Agent skills directory: skills worth installing
364 source-checked Claude skills, MCP servers, plugins and agents, each pinned to a public commit.
Setup snippets for
- 364 entries
- 59 publishers
- Checked 17 Oct 2026 – 3 Nov 2026
From the index
How we rankCommunity entries first, then Anthropic official entries; newest pinned commit within each group.
Community entries first; ordered by citations in our workflow guides within each group.
Community entries first; pinned README documents a one-line setup command.
THE SHORTLIST
Featured
A few good places to start. Explore the source, then make it yours.
SkillMIT
GhostPaw Codex
GhostPawJS
Local memory for AI agents in one SQLite file.
SkillMIT
gstack
garrytan
Garry Tan’s Claude Code skill set with role-based tools for planning, design, engineering review, QA, release and docs.
MCPReview source terms
Filesystem
modelcontextprotocol
Implements file-system operations through an MCP server built with Node.js.
AppMIT OR Apache-2.0
PhotoCraft
storytold
Provides layered image editing, including Photoshop document handling and adjustment tools.
PluginMIT
Superpowers
obra
Skills and workflow plugin for coding agents: brainstorm, write a plan, test first, then review the result.
AgentMIT
OpenAI Agents SDK
openai
Provides a Python framework for agent workflows that supports multiple model providers.
NEW IN THE INDEX
This week’s trending
Fresh skills and tools to put on your radar.
WEEKLY INTAKE
Editorial picks in intake order, not a live star-growth ranking.
- Skills for Real EngineersComposable engineering skills for requirements, test-driven development, architecture review and turning plans into small tasks.
- Cloudflare Security AuditCloudflare’s defensive audit workflow uses reconnaissance, independent validation and source-grounded reports to investigate a codebase.
- ECCA coding-agent harness of skills, rules, hooks and memory, with guided setup for Claude Code and other supported agents.
- Spec KitGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
- XERJLocal-first code, document and log search with lexical and vector retrieval, exposed to coding agents through MCP.
- PaperclipA self-hosted control plane for coordinating agent teams with roles, budgets, shared work and runtime adapters.
- DeerFlowByteDance’s self-hosted agent harness combines sandboxed tools, memory, skills and subagents for longer tasks.
- OpenSpecA lightweight specification workflow that aligns a proposed change, its design and tasks before implementation.
- Lemo-OpuscarA code-driven film toolkit with 59 documented styles, guides and rendering tools for creating short films with a coding agent.
- MCP for BlenderA community MCP bridge that lets an LLM inspect and change Blender scenes, objects and materials through a local addon.
All entries
364 entries, metadata checked 17 Oct 2026 – 3 Nov 2026
Use case
Productivity120Development89Security analysis69Scientific research65Creative tools25Integrations24Threat detection18Incident response & forensics17Cloud & infrastructure security12Application & supply-chain security10Identity & email security3OT & ICS security3Data / E-commerce1Healthcare1Medical vocabularies1Publisher
mukul97563alirezarezvani50phuryn35anthropics12kepano6addyosmani5storytold3alchaincyf2K-Dense-AI2Leonxlnx2mattpocock20xS4N4TG16reams1affaan-m1ahujasid1AirsupHQ1artouc1assafkip1bytedance1cloudflare1debpalash1DietrichGebert1EL4CTEO1FeedHive1Fission-AI1Garinmckayl1garrytan1GhostPawJS1github1GLips1juliobsz1kanaworksai-hue1lemomo-ai1obra1Pangolin-spg1paperclipai1RayenMlayeh1theCosmicCrafter1thedotmack1vercel-labs1wheresryan221Yuan1z08251ZSeven-W1ChromeDevTools0cursor0footalytics0Graphicle-AI0Graphify-Labs0heydamir0Jakeschincariol0microsoft0modelcontextprotocol0OMOPHub0openai0reason-machines0Saivion0tt-a1i0upstash0xerj-org0Community first · Anthropic official entries follow. Sort applies within each group.
Showing 214 of 364
claude-memPluginPlugin that records what happens in agent sessions, compresses it and adds relevant context back into later sessions.
grill-meSkillThe grill-me skill from mattpocock/skills (MIT): type /grill-me with a loose idea and the agent interviews you in rounds until you can commit. Not a code generator. Install it together with its grilling dependency.
PonytailSkillThe Ponytail skill from DietrichGebert/ponytail (MIT): a “lazy senior” coding mode that makes Claude Code, Codex, Cursor and other agents ship the smallest complete change. Levels lite, full and ultra, plus /ponytail-review and /ponytail-audit. Not a hairstyle guide.
VoiceStudioSkillAgent skill and MCP endpoint for debpalash/VoiceStudio, an open-source local voice studio: speech, transcription, cloning, dubbing. Needs the app running on your machine.Local dependenciesAGPL source
DeerFlowAgentByteDance’s self-hosted agent harness combines sandboxed tools, memory, skills and subagents for longer tasks.Local dependenciesExecutes code
GhostPaw CodexSkillLocal memory for AI agents in one SQLite file.Local dependencies
MCP for BlenderMCPA community MCP bridge that lets an LLM inspect and change Blender scenes, objects and materials through a local addon.Local dependenciesExecutes code
OpenSpecSkillA lightweight specification workflow that aligns a proposed change, its design and tasks before implementation.
