New Checked the same way as MCP servers

Agent Skills, and what they let an agent do

Read straight from each publisher's repository. For every skill: what it allows the agent to do, the scripts it ships, and what fixed checks matched. Nothing is run.

All skills54

Clear filters

web-artifacts-builderAnthropic · 2 scriptsSuite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple sin…OfficialDestructive commandsReaches the network2 high findings
remotion-to-hyperframesHeyGen · 13 scriptsBring existing video code or footage into HyperFrames and verify it frame by frame against the original - Remotion first, also Motion Canvas, Lottie, Three.js, p5.js, canvas or plain HTML/CSS animation, or renders from Manim, After Effects or Blender. Use to p…OfficialDestructive commandsRuns commands1 high finding
hook-developmentAnthropic · 6 scriptsThis skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentio…OfficialDestructive commandsRuns commands5 high findings
writing-hookify-rulesAnthropicThis skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.OfficialDestructive commands1 high finding
agent-skill-stackGitHub · 5 scriptsFind, evaluate, and assemble the smallest compatible set of AI Agent Skills for an end-to-end natural-language goal. Use when a user wants Skills for a multi-step workflow, asks which Skills fit a project, needs an installed-Skill audit or conflict check, has …OfficialDestructive commandsReaches the network1 high finding
automate-thisGitHubAnalyze a screen recording of a manual process and produce targeted, working automation scripts. Extracts frames and audio narration from video files, reconstructs the step-by-step workflow, and proposes automation at multiple complexity levels using tools alr…OfficialDestructive commands1 finding
autoresearchGitHubAutonomous iterative experimentation loop for any programming task. Guides the user through defining goals, measurable metrics, and scope constraints, then runs an autonomous loop of code changes, testing, measuring, and keeping/discarding results. Inspired by…OfficialDestructive commands1 finding
containerize-aspnetcoreGitHubContainerize an ASP.NET Core project by creating Dockerfile and .dockerfile files customized for the project.OfficialDestructive commandsReaches the network1 finding
convert-excel-to-mdGitHub · 1 scriptConverts Excel (.xlsx) workbooks into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .xlsx file — even if they don''t say "convert" or "markdo…OfficialDestructive commandsReaches the network1 high finding
convert-pdf-to-mdGitHub · 1 scriptConverts PDF (.pdf) documents into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .pdf file — even if they don''t say "convert" or "markdown" …OfficialDestructive commandsRuns commands1 high finding
convert-word-to-mdGitHub · 1 scriptConverts Word (.docx) documents into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .docx file — even if they don''t say "convert" or "markdow…OfficialDestructive commandsReaches the network1 high finding
copilot-cli-quickstartGitHubUse this skill when someone wants to learn GitHub Copilot CLI from scratch. Offers interactive step-by-step tutorials with separate Developer and Non-Developer tracks, plus on-demand Q&A. Just say "start tutorial" or ask a question! Note: This skill targets Gi…OfficialDestructive commands1 high finding
create-tldr-pageGitHubCreate a tldr page from documentation URLs and command examples, requiring both URL and command name.OfficialDestructive commandsReaches the network1 finding
creating-oracle-to-postgres-migration-integration-testsGitHubCreates integration test cases targeting Oracle for .NET data access artifacts. Tests capture Oracle expected behavior as the authoritative baseline; they are written once and later ported to PostgreSQL by migrating the test project in Phase 6. Use only during…OfficialDestructive commands1 finding
deploy-to-vercelVercel · 2 scriptsDeploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".OfficialDestructive commandsReaches the network4 high findings
migrate-to-codexOpenAI · 15 scriptsMigrate supported instruction files, skills, agents, and MCP config into Codex project and global files.OfficialDestructive commandsRuns commands1 high finding
skill-installerOpenAI · 3 scriptsInstall Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos).OfficialDestructive commandsReaches the network1 high finding
