Agent skills directory: skills worth installing
366 source-checked Claude skills, MCP servers, plugins and agents, each pinned to a public commit.
Setup snippets for
- 366 entries
- 61 publishers
- Checked 17 Oct 2026 – 3 Nov 2026
From the index
How we rankCommunity entries first, then Anthropic official entries; newest pinned commit within each group.
Community entries first; ordered by citations in our workflow guides within each group.
Community entries first; pinned README documents a one-line setup command.
THE SHORTLIST
Featured
A few good places to start. Explore the source, then make it yours.
SkillMIT
GhostPaw Codex
GhostPawJS
Local memory for AI agents in one SQLite file.
SkillMIT
gstack
garrytan
Garry Tan’s Claude Code skill set with role-based tools for planning, design, engineering review, QA, release and docs.
MCPReview source terms
Filesystem
modelcontextprotocol
Implements file-system operations through an MCP server built with Node.js.
AppMIT OR Apache-2.0
PhotoCraft
storytold
Provides layered image editing, including Photoshop document handling and adjustment tools.
PluginMIT
Superpowers
obra
Skills and workflow plugin for coding agents: brainstorm, write a plan, test first, then review the result.
AgentMIT
OpenAI Agents SDK
openai
Provides a Python framework for agent workflows that supports multiple model providers.
NEW IN THE INDEX
This week’s trending
Fresh skills and tools to put on your radar.
WEEKLY INTAKE
Editorial picks in intake order, not a live star-growth ranking.
- Skills for Real EngineersComposable engineering skills for requirements, test-driven development, architecture review and turning plans into small tasks.
- Cloudflare Security AuditCloudflare’s defensive audit workflow uses reconnaissance, independent validation and source-grounded reports to investigate a codebase.
- ECCA coding-agent harness of skills, rules, hooks and memory, with guided setup for Claude Code and other supported agents.
- Spec KitGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
- XERJLocal-first code, document and log search with lexical and vector retrieval, exposed to coding agents through MCP.
- PaperclipA self-hosted control plane for coordinating agent teams with roles, budgets, shared work and runtime adapters.
- DeerFlowByteDance’s self-hosted agent harness combines sandboxed tools, memory, skills and subagents for longer tasks.
- OpenSpecA lightweight specification workflow that aligns a proposed change, its design and tasks before implementation.
- Lemo-OpuscarA code-driven film toolkit with 59 documented styles, guides and rendering tools for creating short films with a coding agent.
- MCP for BlenderA community MCP bridge that lets an LLM inspect and change Blender scenes, objects and materials through a local addon.
All entries
366 entries, metadata checked 17 Oct 2026 – 3 Nov 2026
Use case
Productivity120Development89Security analysis69Scientific research65Creative tools25Integrations24Threat detection18Incident response & forensics17Cloud & infrastructure security12Application & supply-chain security10Identity & email security3OT & ICS security3Data / E-commerce1Healthcare1Medical vocabularies1Publisher
alirezarezvani76mukul97563phuryn41addyosmani26anthropics13vercel-labs9kepano6K-Dense-AI3storytold3alchaincyf2github2Leonxlnx2mattpocock20xS4N4TG16reams1affaan-m1ahujasid1AirsupHQ1artouc1assafkip1bytedance1ChromeDevTools1cloudflare1cursor1debpalash1DietrichGebert1EL4CTEO1FeedHive1Fission-AI1Garinmckayl1garrytan1GhostPawJS1GLips1Graphicle-AI1Graphify-Labs1Jakeschincariol1juliobsz1kanaworksai-hue1lemomo-ai1microsoft1obra1openai1paperclipai1RayenMlayeh1reason-machines1Saivion1theCosmicCrafter1thedotmack1tt-a1i1upstash1wheresryan221xerj-org1Yuan1z08251ZSeven-W1calesthio0footalytics0heydamir0latent-spaces0modelcontextprotocol0OMOPHub0Pangolin-spg0Community first · Anthropic official entries follow. Sort applies within each group.
