Agent skills

• cloudflare cloudflare/skills

  Discover and choose Cloudflare products for apps, APIs, AI agents, storage, networking, and security. Use for architecture and product selection, including when the user describes a need without naming a Cloudflare product; then find the relevant skill or documentation.

  111,081 Failed npx skills add cloudflare/skills --skill cloudflare

• playwright-best-practices currents-dev/playwright-best-practices-skill

  Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authentication or OAuth, testing accessibility (axe-core), file uploads/downloads, date/time mocking, WebSockets, geolocation, permissions, multi-tab/popup flows, mobile/responsive layouts, touch gestures, GraphQL, error handling, offline mode, multi-user collaboration, third-party services (payments, email verification), console error monitoring, global setup/teardown, test annotations (skip, fixme, slow), test tags (@smoke, @fast, @critical, filtering with --grep), project dependencies, security testing (XSS, CSRF, auth), performance budgets (Web Vitals, Lighthouse), iframes, component testing, canvas/WebGL, service workers/PWA, test coverage, i18n/localization, Electron apps, or browser extension testing. Covers E2E, component, API, visual, accessibility, security, Electron, and extension testing.

  89,981 Failed npx skills add currents-dev/playwright-best-practices-skill --skill playwright-best-practices

• laravel-specialist jeffallan/claude-skills

  Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers, implementing Sanctum auth flows, building Livewire components, optimising Eloquent queries, or writing Pest/PHPUnit tests for Laravel features.

  22,438 Failed npx skills add jeffallan/claude-skills --skill laravel-specialist

• security-review getsentry/skills

  Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.

  18,924 Failed npx skills add getsentry/skills --skill security-review

• docker-patterns affaan-m/ecc

  Docker and Docker Compose patterns for local development, hardened CLI installer harnesses, container security, networking, volumes, and multi-service orchestration. Use when creating or reviewing Dockerfiles and Compose services, testing installers across Linux distributions, or planning accurate native macOS and Windows validation.

  12,625 Failed npx skills add affaan-m/ecc --skill docker-patterns

• penetration-testing-with-strix usestrix/strix

  Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, security-scan, security-audit, or find vulnerabilities in an app, API, website, or repo.

  11,976 Failed npx skills add usestrix/strix --skill penetration-testing-with-strix

• laravel-security affaan-m/ecc

  Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations. Use when reviewing Laravel auth, Eloquent safety, CSRF, XSS, API security, or deployment configuration.

  10,683 Failed npx skills add affaan-m/ecc --skill laravel-security

• security-scan affaan-m/ecc

  Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. Use when auditing a .claude/ directory — CLAUDE.md, settings.json, MCP servers, hooks, or agent definitions.

  10,182 Failed npx skills add affaan-m/ecc --skill security-scan

• security-best-practices openai/skills

  Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

  9,912 Failed npx skills add openai/skills --skill security-best-practices

• wordpress-pro jeffallan/claude-skills

  Develops custom WordPress themes and plugins, creates and registers Gutenberg blocks and block patterns, configures WooCommerce stores, implements WordPress REST API endpoints, applies security hardening (nonces, sanitization, escaping, capability checks), and optimizes performance through caching and query tuning. Use when building WordPress themes, writing plugins, customizing Gutenberg blocks, extending WooCommerce, working with ACF, using the WordPress REST API, applying hooks and filters, or improving WordPress performance and security.

  9,165 Failed npx skills add jeffallan/claude-skills --skill wordpress-pro

• spring-boot-engineer jeffallan/claude-skills

  Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data JPA repositories, and configures reactive WebFlux endpoints. Use when building Spring Boot 3.x applications, microservices, or reactive Java applications; invoke for Spring Data JPA, Spring Security 6, WebFlux, Spring Cloud integration, Java REST API design, or Microservices Java architecture.

  8,090 Failed npx skills add jeffallan/claude-skills --skill spring-boot-engineer

• codeql trailofbits/skills

  Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift. Supports "run all" (security-and-quality + security-experimental) and "important only" (high-precision) scan modes, and creates data extension models for project-specific sources and sinks. For fast single-file pattern matching, or when no build is available for a compiled language, use the semgrep skill; to parse SARIF that already exists rather than produce it, use the sarif-parsing skill.

