AI Agent Skill Repository

AI Agent Skills Directory

Browse reusable skills for Codex, Claude Code, Cursor, finance, research, web scraping, PPT, football analytics, data, marketing, design, and more.

Browse by scenario

Real skills, grouped by the work your agent needs to finish.

Each directory entry links to real skill pages with GitHub adoption, trust score, install handoff, risk notes, and agent-readable metadata. Use these as starting points when you want a shortlist before asking an agent to install anything.

Design to deployment

Frontend and UI skills

Design direction, Figma implementation, UI review, React performance, browser QA, and safe preview deployments.

  • Frontend Design166K stars

    Guidance for distinctive, intentional UI design, typography, visual direction, and non-template-like product…

    Trust 88Quality 100design-creative
  • Dokploy36K stars

    Open Source Alternative to Vercel, Netlify and Heroku.

    Trust 85Quality 100devops
  • React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi…

    Trust 75Quality 55security

Codex, Claude Code, Cursor

Coding agent skills

Code review, repo inspection, testing, planning, shipping, and engineering workflows for coding agents.

  • Code Review169K stars

    Review a diff separately for code standards and spec compliance.

    Trust 91Quality 100coding-agents
  • Agent Skills81K stars

    Production-grade engineering skills for AI coding agents.

    Trust 86Quality 100agent-skills
  • Implement176K stars

    Execute an approved engineering ticket with tests, review, and a branch commit.

    Trust 88Quality 100coding-agents

Documents and knowledge

Research and RAG skills

Research, recent-events briefings, PDF parsing, markdown conversion, RAG ingestion, and knowledge workflows.

  • Document scanning app

    Trust 84Quality 96document-processing
  • SEOMacroscope258 stars

    SEO Macroscope is a website scanning tool, to check your website for broken links; including some technical S…

    Trust 68Quality 44web-automation
  • Skills6.3K stars

    Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

    Trust 90Quality 100agent-skills

Markets and quant

Finance and trading skills

Stock analysis, market research, quant backtesting, financial data, and investment research skills.

  • Vetix62 stars

    Vetix — Automated scanning, identification, and assessment of SKILL security risks.

    Trust 77Quality 68utility

Crawlers and extraction

Web scraping skills

Crawling, scraping, extraction, browser automation, structured data capture, and website-to-markdown workflows.

  • Crawlergo3.0K stars

    A powerful browser crawler for web vulnerability scanners

    Trust 78Quality 69web-automation
  • Crawl4AI73K stars

    Web crawling built for AI

    Trust 90Quality 100web-automation
  • Jie612 stars

    Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web appl…

    Trust 73Quality 54web-automation

Slides and decks

PPT and presentation skills

Presentation generation, editable PPTX, slide decks, speaker notes, and visual storytelling workflows.

  • Reverse-lookup glossary that turns a vague description of a web animation or motion effect into its exact ter…

    Trust 91Quality 100design-creative

Images, video, UI

Design and creative skills

Image, video, creative production, UI design, multimodal generation, and visual workflow skills.

  • Vuls12K stars

    Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Ne…

    Trust 88Quality 100security
  • Tensorflow196K stars

    An Open Source Machine Learning Framework for Everyone

    Trust 87Quality 100ml-automation
  • XAttacker1.7K stars

    X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

    Trust 75Quality 62security

Analysis and pipelines

Data and analytics skills

Data analysis, analytics, ETL, notebooks, databases, tables, charts, and reporting workflows.

  • Scany1.5K stars

    Library for scanning data from a database into Go structs and more

    Trust 78Quality 66data-analysis
  • Augraphy547 stars

    Augmentation pipeline for rendering synthetic paper printing, faxing, scanning and copy machine processes

    Trust 75Quality 52data-analysis
  • HonestNFT Shenanigan Scanning Tools

    Trust 71Quality 43data-analysis

Supply tracks

Build the registry by domain, not just by count.

Coding

Coding and developer agents

235

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

225 quality213 maintained

Research

Research and knowledge work

71

Deep research, source comparison, literature review, RAG, knowledge search, and reports.

69 quality68 maintained

Presentation

Presentation and deck workflows

1

PPTX generation, HTML slides, pitch decks, speaker notes, and presentation workflow skills.