Showing 289 of 366
SwiftPiecesMCPPublic MCP for searching and installing free animated SwiftUI pieces. No account for the free library; optional Pro is a separate paid server.HostedFree MCP (no account)MIT + Commons ClauseOptional PromcpListed ≠ audited
claude-memPluginPlugin that records what happens in agent sessions, compresses it and adds relevant context back into later sessions.
agent-browserSkillVercel Labs’ browser automation CLI for AI agents (Chrome via CDP, accessibility-tree snapshots) and its discovery skill. Install the CLI, add the skill, then load workflows with agent-browser skills get core.
archifySkilltt-a1i’s Archify agent skill: turns an idea, plan or codebase into a standalone interactive HTML architecture diagram for people to explore and share.
graphifySkillGraphify Labs’ /graphify skill and CLI: turns a folder of code, docs and PDFs into a queryable knowledge graph for coding agents. PyPI package graphifyy (double y).
grill-meSkillThe grill-me skill from mattpocock/skills (MIT): type /grill-me with a loose idea and the agent interviews you in rounds until you can commit. Not a code generator. Install it together with its grilling dependency.
PonytailSkillThe Ponytail skill from DietrichGebert/ponytail (MIT): a “lazy senior” coding mode that makes Claude Code, Codex, Cursor and other agents ship the smallest complete change. Levels lite, full and ultra, plus /ponytail-review and /ponytail-audit. Not a hairstyle guide.
VoiceStudioSkillAgent skill and MCP endpoint for debpalash/VoiceStudio, an open-source local voice studio: speech, transcription, cloning, dubbing. Needs the app running on your machine.Local dependenciesAGPL source
pstackSkillLauren Tan’s (poteto) skill pack for rigorous AI-assisted engineering: run setup, then /poteto-mode routes playbooks and the other skills.
DeerFlowAgentByteDance’s self-hosted agent harness combines sandboxed tools, memory, skills and subagents for longer tasks.Local dependenciesExecutes code
GhostPaw CodexSkillLocal memory for AI agents in one SQLite file.Local dependencies
MCP for BlenderMCPA community MCP bridge that lets an LLM inspect and change Blender scenes, objects and materials through a local addon.Local dependenciesExecutes code
OpenSpecSkillA lightweight specification workflow that aligns a proposed change, its design and tasks before implementation.
PaperclipAppA self-hosted control plane for coordinating agent teams with roles, budgets, shared work and runtime adapters.Local dependenciesExecutes code
XERJMCPLocal-first code, document and log search with lexical and vector retrieval, exposed to coding agents through MCP.Local dependencies
Spec KitPluginGitHub’s specification-driven development toolkit organizes requirements, plans and implementation through coding-agent integrations.
Lemo-OpuscarSkillA code-driven film toolkit with 59 documented styles, guides and rendering tools for creating short films with a coding agent.Local dependenciesExecutes code
anatomySkillAgent skill that builds detailed, interactive isometric illustrations of real machines and technical ideas as SVG, with optional WebGL effects.
ECCPluginA coding-agent harness of skills, rules, hooks and memory, with guided setup for Claude Code and other supported agents.Executes code
gstackSkillGarry Tan’s Claude Code skill set with role-based tools for planning, design, engineering review, QA, release and docs.
Skills for Real EngineersSkillComposable engineering skills for requirements, test-driven development, architecture review and turning plans into small tasks.
Audio Studio MCPMCPRuns Stable Audio 3 locally on Apple Silicon for music and sound effects, then loops, normalizes and exports the audio.
awwwardsSkillGuides website planning, implementation and browser checks, with a separate jury skill for reviewing the result.
Chrome DevTools MCPMCPOfficial Chrome DevTools MCP server that lets coding agents debug, inspect network traffic and record performance traces in Chrome.
Codex OpenPencilPluginConnects Codex to an editable OpenPencil canvas for inspecting layers, refining layouts and saving native .op designs.
earshotMCPAnalyzes local audio, checks timing against video, and exposes sound measurements and synthesis tools through MCP.
GraphicleMCPIndexes code, documents and agent-session context locally, then serves cited excerpts and code-graph tools over MCP.
huashu-motionSkillBuilds product videos with a local motion runtime, composed audio and a browser editor for frame-specific revisions.