vercel-deployOpenAI · 1 scriptDeploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".OfficialDestructive commandsReaches the network2 high findings
hf-cloud-python-env-setupHugging Face · 2 scriptsSet up an isolated Python environment for SageMaker / AWS work, with the right Python version and current boto3. Use this skill whenever Python code will be executed for a SageMaker deployment, training job, or any AWS automation — including when about to run …OfficialDestructive commandsReaches the network1 high finding
huggingface-tool-builderHugging Face · 6 scriptsUse this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusab…OfficialDestructive commandsReaches the network1 high finding
android-tombstone-symbolicationMicrosoft · 1 scriptSymbolicate the .NET runtime frames in an Android tombstone file. Extracts BuildIds and PC offsets from the native backtrace, downloads debug symbols from the Microsoft symbol server, and runs llvm-symbolizer to produce function names with source file and line…OfficialDestructive commandsReaches the network1 high finding
apple-crash-symbolicationMicrosoft · 1 scriptSymbolicate .NET runtime frames in Apple platform .ips crash logs (iOS, tvOS, Mac Catalyst, macOS). Extracts UUIDs and addresses from the native backtrace, locates dSYM debug symbols, and runs atos to produce function names with source file and line numbers. A…OfficialDestructive commandsReaches the network2 high findings
binlog-generationMicrosoftGenerate MSBuild binary logs (binlogs) for build diagnostics and analysis. USE FOR: adding /bl:{} to any dotnet build, test, pack, publish, or restore command to capture a full build execution trace, prerequisite for binlog-failure-analysis and build-perf-diag…OfficialDestructive commands1 finding
dotnet-maui-doctorMicrosoftDiagnoses and fixes .NET MAUI development environment issues. Validates .NET SDK, workloads, Java JDK, Android SDK, Xcode, and Windows SDK. All version requirements discovered dynamically from NuGet WorkloadDependencies.json — never hardcoded. Use when: settin…OfficialDestructive commands1 high finding
setup-local-sdkMicrosoftInstall a .NET SDK locally for safe preview testing, specific-version pinning, or reproducible team setups — without modifying the system-wide installation. USE FOR: trying .NET previews safely, testing specific SDK versions, installing MAUI or other workloads…OfficialDestructive commandsReaches the network1 finding
agent-experienceBrowserbaseAudit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task prompt and real tools (WebFetch, Bash, Write). Agents must discover the docs themselves, install deps, ask for credential…OfficialDestructive commandsReaches the network1 high finding
competitor-analysisBrowserbase · 7 scriptsCompetitor research and intelligence skill. Takes a user's company (with optional seed competitor URLs), auto-discovers additional competitors via Browserbase Search API, deeply researches each using a 4-lane pattern (marketing surface, external signal, public…OfficialDestructive commandsReaches the network4 findings
aks-network-captureMicrosoft · 11 scriptsCollects bounded packet captures from AKS nodes and Azure network configuration for wire-level evidence. WHEN: \"capture packets on an AKS node\", \"take a pcap\", \"run tcpdump on AKS\", \"prove where packets drop\". Use for explicit packet-capture intent aft…OfficialDestructive commandsReaches the network4 high findings
turnstile-spinCloudflare · 5 scriptsSet up, repair, or migrate to Cloudflare Turnstile bot verification in an existing frontend and backend, including server-side Siteverify.OfficialDestructive commandsReaches the network1 high finding
expo-skill-evalExpo · 9 scriptsEvaluate Expo skills in this repo end-to-end - trigger accuracy, generated code quality, and runtime screenshots on iOS simulator and Android emulator via Expo Go (web optional). Use when the user wants to eval an Expo skill, test that a skill produces working…OfficialDestructive commandsReaches the network2 high findings
expo-upgradeExpoGuidelines for upgrading Expo SDK versions and fixing dependency issuesOfficialDestructive commands1 finding
windows-builderHashiCorpBuild Windows images with Packer using WinRM communicator and PowerShell provisioners. Use when creating Windows AMIs, Azure images, or VMware templates.OfficialDestructive commands1 finding
