- SKILL.md
- încă 8