Reason NetworkMCPConnects teammates’ coding-agent sessions through a local daemon with peer messaging and MCP team-directory tools.
Taste SkillSkillFrontend design skill that gives agents an art direction, reference layouts and a browser check before calling a page done.
Context7MCPUpstash’s MCP server and CLI that pull current, version-specific library docs into a coding agent’s context.
Huashu DesignSkillHuashu Design by 花叔 (alchaincyf) helps agents build hi-fi HTML prototypes, slide decks and animations with MP4 export, plus structured design reviews. Not meant for SEO websites or production web apps.- ab-test-analysisSkillInterprets A/B experiment results using sample-size and uncertainty checks, producing a supported ship, extend or stop recommendation.
AnimaSkillBuilds interactive biology diagrams with isometric structures, mechanism controls and references for displayed claims.- ansoff-matrixSkillMaps growth options across existing and new products and markets, making the assumptions behind each Ansoff strategy explicit.
- beachhead-segmentSkillCompares potential launch segments by pain, purchasing capacity and reachable market share, selecting a focused first market to validate.
Blender Agent SkillsSkillPackages Blender modeling, materials, animation, rendering and asset checks as a collection of agent skills.- brainstorm-okrsSkillTurns company priorities into team-level objectives and measurable key results, supporting a focused quarterly goal discussion.
- business-modelSkillDescribes how a business creates and captures value through the nine Business Model Canvas sections, revealing dependencies for further validation.
ClaudemySkillResurfaces web research as short audio lessons, source-linked lesson cards and a reusable course playbook.- code-reviewSkillReviews implementation boundaries for actionable correctness defects, tracing each finding from an agreed contract to the code that violates it.
- cohort-analysisSkillOrganizes engagement and retention data into cohorts, comparing segment trends to expose differences hidden in aggregate product metrics.
- create-prdSkillBuilds a lean product requirements document from product context, organizing objectives, users, value and solution decisions into a reviewable brief.
- draft-ndaSkillStructures an NDA draft from the parties, information types and jurisdiction, marking clauses that need qualified legal review before use.
- dummy-datasetSkillGenerates synthetic datasets from requested columns and constraints, producing test fixtures in formats such as CSV, JSON or SQL.
- grammar-checkSkillChecks supplied prose for grammar, logic and flow, suggesting localized corrections that preserve the author's wording and intended argument.
- growth-loopsSkillExplores recurring growth mechanisms around a product's user behavior, comparing candidate loops and the conditions each needs to sustain itself.
- intended-vs-implementedSkillCompares a system's intended behavior with its implementation, building an explicit model of expectations to reveal gaps generic scanners may miss.
- interview-scriptSkillBuilds a customer-interview script around jobs and real experiences, avoiding leading questions and premature product pitching.
- job-storiesSkillTranslates customer situations and motivations into job stories, adding expected outcomes and acceptance conditions for product-backlog discussion.
- metrics-dashboardSkillPlans a product metrics dashboard with named data sources and alert rules, tying each measure to an operational or product question.
- monetization-strategySkillDevelops monetization options for a product and audience, pairing each proposed revenue model with fit assumptions, risks and validation experiments.
- nature-image2pptSkillReconstructs screenshot or image-only slides as editable PowerPoint objects, separating layout elements and text rather than merely embedding a full-page image.High static risk — review source first
- north-star-metricSkillDefines a product's North Star metric and supporting inputs, checking whether the measurement reflects the value users receive.
- outcome-roadmapSkillRewrites a feature-output roadmap around intended outcomes, connecting proposed initiatives to user and business changes rather than deliverable counts.
papercut-explainerSkillCoordinates nine skills and a Remotion library to make vertical explainers with layered paper scenes and timed captions.
PhotoCraftAppProvides layered image editing, including Photoshop document handling and adjustment tools.- pre-mortemSkillChallenges a PRD or launch plan with a pre-mortem, grouping possible failures and identifying which risks could block launch.
- pricing-strategySkillExamines pricing models, competitors and willingness-to-pay evidence, producing a pricing design whose uncertain assumptions remain visible.
