Agent skills directory: skills worth installing
364 source-checked Claude skills, MCP servers, plugins and agents, each pinned to a public commit.
- 364 entries
- 59 publishers
- Checked 17 Oct 2026 – 3 Nov 2026
From the index
How we rankCommunity entries first, then Anthropic official entries; newest pinned commit within each group.
Community entries first; ordered by citations in our workflow guides within each group.
Community entries first; pinned README documents a one-line setup command.
THE SHORTLIST
Featured
A few good places to start. Explore the source, then make it yours.
GhostPaw Codex
GhostPawJS
Local memory for AI agents in one SQLite file.
gstack
garrytan
Garry Tan’s Claude Code skill set with role-based tools for planning, design, engineering review, QA, release and docs.
Filesystem
modelcontextprotocol
Implements file-system operations through an MCP server built with Node.js.
PhotoCraft
storytold
Provides layered image editing, including Photoshop document handling and adjustment tools.
Superpowers
obra
Skills and workflow plugin for coding agents: brainstorm, write a plan, test first, then review the result.
OpenAI Agents SDK
openai
Provides a Python framework for agent workflows that supports multiple model providers.
NEW IN THE INDEX
This week’s trending
Fresh skills and tools to put on your radar.
Editorial picks in intake order, not a live star-growth ranking.
- Skills for Real EngineersComposable engineering skills for requirements, test-driven development, architecture review and turning plans into small tasks.
- Cloudflare Security AuditCloudflare’s defensive audit workflow uses reconnaissance, independent validation and source-grounded reports to investigate a codebase.
- ECCA coding-agent harness of skills, rules, hooks and memory, with guided setup for Claude Code and other supported agents.
- Spec KitGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
- XERJLocal-first code, document and log search with lexical and vector retrieval, exposed to coding agents through MCP.
- PaperclipA self-hosted control plane for coordinating agent teams with roles, budgets, shared work and runtime adapters.
- DeerFlowByteDance’s self-hosted agent harness combines sandboxed tools, memory, skills and subagents for longer tasks.
- OpenSpecA lightweight specification workflow that aligns a proposed change, its design and tasks before implementation.
- Lemo-OpuscarA code-driven film toolkit with 59 documented styles, guides and rendering tools for creating short films with a coding agent.
- MCP for BlenderA community MCP bridge that lets an LLM inspect and change Blender scenes, objects and materials through a local addon.
All entries
364 entries, metadata checked 17 Oct 2026 – 3 Nov 2026
Use case
Security analysis63Threat detection18Incident response & forensics17Cloud & infrastructure security12Application & supply-chain security10Development4Identity & email security3OT & ICS security3Productivity2Integrations1Creative tools0Data / E-commerce0Healthcare0Medical vocabularies0Scientific research0Publisher
alirezarezvani79mukul97563K-Dense-AI43phuryn41addyosmani26Yuan1z082523anthropics13vercel-labs9kepano6modelcontextprotocol5storytold3alchaincyf2footalytics2github2Leonxlnx2mattpocock20xS4N4TG16reams1affaan-m1ahujasid1AirsupHQ1artouc1assafkip1bytedance1ChromeDevTools1cloudflare1cursor1debpalash1DietrichGebert1EL4CTEO1FeedHive1Fission-AI1Garinmckayl1garrytan1GhostPawJS1GLips1Graphicle-AI1Graphify-Labs1heydamir1Jakeschincariol1juliobsz1kanaworksai-hue1lemomo-ai1microsoft1obra1OMOPHub1openai1Pangolin-spg1paperclipai1RayenMlayeh1reason-machines1Saivion1theCosmicCrafter1thedotmack1tt-a1i1upstash1wheresryan221xerj-org1ZSeven-W1Community first · Anthropic official entries follow. Sort applies within each group.
Spec KitPluginGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
GitHub MCP ServerMCPGitHub’s official MCP server for working with repositories, issues, pull requests and Actions from an agent.