PaperclipAppA self-hosted control plane for coordinating agent teams with roles, budgets, shared work and runtime adapters.Local dependenciesExecutes code
Spec KitPluginGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
Lemo-OpuscarSkillA code-driven film toolkit with 59 documented styles, guides and rendering tools for creating short films with a coding agent.Local dependenciesExecutes code
anatomySkillAgent skill that builds detailed, interactive isometric illustrations of real machines and technical ideas as SVG, with optional WebGL effects.
ECCPluginA coding-agent harness of skills, rules, hooks and memory, with guided setup for Claude Code and other supported agents.Executes code
Pangolinfo Amazon Data MCPMCPUnofficial MIT bridge to a paid hosted MCP service for e-commerce product, review and category data. Needs a Pangolinfo API key.Requires paid API keyHosted serviceUnofficial
gstackSkillGarry Tan’s Claude Code skill set with role-based tools for planning, design, engineering review, QA, release and docs.
Skills for Real EngineersSkillComposable engineering skills for requirements, test-driven development, architecture review and turning plans into small tasks.
Audio Studio MCPMCPRuns Stable Audio 3 locally on Apple Silicon for music and sound effects, then loops, normalizes and exports the audio.
awwwardsSkillGuides website planning, implementation and browser checks, with a separate jury skill for reviewing the result.
Codex OpenPencilPluginConnects Codex to an editable OpenPencil canvas for inspecting layers, refining layouts and saving native .op designs.
earshotMCPAnalyzes local audio, checks timing against video, and exposes sound measurements and synthesis tools through MCP.
huashu-motionSkillBuilds product videos with a local motion runtime, composed audio and a browser editor for frame-specific revisions.
Taste SkillSkillFrontend design skill that gives agents an art direction, reference layouts and a browser check before calling a page done.
Huashu DesignSkillHuashu Design by 花叔 (alchaincyf) helps agents build hi-fi HTML prototypes, slide decks and animations with MP4 export, plus structured design reviews. Not meant for SEO websites or production web apps.- ab-test-analysisSkillInterprets A/B experiment results using sample-size and uncertainty checks, producing a supported ship, extend or stop recommendation.
AnimaSkillBuilds interactive biology diagrams with isometric structures, mechanism controls and references for displayed claims.- ansoff-matrixSkillMaps growth options across existing and new products and markets, making the assumptions behind each Ansoff strategy explicit.
- beachhead-segmentSkillCompares potential launch segments by pain, purchasing capacity and reachable market share, selecting a focused first market to validate.
Blender Agent SkillsSkillPackages Blender modeling, materials, animation, rendering and asset checks as a collection of agent skills.- brainstorm-okrsSkillTurns company priorities into team-level objectives and measurable key results, supporting a focused quarterly goal discussion.
- business-modelSkillDescribes how a business creates and captures value through the nine Business Model Canvas sections, revealing dependencies for further validation.
ClaudemySkillResurfaces web research as short audio lessons, source-linked lesson cards and a reusable course playbook.- cohort-analysisSkillOrganizes engagement and retention data into cohorts, comparing segment trends to expose differences hidden in aggregate product metrics.
- create-prdSkillBuilds a lean product requirements document from product context, organizing objectives, users, value and solution decisions into a reviewable brief.
- draft-ndaSkillStructures an NDA draft from the parties, information types and jurisdiction, marking clauses that need qualified legal review before use.
- grammar-checkSkillChecks supplied prose for grammar, logic and flow, suggesting localized corrections that preserve the author's wording and intended argument.
- growth-loopsSkillExplores recurring growth mechanisms around a product's user behavior, comparing candidate loops and the conditions each needs to sustain itself.
- interview-scriptSkillBuilds a customer-interview script around jobs and real experiences, avoiding leading questions and premature product pitching.
- job-storiesSkillTranslates customer situations and motivations into job stories, adding expected outcomes and acceptance conditions for product-backlog discussion.
- metrics-dashboardSkillPlans a product metrics dashboard with named data sources and alert rules, tying each measure to an operational or product question.
- monetization-strategySkillDevelops monetization options for a product and audience, pairing each proposed revenue model with fit assumptions, risks and validation experiments.
- nature-image2pptSkillReconstructs screenshot or image-only slides as editable PowerPoint objects, separating layout elements and text rather than merely embedding a full-page image.High static risk — review source first
- north-star-metricSkillDefines a product's North Star metric and supporting inputs, checking whether the measurement reflects the value users receive.
- outcome-roadmapSkillRewrites a feature-output roadmap around intended outcomes, connecting proposed initiatives to user and business changes rather than deliverable counts.
papercut-explainerSkillCoordinates nine skills and a Remotion library to make vertical explainers with layered paper scenes and timed captions.