brainstormingobra (Jesse Vincent) · 4 scriptsYou MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).Destructive commandsReaches the networkRuns commands1 high finding
executing-plansobra (Jesse Vincent)Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is availableDestructive commands1 finding
subagent-driven-developmentobra (Jesse Vincent)Use when executing implementation plans with independent tasks in the current sessionDestructive commands1 high finding
git-guardrails-claude-codeMatt Pocock · 1 scriptSet up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.Destructive commandsRuns commands1 high finding
artifacts-builderComposio (collection) · 2 scriptsSuite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple sin…Destructive commandsReaches the networkRuns commands2 high findings
database-migrationSeth HobsonExecute database migrations across ORMs and platforms with zero-downtime strategies, data transformation, and rollback procedures. Use when migrating databases, changing schemas, performing data transformations, or implementing zero-downtime deployment strateg…Destructive commands1 finding
file-conversionSeth HobsonUse when the user needs a local file converted between common image, audio, video, document, or data formats. Select installed tools, preserve originals, and verify the output.Destructive commands1 finding
git-advanced-workflowsSeth HobsonMaster advanced Git workflows including rebasing, cherry-picking, bisect, worktrees, and reflog to maintain clean history and recover from any situation. Use when managing complex Git histories, collaborating on feature branches, or troubleshooting repository …Destructive commands1 finding
monorepo-managementSeth HobsonMaster monorepo management with Turborepo, Nx, and pnpm workspaces to build efficient, scalable multi-package repositories with optimized builds and dependency management. Use when setting up monorepos, optimizing builds, or managing shared dependencies.Destructive commands1 high finding
protect-mcp-setupSeth HobsonConfigure Cedar policy enforcement and Ed25519 signed receipts for Claude Code tool calls. Use when setting up projects that need cryptographic audit trails, policy-gated tool execution, or compliance-ready evidence of agent actions.Destructive commands1 finding
turborepo-cachingSeth HobsonConfigure Turborepo for efficient monorepo builds with local and remote caching. Use when setting up Turborepo, optimizing build pipelines, or implementing distributed caching.Destructive commands1 high finding
autonomous-agent-patternsDaniel AvilaDesign patterns for building autonomous coding agents. Covers tool integration, permission systems, browser automation, and human-in-the-loop workflows. Use when building AI agents, designing tool APIs, implementing permission systems, or creating autonomous c…Destructive commands1 high finding
digital-brainMurat Can Koylan · 5 scriptsThis skill should be used for personal operating-system workflows: content creation, voice consistency, relationship lookup, meeting preparation, weekly review, goal tracking, personal brand management, and network management.Destructive commandsRuns commands1 high finding
filesystem-contextMurat Can Koylan · 1 scriptThis skill should be used when agent work needs file-backed context: durable scratchpads, tool-output offloading, just-in-time discovery, cross-agent handoff files, filesystem memory, or cleanup policies for context stored outside the prompt.Destructive commandsReaches the networkRuns commands1 high finding
hosted-agentsMurat Can Koylan · 1 scriptThis skill should be used when designing hosted or background agent infrastructure: sandboxed execution, remote coding environments, warm pools, session persistence, multiplayer collaboration, self-spawning agents, or Modal-style sandboxes.Destructive commandsReaches the networkRuns commands1 high finding
atherisTrail of BitsSets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer. Covers TestOneInput harnesses, FuzzedDataProvider, instrumenting both pure Python and native C extensions, and running under AddressSanitizer. Use when fuzzing a Python package, hu…Destructive commandsReaches the network1 finding

Labels come from the skill's own files, read on the date shown: the tools its frontmatter allows and the scripts it ships. They are not a safety rating, and no finding is not a safety guarantee. How skills are checked.