High-intent entry points

Start from the task, not a keyword list.

These shortcuts use the same trust, supply, and relevance signals as the registry API, so humans and agents land on a useful shortlist faster.

Agent-readable index

FinanceStock analysis QuantTrading research SlidesPPT generation DocsPDF parsing ExtractWeb scraping CreativeDesign workflow SportsFootball analytics

Decision filters

Choose by scenario, quality, and trust signals.

Use casePlatform fitQuality tierTrust profileSafety gateGitHub adoption

Showing 1-16 of 860 ranked candidates matching "passive-vulnerability-scanner"

Best blend of quality, stars, freshness, and agent usage

Web Cache Vulnerability Scanner

VERIFIEDSTRONG · 82TRUST · 79SAFE · EXPERIMENTALCODING

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

$ npx skills add Hackmanit/Web-Cache-Vulnerability-Scanner

1.2K stars56 quality79 trustExperimental6mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

gosecurity

by HackmanitDetailsQuick view

Osv Scanner

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

$ npx skills add google/osv-scanner

10.6K stars71 quality90 trustReviewed1mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

gosecurity

by googleDetailsQuick view

Wscan

STRONG · 75TRUST · 77SAFE · REVIEWEDDATA

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

$ npx skills add chushuai/wscan

709 stars54 quality77 trustReviewed with permission notes30d since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Database and SQL · I need my agent to inspect database schemas, write SQL, and explain query results.

CLI + Codex · 4 targets

gocrawler

by chushuaiDetailsQuick view

Z0scan

PROMISING · 67TRUST · 75SAFE · REVIEWEDDATA

A lightweight active and passive scanner that combines the advantages of local and distributed models, supports dynamic external plugin import, and is dedicated to explo…

$ npx skills add JiuZero/z0scan

364 stars45 quality75 trustReviewed with permission notes6mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Database and SQL · I need my agent to inspect database schemas, write SQL, and explain query results.

CLI + Codex · 4 targets

pythonsecurity

by JiuZeroDetailsQuick view

Terrapin Scanner

NEEDS REVIEW · 50TRUST · 72SAFE · EXPERIMENTALCODING

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number…

$ npx skills add RUB-NDS/Terrapin-Scanner

993 stars40 quality72 trustExperimental2y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

gosecurity

by RUB-NDSDetailsQuick view

DorkScanner

NEEDS REVIEW · 40TRUST · 67SAFE · BLOCKEDRESEARCH

A typical search engine dork scanner scrapes search engines with dorks that you provide in order to find vulnerable URLs.

$ npx skills add madhavmehndiratta/dorkScanner

282 stars36 quality67 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario RAG and knowledge · I need my agent to build a RAG workflow over documents and retrieve reliable context.

CLI + Codex · 4 targets

pythonsecurity

by madhavmehndirattaDetailsQuick view

OSS DocumentScanner

VERIFIEDEXCELLENT · 99TRUST · 86SAFE · REVIEWEDRESEARCH

Document scanning app

$ npx skills add ossappscollective/OSS-DocumentScanner

2.3K stars65 quality86 trustReviewed24d since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Document processing · I need my agent to read PDFs, extract tables, and turn documents into structured data.

CLI + Codex · 4 targets

c++pdf

by ossappscollectiveDetailsQuick view

Scanner And Patcher

PROMISING · 64TRUST · 75SAFE · REVIEWEDCODING

A Web Vulnerability Scanner and Patcher

$ npx skills add Malwareman007/Scanner-and-Patcher

172 stars42 quality75 trustReviewed with permission notes5mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

htmlsecurity

by Malwareman007DetailsQuick view

Yandi Scanner

NEEDS REVIEW · 36TRUST · 64SAFE · BLOCKEDDATA

Network Security Vulnerability Scanner

$ npx skills add RASSec/yandi-scanner

116 stars33 quality64 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Security and compliance · I need my agent to scan a project for security risks and summarize what needs attention.

CLI + Codex · 4 targets

pythonsecurity

by RASSecDetailsQuick view

Nuclei

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle tren…

$ npx skills add projectdiscovery/nuclei

29.2K stars74 quality90 trustReviewed1mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

gosecurity

by projectdiscoveryDetailsQuick view

A2a Scanner

PROMISING · 67TRUST · 75SAFE · REVIEWEDCODING

Scan A2A agents for potential threats and security issues

$ npx skills add cisco-ai-defense/a2a-scanner

157 stars46 quality75 trustReviewed with permission notes3mo since pushNeeds review

QualityUseful candidate, but compare it with alternatives before adopting.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario GitHub automation · I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.