PhotoCraftAppProvides layered image editing, including Photoshop document handling and adjustment tools.- pre-mortemSkillChallenges a PRD or launch plan with a pre-mortem, grouping possible failures and identifying which risks could block launch.
- pricing-strategySkillExamines pricing models, competitors and willingness-to-pay evidence, producing a pricing design whose uncertain assumptions remain visible.
- prioritization-frameworksSkillCompares prioritization frameworks and their required inputs, helping a team select an approach suited to its decision rather than a universal score.
- product-strategySkillOrganizes product strategy around target segments, value, capabilities and tradeoffs, connecting a vision to the choices required to pursue it.
- release-notesSkillConverts tickets and change records into user-facing release notes, organizing concrete changes by type and explaining their effects.
- retroSkillFacilitates a sprint retrospective from team observations, producing prioritized improvements with owners and follow-up actions.
- review-resumeSkillReviews a product-management resume against a target role, improving evidence, structure and relevance without inventing experience.
- sentiment-analysisSkillAnalyzes feedback for sentiment and customer-job patterns, organizing evidence about satisfaction across distinct user segments.
- sprint-planSkillBuilds a sprint plan from capacity, candidate stories and dependencies, exposing delivery risks before the team commits to scope.
- stakeholder-mapSkillMaps stakeholders by influence and interest, producing targeted communication approaches and a plan for keeping relevant people informed.
- startup-canvasSkillCombines product strategy and business-model questions in a startup canvas, separating strategic choices from revenue and cost assumptions.
- strategy-red-teamSkillStress-tests a product strategy's key assumptions, ranking plausible failure modes and inexpensive validation checks before delivery investment.
- summarize-interviewSkillSynthesizes a customer interview into a structured record of jobs, satisfaction evidence and follow-up actions for product discovery.
- summarize-meetingSkillTurns a meeting transcript into structured notes with decisions and assigned actions, keeping discussion context available for later follow-up.
- user-segmentationSkillGroups users by behavior, needs and feedback evidence, producing actionable segments instead of treating the entire audience as one persona.
- user-storiesSkillWrites backlog stories with acceptance criteria and supporting design context, applying story-quality conventions to make work discussable and testable.
- value-prop-statementsSkillTurns an existing value proposition into customer-facing statements for marketing and onboarding, adapting wording to specific audience decisions.
- value-propositionSkillDevelops a detailed customer value proposition by comparing the user's situation, desired change and alternatives before shaping the offer.
WordCraftAppProvides a Rust application for writing and document design.- wwasSkillStructures a backlog item as purpose, change and acceptance conditions, connecting product intent to an independently testable piece of work.
jevcrawlMCPCrawls a site toward a question and returns source-linked passages, using an external Jev decision model to rank the route.
PhotoCraft MCPMCPLets compatible MCP clients control PhotoCraft editing actions through natural-language requests.- frontend-ui-engineeringSkillDevelops responsive interface components from product requirements, checking layout, accessibility and interaction behavior as part of implementation.
- idea-refineSkillDevelops an unclear idea through alternatives and assumption checks, ending with a more concrete concept that can guide further work.High static risk — review source first
- interview-meSkillUses a sequential interview to clarify a request's underlying goal, resolving uncertainty before treating an initial solution idea as a specification.
Machine SkillSkillCreates interactive 3D machine explanations in standalone HTML, with small physics models and optional video capture.- security-and-hardeningSkillReviews input handling, authentication and integrations for exploitable weaknesses, organizing source-backed hardening work around concrete attack paths.
- using-agent-skillsSkillMatches the current task to available agent skills, explaining when an existing workflow should be loaded and used.
AI Slop DetectorSkillChecks drafts against 120 recurring writing patterns and suggests plain rewrites with examples.- generate-imageSkillCreates or revises raster visuals through the OpenRouter image interface, translating a visual brief into model requests and generated image assets.High static risk — review source first
- markitdownSkillConverts supported documents and selected web inputs to Markdown with MarkItDown, preparing readable text for search, analysis or retrieval ingestion.High static risk — review source first
ArtCraftAppOffers visual tools for interactive AI image and video creation, with 2D composition and 3D scene staging.
stop-describing-uiSkillReviews interface text for redundant explanations and replaces them with clearer labels, controls or spacing.
SuperpowersPluginSkills and workflow plugin for coding agents: brainstorm, write a plan, test first, then review the result.- find-skillsSkillFinds existing agent skills for a requested capability, helping users compare relevant candidates before choosing whether to install one.
ArtCraft MCPMCPBundles MCP servers, command-line automation, skills and bridge routes for ArtCraft media workflows.- defuddleSkillExtracts the main readable content of an HTML page into Markdown with Defuddle, reducing surrounding page markup for subsequent reading or analysis.
- json-canvasSkillCreates visual knowledge maps as JSON Canvas files, representing supplied concepts through editable nodes, groups and connections.
- knapSkillCombines structured data with Knap templates to render Markdown notes, supporting repeatable document creation from JSON or CSV inputs.
- obsidian-basesSkillDefines Obsidian Base files with filters, formulas and views, turning existing note properties into configurable database-style displays.
