Security First
Skills with the best security audit scores
Showing 12,541–12,600 of 13,194 skills · Page 210 of 220
mikubaka88 / ccf-project-scaffolder
2.8kInitialize CCF project folders, LaTeX templates, artifact directories, and ccfa.yaml. Use for 项目初始化, 目录搭建, template setup, and reproducible workspace scaffolding. Preserve existing files. Workflow planning belongs to ccf-pipeline-orchestrator; research content belongs to its specialist owner.
Owl-Listener / interview-script
2.7kWrite a structured interview guide — warm-up, core exploration, and wrap-up. Use before running interviews. For analysing what comes back, use `summarize-interview`.
Owl-Listener / parallel-concepts
2.7kBuild several genuinely different solutions to the same problem at once, spread across what the user does rather than how it looks
Owl-Listener / aesthetic-usability
2.7kApply the Aesthetic-Usability Effect — polished, consistent interfaces are perceived as more usable and forgive minor friction
ScrapeCreators / content-repurposing
2.7kUse when the user wants to turn public social videos, transcripts, posts, or creator research into reusable content assets such as LinkedIn posts, X threads, short-form scripts, newsletters, blog outlines, carousels, or content calendars.
ScrapeCreators / creator-profile-teardown
2.7kUse when the user wants to analyze a creator, influencer, founder, or brand social account and understand positioning, content pillars, outlier posts, hooks, format choices, audience reaction, and what can be copied or tested.
badlogic / gdcli
2.6kGoogle Drive CLI for listing, searching, uploading, downloading, and sharing files and folders.
softaworks / lesson-learned
2.5kAnalyze recent code changes via git history and extract software engineering lessons
WordPress / wp-playground
2.2kUse as the WordPress Playground routing wrapper for ambiguous Playground work, local CLI runs with @wp-playground/cli, playground.wordpress.net share links, browser previews, WebMCP site tools, snapshots, mounts, version switching, and Xdebug.
majidmanzarpour / threejs-aaa-graphics-builder
2.1kUpgrade Three.js games from prototype visuals to premium browser graphics: art-direction critique, procedural model building, material and texture libraries, world prop kits, shaders, VFX, lighting and render pipeline, LOD and instancing, render budgets, and a 10-category visual scorecard
0xsline / asset-import
2.0kUse when acquiring or importing media into a OpenChatCut project asset library for video editing or creation, including local/attached videos, user-provided paths, public media URLs, web video/audio/image assets, upload fallback decisions, and deciding between import_media, download_media, or manual…
0xsline / batch-montage-variants
2.0kTurn one pool of existing project media into a batch of distinct, publishable montage cuts instead of a single hero edit. Use for batch montage, one-source-many-outputs, 一源多出, 批量混剪, 批量出片, 矩阵号, 多账号分发, variant batches, deduped cuts, 去重变体, 防搬运, or when the user asks for N different versions of the same…
0xsline / beat-sync-montage
2.0kPlan and build a finished beat-synced montage where cut placement serves the content, not just the metronome. Use for 卡点混剪, 卡点剪辑, 踩点视频, beat-sync montage, rhythm edit, 节奏剪辑, 音乐驱动剪辑, or when the user wants cuts that land on the beat.
0xsline / ecommerce-product-montage
2.0kAssemble product footage, UGC, and b-roll into a conversion-oriented montage with a hook → pain → demo → proof → CTA rhythm. Use for 带货混剪, 产品混剪, 商品短视频, 种草视频, ecommerce montage, product reel, UGC cutdown, or when the user wants selling footage cut into a short that converts.
0xsline / explainer-video
2.0kCreate finished explainer videos from a topic, script, outline, voiceover, product logic, data, technical concept, course material, or reference assets
0xsline / music-intelligence
2.0kRun or inspect local music analysis and plan or apply beat-, downbeat-, or section-synced video cuts or photo placements. Use for BGM beat edits, rhythm cuts, 卡点剪辑, musical structure, BPM, mood, genre, or instrument questions.
mcollina / fastify-best-practices
1.9kGuides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript
aipoch / bianque
1.9kEvidence-based medical knowledge and research mentor grounded in the Bian Que tradition. Covers clinical reasoning, diagnostic thinking (望闻问切), pharmacology, pathology, differential diagnosis, medical literature appraisal, and the philosophy of early intervention.
aipoch / clinical-reports
1.9kWrite comprehensive clinical reports including case reports (CARE guidelines), diagnostic reports (radiology/pathology/lab), clinical trial reports (ICH-E3, SAE, CSR), and patient documentation (SOAP, H&P, discharge summaries). Full support with templates, regulatory complianc...
