75 skills found ยท Page 1 of 3
openclaw / apple-notesCreate, view, edit, delete, search, move, or export Apple Notes via the memo CLI on macOS.
DietrichGebert / ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact".
anthropics / Writing Hookify RulesThis skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.
anthropics / Agent DevelopmentThis skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, orโฆ
anthropics / Command DevelopmentThis skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command frontmatter", "organize commands", "create command with file references", "interactive command", "use AskUserQuestion in command", or needs guโฆ
anthropics / Hook DevelopmentThis skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse,โฆ
anthropics / MCP IntegrationThis skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect external service", mentions "${CLAUDE_PLUGIN_ROOT} with MCP", or discusses MCP server types (SSE, stdio, HTTP, WebSocket).
anthropics / Plugin SettingsThis skill should be used when the user asks about "plugin settings", "store plugin configuration", "user-configurable plugin", ".local.md files", "plugin state files", "read YAML frontmatter", "per-project plugin settings", or wants to make plugin behavior configurable.
nexu-io / html-ppt-obsidian-claude-gradientOpenDesign's enterprise AI-adoption brief: local-first agents at work, the risk controls, the ROI, and the rollout plan. Built as a decision-grade AI literacy deck for leadership, IT, security.
sickn33 / ai-coding-agent-guardrailsSecure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission
sickn33 / ai-engineering-toolkitOverview of six AI engineering workflows: prompt evaluation (8-dimension scoring), context budget planning, RAG pipeline design, agent security audit (65-point checklist), eval harness building, and product sense coaching.
sickn33 / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines.
sickn33 / apk-redteam-pipelineEnd-to-end Android APK red-team pipeline
anthropics / claude-securityClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose)
AgriciDaniel / seo-technicalAudit technical SEO across crawlability, indexability, security, URLs, mobile, Core Web Vitals, rendering, structured data, and IndexNow. Exclude content strategy and backlinks.
trailofbits / testing-handbook-generatorGenerates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files with the structure each skill type requires
trailofbits / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
davepoon / agentwhy-session-auditChecks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change, by running the open source agentwhy CLI over the session records Claude Code already keeps on disk
davepoon / aurakitSonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction. Install: npx @smorky85/aurakit
ljagiello / ctf-ai-mlProvides AI and machine learning techniques for CTF challenges
jeremylongshore / anth-security-basics'Apply Anthropic Claude API security best practices for key management,
jeremylongshore / abridge-security-basicsReview Abridge deployment controls across data handling, identity, devices, EHR workflows, support, auditability, and incident response
jeremylongshore / apify-security-basicsSecure Apify API tokens, configure proxy access, and protect Actor data. Use when hardening API key management, setting up environment-specific tokens, rotating a leaked token, or auditing Apify security configuration.
jeremylongshore / alchemy-security-basicsAnalyze and secure Alchemy credentials, browser access, wallet authority, webhook verification, and untrusted chain data
jeremylongshore / analyzing-dependenciesAnalyze dependencies for known security vulnerabilities and outdated
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis โ no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
daymade / marketplace-health-checkRuns a 6-dimension evidence-based health audit of this skills marketplace repo โ code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity โ via a parallel workflow, then verifies findings by priority.
MyuriKanao / src-hunter-skillๅฎๆ SRC / ไผๆต / Bug bounty ๆผๆดๆๆ Claude Code skill โ 19 ไธชๆปๅป็ฑป playbookใ305 ไธช็ปๆๅ payloadใ263 ไธช WAF/EDR ็ป่ฟใ2887 ไปฝ HackerOne ็ๅฎๆกไพใ88,636 WooYun ๆกไพ็ป่ฎก