Security First
Skills with the best security audit scores
Showing 11,581–11,640 of 13,198 skills · Page 194 of 220
fcakyon / research-publishing
406Use when the user wants to prepare code for open-source release, create reproducible research artifacts, or structure a repository for publication. Triggers on phrases like "publish code", "open source release", "reproducibility", "research repository", "code release", or "prepare for publication".
tobihagemann / create-project-skills
405Scans an existing codebase and generates project-specific skills that capture inferred conventions such as naming, file organization, framework usage, data access, error handling, and testing style.
tobihagemann / create-skill
405Create a new skill or update an existing skill that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations
tobihagemann / discuss-change
405Align on the shape of a change through an interview, then implement it. Escalates open product decisions and settles the implementation shape in conversation
tobihagemann / github-voice
405Shared writing style rules for GitHub-facing output (PR comments, PR descriptions, PR titles, issues, design proposals). Differentiates insider vs outsider voice based on author association. Not typically invoked directly — loaded by other skills before composing GitHub text.
tobihagemann / implement
405Load code-style and task-specific skills, make the change described by the current context, then run post-implementation QA.
tobihagemann / reply-to-pr-conversation
405Draft, confirm, and post a single conversational reply to GitHub PR conversation comments (issue comments). The reply addresses all tracked items in one natural-prose message
tobihagemann / split-and-ship
405Execute an approved split plan, shipping each change group separately as its own branch and PR or as sequential commits on the current branch
tobihagemann / test-run-rules
405Shared rules for test runs that drive the running app or run a test target: isolation from concurrent runs, stubs for infrastructure that cannot be stood up, provisioning privileged state, approval before writes to shared external systems, and cleanup of only what the run created.
jamditis / source-verification
402Verify sources, claims, images, video, documents, interviews, and synthetic media with SIFT and a durable evidence trail. Use before relying on uncertain material.
currents-dev / playwright-best-practices
383Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authentication or OAuth, testing accessibility (axe-core), file uploads/downloads, date/time mocking, WebSockets, geolocation,…
hypnguyen1209 / engagement-memory
377Use when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement pattern memory ranked by impact
hypnguyen1209 / threat-model-discipline
377Use when starting an engagement, before exploitation, or whenever the attack surface changes — build/validate the threat model and detect drift (new unreviewed surface) before advancing
hypnguyen1209 / using-offensive-claude
377Use when starting any offensive-security engagement or task — establishes how to find and invoke the right skill before any action (including clarifying questions, recon, exploitation, or reporting)
staskh / ib-option-chain
369Get option chain data from Interactive Brokers for equities, ETFs, and futures (FOP), including calls and puts with strikes, bids, asks, volume, implied volatility, and model Greeks
kazukinagata / incorporation
360法人成り（個人事業主から法人への移行）に関する相談。税額比較シミュレーション、 法人形態の選択、設立手続き、役員報酬戦略、社会保険の比較を支援する。 Trigger: "法人成り", "会社設立", "法人化", "株式会社にしたい", "合同会社", "法人税と所得税の比較", "役員報酬", "法人成りのタイミング", "マイクロ法人", "1人法人"
kazukinagata / tax-advisor
360This skill should be used when the user asks tax-related questions, wants advice on deductions or tax savings, or needs expert guidance equivalent to a tax accountant (税理士) or life planner.
athola / dorodango
338Polishes working code through successive quality passes in fresh subagents. Use after tests pass when code needs multi-dimension refinement before release.
datadrivenconstruction / embodied-carbon-esg
333Estimate embodied carbon and produce ESG/climate reporting for construction: LCA per work item, material-based carbon factors, EU taxonomy and CSRD alignment
datadrivenconstruction / material-passports-circular
333Material passports and circular construction: generate per-element material inventories from BOQ/BIM, mark reuse potential and recycled content, and prepare deconstruction data. Use for circular-economy and EU Taxonomy-aligned projects.
datadrivenconstruction / oce-load-cost-bases
333Load national and market cost bases into OpenConstructionERP: the 8 national bases (Turkey Birim Fiyat, China Dinge, Brazil SINAPI, Spain BCCA, Italy Prezzario Toscana, Greece GGDE, Vietnam Dinh Muc, Indonesia AHSP), the 30 global markets, and 48 PPP market catalogs per base
zereight / gitlab-mcp
2.1kMCP server for GitLab: 277 tools for projects, MRs, issues, pipelines, wikis and more via the GitLab REST/GraphQL API
Piebald-AI / claude-code-system-prompts
13.0kAll parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
htdt / godogen
7.2kAutonomous game development with Claude Code and Codex
rullerzhou-afk / clawd-on-desk
6.5kA pixel desktop pet that watches Claude Code, Codex, Cursor & other AI coding agents — so you don't have to.
soxoj / awesome-osint-mcp-servers
525🔌 A curated list of OSINT MCP servers. Pull requests are welcomed!
peterfei / ai-agent-team
446AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！
greekr4 / playwright-bot-bypass
205Claude Code skill to bypass bot detection (Google CAPTCHA, etc.)
arkylab / aspm
83A Git-based package manager designed for AI-assisted development, similar to npm but supporting skills, agents, commands, hooks, and any AI resource types.
faugustdev / git-context-controller
64Structured context management framework for LLM agents. Implements Git-like operations (COMMIT, BRANCH, MERGE) to manage long-horizon agent memory.
