Agent skills

Security skills

Read straight from the source repositories, not from submitted listings. Every skill shows what it does, what is inside, where it came from — and whether attention around its source is actually growing.

Toolclaude-code 28,838codex 6,583cursor 4,244copilot 1,341windsurf 73cline 44
CategoryAI & Agents 4,188Data & Analytics 3,152Code Review & Quality 1,857Backend & API 1,737Security 1,624Workflow & Productivity 1,614Documentation 1,361Design & Presentation 1,327Content & Marketing 1,213Testing & QA 1,074DevOps & Cloud 783Databases 735Frontend 623Business & Finance 447Media & Video 349Other 7,916
2,701 found
1–48 · page 1 / 57
vercel-optimizeAudit deployed Vercel apps for cost and performance issues using metrics, project config, code scans, and version-aware…sickn33scriptsarchifyCreate polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone…tt-a1iscriptsimpeccableUse when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate…silversteinscriptsomniverse-usd-performance-tuningTop-level workflow skill for USD performance diagnosis and optimization. Handles slow loading, high memory, low FPS, and broad…NVIDIAscriptsanti-lieUse when audited OpenClaw conversations or outgoing Feishu/Slack/channel messages contain concrete business numbers such as…lc198707scriptsci-scoreGrades a repository's GitHub Actions configuration against CI best practices (the CI Score: eleven pass/fail configuration facts…starslingdevscriptsdeps-auditAudit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after…oliver-kriskawritesscriptsphx-deps-auditAudit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after…oliver-kriskascriptslinkedin-marketingPlan, draft, audit, and publish LinkedIn posts and comments. Use when the user wants to write a viral LinkedIn post, draft a…sergebulaevscriptsdsqlBuild with Aurora DSQL — manage schemas, execute queries, handle migrations, diagnose query plans, diagnose cluster performance…awslabsscriptspaper-auditDeep-review-first audit for Chinese and English academic papers across LaTeX, Typst, and PDF formats. Use whenever the user wants…brycewang-stanfordscriptslatex-paper-enEnglish LaTeX academic paper assistant for existing `.tex` projects. Use this skill whenever the user wants to compile, lint…brycewang-stanfordscriptstypst-paperTypst academic paper assistant for existing `.typ` paper projects in English or Chinese. Use this skill whenever the user wants…brycewang-stanfordscriptsparanoia-ai-system-evolver用于升级 AI 系统、agent workflow、Codex skill、prompt、memory、RAG、tool routing、schema、eval set 或 feedback loop；也用于把 AI…DY-2026scriptsreview-reportActionable feedback on the quality, usage, and effectiveness of Power BI reports. Automatically invoke when the user asks to…data-goblinscriptsdesign-evaluationEvaluate one design or a user-approved maturity-mapped batch through a transparent evidence-based rubric. Classify each work…SeanJ1angscriptszeroize-auditDetects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with…trailofbitswritesscriptsanydesignAnalyze images, websites, and Figma files to extract their design and generate a `design.md` with token system, component…Infrasity-Labsscriptsaws-transformMigrate, modernize, and upgrade codebases to AWS. Run analysis on repos for tech debt, security vulnerabilities, and…awslabsscriptsdata-act-ryan-malekEU Data Act (Regulation (EU) 2023/2854) skill for lawyers. Use when the user asks about Data Act classification, drafting…lawve-aiscriptstechnical-diagram-skillCreate professional technical diagrams as standalone animated HTML files with SVG graphics, flowing effects, dark/light theme…mingchen666scriptsseo-geo-optimizerComprehensive SEO/GEO/AEO analysis toolkit for optimizing content visibility across traditional search engines (Google, Bing), AI…ViryaZhengscriptsquality-playbookRun a complete quality engineering audit on any codebase. Derives behavioral requirements from the code, generates spec-traced…githubscriptsscientific-writingDraft, revise, and audit scientific manuscripts or reports with explicit evidence provenance, reporting-guideline coverage…K-Dense-AIscriptsscientific-writingDraft, revise, and audit scientific manuscripts or reports with explicit evidence provenance, reporting-guideline coverage…K-Dense-AIscriptscontract-intelligence-workflow-reviewer-carl-ditzlerContract intelligence and contract operations workflow skill for Claude and Codex. Guides the full contract lifecycle review…lawve-aiscriptsaudit-testsDiagnostic-only test suite auditor. Classifies repo type, maps against\ \ 7-layer testing taxonomy (git hooks \u2192 static…jeremylongshorescriptsdeep-reviewMulti-dimensional code review. Use when