- obsidian-cliSkillUses Obsidian's CLI to manage vault notes and properties, with additional commands for inspecting and developing plugins or themes.
- obsidian-markdownSkillWrites Obsidian-compatible notes with properties, wikilinks, embeds and callouts, preserving syntax needed for the vault's linked reading experience.
Cloudflare Security AuditSkillCloudflare’s defensive audit workflow uses reconnaissance, independent validation and source-grounded reports to investigate a codebase.- analyzing-browser-forensics-with-hindsightSkillExamines Chromium browser artifacts for forensic investigation; its access to sensitive browser records requires specialized evidence-handling controls.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-docker-container-forensicsSkillOrganizes evidence from Docker images, volumes and logs to investigate a compromised container and reconstruct suspicious activity.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-linux-kernel-rootkitsSkillExamines Linux memory and system observations for kernel-rootkit indicators, connecting discrepancies to a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-memory-dumps-with-volatilitySkillAnalyzes captured memory with Volatility to locate suspicious processes and related artifacts, requiring careful handling of potentially sensitive evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-packed-malware-with-upx-unpackerSkillExamines packed malware samples to recover analyzable program structure, supporting specialist static analysis inside an isolated research environment.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-sbom-for-supply-chain-vulnerabilitiesSkillCorrelates software-bill-of-materials components with vulnerability records, producing dependency findings from CycloneDX or SPDX inputs.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- analyzing-uefi-bootkit-persistenceSkillInvestigates firmware and boot artifacts for UEFI persistence indicators, organizing integrity observations for a specialist forensic review.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- auditing-terraform-infrastructure-for-securitySkillChecks Terraform definitions for risky infrastructure configuration, organizing policy findings about access, exposure and resource safeguards.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-cloud-siem-with-sentinelSkillPlans Microsoft Sentinel connectors, detection queries and response automation, connecting cloud telemetry sources to a monitored security workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-ioc-enrichment-pipeline-with-openctiSkillOrganizes threat-indicator enrichment in OpenCTI, joining connector-supplied context to structured intelligence records for analyst review.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-super-timelines-with-plasoSkillCombines host artifacts into Plaso investigation timelines, supporting evidence correlation while preserving the distinction between observed timestamps and inferred events.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- building-vulnerability-scanning-workflowSkillOrganizes vulnerability scanning from asset discovery through remediation tracking, helping security teams prioritize findings rather than treating every alert equally.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- configuring-certificate-authority-with-opensslSkillPlans a certificate-authority hierarchy with OpenSSL, organizing certificate extensions, revocation materials and issuance responsibilities for a controlled PKI.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- configuring-snort-ids-for-intrusion-detectionSkillConfigures Snort intrusion detection from traffic-monitoring requirements, arranging rules, tuning and alert outputs for an operational sensor.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- deobfuscating-javascript-malwareSkillExamines obfuscated malicious JavaScript to support analyst understanding of its behavior, using a controlled malware-analysis context.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- deploying-ransomware-canary-filesSkillPlans monitored decoy files for ransomware detection, relating file placement and change events to an early-warning response workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-attacks-on-scada-systemsSkillOrganizes detection of suspicious industrial-control activity, relating SCADA protocol and network observations to defensive monitoring requirements.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-broken-object-property-level-authorizationSkillReviews API property exposure and update permissions for authorization failures, collecting evidence that distinguishes excess data from unintended write access.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-credential-dumping-techniquesSkillCorrelates Windows and endpoint events to identify credential-dumping indicators, producing defensive detection logic and investigation leads.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-entra-offensive-tools-in-graph-logsSkillQueries Microsoft Graph activity logs for recognizable offensive-tool patterns, supporting defensive investigation of Entra tenant activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-insider-threat-with-uebaSkillBuilds behavior baselines from user and entity events, turning anomalies and peer comparisons into alerts for insider-risk review.Third-party community repo, not affiliated with Anthropic
- detecting-misconfigured-azure-storageSkillAudits Azure Storage configuration for unintended exposure and weak controls, organizing findings about access tokens, encryption, logging and networking.Third-party community repo, not affiliated with Anthropic
- detecting-pass-the-ticket-attacksSkillAnalyzes Kerberos authentication events for suspicious ticket-use patterns, translating observations into SIEM detections and investigation questions.Third-party community repo, not affiliated with Anthropic
- detecting-s3-data-exfiltration-attemptsSkillCorrelates S3 access and cloud telemetry to investigate possible data exfiltration, preserving the difference between unusual access and confirmed loss.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-suspicious-oauth-application-consentSkillReviews Entra application-consent grants and audit activity for excessive permissions or suspicious authorization, producing an actionable investigation list.Third-party community repo, not affiliated with Anthropic
- eradicating-malware-from-infected-systemsSkillStructures malware eradication around observed persistence and affected systems, organizing removal and verification work within an incident-response process.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- generating-threat-intelligence-reportsSkillTurns threat-intelligence evidence into audience-specific reports, separating strategic context from technical observations for security decision-makers.Third-party community repo, not affiliated with Anthropic
- hunting-for-beaconing-with-frequency-analysisSkillExamines network timing patterns for possible command-channel beaconing, using statistical observations to guide defensive investigation rather than establish attribution.Third-party community repo, not affiliated with Anthropic
- hunting-for-lateral-movement-via-wmiSkillCorrelates Windows process events for suspicious WMI-related movement, producing hunting questions and detection logic for endpoint investigators.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-for-scheduled-task-persistenceSkillInvestigates scheduled-task creation and execution evidence to identify possible persistence, linking hunt hypotheses to host and SIEM observations.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-saas-sso-token-abuseSkillCorrelates Entra and Okta session evidence for possible stolen-token use, organizing identity-hunting leads from observed authentication activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-api-security-posture-managementSkillOrganizes API discovery and risk classification for security-posture management, combining inventory and findings into a reviewable service view.Third-party community repo, not affiliated with Anthropic