  7,726 Failed npx skills add trailofbits/skills --skill codeql

• ci-cd-security superagent-ai/skills

  Scan GitHub Actions workflow files for security vulnerabilities by reading the YAML and reporting findings directly — no external tools, no installation, no shell execution. Use this skill whenever the user shares a `.github/workflows/` file, pastes workflow YAML, asks for a CI/CD security review, mentions `pull_request_target`, `workflow_run`, action pinning, `GITHUB_TOKEN` permissions, pwn requests, template injection, cache poisoning, secret exfiltration, supply chain risk, or any GitHub Actions hardening topic. Also trigger when the user is hardening an OSS repo, doing a CI/CD red team assessment, evaluating a target for supply-chain scanning, or writing publicly about CI/CD security. Bias toward triggering this skill rather than answering from memory — CI/CD security defaults are wrong almost everywhere and the rules are unintuitive.

  7,270 Failed npx skills add superagent-ai/skills --skill ci-cd-security

• code-reviewer jeffallan/claude-skills

  Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

  6,049 Failed npx skills add jeffallan/claude-skills --skill code-reviewer

• network-config-validation affaan-m/ecc

  Pre-deployment checks for router and switch configuration, including dangerous commands, duplicate addresses, subnet overlaps, stale references, management-plane risk, and IOS-style security hygiene. Use when reviewing a router or switch configuration before deployment.

  5,697 Failed npx skills add affaan-m/ecc --skill network-config-validation

• security-reviewer jeffallan/claude-skills

  Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists.

  5,534 Failed npx skills add jeffallan/claude-skills --skill security-reviewer

• fullstack-guardian jeffallan/claude-skills

  Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level. Covers the complete stack from database to UI, enforcing auth, input validation, output encoding, and parameterized queries across all layers. Use when implementing features across frontend and backend, building REST APIs with corresponding UI, connecting frontend components to backend endpoints, creating end-to-end data flows from database to UI, or implementing CRUD operations with UI forms. Distinct from frontend-only, backend-only, or API-only skills in that it simultaneously addresses all three perspectives—Frontend, Backend, and Security—within a single implementation workflow. Invoke for full-stack feature work, web app development, authenticated API routes with views, microservices, real-time features, monorepo architecture, or technology selection decisions.

  5,172 Failed npx skills add jeffallan/claude-skills --skill fullstack-guardian

• test-master jeffallan/claude-skills

  Generates test files, creates mocking strategies, analyzes code coverage, designs test architectures, and produces test plans and defect reports across functional, performance, and security testing disciplines. Use when writing unit tests, integration tests, or E2E tests; creating test strategies or automation frameworks; analyzing coverage gaps; performance testing with k6 or Artillery; security testing with OWASP methods; debugging flaky tests; or working on QA, regression, test automation, quality gates, shift-left testing, or test maintenance.

  4,918 Failed npx skills add jeffallan/claude-skills --skill test-master

• substrate-vulnerability-scanner trailofbits/skills

  Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

  4,801 Failed npx skills add trailofbits/skills --skill substrate-vulnerability-scanner

• ghost-scan-code ghostsecurity/skills

  Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization, ReDoS, path traversal, zip slip). Use when the user asks for a code security audit, SAST scan, vulnerability scan of source code, or wants to find security flaws in a codebase or library.

  4,765 Failed npx skills add ghostsecurity/skills --skill ghost-scan-code

• secure-code-guardian jeffallan/claude-skills

  Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For pre-built OAuth/SSO integrations or standalone security audits, consider a more specialized skill.

  4,695 Failed npx skills add jeffallan/claude-skills --skill secure-code-guardian

• gha-security-review getsentry/skills

  GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.

  4,544 Failed npx skills add getsentry/skills --skill gha-security-review

• security-case-management elastic/agent-skills

  3,734 Failed npx skills add elastic/agent-skills --skill security-case-management

• security-ownership-map openai/skills

  Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

  3,553 Failed npx skills add openai/skills --skill security-ownership-map

• business-logic-vulnerabilities yaklang/hack-skills

  Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.

  3,547 Failed npx skills add yaklang/hack-skills --skill business-logic-vulnerabilities

• skill-scanner getsentry/skills

  Scan agent skills for security issues. Use when asked to "scan a skill",

  3,480 Failed npx skills add getsentry/skills --skill skill-scanner

• security-alert-triage elastic/agent-skills

  3,458 Failed npx skills add elastic/agent-skills --skill security-alert-triage

• security-detection-rule-management elastic/agent-skills

  3,441 Failed npx skills add elastic/agent-skills --skill security-detection-rule-management

• security-generate-security-sample-data elastic/agent-skills

  3,393 Failed npx skills add elastic/agent-skills --skill security-generate-security-sample-data

• ai-ml-security yaklang/hack-skills

  AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.

  3,252 Failed npx skills add yaklang/hack-skills --skill ai-ml-security

• linux-security-bypass yaklang/hack-skills

  Linux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, AppArmor, SELinux, seccomp filters, or audit logging that must be evaded during post-exploitation.