the user asks to review, evaluate, or audit a PR, diff, branch, or pasted change —…lobehubscriptssemantic-modelThis skill should be used whenever the user mentions a "semantic model", "data model", or "dataset", or asks to "build", "model"…data-goblinscriptsgeo-seo-claudeAudit and optimize content for SEO, GEO (generative engine optimization), and AEO (answer engine optimization). Use when user…Infrasity-Labsscriptspi-goalPersistent Codex-style goal tracking for pi. Use when the user explicitly asks to set, continue, audit, pause, resume, complete…code-yeongyuscriptssuede-release-linterAudit creative release folders before handoff: metadata, file structure, artwork, lyrics, stems, rights blockers, and platform…JasonColapietroscriptsloreMarkdown project memory for AI agents. Use for decisions, architecture, conventions, monorepo scopes, `.lore/`, or `lore`…sickn33scriptsseo-analysisFull SEO audit: Google Search Console data + URL Inspection API + PageSpeed Insights API + technical crawl + keyword research +…nowork-studioscriptshealthRuns a budget-aware agent-assisted engineering health audit for instruction/config drift, hooks/MCP, verifier surfaces, and AI…tw93scriptsnotebooklmUse this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers…guanyangscriptspptx-postersCreate and audit editable scientific posters in macro-free PowerPoint (.pptx) from author-approved local content and assets. Use…K-Dense-AIwritesscriptspptx-postersCreate and audit editable scientific posters in macro-free PowerPoint (.pptx) from author-approved local content and assets. Use…K-Dense-AIwritesscriptsneurokit2Use NeuroKit2 to build or audit reproducible research workflows for physiological time-series preprocessing, event/interval…K-Dense-AIwritesscriptslinkedin-humanizerScrub AI tells from any text draft OR audit a finished post against the 2026 algorithm heuristic checklist. Tier-based rewriter…sergebulaevscriptsscholar-evaluationProvide qualitative-first, evidence-traceable developmental review of scholarly works and audit low-stakes research-assessment…K-Dense-AIwritesscriptsscholar-evaluationProvide qualitative-first, evidence-traceable developmental review of scholarly works and audit low-stakes research-assessment…K-Dense-AIwritesscriptsyara-rule-authoringGuides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing…trailofbitsscriptsazure-architecture-autopilotDesign Azure infrastructure using natural language, or analyze existing Azure resources to auto-generate architecture diagrams…githubscriptslight-memory-pmLight 项目运行时记忆与项目管理常驻技能:把"项目做到哪/定了啥/出到哪版/术语怎么统一/上次断哪" 落到每个项目自己的 .light/ 目录(项目卡 + 决策日志 + 版本史 + 受控术语表 + 跨会话交接卡), 复用 passport.py 引擎管…Light0305scriptslight-typesettingBuild and preflight submission-ready LaTeX/PDF artifacts for Light stage 11. Use when receiving a paper-writing manuscript…Light0305scriptsoma-backendBackend specialist for APIs, databases, authentication with clean architecture (Repository/Service/Router pattern). Use for API…first-flukescriptsscientific-visualizationCreate and audit truthful, accessible, publication-ready scientific figures with Matplotlib, Seaborn, or Plotly. Use for figure…K-Dense-AIwritesscripts
1 / 57Next →
How the catalog works
What is an agent skill?

A folder with a SKILL.md inside — instructions, and often scripts and assets, that an AI agent loads when the task matches. Claude Code, Codex, Cursor and Copilot all read the same format, so one skill usually works across them.

Where does this catalog come from?

We read 660 source repositories straight from their file trees rather than from submitted listings — what you see is what is actually published. 98 repositories were rejected because they advertise skills but contain none: link lists, not folders.

Why is there no install counter?

Because install counts live in the registry that serves `npx skills add`, and that is not ours — publishing a number we cannot verify would be worse than showing none. Instead we show where a skill comes from and whether attention around its source is actually growing, measured from our own weekly snapshots.

Do you deduplicate?

Yes, and it matters more than expected. Aggregator repositories republish the same skill in several places — one source carried 6,317 SKILL.md files for 2,001 actual skills. We collapse by folder name and keep the canonical copy, so the catalog counts things, not copies.

Keep going
Collections, ranked →
Which skill collections are moving this week, from our own snapshots.
Open Source Radar →
The repositories behind these skills, watched daily.
The makers →
Who publishes the skills you install.
Startup rankings →
The companies building in the same ecosystem.