- implementing-aws-security-hub-complianceSkillPlans multi-account AWS Security Hub aggregation and standards checks, linking cloud-service findings to a coordinated compliance review.Third-party community repo, not affiliated with Anthropic
- implementing-cloud-security-posture-managementSkillReviews cloud configuration across providers with posture-management tools, organizing exposure and compliance findings for ongoing remediation.Third-party community repo, not affiliated with Anthropic
- implementing-continuous-security-validation-with-basSkillPlans controlled breach-and-attack simulation to evaluate defensive coverage, requiring scoped test approval before any active validation exercise.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-dmarc-dkim-spf-email-securitySkillReviews and configures mail-authentication DNS records, connecting SPF, DKIM and DMARC alignment to sender validation and reporting needs.Third-party community repo, not affiliated with Anthropic
- implementing-fuzz-testing-in-cicd-with-aflplusplusSkillIntegrates AFL++ fuzzing into CI around a defined target, preparing instrumentation and repeatable runs that expose memory-safety failures.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-hashicorp-vault-dynamic-secretsSkillPlans Vault-issued short-lived credentials and certificates, organizing lease management and rotation to reduce dependence on static secrets.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-infrastructure-as-code-security-scanningSkillAdds infrastructure-as-code checks to delivery workflows, translating scanner findings in templates and manifests into focused configuration fixes.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-microsegmentation-with-guardicoreSkillMaps application dependencies for network microsegmentation, using observed east-west communication to design narrower access policies.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-network-policies-for-kubernetesSkillDrafts portable Kubernetes NetworkPolicy definitions from access requirements, covering selectors, default-deny behavior and essential DNS communication.Third-party community repo, not affiliated with Anthropic
- implementing-passwordless-authentication-with-fido2SkillPlans WebAuthn and FIDO2 account flows, connecting authenticator enrollment and server verification to a passwordless authentication design.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-purdue-model-network-segmentationSkillMaps industrial networks into Purdue-model security zones, organizing segmentation requirements and communication boundaries for operational-control environments.Third-party community repo, not affiliated with Anthropic
- implementing-secret-scanning-with-gitleaksSkillIntegrates Gitleaks into local and CI checks, defining repository scanning rules and response steps for accidental credential exposure.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-sigstore-for-software-signingSkillPlans Sigstore signing and verification for software artifacts, connecting identity-based signatures and transparency evidence to supply-chain checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-ticketing-system-for-incidentsSkillLinks security alerts to incident tickets, organizing ownership, escalation and service-level tracking across supported case-management tools.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-zero-trust-in-cloudSkillPlans cloud access around identity and continuous verification, combining segmentation and device considerations into a scoped zero-trust architecture.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- investigating-ransomware-attack-artifactsSkillOrganizes preservation and analysis of ransomware artifacts, retaining evidence provenance before investigators assess variant identity and incident scope.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-api-security-testing-with-postmanSkillBuilds Postman collections for scoped API security assessments, organizing roles, requests and assertions into repeatable authorization and exposure checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-cloud-native-threat-hunting-with-aws-detectiveSkillUses Amazon Detective behavior graphs to examine cloud incident entities and timelines, linking observations from supported AWS telemetry sources.Third-party community repo, not affiliated with Anthropic
- performing-cve-prioritization-with-kev-catalogSkillCombines CISA exploited-vulnerability records with prioritization signals, producing a ranked patch-review list with explicit scoring assumptions.Third-party community repo, not affiliated with Anthropic
- performing-dynamic-analysis-with-any-runSkillObserves malware behavior in an interactive cloud sandbox, organizing execution findings for specialist analysis with isolation and disclosure considerations.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-gcp-security-assessment-with-forsetiSkillExamines GCP access and resource configuration through posture-assessment tooling, organizing cloud-security findings against the available project evidence.Third-party community repo, not affiliated with Anthropic
- performing-insider-threat-investigationSkillStructures an insider-threat investigation around access records and observed actions, separating evidence collection from conclusions about intent.Third-party community repo, not affiliated with Anthropic
- performing-lateral-movement-detectionSkillCorrelates endpoint and network events for lateral-movement indicators, producing defensive investigation leads across several common movement patterns.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-memory-forensics-with-volatility3SkillExamines captured RAM with Volatility 3, correlating processes and network artifacts for a controlled investigation of potentially sensitive memory evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-power-grid-cybersecurity-assessmentSkillStructures security review of power-grid systems around network zones and operational requirements, connecting findings to infrastructure-specific assessment evidence.Third-party community repo, not affiliated with Anthropic
- performing-steganography-detectionSkillExamines media for concealed data using steganalysis tools, organizing extraction findings for a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-user-behavior-analyticsSkillBuilds user-behavior anomaly reviews from authentication and activity events, connecting unusual patterns to analyst investigation rather than automatic intent judgments.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsSkillParses Windows forensic artifacts with specialist utilities, organizing host timelines and evidence for an authorized incident investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- scanning-containers-with-trivy-in-cicdSkillAdds Trivy scans to container delivery workflows, collecting package and configuration findings so remediation can be checked before release.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- securing-container-registry-imagesSkillOrganizes image scanning, signing and registry access controls, connecting container artifact provenance to release checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- testing-ransomware-recovery-proceduresSkillChecks ransomware recovery plans through restore tests and recovery-time evidence, documenting whether backups support the intended clean-recovery sequence.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- ad-creativeSkillDevelops paid-ad headlines and copy variants from a campaign brief, supporting creative iteration across messages and audience angles.