stripe / stripe-best-practices
1.8kGuides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (S…
XiaoMaColtAI / 论文手
1.8k根据题目、建模分析和真实代码结果生成完整 Word 数学建模论文,用户显式要求时同时生成 LaTeX 论文。
a5c-ai / babysit
1.8kOrchestrate via @babysitter. Use this skill when asked to babysit a run, orchestrate a process or whenever it is called explicitly. (babysit, babysitter, orchestrate, orchestrate a run, workflow, etc.)
a5c-ai / integrate-harness
1.8kUse when adding a new agent harness (CLI-based coding agent) adapter to adapters. Covers capability audit, adapter scaffold, session parsing, auth detection, hooks/plugins wiring, tests, and docs.
a5c-ai / persistent-memory
1.8kObservation capture and retrieval across sessions. Stores decisions, discoveries, and bugfix patterns. Searchable via tags and relevance scoring.
Besty0728 / unity-performance
1.8kAdvise on Unity performance red flags
Besty0728 / unity-prefab
1.8kManage Prefabs and variants
alchaincyf / huashu-skill-updater
1.6k检查并更新花叔系 skills。当用户说「检查skill更新」「更新花叔的skill」「skill是不是最新的」时触发;当会话中用到任何花叔系 skill(huashu-* / nuwa / darwin / freud / seedance / tramstop / dukou 等),且其安装目录里的 .huashu-skill-meta.json 的 last_checked 距今超过 30 天(或 git 安装的超过 30 天未 fetch)时,也应主动触发一次检查。
https-deeplearning-ai / craftedwell-brand
1.4kCraftedWell brand guidelines for presentations and documents. Use this skill whenever creating or styling documents (docx, pdf) or presentations (pptx) for CraftedWell. Apply warm, artisanal aesthetic with chocolate/caramel color palette, Georgia headings, and Arial body text.
utkusen / sast-analysis
1.3kPerform codebase analysis and architecture mapping as the first phase of a security assessment. Explores the tech stack, frameworks, entry points, data flows, and trust boundaries. Outputs sast/architecture.md. Run this before any vulnerability detection skill
jsmastery-pro / check
1.3kConfirm a change before merge. `/check verify` drives the real app to prove behavior against the spec (every acceptance criterion met, every surface built). `/check review` runs a senior code review on a fresh model, one that did not write the code. Verify after /develop, review before a PR.
onvoyage-ai / research-brand
1.3kResearches a company from its URL and produces a Brand DNA file covering positioning, audience, competitors, voice, and messaging
AI-Builder-Club / visual-flow-gif
1.3kCreate animated flow diagrams from articles, workflow notes, architecture sketches, or process descriptions using a JSON specification and a local Python/Pillow renderer
huangkiki / github-trending
1.3kDiscover trending GitHub repositories and research-related project updates. English triggers: "weekly GitHub trending", "daily GitHub trending", "monthly GitHub trending".
zsyggg / paper-comic
1.2k论文方法图解——用视觉图解彻底讲清楚一篇论文到底做了什么、怎么做的。 自动分析论文核心方法,先推荐封面/概述图/机制细节图的生成方案,必须由用户确认范围、张数、语言、风格后再生成。 支持温暖笔记风和论文框架图风。
huytieu / harvest
1.2kCapture durable session learnings, stage for human promotion to 05-knowledge/lizard, and propose skill/CLAUDE.md patches. Triggered by /harvest, SessionEnd hook staging, or nightly enhance. Never writes durable knowledge without your approval.
BankrBot / aeon-monitor-polymarket
1.2kWatchlist-driven Polymarket monitor. Surfaces only markets with 24h price moves above threshold, volume spikes, fresh comments from watched accounts, or resolution-date proximity. Position context for tracked entries. Bankr-ready Submit payload attached when action is recommended.
BankrBot / based-mining
1.2kBuy Bitcoin hashpower and Megapot lottery tickets through the BASED x402 endpoints on Base
BankrBot / staq
1.2kAutomatically save a slice of every buy, sell or send into your own STAQ reserve, where it earns yield on Morpho
MoizIbnYousaf / audit-library-health
1.1kUse when checking the overall health of a skills library. Run doctor, validate, check for stale skills, and verify generated docs are in sync.
MoizIbnYousaf / browse-and-evaluate
1.1kUse when exploring the ai-agent-skills catalog to find, compare, and evaluate skills before installing. Always use --fields to limit output size and --dry-run before committing to an install.
MoizIbnYousaf / install-from-remote-library
1.1kUse when installing skills from a shared ai-agent-skills library repo. Inspect with `--list` first, prefer `--collection`, and preview with `--dry-run` before installing.
