Agent skills

Security skills

Read straight from the source repositories, not from submitted listings. Every skill shows what it does, what is inside, where it came from — and whether attention around its source is actually growing.

Toolclaude-code 28,838codex 6,583cursor 4,244copilot 1,341windsurf 73cline 44
CategoryAI & Agents 4,188Data & Analytics 3,152Code Review & Quality 1,857Backend & API 1,737Security 1,624Workflow & Productivity 1,614Documentation 1,361Design & Presentation 1,327Content & Marketing 1,213Testing & QA 1,074DevOps & Cloud 783Databases 735Frontend 623Business & Finance 447Media & Video 349Other 7,916
2,701 found
49–96 · page 2 / 57
bpa-rulesInteractive BPA rule generation for Power BI semantic models; guided discovery, model investigation, and expert rule authoring.…data-goblinscriptsindecDatos macro y sociales de Argentina via la API oficial Series de Tiempo del Estado (apis.datos.gob.ar/series). ~4250 series del…gauss314scriptsopenobserve-apiThis skill should be used when user asks to "query OpenObserve", "create OpenObserve dashboard", "edit OpenObserve panel", "fetch…fcakyonscriptsscience-research-writingUse when researchers need to plan, draft, revise, or audit an empirical research paper from their own materials, including…Yila-AIscriptsaudit-xcode-security-settingsAudit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and…superagents-labscriptsdatabricks-uc-migration-pilotPilot a Databricks Hive Metastore (HMS) → Unity Catalog (UC) migration before the deadline — audit every table's migratability…jeremylongshorewritesscriptsdependency-auditorAudit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive…alirezarezvaniscripts007Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and…sickn33scriptsambiguity-reportTurn an interpretive-ambiguity audit of a legal text — contract, statute, regulation, or judicial opinion — into a polished…lawve-aiscriptstao-analyze-changenet-rcaPerforms deep Root Cause Analysis (RCA) on NVIDIA TAO Visual ChangeNet classification experiments with image-evidence-driven…NVIDIAwritesscriptstech-stack-evaluatorTechnology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when…alirezarezvaniscriptsagent-browserAgent-browser usage guide. Read this before running any agent-browser commands. Covers the snapshot-and-ref workflow, navigating…fcakyonscriptsai-scientist-evaluatorCritically review, score, compare, and rank one or more AI scientist outputs for biology, bioinformatics, computational life…BioTender-maxscriptsbillable-time-stephane-boghossianWhen your bar comes asking "show me how you billed AI-assisted work" — and ABA 512, Florida 24-1, California, New York, and DC…lawve-aiwritesscriptscompliance-osCompliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control…alirezarezvaniscriptsgeopandasGuidance and local audit tools for Python workflows that directly use GeoPandas GeoSeries, GeoDataFrame, spatial operations, or…K-Dense-AIwritesscriptsrepo-readiness-auditUse when a user asks whether an identified repository is ready for further development, release work, a new feature, handoff, or…asimons81scriptssenior-backendDesigns and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and…alirezarezvaniscriptsshushu-internship-toolUse when an AI assistant helps computer-industry internship candidates with 鼠鼠实习妙妙工具 quickly turn a target job description into a…LiuMengxuan04scriptstech-stack-evaluatorComprehensive technology stack evaluation and comparison tool with TCO analysis, security assessment, and intelligent…alirezarezvaniscriptstradingviewDatos de mercado de TradingView via APIs publicas internas sin auth: Scanner (~300 columnas con quote/indicadores…gauss314scriptsacademic-humanizerDraft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically…dongshuyanscriptsqutipSimulate and audit closed and open quantum-system models with QuTiP 5, including deterministic, trajectory, steady-state…K-Dense-AIscriptsscikit-survivalBuild, evaluate, and audit right-censored or competing-risk survival workflows with scikit-survival, including leakage-safe…K-Dense-AIwritesscriptssenior-fullstackFullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with…alirezarezvaniscriptssetting-up-log-aggregationExecute use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log…jeremylongshorewritesscriptsskillshareManages and syncs AI CLI skills and agents across 50+ tools from a single source. Use this skill whenever the user mentions…runkidsscriptsauditing-wallet-securityAudit wallet security by analyzing token approvals, permissions, and transaction patterns. Use when checking wallet security…jeremylongshorewritesscriptsconfiguring-service-meshesConfigure this skill