- business-name-fitSkillEvaluates business-name candidates against a founder's cultural identity and target markets, balancing personal meaning with professional usability.
- c-level-skillsSkillRoutes a management question through the C-level advisory bundle, helping select the relevant executive role or cross-functional workflow.
- caio-reviewSkillQuestions an AI feature plan about model choice, evaluation, regulation and economics, making evidence gaps visible before an executive approves it.
- captureSkillOrganizes an unstructured brain dump into actionable items and reference material while retaining the information supplied in the original notes.
- chief-ai-officer-advisorSkillEvaluates startup AI strategy across sourcing choices, regulation and cost, preparing decision support for an executive rather than implementation code.
- chief-customer-officer-advisorSkillUses retention and customer-segment evidence to examine customer strategy, separating churn causes from headline revenue-retention figures.
- cmo-advisorSkillConnects brand positioning and growth choices to marketing budgets and team design, preparing a coherent marketing leadership plan.
- cmo-reviewSkillChallenges positioning and campaign plans through customer definition, narrative and channel fit, identifying weaknesses behind an unclear marketing message.
- collab-proofSkillReviews a human-agent work session to distinguish contributions and decisions, producing a retrospective grounded in collaboration evidence.
- commercial-forecasterSkillBuilds a bookings or recurring-revenue forecast from pipeline assumptions, separating committed outcomes from optimistic and pipeline-only scenarios.
- competitive-teardownSkillCombines public competitor signals from pricing, reviews and hiring into a structured comparison, keeping observations separate from inferred strategy.
- compliance-readinessSkillQuestions a compliance program about its scope, readiness and evidence, highlighting decisions needed before an audit or a new framework rollout.
- content-creatorSkillRedirects older content-creator requests to more specific writing or marketing workflows, preserving compatibility with a retired entry point.
- copywritingSkillRewrites product-page and landing-page copy from a marketing brief, clarifying the offer and the visitor's next action.
- cpo-advisorSkillExamines product vision, portfolio choices and evidence of market fit to support product-leadership decisions and organizational planning.
- decideSkillRecords a founder-approved decision memo in the executive memory system, keeping its approved outcome separate from discussion transcripts.
- decision-loggerSkillSeparates raw meeting transcripts from approved executive decisions, retaining a decision history that can be reviewed without confusing drafts with commitments.High static risk — review source first
- epic-designSkillBuilds layered interactive websites from a visual brief, combining scroll-driven storytelling and animation without requiring a WebGL scene.
- eu-ai-act-specialistSkillMaps an AI system and its evidence to operational EU AI Act questions, organizing risk classification and compliance work for specialist review.
- executive-mentorSkillStress-tests a founder's plan or difficult decision, surfacing tradeoffs and questions for board preparation or a retrospective.
- handoffSkillCondenses a working conversation into a continuation document, recording task state and next actions while removing secret values.High static risk — review source first
- iso27001-audit-prepSkillPrepares an ISO 27001 audit through questions about ISMS scope and supporting evidence, organizing gaps ahead of internal or certification review.
- iso42001-specialistSkillReviews an AI management system against ISO 42001 requirements, organizing clause-level evidence gaps and remediation priorities for internal audit preparation.
- knowledge-opsSkillCreates and checks internal procedures from an operations brief, producing maintainable SOPs and runbooks for recurring company work.High static risk — review source first
- linkedin-analyticsSkillAnalyzes a user's LinkedIn performance data to distinguish post-level patterns from noise and formulate a testable explanation for reach changes.
- linkedin-strategySkillPlans LinkedIn positioning, content themes and publishing cadence around a professional goal, producing a sustainable channel plan rather than individual posts.