MoizIbnYousaf / review-a-skill
1.1kUse when evaluating whether a skill belongs in a library. Preview content, check frontmatter, validate structure, and decide whether to keep, curate, or remove.
MoizIbnYousaf / share-a-library
1.1kUse when a managed library is ready to publish to GitHub and hand to teammates as an install command. Run the GitHub publishing steps, then return the exact shareable install command.
MoizIbnYousaf / update-installed-skills
1.1kUse when syncing or updating previously installed skills to their latest version. Always dry-run updates before applying, and check for breaking changes.
TencentCloudBase / doc-freshness-review
1.1kUse when auditing repository documentation for drift, stale statements, broken references, or README mismatches, especially across published docs under `doc/` and key entry surfaces such as `README.md` (English default), `README.zh-CN.md`, `mcp/README.md`, and `mcp/README.zh-CN.md` during periodic m…
TencentCloudBase / review-automation-orchestrator
1.1kUse when running or scheduling periodic repository review cycles that must dispatch the correct reviewer, aggregate findings, and escalate outcomes into reports, issues, or corrective PRs across API contracts, documentation freshness, code quality, and CloudBase skill quality.
TencentCloudBase / auth-tool-cloudbase
1.1kCloudBase auth provider configuration and login-readiness guide. This skill should be used when users need to inspect, enable, disable, or configure auth providers, publishable-key prerequisites, login methods, SMS/email sender setup, or other provider-side readiness before implementing a client or…
TencentCloudBase / auth-wechat-miniprogram
1.1kCloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and automatic.
TencentCloudBase / cloud-api-operations
1.1kOperate Tencent Cloud control-plane resources (monitoring/alarms, CLB, CAM roles, COS, MySQL, SCF) via cloud APIs when no dedicated MCP tool covers the task
TencentCloudBase / cloudbase-cli
1.1kCloudBase CLI (tcb, 云开发CLI, Tencent CloudBase命令行) resource management skill
matlab / matlab-access-datafeed
1.1kGuide for accessing financial and economic data in MATLAB using the Datafeed Toolbox. Covers Bloomberg (market data via bloomberg/blp/bloombergHypermedia), FRED (Federal Reserve economic data via fredrs), Haver Analytics (economic data via haver/haverdirect/haverview), and LSEG Datastream (historica…
matlab / matlab-simulate-bluetooth-network
1.1kSimulate Bluetooth system-level networks using the Bluetooth Toolbox. Use this skill for any Bluetooth topology: BLE ACL (Asynchronous Connection-Less) data connections, CIS (Connected Isochronous Stream) and LE Audio for stereo speakers or hearing aids, BLE GAP (Generic Access Profile) connection e…
hoangsonww / model-mix
1.0kBreak down Claude Code usage by model family (Opus / Sonnet / Haiku) from the Agent Monitor dashboard — each family's share of tokens, share of cost, and the spots where an expensive model is doing cheap work.
hoangsonww / session-report
1.0kGenerate a comprehensive session report with per-model token usage (input, output, cache_read, cache_write including compaction baselines), cost breakdown via the pricing engine, tool invocations, agent hierarchy, compaction events, API errors, turn durations, and thinking block counts
hoangsonww / config-audit
1.0kRun a full audit of the user's Claude Code configuration via the Agent Monitor Config Explorer API: counts per surface (user vs project), duplicate or overlapping skills and subagents, hooks that run shell commands, and which surfaces are read-only vs mutable.
hoangsonww / hook-inventory
1.0kInventory hooks across the user, project, and project-local settings plus the ~/.claude/hooks scripts directory — read through the Agent Monitor Config Explorer API — and flag hooks that POST to the network or run arbitrary commands. Reads /api/cc-config/hooks and /api/cc-config/hook-scripts
hoangsonww / mcp-audit
1.0kAudit the configured MCP servers (user + project scope) via the Agent Monitor Config Explorer API: transport (stdio vs http), command/args and env variable names, headers, and the source file each definition came from. Reads /api/cc-config/mcp
hoangsonww / skill-inventory
1.0kInventory the installed skills and which plugins contribute them, then flag overlap with the user's own skills — read through the Agent Monitor Config Explorer API. Reads /api/cc-config/skills and /api/cc-config/plugins
hoangsonww / cost-alert
1.0kReview the configured cost alert rules and the alerts currently fired on the Agent Monitor dashboard, then explain exactly what tripped and why. Uses /api/alerts (fired feed) and /api/alerts/rules (definitions)
hoangsonww / daily-budget-check
1.0kRun a daily spend check-in against a daily budget on the Agent Monitor dashboard — today's spend vs the daily target, pace through the day, and the projected overage if the current pace holds. Uses /api/pricing/cost and /api/sessions (grouped by started_at = today).