OpenAI Agents SDKAgentProvides a Python framework for agent workflows that supports multiple model providers.
stop-describing-uiSkillReviews interface text for redundant explanations and replaces them with clearer labels, controls or spacing.- analyzing-browser-forensics-with-hindsightSkillExamines Chromium browser artifacts for forensic investigation; its access to sensitive browser records requires specialized evidence-handling controls.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-docker-container-forensicsSkillOrganizes evidence from Docker images, volumes and logs to investigate a compromised container and reconstruct suspicious activity.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-linux-kernel-rootkitsSkillExamines Linux memory and system observations for kernel-rootkit indicators, connecting discrepancies to a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-memory-dumps-with-volatilitySkillAnalyzes captured memory with Volatility to locate suspicious processes and related artifacts, requiring careful handling of potentially sensitive evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-packed-malware-with-upx-unpackerSkillExamines packed malware samples to recover analyzable program structure, supporting specialist static analysis inside an isolated research environment.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-sbom-for-supply-chain-vulnerabilitiesSkillCorrelates software-bill-of-materials components with vulnerability records, producing dependency findings from CycloneDX or SPDX inputs.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- analyzing-uefi-bootkit-persistenceSkillInvestigates firmware and boot artifacts for UEFI persistence indicators, organizing integrity observations for a specialist forensic review.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- auditing-terraform-infrastructure-for-securitySkillChecks Terraform definitions for risky infrastructure configuration, organizing policy findings about access, exposure and resource safeguards.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-cloud-siem-with-sentinelSkillPlans Microsoft Sentinel connectors, detection queries and response automation, connecting cloud telemetry sources to a monitored security workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-ioc-enrichment-pipeline-with-openctiSkillOrganizes threat-indicator enrichment in OpenCTI, joining connector-supplied context to structured intelligence records for analyst review.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-super-timelines-with-plasoSkillCombines host artifacts into Plaso investigation timelines, supporting evidence correlation while preserving the distinction between observed timestamps and inferred events.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- building-vulnerability-scanning-workflowSkillOrganizes vulnerability scanning from asset discovery through remediation tracking, helping security teams prioritize findings rather than treating every alert equally.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- configuring-certificate-authority-with-opensslSkillPlans a certificate-authority hierarchy with OpenSSL, organizing certificate extensions, revocation materials and issuance responsibilities for a controlled PKI.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- configuring-snort-ids-for-intrusion-detectionSkillConfigures Snort intrusion detection from traffic-monitoring requirements, arranging rules, tuning and alert outputs for an operational sensor.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- deobfuscating-javascript-malwareSkillExamines obfuscated malicious JavaScript to support analyst understanding of its behavior, using a controlled malware-analysis context.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- deploying-ransomware-canary-filesSkillPlans monitored decoy files for ransomware detection, relating file placement and change events to an early-warning response workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-attacks-on-scada-systemsSkillOrganizes detection of suspicious industrial-control activity, relating SCADA protocol and network observations to defensive monitoring requirements.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-broken-object-property-level-authorizationSkillReviews API property exposure and update permissions for authorization failures, collecting evidence that distinguishes excess data from unintended write access.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-credential-dumping-techniquesSkillCorrelates Windows and endpoint events to identify credential-dumping indicators, producing defensive detection logic and investigation leads.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-entra-offensive-tools-in-graph-logsSkillQueries Microsoft Graph activity logs for recognizable offensive-tool patterns, supporting defensive investigation of Entra tenant activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-insider-threat-with-uebaSkillBuilds behavior baselines from user and entity events, turning anomalies and peer comparisons into alerts for insider-risk review.Third-party community repo, not affiliated with Anthropic
- detecting-misconfigured-azure-storageSkillAudits Azure Storage configuration for unintended exposure and weak controls, organizing findings about access tokens, encryption, logging and networking.Third-party community repo, not affiliated with Anthropic
- detecting-pass-the-ticket-attacksSkillAnalyzes Kerberos authentication events for suspicious ticket-use patterns, translating observations into SIEM detections and investigation questions.Third-party community repo, not affiliated with Anthropic