1 quality1 maintained

Finance

Finance and quant workflows

14

Market data, SEC filings, portfolio analysis, quant research, backtesting, and risk workflows.

14 quality14 maintained

Marketing

Marketing and growth automation

11

SEO, content operations, lead generation, CRM, email automation, analytics, and growth workflows.

11 quality10 maintained

Design

Design and creative production

50

Design assets, images, video, audio, multimodal media, presentation, and creative production skills.

50 quality49 maintained

Data

Data, BI, and analytics

38

CSV, SQL, notebooks, dashboards, data pipelines, BI, ETL, and spreadsheet analysis.

34 quality33 maintained

Legal

Legal, policy, and compliance

17

Contract analysis, privacy, policy review, compliance checks, governance, and document risk review.

16 quality14 maintained

Education

Education and tutoring

5

Tutoring, course generation, quizzes, learning analytics, classrooms, and teaching workflows.

5 quality5 maintained

World Cup

Football and World Cup analytics

2

Football data, World Cup dashboards, xG, match prediction, scouting, and sports analytics.

2 quality2 maintained

High-intent entry points

Start from the task, not a keyword list.

These shortcuts use the same trust, supply, and relevance signals as the registry API, so humans and agents land on a useful shortlist faster.

Agent-readable index

Decision filters

Choose by scenario, quality, and trust signals.

Showing 1-16 of 432 ranked candidates matching "vulnerability-scanning"

Best blend of quality, stars, freshness, and agent usage

1

Crlfuzz

VERIFIEDEXCELLENT · 94TRUST · 85SAFE · REVIEWEDCODING

A fast tool to scan CRLF vulnerability written in Go

$ npx skills add dwisiswant0/crlfuzz
1.5K stars64 quality85 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation

CLI + Codex · 4 targets

gosecurity
by dwisiswant0DetailsQuick view
2

Web Cache Vulnerability Scanner

VERIFIEDSTRONG · 82TRUST · 79SAFE · EXPERIMENTALCODING

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

$ npx skills add Hackmanit/Web-Cache-Vulnerability-Scanner
1.2K stars56 quality79 trustExperimental7mo since pushNeeds review
QualitySolid option that is likely worth shortlisting for production workflows.
TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin
Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Testing and QA

CLI + Codex · 4 targets

gosecurity
by HackmanitDetailsQuick view
3

Kubescape

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfigurati…

$ npx skills add kubescape/kubescape
11.5K stars72 quality90 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation

CLI + Codex · 4 targets

gokubernetes
by kubescapeDetailsQuick view
4

Faraday

VERIFIEDEXCELLENT · 100TRUST · 87SAFE · REVIEWEDCODING

Open Source Vulnerability Management Platform

$ npx skills add infobyte/faraday
6.5K stars68 quality87 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Browser automation

CLI + Codex · 4 targets

pythondevops
by infobyteDetailsQuick view
5

Nuclei

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle tren…

$ npx skills add projectdiscovery/nuclei
29.2K stars74 quality90 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Coding agents

CLI + Codex · 4 targets

gosecurity
by projectdiscoveryDetailsQuick view
6

Infisical

VERIFIEDEXCELLENT · 100TRUST · 80SAFE · EXPERIMENTALRESEARCH

Infisical is the open-source platform for secrets, certificates, and privileged access management.

$ npx skills add Infisical/infisical
27.4K stars74 quality80 trustExperimental2mo since pushNeeds review
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear
Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Research agents

CLI + Codex · 4 targets

typescriptsecurity
by InfisicalDetailsQuick view
7

Osv Scanner

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDCODING

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

$ npx skills add google/osv-scanner
10.6K stars71 quality90 trustReviewed1mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario GitHub automation

CLI + Codex · 4 targets

gosecurity
by googleDetailsQuick view
8

Archerysec

VERIFIEDPROMISING · 68TRUST · 80SAFE · REVIEWEDCODING

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

$ npx skills add archerysec/archerysec
2.5K stars50 quality80 trustReviewed with permission notes1y since pushNeeds review
QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale
TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale
Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Testing and QA

