New Checked the same way as MCP servers
Agent Skills, and what they let an agent do
Read straight from each publisher's repository. For every skill: what it allows the agent to do, the scripts it ships, and what fixed checks matched. Nothing is run.
All skills97
Clear filters- competitor-analysisBrowserbase · 7 scriptsCompetitor research and intelligence skill. Takes a user's company (with optional seed competitor URLs), auto-discovers additional competitors via Browserbase Search API, deeply researches each using a 4-lane pattern (marketing surface, external signal, public…OfficialDestructive commandsReaches the network4 findings
- cookie-syncBrowserbase · 1 scriptSync cookies from local Chrome to a Browserbase persistent context so the browse CLI can access authenticated sites. Use when the user wants to browse as themselves, sync cookies, or log into sites via Browserbase.OfficialReaches the networkRuns commands1 finding
- event-prospectingBrowserbase · 4 scriptsEvent prospecting skill. Takes a conference / event speakers URL, extracts the people, filters their companies against the user's ICP, then deep-researches only the speakers at ICP-fit companies. Outputs a person-first HTML report where each card answers "why …OfficialReaches the networkRuns commands4 findings
- functionsBrowserbaseDeploy serverless browser automation as cloud functions using Browserbase. Use when the user wants to deploy browser automation to run on a schedule or cron, create a webhook endpoint for browser tasks, run automation in the cloud instead of locally, or asks a…OfficialReaches the networkRuns commands1 high finding
- safe-browserBrowserbase · 1 scriptBuild local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and lets a runtime Claude Agent SDK agent complete browsing tasks without raw browser, shell, or CDP access. Use when the user w…OfficialReaches the networkRuns commands2 high findings
- webmcp-genBrowserbase · 4 scriptsCreate, compile, and validate site-specific WebMCP init scripts from a target URL and desired tool capability. Use when the user wants to author WebMCP tools for a website, produce a webmcp.init.js artifact, or test WebMCP registration and invocation through S…OfficialRuns commandsEdits files1 finding
- aks-network-captureMicrosoft · 11 scriptsCollects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: \"capture packets on an AKS node\", \"take a pcap\", \"run tcpdump on AKS\", \"prove where packets drop\". Use for explicit packet-capture intent aft…OfficialDestructive commandsReaches the network4 high findings
- azure-app-onboard-prereqMicrosoft · 2 scriptsAssess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app nee…OfficialReaches the networkRuns commands1 high finding
- turnstile-spinCloudflare · 5 scriptsSet up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.OfficialDestructive commandsReaches the network1 high finding
- eas-simulatorExpoRun and control a user's app on a remote iOS/Android simulator hosted on EAS cloud. Read before running any `eas simulator:*` commands - it has the current syntax for this experimental API. Use whenever the user needs a simulator they can't run locally - 'run …OfficialRuns commands1 high finding
- expo-skill-evalExpo · 9 scriptsEvaluate Expo skills in this repo end-to-end - trigger accuracy, generated code quality, and runtime screenshots on iOS simulator and Android emulator via Expo Go (web optional). Use when the user wants to eval an Expo skill, test that a skill produces working…OfficialDestructive commandsReaches the network2 high findings
- wp-performanceWordPress · 1 scriptUse when investigating or improving WordPress performance (backend-only agent): profiling and measurement (WP-CLI profile/doctor, Server-Timing, Query Monitor via REST headers), database/query optimization, autoloaded options, object caching, cron, HTTP API ca…OfficialRuns commands1 finding
- wp-wpcli-and-opsWordPress · 1 scriptUse when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.OfficialRuns commands1 finding
- figma-useFigma · 1 script**MANDATORY prerequisite** — you MUST invoke this skill BEFORE every `use_figma` tool call. NEVER call `use_figma` directly without loading this skill first. Skipping it causes common, hard-to-debug failures. Trigger whenever the user wants to perform a write …OfficialRuns commands1 high finding
- skill-scannerSentry · 1 scriptScan agent skills for security issues. Use when asked to "scan a skill",OfficialRuns commands1 high finding
- pr-createPosit · 1 scriptCreates a pull request from current changes, monitors GitHub CI, and debugs any failures until CI passes. Activate when the user says "create pr", "make a pr", "open pull request", "submit pr", "pr for these changes", or wants to get their current work into a …OfficialRuns commands1 high finding
- tavily-cliTavilySet up, authenticate, update, troubleshoot, or choose between Tavily CLI web commands. Use when the user asks about the Tavily CLI, installing Tavily skills, first-time setup, authentication, keyless limits, CLI updates, or which Tavily command to use. For an …OfficialReaches the networkRuns commands1 high finding
- brainstormingobra (Jesse Vincent) · 4 scriptsYou MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).Destructive commandsReaches the networkRuns commands1 high finding
- systematic-debuggingobra (Jesse Vincent) · 2 scriptsUse when encountering any bug, test failure, or unexpected behavior, before proposing fixesRuns commands1 high finding
- writing-skillsobra (Jesse Vincent) · 1 scriptUse when creating new skills, editing existing skills, or verifying skills work before deploymentRuns commands1 finding
- git-guardrails-claude-codeMatt Pocock · 1 scriptSet up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.Destructive commandsRuns commands1 high finding
- wizardMatt Pocock · 1 scriptGenerate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don'…Reaches the networkRuns commands1 high finding
- brandnextlevelbuilder · 5 scriptsBrand voice, visual identity, messaging frameworks, asset management, brand consistency. Activate for branded content, tone of voice, marketing assets, brand compliance, style guides.Reaches the networkRuns commands1 high finding
- brandnextlevelbuilder · 5 scriptsBrand voice, visual identity, messaging frameworks, asset management, brand consistency. Activate for branded content, tone of voice, marketing assets, brand compliance, style guides.Reaches the networkRuns commands1 high finding