CLI + Codex · 4 targets

pythonsecurity

by cisco-ai-defenseDetailsQuick view

PentestER Fully Automatic Scanner

NEEDS REVIEW · 41TRUST · 65SAFE · BLOCKEDCODING

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

$ npx skills add RASSec/pentestER-Fully-automatic-scanner

375 stars37 quality65 trustBlocked for auto-install3y since pushRisky

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: License is unclear

Safety gateThis skill should not be selected by an agent without explicit human security review.

Scenario Testing and QA · I need my agent to test a web app, reproduce bugs, and verify fixes.

CLI + Codex · 4 targets

pythonsecurity

by RASSecDetailsQuick view

Laravel Seo Scanner

STRONG · 72TRUST · 76SAFE · REVIEWEDMARKETING

Scan your Laravel application routes for SEO improvements suggestions.

$ npx skills add backstagephp/laravel-seo-scanner

268 stars51 quality76 trustReviewed with permission notes1mo since pushNeeds review

QualitySolid option that is likely worth shortlisting for production workflows.

TrustGood trust signals with a few areas worth checking before rollout.Review: Quality score needs review

Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Marketing and growth · I need my agent to research keywords, improve SEO, analyze growth channels, and prepare marketing workflows.

CLI + Codex · 4 targets

phpseo

by backstagephpDetailsQuick view

Magento Malware Scanner

NEEDS REVIEW · 49TRUST · 69SAFE · EXPERIMENTALMARKETING

Scanner, signatures and the largest collection of Magento malware

$ npx skills add gwillem/magento-malware-scanner

688 stars39 quality69 trustExperimentalBrowser agents3y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustPotentially useful, but at least one trust signal needs human inspection.Review: Repository looks stale

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Web scraping · I need my agent to scrape websites and extract structured data from pages.

Browser agents + CLI · 4 targets

htmlcommerce

by gwillemDetailsQuick view

CVEScannerV2

NEEDS REVIEW · 44TRUST · 72SAFE · EXPERIMENTALRESEARCH

Nmap script that scans for probable vulnerabilities based on services discovered in open ports.

$ npx skills add scmanjarrez/CVEScannerV2

226 stars35 quality72 trustExperimental1y since pushNeeds review

QualityInspect the repository carefully before adding it to an agent workflow.Check: Repository looks stale

TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale

Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario RAG and knowledge · I need my agent to build a RAG workflow over documents and retrieve reliable context.

CLI + Codex · 4 targets

luasecurity

by scmanjarrezDetailsQuick view

Scanners Box

VERIFIEDEXCELLENT · 97TRUST · 86SAFE · REVIEWEDCODING

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

$ npx skills add We5ter/Scanners-Box

8.9K stars69 quality86 trustReviewed1mo since pushSafe to try

QualityHigh-confidence pick with strong adoption and healthy maintenance signals.

TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: License is unclear

Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents · I need a coding agent that can understand a repository, edit code, and review pull requests.

CLI + Codex · 4 targets

static-analysis

by We5terDetailsQuick view

Page 1

Showing the strongest 16 results to keep the registry fast for humans and agents. Refine by use case, platform, stars, or search query for a narrower shortlist.

Try the agent resolve API

AI Agent Skills Directory

Real skills, grouped by the work your agent needs to finish.

Build the registry by domain, not just by count.

Coding and developer agents

Research and knowledge work

Presentation and deck workflows

Finance and quant workflows

Marketing and growth automation

Design and creative production

Data, BI, and analytics

Legal, policy, and compliance

Education and tutoring

Football and World Cup analytics

Start from the task, not a keyword list.

Choose by scenario, quality, and trust signals.

Web Cache Vulnerability Scanner

Osv Scanner

Wscan

Z0scan

Terrapin Scanner

DorkScanner

OSS DocumentScanner

Scanner And Patcher

Yandi Scanner

Nuclei

A2a Scanner

PentestER Fully Automatic Scanner

Laravel Seo Scanner

Magento Malware Scanner

CVEScannerV2

Scanners Box