CLI + Codex · 4 targets

javascriptdevops
by archerysecDetailsQuick view
9

Crawl4AI

VERIFIEDEXCELLENT · 100TRUST · 90SAFE · REVIEWEDRESEARCH

Web crawling built for AI

$ npx skills add unclecode/crawl4ai
4 agent calls100% success73.1K stars80 quality90 trustReviewedClaude Code + OpenAI Agents20d since pushSafe to try31.0K installs
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Research agents

Claude Code + OpenAI Agents · 4 targets

claudegpt-4langchaincrewaiopenclaw
by unclecodeDetailsQuick view
10

Brakeman

VERIFIEDEXCELLENT · 96TRUST · 84SAFE · REVIEWEDCODING

A static analysis security vulnerability scanner for Ruby on Rails applications

$ npx skills add presidentbeef/brakeman
7.2K stars69 quality84 trustReviewed with permission notes2mo since pushNeeds review
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: License is unclear
Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents

CLI + Codex · 4 targets

rubystatic-analysis
by presidentbeefDetailsQuick view
11

Nettacker

VERIFIEDEXCELLENT · 100TRUST · 88SAFE · REVIEWEDCODING

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

$ npx skills add OWASP/Nettacker
5.3K stars68 quality88 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustStrong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/…Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Testing and QA

CLI + Codex · 4 targets

pythonsecurity
by OWASPDetailsQuick view
12

Apkleaks

VERIFIEDEXCELLENT · 85TRUST · 83SAFE · REVIEWEDCODING

Scanning APK file for URIs, endpoints & secrets.

$ npx skills add dwisiswant0/apkleaks
6.1K stars57 quality83 trustReviewed with permission notes12mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin
Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents

CLI + Codex · 4 targets

pythonstatic-analysis
by dwisiswant0DetailsQuick view
13

OSS DocumentScanner

VERIFIEDEXCELLENT · 96TRUST · 84SAFE · REVIEWEDRESEARCH

Document scanning app

$ npx skills add ossappscollective/OSS-DocumentScanner
2.3K stars65 quality84 trustReviewed1mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Document processing

CLI + Codex · 4 targets

c++pdf
by ossappscollectiveDetailsQuick view
14

Artemis

VERIFIEDEXCELLENT · 93TRUST · 85SAFE · REVIEWEDCODING

A modular vulnerability scanner with automatic report generation capabilities.

$ npx skills add CERT-Polska/Artemis
1.2K stars63 quality85 trustReviewed2mo since pushSafe to try
QualityHigh-confidence pick with strong adoption and healthy maintenance signals.
TrustGood trust signals with a few areas worth checking before rollout.Review: Documentation summary is thin
Safety gateGood audit and safety signals with no high-risk permission hints in public metadata.

Scenario Testing and QA

CLI + Codex · 4 targets

pythonsecurity
by CERT-PolskaDetailsQuick view
15

Fuxploider

VERIFIEDSTRONG · 70TRUST · 79SAFE · EXPERIMENTALCODING

File upload vulnerability scanner and exploitation tool.

$ npx skills add almandin/fuxploider
3.3K stars51 quality79 trustExperimental1y since pushNeeds review
QualitySolid option that is likely worth shortlisting for production workflows.Check: Repository looks stale
TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale
Safety gateSparse or mixed signals. Useful for discovery, but not for autonomous installation.

Scenario Coding agents

CLI + Codex · 4 targets

pythonsecurity
by almandinDetailsQuick view
16

Vulnhuntr

VERIFIEDPROMISING · 69TRUST · 80SAFE · REVIEWEDCODING

Zero shot vulnerability discovery using LLMs

$ npx skills add protectai/vulnhuntr
2.7K stars51 quality80 trustReviewed with permission notes1y since pushNeeds review
QualityUseful candidate, but compare it with alternatives before adopting.Check: Repository looks stale
TrustGood trust signals with a few areas worth checking before rollout.Review: Repository looks stale
Safety gateUsable candidate, but the agent should surface permission and audit notes before installation.

Scenario Coding agents

CLI + Codex · 4 targets

pythonstatic-analysis
by protectaiDetailsQuick view

Page 1

Showing the strongest 16 results to keep the registry fast for humans and agents. Refine by use case, platform, stars, or search query for a narrower shortlist.

Try the agent resolve API