- llm-wikiSkillTurns source material into a maintained Obsidian knowledge base, managing concept pages, cross-links and source ingestion over time.High static risk — review source first
- local-seo-managerSkillReviews local-search visibility for service-area businesses, connecting business-profile and location evidence to a focused local SEO action plan.
- ma-playbookSkillStructures an acquisition decision around diligence, valuation, deal terms and integration, supporting either a buyer or a company preparing to sell.
- marketing-psychologySkillApplies behavioral concepts to a marketing problem, explaining how a proposed message or experience relates to customer decisions.
- md-documentSkillConverts a long Markdown document into a self-contained HTML reading interface with navigation, search and copying aids.High static risk — review source first
- meeting-analyzerSkillExamines meeting transcripts for communication patterns and behavioral problems, turning observed examples into coaching feedback.
- memory-reviewSkillReviews an agent's stored memory for stale facts, duplication and promotion candidates, turning accumulated notes into a maintenance plan.
- notebooklmSkillOperates NotebookLM through its browser interface to locate notebooks and work with their source-grounded questions and materials.
- office-hoursSkillUses a focused founder interview to examine customer problems, distribution and defensibility before offering startup advice.
- paid-adsSkillPlans paid-media campaigns from audience and offer requirements, organizing channel choices, targeting and performance questions for subsequent validation.
- pricing-strategistSkillCompares pricing models and willingness-to-pay research for a product, turning evidence into a pricing hypothesis and validation plan.
- product-discoverySkillMaps a product opportunity's assumptions and research needs, preparing a discovery sprint before resources are committed to delivery.
- programmatic-seoSkillPlans data-backed page templates for scaled search acquisition, connecting page structure and datasets to distinct visitor tasks and quality requirements.
- quality-manager-qms-iso13485SkillOrganizes medical-device quality-system documentation and audit work around ISO 13485, including corrective actions and document-control processes.
- revenue-operationsSkillExamines SaaS pipeline and revenue measurements to identify forecasting gaps and weaknesses in the go-to-market process.
- saas-metrics-coachSkillInterprets supplied SaaS revenue and customer figures through retention, acquisition and recurring-revenue metrics, highlighting business-health questions to investigate.
- security-guidanceSkillChecks proposed tool actions for common implementation hazards through a Claude Code hook, flagging risky patterns before the action runs.
- senior-securitySkillRoutes security questions toward threat modeling or focused assessment, using structured risk methods to organize findings and next investigations.High static risk — review source first
- signup-flow-croSkillReviews account-creation and trial-entry flows for conversion friction, turning observed signup obstacles into focused improvement hypotheses.
- skill-security-auditorSkillInspects an agent skill before installation, examining its instructions and files for suspicious permissions or exploitable behavior.High static risk — review source first
- vpe-advisorSkillReviews engineering delivery and hiring evidence to locate organizational bottlenecks and prepare priorities for a startup engineering leader.
- webinar-marketingSkillOrganizes a webinar's positioning, promotion and follow-up around demand generation, producing a plan that spans the event lifecycle.
- weekly-reviewSkillReviews commitments and stalled projects on a weekly cycle, producing a refreshed set of next actions and unresolved decisions.
Framelink MCP for FigmaMCPMCP server that gives coding agents simplified layout and style data from Figma files for design-to-code work.
academy-guideSkillFinds relevant Claude Academy learning materials for questions about using Claude and its products.
algorithmic-artSkillGuides original generative artwork in p5.js, including seeded randomness and interactive controls.
brand-guidelinesSkillApplies Anthropic brand colors and typography to visual artifacts.
canvas-designSkillGuides original static visual work, such as posters, in PNG or PDF format.
claude-apiSkillProvides reference material for Claude API and SDK work, covering model configuration, streaming, tools and related features.
discernment-nudgeSkillSuggests brief follow-up questions that help users check facts, assumptions and missing context in substantive answers or drafts.
doc-coauthoringSkillStructures collaborative drafting of documentation, proposals and specifications through context gathering, revision and reader checks.
docxSkillSupports creating, reading and editing Word documents and templates, including formatting, revisions and document content.
frontend-designSkillOffers guidance on deliberate visual design, typography and aesthetic decisions for new or revised interfaces.
internal-commsSkillProvides formats and resources for internal communications, including status updates, newsletters and incident reports.
mcp-builderSkillGuides development of MCP servers that expose external services through tools in Python or TypeScript.
pdfSkillCovers PDF workflows including extraction, merging, splitting, rotation, forms and OCR.
Choose by workflow
Short guides that compare candidates for one job, with the reference docs they follow.
Most of them compare MCP (Model Context Protocol) servers, for example for Claude Code, Codex or Blender.