- designnextlevelbuilder · 11 scriptsComprehensive design skill: brand identity, design tokens, UI styling, logo generation (55 styles, Gemini, Atlas Cloud, or MuAPI AI), corporate identity program (50 deliverables, CIP mockups), HTML presentations (Chart.js), banner design (22 styles, social/ads…Reaches the networkRuns commands3 high findings
- designnextlevelbuilder · 11 scriptsComprehensive design skill: brand identity, design tokens, UI styling, logo generation (55 styles, Gemini, Atlas Cloud, or MuAPI AI), corporate identity program (50 deliverables, CIP mockups), HTML presentations (Chart.js), banner design (22 styles, social/ads…Reaches the networkRuns commands3 high findings
- design-systemnextlevelbuilder · 10 scriptsToken architecture, component specifications, and slide generation. Three-layer tokens (primitive→semantic→component), CSS variables, spacing/typography scales, component specs, strategic slide creation. Use for design tokens, systematic design, brand-complian…Reaches the networkRuns commands2 high findings
- design-systemnextlevelbuilder · 10 scriptsToken architecture, component specifications, and slide generation. Three-layer tokens (primitive→semantic→component), CSS variables, spacing/typography scales, component specs, strategic slide creation. Use for design tokens, systematic design, brand-complian…Reaches the networkRuns commands2 high findings
- ui-ux-pro-maxnextlevelbuilder · 18 scriptsUI/UX design intelligence for web, mobile, and desktop. This skill should be used when designing, building, reviewing, or fixing interfaces, including pages, components, design systems, accessibility, interaction, responsive layout, typography, color, charts, …Reaches the networkRuns commands1 high finding
- artifacts-builderComposio (collection) · 2 scriptsSuite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple sin…Destructive commandsReaches the networkRuns commands2 high findings
- conversion-trackingCorey Haines · 28 scriptsSet up, audit, verify, or fix website conversion tracking. Use when the conversion is a form submission, booked meeting, chat, phone call, signup, or purchase; when conversions must reach Google Ads, Meta, GA4, LinkedIn, TikTok, or Microsoft Ads; when the work…Reaches the networkRuns commands1 finding
- helm-chart-scaffoldingSeth Hobson · 1 scriptDesign, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable configurations. Use when creating Helm charts, packaging Kubernetes applications, or implementing templated deployments.Runs commands1 high finding
- google-analyticsDaniel Avila · 2 scriptsAnalyze Google Analytics data, review website performance metrics, identify traffic patterns, and suggest data-driven improvements. Use when the user asks about analytics, website metrics, traffic analysis, conversion rates, user behavior, or performance optim…Runs commands1 finding
- grpo-rl-trainingDaniel Avila · 2 scriptsExpert guidance for GRPO/RL fine-tuning with TRL for reasoning and task-specific model trainingRuns commands1 finding
- owasp-securityDaniel Avila · 6 scriptsComprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10 (2023), Kubernetes Top 10 (2022), and the Agentic Applications 2026 edition for AI/LLM. Use for security rev…Reaches the networkRuns commands3 high findings
- qa-test-plannerDaniel Avila · 2 scriptsGenerate comprehensive test plans, manual test cases, regression test suites, and bug reports for QA engineers. Includes Figma MCP integration for design validation.Runs commands1 high finding
- digital-brainMurat Can Koylan · 5 scriptsThis skill should be used for personal operating-system workflows: content creation, voice consistency, relationship lookup, meeting preparation, weekly review, goal tracking, personal brand management, and network management.Destructive commandsRuns commands1 high finding
- filesystem-contextMurat Can Koylan · 1 scriptThis skill should be used when agent work needs file-backed context: durable scratchpads, tool-output offloading, just-in-time discovery, cross-agent handoff files, filesystem memory, or cleanup policies for context stored outside the prompt.Destructive commandsReaches the networkRuns commands1 high finding
- hosted-agentsMurat Can Koylan · 1 scriptThis skill should be used when designing hosted or background agent infrastructure: sandboxed execution, remote coding environments, warm pools, session persistence, multiplayer collaboration, self-spawning agents, or Modal-style sandboxes.Destructive commandsReaches the networkRuns commands1 high finding
- reasoning-trace-optimizerMurat Can Koylan · 13 scriptsDebug and optimize AI agents by analyzing reasoning traces, context degradation, tool confusion, instruction drift, repeated task failures, and performance regressions.Reaches the networkRuns commands3 high findings
- crypto-protocol-diagramTrail of Bits · 1 scriptExtracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visual…Runs commands1 high finding
- devcontainer-setupTrail of Bits · 2 scriptsCreates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project, setting up isolated development environments, or configuring sandboxed Claude Code workspaces.Destructive commandsReaches the networkRuns commands2 high findings
- firebase-apk-scannerTrail of Bits · 1 scriptScans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testi…Destructive commandsReaches the networkRuns commands1 high finding
- interpreting-culture-indexTrail of Bits · 7 scriptsInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, inter…Reaches the networkRuns commandsEdits files3 high findings
- semgrepTrail of Bits · 3 scriptsRuns a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the…Destructive commandsReaches the networkRuns commands1 high finding
- trailmark-finding-triageTrail of Bits · 2 scriptsPerforms graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evide…Runs commandsEdits files1 finding
- yara-rule-authoringTrail of Bits · 5 scriptsGuides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive red…Destructive commandsReaches the networkRuns commands1 high finding
- zeroize-auditTrail of Bits · 25 scriptsDetects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other…Destructive commandsRuns commandsEdits files5 high findings
Labels come from the skill's own files, read on the date shown: the tools its frontmatter allows and the scripts it ships. They are not a safety rating, and no finding is not a safety guarantee. How skills are checked.