configures service meshes like istio and linkerd for microservices. it generates production-ready…jeremylongshorewritesscriptsdesign-submission-checkAudit a design-award submission package against the current official rules for a specific award cycle. Check required materials…SeanJ1angscriptsgeo-gap-fixerAudit how often LLMs recommend your brand vs competitors and generate a GEO action plan.Varnan-Techscriptsskill-security-auditorAudit an AI agent skill before installing it. Use proactively whenever the user is about to add, install, enable, or evaluate an…lawve-aiscriptsagent-skill-stackFind, evaluate, and assemble the smallest compatible set of AI Agent Skills for an end-to-end natural-language goal. Use when a…githubscriptscode-statsAnalyzes code files and reports statistics including line counts, file counts by extension, and total size. Use this skill…alibabascriptsfind-dataFind a dataset for a Data2Story blog. Accepts a topic, a URL, or a DIP-style category. Downloads + validates against 4…QinghongLinwritesscriptspodium-authAuthenticate production Podium integrations and survive the auth-side failures — OAuth2 access-token expiry storms, refresh-token…jeremylongshorewritesscriptspodium-multi-location-routerRoute Podium API calls across multiple physical locations with strict per-location credential isolation, pre-flight location-ID…jeremylongshorewritesscriptspodium-webhook-reliabilityOperate a Podium webhook receiver that survives the delivery-side failures — forged events without signature verification, replay…jeremylongshorewritesscriptsuser-profile-keeperLocal user-profile maintenance skill for Codex, Claude Code, OpenClaw, OpenCode, and other agent harnesses. Use only when the…dongshuyanscriptsaeoAnswer Engine Optimization (AEO) skill — optimize content to be cited by AI language models (ChatGPT, Perplexity, Claude, Gemini…alirezarezvaniscriptscode-review'Run a comprehensive code review on local source files. Use this skill when the user asks to review, audit, inspect, evaluate, or…testdoublewritesscriptsgoogle-financeDatos de Google Finance via batchexecute (API RPC interna sin auth ni API key). Quote, OHLC intraday 1-min y 5-min, OHLC daily…gauss314scriptshermes-environment-migrationUse when a Hermes environment must be safely migrated between machines with staged exports, integrity manifests, secret…asimons81scriptshermes-profile-auditUse when a Hermes profile must be audited for role clarity, authority boundaries, configuration fit, skills, memory posture…asimons81scriptshermes-skill-auditUse when installed Hermes skills must be audited for overlap, staleness, broken references, usage-integrity problems, and dead…asimons81scriptshermes-stack-doctorUse when a top-level, read-only Hermes health audit is needed across installation, updates, gateways, cron, profiles, skills…asimons81scriptshermes-token-auditUse when Hermes token usage, cost attribution, runaway sessions, cron consumption, or billing discrepancies must be investigated…asimons81scriptskubernetes-operatorUse when building a Kubernetes Operator — custom controllers that reconcile CRD state. Triggers on "build an operator", "CRD…alirezarezvaniscripts
← Prev2 / 57Next →
How the catalog works
What is an agent skill?

A folder with a SKILL.md inside — instructions, and often scripts and assets, that an AI agent loads when the task matches. Claude Code, Codex, Cursor and Copilot all read the same format, so one skill usually works across them.

Where does this catalog come from?

We read 660 source repositories straight from their file trees rather than from submitted listings — what you see is what is actually published. 98 repositories were rejected because they advertise skills but contain none: link lists, not folders.

Why is there no install counter?

Because install counts live in the registry that serves `npx skills add`, and that is not ours — publishing a number we cannot verify would be worse than showing none. Instead we show where a skill comes from and whether attention around its source is actually growing, measured from our own weekly snapshots.

Do you deduplicate?

Yes, and it matters more than expected. Aggregator repositories republish the same skill in several places — one source carried 6,317 SKILL.md files for 2,001 actual skills. We collapse by folder name and keep the canonical copy, so the catalog counts things, not copies.

Keep going
Collections, ranked →
Which skill collections are moving this week, from our own snapshots.
Open Source Radar →
The repositories behind these skills, watched daily.
The makers →
Who publishes the skills you install.
Startup rankings →
The companies building in the same ecosystem.