  3,226 Failed npx skills add yaklang/hack-skills --skill linux-security-bypass

• vibe-security raroque/vibe-security-skill

  Audits codebases for common security vulnerabilities that AI coding assistants introduce in "vibe-coded" applications. Checks for exposed API keys, broken access control (Supabase RLS, Firebase rules), missing auth validation, client-side trust issues, insecure payment flows, and more. Use this skill whenever the user asks about security, wants a code review, mentions "vibe coding", or when you're writing or reviewing code that handles authentication, payments, database access, API keys, secrets, or user data — even if they don't explicitly mention security. Also trigger when the user says things like "is this safe?", "check my code", "audit this", "review for vulnerabilities", or "can someone hack this?".

  3,223 Failed npx skills add raroque/vibe-security-skill --skill vibe-security

• ntlm-relay-coercion yaklang/hack-skills

  NTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate privileges via SMB, LDAP, HTTP, or MSSQL relay targets, combined with PetitPotam, PrinterBug, and other coercion methods.

  3,177 Failed npx skills add yaklang/hack-skills --skill ntlm-relay-coercion

• elasticsearch-security-troubleshooting elastic/agent-skills

  2,909 Failed npx skills add elastic/agent-skills --skill elasticsearch-security-troubleshooting

• openclaw-config adisinghstudent/ara.so

  Manage OpenClaw bot configuration - channels, agents, security, and autopilot settings

  2,836 Failed npx skills add adisinghstudent/ara.so --skill openclaw-config

• okx starchild-ai-agent/official-skills

  OKX OnChainOS: on-chain trading, analytics, security, DeFi across 20+ chains. Use when running OKX-routed on-chain ops (e.g. swap on Ethereum, scan token risk, track smart money, check wallet portfolio). Wallet: default to the user's Agent Wallet (via the `wallet` skill). Only use the OnchainOS TEE wallet (`onchainos wallet login <email>`) when the user explicitly asks for it.

  1,652 Failed npx skills add starchild-ai-agent/official-skills --skill okx

• adk-frontend botpress/skills

  Guidelines for building frontend applications that integrate with Botpress ADK bots - covering authentication, type generation, client setup, and calling bot actions

  1,609 Failed npx skills add botpress/skills --skill adk-frontend

• llm-security semgrep/skills

  Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'prompt injection' or 'check LLM security'. IMPORTANT: Always consult this skill when building chatbots, AI agents, RAG pipelines, tool-using LLMs, agentic systems, or any application that calls an LLM API (OpenAI, Anthropic, Gemini, etc.) — even if the user doesn't explicitly mention security. Also use when users import 'openai', 'anthropic', 'langchain', 'llamaindex', or similar LLM libraries.

  1,455 Failed npx skills add semgrep/skills --skill llm-security

• security boshu2/agentops

  Review code or scan for security vulnerabilities, secrets, dependencies and prompt risks. Use when: concrete exposure needs assessment; never silently change policy.

  1,398 Failed npx skills add boshu2/agentops --skill security

• cybersecurity-analyst rysweet/amplihack

  Analyzes events through cybersecurity lens using threat modeling, attack surface analysis, defense-in-depth, zero-trust architecture, and risk-based frameworks (CIA triad, STRIDE, MITRE ATT&CK). Provides insights on vulnerabilities, attack vectors, defense strategies, incident response, and security posture. Use when: Security incidents, vulnerability assessments, threat analysis, security architecture, compliance. Evaluates: Confidentiality, integrity, availability, threat actors, attack patterns, controls, residual risk.

  1,392 Failed npx skills add rysweet/amplihack --skill cybersecurity-analyst

• openclaw-config reason-machines/trending-skills

  Manage OpenClaw bot configuration - channels, agents, security, and autopilot settings

  1,385 Failed npx skills add reason-machines/trending-skills --skill openclaw-config

• gws-shared streakyc/googleworkspacecli

  gws CLI: Shared patterns for authentication, global flags, and output formatting.

  1,385 Failed npx skills add streakyc/googleworkspacecli --skill gws-shared

• pentest-ai-agents reason-machines/security-skills

  Claude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting

  1,331 Failed npx skills add reason-machines/security-skills --skill pentest-ai-agents

• pentest-tools zhaoxuya520/reverse-skill

  主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。 触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

  1,306 Failed npx skills add zhaoxuya520/reverse-skill --skill pentest-tools

Descriptions are the authors' own, in English. Read a skill's code in its repository before you install it.