- detecting-s3-data-exfiltration-attemptsSkillCorrelates S3 access and cloud telemetry to investigate possible data exfiltration, preserving the difference between unusual access and confirmed loss.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-suspicious-oauth-application-consentSkillReviews Entra application-consent grants and audit activity for excessive permissions or suspicious authorization, producing an actionable investigation list.Third-party community repo, not affiliated with Anthropic
- eradicating-malware-from-infected-systemsSkillStructures malware eradication around observed persistence and affected systems, organizing removal and verification work within an incident-response process.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- generating-threat-intelligence-reportsSkillTurns threat-intelligence evidence into audience-specific reports, separating strategic context from technical observations for security decision-makers.Third-party community repo, not affiliated with Anthropic
- hunting-for-beaconing-with-frequency-analysisSkillExamines network timing patterns for possible command-channel beaconing, using statistical observations to guide defensive investigation rather than establish attribution.Third-party community repo, not affiliated with Anthropic
- hunting-for-lateral-movement-via-wmiSkillCorrelates Windows process events for suspicious WMI-related movement, producing hunting questions and detection logic for endpoint investigators.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-for-scheduled-task-persistenceSkillInvestigates scheduled-task creation and execution evidence to identify possible persistence, linking hunt hypotheses to host and SIEM observations.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-saas-sso-token-abuseSkillCorrelates Entra and Okta session evidence for possible stolen-token use, organizing identity-hunting leads from observed authentication activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-api-security-posture-managementSkillOrganizes API discovery and risk classification for security-posture management, combining inventory and findings into a reviewable service view.Third-party community repo, not affiliated with Anthropic
- implementing-aws-security-hub-complianceSkillPlans multi-account AWS Security Hub aggregation and standards checks, linking cloud-service findings to a coordinated compliance review.Third-party community repo, not affiliated with Anthropic
- implementing-cloud-security-posture-managementSkillReviews cloud configuration across providers with posture-management tools, organizing exposure and compliance findings for ongoing remediation.Third-party community repo, not affiliated with Anthropic
- implementing-continuous-security-validation-with-basSkillPlans controlled breach-and-attack simulation to evaluate defensive coverage, requiring scoped test approval before any active validation exercise.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-dmarc-dkim-spf-email-securitySkillReviews and configures mail-authentication DNS records, connecting SPF, DKIM and DMARC alignment to sender validation and reporting needs.Third-party community repo, not affiliated with Anthropic
- implementing-fuzz-testing-in-cicd-with-aflplusplusSkillIntegrates AFL++ fuzzing into CI around a defined target, preparing instrumentation and repeatable runs that expose memory-safety failures.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-hashicorp-vault-dynamic-secretsSkillPlans Vault-issued short-lived credentials and certificates, organizing lease management and rotation to reduce dependence on static secrets.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-infrastructure-as-code-security-scanningSkillAdds infrastructure-as-code checks to delivery workflows, translating scanner findings in templates and manifests into focused configuration fixes.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-microsegmentation-with-guardicoreSkillMaps application dependencies for network microsegmentation, using observed east-west communication to design narrower access policies.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-network-policies-for-kubernetesSkillDrafts portable Kubernetes NetworkPolicy definitions from access requirements, covering selectors, default-deny behavior and essential DNS communication.Third-party community repo, not affiliated with Anthropic
- implementing-passwordless-authentication-with-fido2SkillPlans WebAuthn and FIDO2 account flows, connecting authenticator enrollment and server verification to a passwordless authentication design.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-purdue-model-network-segmentationSkillMaps industrial networks into Purdue-model security zones, organizing segmentation requirements and communication boundaries for operational-control environments.Third-party community repo, not affiliated with Anthropic
