Skill comparison

Compare agent skills before installing.

Put high-signal skills side by side and inspect quality, adoption, freshness, install readiness, use-case fit, and warnings in one place.

Comparing 1 skill

Use this as a shortlist, then open the skill detail page before adopting.

Decision summary

Strongest overall

hunt-csrf

Use this as a leading candidate, then validate the README and install path in your own agent stack.

Fastest prototype

hunt-csrf

Best first install candidate based on install readiness and adoption.

Freshest repo

hunt-csrf

Most recent maintenance signal among this shortlist.

Signal	hunt-csrf Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424), GraphQL mutations-via-GET (GitLab $3,370), framework-wide CSRF middleware disabled (Stripe Dashboard $5,000), path-traversal CSRF-token bypass (GitHub Enterprise CVE-2022-23732 $10k), Origin-omission bypass (TikTok $2,500), OAuth-state null-byte (Streamlabs), WebSocket CSRF / CSWSH (Coda), default-SameSite email-change → ATO (YoYo Games $400), social-account-link CSRF (HackerOne), JSON-CSRF via text/plain on email-change (TikTok $500). Use when hunting modern CSRF — heavy emphasis on chain-to-ATO patterns.
Quality	83/100 Strong
Decision verdict	94/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack.
Adoption	4.3K stars Verified outcomes are shown on each skill page
Freshness	Sep 6, 2026
Use-case fit	Coding agents Testing and QA Browser automation
Workflow fit	Coding review agent Browser QA agent
Platform hints	Claude Code, Browser agents
Warnings	The SKILL.md excerpt does not include explicit setup instructions (e.g., how to obtain an authenticated session) or a clear limitations section, which could lead to misuse if not properly scoped. · No OpenAgentSkill engagement data yet

Skill comparison

Put high-signal skills side by side and inspect quality, adoption, freshness, install readiness, use-case fit, and warnings in one place.

Use this as a shortlist, then open the skill detail page before adopting.

Decision summary

Strongest overall

hunt-csrf

Use this as a leading candidate, then validate the README and install path in your own agent stack.

Fastest prototype

hunt-csrf

Best first install candidate based on install readiness and adoption.

Freshest repo

hunt-csrf

Most recent maintenance signal among this shortlist.

Signal	hunt-csrf Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424), GraphQL mutations-via-GET (GitLab $3,370), framework-wide CSRF middleware disabled (Stripe Dashboard $5,000), path-traversal CSRF-token bypass (GitHub Enterprise CVE-2022-23732 $10k), Origin-omission bypass (TikTok $2,500), OAuth-state null-byte (Streamlabs), WebSocket CSRF / CSWSH (Coda), default-SameSite email-change → ATO (YoYo Games $400), social-account-link CSRF (HackerOne), JSON-CSRF via text/plain on email-change (TikTok $500). Use when hunting modern CSRF — heavy emphasis on chain-to-ATO patterns.
Quality	83/100 Strong
Decision verdict	94/100 Production-ready Use this as a leading candidate, then validate the README and install path in your own agent stack.
Adoption	4.3K stars Verified outcomes are shown on each skill page
Freshness	Sep 6, 2026
Use-case fit	Coding agents Testing and QA Browser automation
Workflow fit	Coding review agent Browser QA agent
Platform hints	Claude Code, Browser agents
Warnings	The SKILL.md excerpt does not include explicit setup instructions (e.g., how to obtain an authenticated session) or a clear limitations section, which could lead to misuse if not properly scoped. · No OpenAgentSkill engagement data yet