Terryc21 / unforget
39A Claude Code skill — single source of truth for deferred work. Don't lose track of what you've punted.
norahe0304-art / 30x-image
31Generates on-brand marketing imagery (ad creatives, logos, slides, carousels) from a brand DESIGN.md via gpt-image-2 — a Codex / Claude Code skill.
nedcodes-ok / cursorrules-collection
38110+ tested .mdc and .cursorrules files for Cursor AI. Validate with cursor-doctor, generate with rule-gen, convert with rule-porter.
yerdaulet-damir / vibe-coding-rules
3354 production architecture rules for vibe coding with Claude Code & Cursor. Drop-in CLAUDE.md, .cursor/rules, and .claude/skills for FastAPI, Next.js 15, and Go 1.22+ — turn AI-assisted coding from prototype hack to production.
pekral / cursor-rules
11PHP and Laravel Cursor rules — coding standards, testing, and conventions for the Cursor editor. Install via Composer.
drawdb-io / drawdb
40.1kFree, simple, and intuitive online database diagram editor and SQL generator.
holtwood / awesome-cursorrules-zh
239Cursor AI 编程规则精选集 | 132+ 规则，覆盖前端/后端/AI/DevOps 等 32 个领域
bocato / swift-testing-agent-skill
81Agent Skill providing expert Swift Testing guidance for AI coding tools: covering test doubles, fixtures, async patterns, XCTest migration, and testing best practices.
SaadRahman01 / claude-moodle-dev
41Moodle development toolkit for AI coding assistants. Skills for XMLDB, Hooks API, PHPUnit, Behat, AMD, privacy/GDPR, security, accessibility. Native Claude Code plugin + adapters.
voktty / voktty
34Lightweight AI-native terminal workspace with native MCP client and multi-tab workflows for developers and sysadmins.
JeremyDev87 / codingbuddy
31Codingbuddy orchestrates 29 specialized AI agents to deliver code quality comparable to a team of human experts through a PLAN → ACT → EVAL workflow.
alicewe1 / alice-assistant
28Alice 助手 · Agent 客户端管理助手：提示词与技能库自由搭配，客户端无限制 · Portable client manager for AI coding agents
XeldarAlz / everything-claude-unity
25The ultimate Claude Code toolkit for Unity — 20 AI agents, 22 slash commands, 41 skills, and safety hooks for AI-assisted Unity game development. Drop-in, production-ready.
NPC-Worldwide / npcpy
1.5kThe python library for research and development in NLP, multimodal LLMs, Agents, ML, Knowledge Graphs, and more.
joey-zhou / xiaozhi-esp32-server-java
1.4k小智ESP32的Java企业级管理平台，提供设备监控、音色定制、角色切换和对话记录管理的前后端及服务端一体化解决方案
jmrplens / gitlab-mcp-server
45Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 850+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.
etairl / parallel-browser-mcp
43An MCP server for parallel browser automation by AI agents with multiple cloud providers
Ubani-Studio / clo3d-mcp
43MCP server for CLO3D. Control 3D garment design from Claude, Cursor, or any MCP client.
Robotti-io / copilot-security-instructions
43✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
ferdinandobons / CodeDebrief
42Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.
dtsola / onboard
1.1kThis command acts as an expert technical mentor to help you rapidly understand a new codebase, generating a comprehensive "Survival Guide" for the project.
Microck / Analyzing AgentScope Library
399This skill provides a way to retrieve information from the AgentScope library for analysis and decision-making.
sickn33 / agentphone
47.9kBuild AI phone agents with AgentPhone API
sickn33 / api-testing-observability-api-mock
47.9kYou are an API mocking expert specializing in realistic mock services for development, testing, and demos. Design mocks that simulate real API behavior and enable parallel development.
mukul975 / analyzing-api-gateway-access-logs
34.7k'Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect
mukul975 / analyzing-azure-activity-logs-for-threats
34.7k'Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query
mukul975 / analyzing-network-flow-data-with-netflow
34.7kParse NetFlow v9 and IPFIX records to detect volumetric anomalies, port
mukul975 / analyzing-threat-landscape-with-misp
34.7kQuery a MISP (Malware Information Sharing Platform) instance via PyMISP
mksglu / ctx-index
31.0kIndex a local file or directory into context-mode's persistent FTS5 knowledge base so future ctx_search calls can retrieve focused snippets without rereading raw files. Trigger: /context-mode:ctx-index
citrolabs / ego-lite-simplify
16.5kFind and implement evidence-backed simplifications in the ego-lite repository