- implementing-secret-scanning-with-gitleaksSkillIntegrates Gitleaks into local and CI checks, defining repository scanning rules and response steps for accidental credential exposure.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-sigstore-for-software-signingSkillPlans Sigstore signing and verification for software artifacts, connecting identity-based signatures and transparency evidence to supply-chain checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-ticketing-system-for-incidentsSkillLinks security alerts to incident tickets, organizing ownership, escalation and service-level tracking across supported case-management tools.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-zero-trust-in-cloudSkillPlans cloud access around identity and continuous verification, combining segmentation and device considerations into a scoped zero-trust architecture.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- investigating-ransomware-attack-artifactsSkillOrganizes preservation and analysis of ransomware artifacts, retaining evidence provenance before investigators assess variant identity and incident scope.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-api-security-testing-with-postmanSkillBuilds Postman collections for scoped API security assessments, organizing roles, requests and assertions into repeatable authorization and exposure checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-cloud-native-threat-hunting-with-aws-detectiveSkillUses Amazon Detective behavior graphs to examine cloud incident entities and timelines, linking observations from supported AWS telemetry sources.Third-party community repo, not affiliated with Anthropic
- performing-cve-prioritization-with-kev-catalogSkillCombines CISA exploited-vulnerability records with prioritization signals, producing a ranked patch-review list with explicit scoring assumptions.Third-party community repo, not affiliated with Anthropic
- performing-dynamic-analysis-with-any-runSkillObserves malware behavior in an interactive cloud sandbox, organizing execution findings for specialist analysis with isolation and disclosure considerations.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-gcp-security-assessment-with-forsetiSkillExamines GCP access and resource configuration through posture-assessment tooling, organizing cloud-security findings against the available project evidence.Third-party community repo, not affiliated with Anthropic
- performing-insider-threat-investigationSkillStructures an insider-threat investigation around access records and observed actions, separating evidence collection from conclusions about intent.Third-party community repo, not affiliated with Anthropic
- performing-lateral-movement-detectionSkillCorrelates endpoint and network events for lateral-movement indicators, producing defensive investigation leads across several common movement patterns.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-memory-forensics-with-volatility3SkillExamines captured RAM with Volatility 3, correlating processes and network artifacts for a controlled investigation of potentially sensitive memory evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-power-grid-cybersecurity-assessmentSkillStructures security review of power-grid systems around network zones and operational requirements, connecting findings to infrastructure-specific assessment evidence.Third-party community repo, not affiliated with Anthropic
- performing-steganography-detectionSkillExamines media for concealed data using steganalysis tools, organizing extraction findings for a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-user-behavior-analyticsSkillBuilds user-behavior anomaly reviews from authentication and activity events, connecting unusual patterns to analyst investigation rather than automatic intent judgments.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsSkillParses Windows forensic artifacts with specialist utilities, organizing host timelines and evidence for an authorized incident investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- scanning-containers-with-trivy-in-cicdSkillAdds Trivy scans to container delivery workflows, collecting package and configuration findings so remediation can be checked before release.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- securing-container-registry-imagesSkillOrganizes image scanning, signing and registry access controls, connecting container artifact provenance to release checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- testing-ransomware-recovery-proceduresSkillChecks ransomware recovery plans through restore tests and recovery-time evidence, documenting whether backups support the intended clean-recovery sequence.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
Choose by workflow
Short guides that compare candidates for one job, with the reference docs they follow.
Most of them compare MCP (Model Context Protocol) servers, for example for Claude Code, Codex or Blender.
Best MCP Servers for Claude CodeModel Context Protocol (MCP) servers give Claude Code extra tools.earshotReason NetworkGraphicleAudio Studio MCPjevcrawlFilesystemGit
MCP for Claude: Best Servers and How to Add ThemShort answer: in the Claude desktop app, add one MCP server for the job in front of you — Filesystem to work with chosen folders, Memory to keep context between chats, Fetch to read web pages.FetchFilesystemMemory
Best MCP Servers for CodexCodex can connect to Model Context Protocol (MCP) servers for extra tools.Reason NetworkGraphicleFilesystemGitMemory
ArtCraft creative applicationsCompare source-linked application hubs for image editing and documents.ArtCraftPhotoCraftWordCraft
Best Blender MCP Servers & Skills (2026)Blender MCP connects an AI client to a running Blender session through the Model Context Protocol, so the model can read your scene and run Python through Blender’s API.Blender Agent Skills
Best Reverse Engineering MCP ServersA reverse engineering MCP server lets an agent drive analysis tools such as Ghidra, IDA Pro, radare2 or JADX through the Model Context Protocol and report what it found with evidence.GhidraMCPida-pro-mcpradare2-mcpreverse-engineering-assistant (ReVa)jadx-ai-mcp
Harness² (harness2) vs OpenCode and Codex CLIHarness² (harness2) is an open-source research framework from Google Research that tunes the harness around an agent while the model stays fixed.