Best MCP Servers for Claude CodeModel Context Protocol (MCP) servers give Claude Code extra tools.earshotReason NetworkGraphicleAudio Studio MCPjevcrawlFilesystemGit
MCP for Claude: Best Servers and How to Add ThemShort answer: in the Claude desktop app, add one MCP server for the job in front of you — Filesystem to work with chosen folders, Memory to keep context between chats, Fetch to read web pages.FetchFilesystemMemory
Best MCP Servers for CodexCodex can connect to Model Context Protocol (MCP) servers for extra tools.Reason NetworkGraphicleFilesystemGitMemory
ArtCraft creative applicationsCompare source-linked application hubs for image editing and documents.ArtCraftPhotoCraftWordCraft
Best Blender MCP Servers & Skills (2026)Blender MCP connects an AI client to a running Blender session through the Model Context Protocol, so the model can read your scene and run Python through Blender’s API.Blender Agent Skills
Best Reverse Engineering MCP ServersA reverse engineering MCP server lets an agent drive analysis tools such as Ghidra, IDA Pro, radare2 or JADX through the Model Context Protocol and report what it found with evidence.GhidraMCPida-pro-mcpradare2-mcpreverse-engineering-assistant (ReVa)jadx-ai-mcp
Harness² (harness2) vs OpenCode and Codex CLIHarness² (harness2) is an open-source research framework from Google Research that tunes the harness around an agent while the model stays fixed.
Install Claude Code Skills: Folder, Plugin & CLIChoose one of three ways to install Claude Code skills: copy a complete skill folder, install a plugin from its marketplace, or use npx skills add with Claude Code selected.frontend-designpdfvercel-react-best-practices
Best MCP Servers for Cursor: Files, Git & MemoryChoose a Cursor MCP server for one missing capability: file access, repository history, web fetching or persistent context.FetchFilesystemGitMemory
Claude Code Security: Audit & Hardening SkillsA Claude Code security review starts with an authorized scope and a question to investigate.Cloudflare Security Auditsecurity-and-hardening
Best Codex Skills (2026)Codex can use agent skills: folders with a SKILL.Skills for Real EngineersgstackTaste SkillawwwardsAI Slop DetectorGhostPaw Codexhuashu-motionLemo-OpuscarMachine SkillanatomyBlender Agent Skills
Best Claude Skills for Video EditingPick a Claude skill by the video you need to ship.huashu-motionpapercut-explainerLemo-OpuscarMachine Skill
Questions before you install
Is a listed entry safe to install?
Not automatically. Listed ≠ audited. We pin each entry to a public commit so you can read exactly what you install. Read the SKILL.md or README, check bundled scripts, and limit tool and file access before you enable it.
What is a Claude skill?
A folder with a SKILL.md file that tells an agent how to carry out one task, sometimes with scripts or reference files. Claude Code loads skills from ~/.claude/skills or a project’s .claude/skills folder.
How are skills different from MCP servers?
A skill describes a workflow. An MCP (Model Context Protocol) server is a program that exposes tools or data to a compatible AI client. A project may offer both, but review their permissions and setup separately.
How is the list ordered?
By the date of each entry’s pinned upstream commit, newest first. You can also sort by guide citations or name. We do not have star, download or install counts, so we never show them. How we rank
Are these resources officially endorsed?
No. AgentSkillsDir is an independent directory run by Orbitlane Labs and is not affiliated with any listed publisher. Source links and pinned revisions help you inspect each entry; they are not a certification.
How do I suggest a resource?
Use the submission form to share a public project link, or email submit@agentskillsdir.com. Listing is free and not guaranteed. Submit
What are the best Claude skills and MCP servers to start with?
There is no single best list; pick by the job you need done. AgentSkillsDir lists source-checked Claude skills and MCP servers, each pinned to a public commit, and orders them by the date of that commit. Our workflow guides compare candidates for one task: for Claude Code, the Filesystem and Git MCP servers are common starting points. Read each entry’s SKILL.md or README before you install it.
How do I install a Claude skill from GitHub?
A skill is a folder that contains a SKILL.md file. Copy that folder from the repository into ~/.claude/skills/ to use it in every project, or into .claude/skills/ inside one project. Claude Code picks up skills from those locations. Each entry on AgentSkillsDir links to the pinned commit and shows a setup snippet you can copy.
How do I add an MCP server to Claude Code?
Run claude mcp add with a name and the server’s launch command, for example: claude mcp add fetch -- uvx mcp-server-fetch. Then run claude mcp list to confirm it is registered. For Claude Desktop, add the server under mcpServers in claude_desktop_config.json and restart the app. Use the launch command from the server’s own README.
What goes in a SKILL.md file, and how is a skill folder structured?
SKILL.md starts with YAML front matter that gives the skill a name and a description of when to use it, followed by Markdown instructions for the agent. The folder can also hold scripts, reference documents or templates that the instructions point to. Keep the folder name and the name field consistent, and review any bundled scripts before you enable a skill.
Is AgentSkillsDir a skills marketplace, and can I submit my MCP server?
AgentSkillsDir is a free, independent directory, not a store: nothing is sold here, and every entry links to its public source repository. You can submit a public GitHub link for a Claude skill, MCP server, plugin or agent through the submission page or by emailing submit@agentskillsdir.com. Submissions are reviewed before they are listed, and listing is not guaranteed. Submit