Install Claude Code Skills: Folder, Plugin & CLIChoose one of three ways to install Claude Code skills: copy a complete skill folder, install a plugin from its marketplace, or use npx skills add with Claude Code selected.frontend-designpdfvercel-react-best-practices
Best MCP Servers for Cursor: Files, Git & MemoryChoose a Cursor MCP server for one missing capability: file access, repository history, web fetching or persistent context.FetchFilesystemGitMemory
Claude Code Security: Audit & Hardening SkillsA Claude Code security review starts with an authorized scope and a question to investigate.Cloudflare Security Auditsecurity-and-hardening
Best Codex Skills (2026)Codex can use agent skills: folders with a SKILL.Skills for Real EngineersgstackTaste SkillawwwardsAI Slop DetectorGhostPaw Codexhuashu-motionLemo-OpuscarMachine SkillanatomyBlender Agent Skills
Best Claude Skills for Video EditingPick a Claude skill by the video you need to ship.huashu-motionpapercut-explainerLemo-OpuscarMachine Skill
Questions before you install
Is a listed entry safe to install?
Not automatically. Listed ≠ audited. We pin each entry to a public commit so you can read exactly what you install. Read the SKILL.md or README, check bundled scripts, and limit tool and file access before you enable it.
What is a Claude skill?
A folder with a SKILL.md file that tells an agent how to carry out one task, sometimes with scripts or reference files. Claude Code loads skills from ~/.claude/skills or a project’s .claude/skills folder.
How are skills different from MCP servers?
A skill describes a workflow. An MCP (Model Context Protocol) server is a program that exposes tools or data to a compatible AI client. A project may offer both, but review their permissions and setup separately.
How is the list ordered?
By the date of each entry’s pinned upstream commit, newest first. You can also sort by guide citations or name. We do not have star, download or install counts, so we never show them. How we rank
Are these resources officially endorsed?
No. AgentSkillsDir is an independent directory run by Orbitlane Labs and is not affiliated with any listed publisher. Source links and pinned revisions help you inspect each entry; they are not a certification.
How do I suggest a resource?
Use the submission form to share a public project link, or email submit@agentskillsdir.com. Listing is free and not guaranteed. Submit
What are the best Claude skills and MCP servers to start with?
There is no single best list; pick by the job you need done. AgentSkillsDir lists source-checked Claude skills and MCP servers, each pinned to a public commit, and orders them by the date of that commit. Our workflow guides compare candidates for one task: for Claude Code, the Filesystem and Git MCP servers are common starting points. Read each entry’s SKILL.md or README before you install it.
How do I install a Claude skill from GitHub?
A skill is a folder that contains a SKILL.md file. Copy that folder from the repository into ~/.claude/skills/ to use it in every project, or into .claude/skills/ inside one project. Claude Code picks up skills from those locations. Each entry on AgentSkillsDir links to the pinned commit and shows a setup snippet you can copy.
How do I add an MCP server to Claude Code?
Run claude mcp add with a name and the server’s launch command, for example: claude mcp add fetch -- uvx mcp-server-fetch. Then run claude mcp list to confirm it is registered. For Claude Desktop, add the server under mcpServers in claude_desktop_config.json and restart the app. Use the launch command from the server’s own README.
What goes in a SKILL.md file, and how is a skill folder structured?
SKILL.md starts with YAML front matter that gives the skill a name and a description of when to use it, followed by Markdown instructions for the agent. The folder can also hold scripts, reference documents or templates that the instructions point to. Keep the folder name and the name field consistent, and review any bundled scripts before you enable a skill.
Is AgentSkillsDir a skills marketplace, and can I submit my MCP server?
AgentSkillsDir is a free, independent directory, not a store: nothing is sold here, and every entry links to its public source repository. You can submit a public GitHub link for a Claude skill, MCP server, plugin or agent through the submission page or by emailing submit@agentskillsdir.com. Submissions are reviewed before they are listed, and listing is not guaranteed. Submit