- prioritization-frameworksSkillCompares prioritization frameworks and their required inputs, helping a team select an approach suited to its decision rather than a universal score.
- product-strategySkillOrganizes product strategy around target segments, value, capabilities and tradeoffs, connecting a vision to the choices required to pursue it.
- release-notesSkillConverts tickets and change records into user-facing release notes, organizing concrete changes by type and explaining their effects.
- retroSkillFacilitates a sprint retrospective from team observations, producing prioritized improvements with owners and follow-up actions.
- review-resumeSkillReviews a product-management resume against a target role, improving evidence, structure and relevance without inventing experience.
- sentiment-analysisSkillAnalyzes feedback for sentiment and customer-job patterns, organizing evidence about satisfaction across distinct user segments.
- shipping-artifactsSkillAssembles the durable documentation needed to review an AI-built application, covering architecture, permissions and operational evidence before shipping.
- sprint-planSkillBuilds a sprint plan from capacity, candidate stories and dependencies, exposing delivery risks before the team commits to scope.
- sql-queriesSkillDrafts SQL from a question and supplied schema information, targeting supported warehouse dialects while making the query's assumptions visible.
- stakeholder-mapSkillMaps stakeholders by influence and interest, producing targeted communication approaches and a plan for keeping relevant people informed.
- startup-canvasSkillCombines product strategy and business-model questions in a startup canvas, separating strategic choices from revenue and cost assumptions.
- strategy-red-teamSkillStress-tests a product strategy's key assumptions, ranking plausible failure modes and inexpensive validation checks before delivery investment.
- summarize-interviewSkillSynthesizes a customer interview into a structured record of jobs, satisfaction evidence and follow-up actions for product discovery.
- summarize-meetingSkillTurns a meeting transcript into structured notes with decisions and assigned actions, keeping discussion context available for later follow-up.
- test-scenariosSkillDerives test scenarios from user stories, recording starting conditions, roles, actions and expected results for systematic quality review.
- user-segmentationSkillGroups users by behavior, needs and feedback evidence, producing actionable segments instead of treating the entire audience as one persona.
- user-storiesSkillWrites backlog stories with acceptance criteria and supporting design context, applying story-quality conventions to make work discussable and testable.
- value-prop-statementsSkillTurns an existing value proposition into customer-facing statements for marketing and onboarding, adapting wording to specific audience decisions.
- value-propositionSkillDevelops a detailed customer value proposition by comparing the user's situation, desired change and alternatives before shaping the offer.
WordCraftAppProvides a Rust application for writing and document design.- wwasSkillStructures a backlog item as purpose, change and acceptance conditions, connecting product intent to an independently testable piece of work.
GitHub MCP ServerMCPGitHub’s official MCP server for working with repositories, issues, pull requests and Actions from an agent.
jevcrawlMCPCrawls a site toward a question and returns source-linked passages, using an external Jev decision model to rank the route.
OpenAI Agents SDKAgentProvides a Python framework for agent workflows that supports multiple model providers.
PhotoCraft MCPMCPLets compatible MCP clients control PhotoCraft editing actions through natural-language requests.
Agent Skills (Addy Osmani)PluginAddy Osmani’s collection of 25 engineering skills for coding agents, covering spec, planning, testing, review and shipping.- api-and-interface-designSkillTurns API requirements into endpoint and module contracts, with attention to compatibility, error handling and interface boundaries.
- browser-testing-with-devtoolsSkillUses browser observations, DOM inspection and console output to diagnose interface failures and check fixes in Chrome DevTools.High static risk — review source first
- ci-cd-and-automationSkillBuilds delivery pipelines from a project's build and test commands, organizing repeatable checks before environment-specific deployment stages.
- code-review-and-qualitySkillReviews a proposed code change across correctness and maintainability concerns, turning concrete defects into prioritized review findings.
- code-simplificationSkillRefactors working code to make control flow and responsibilities easier to follow while preserving the existing observable behavior.
- constraint-driven-developmentSkillConverts a project's quality expectations into a written contract, so implementation checks use explicit thresholds rather than shifting assumptions.
- context-engineeringSkillOrganizes rules and task context for coding agents, helping a new session start with relevant information and fewer conflicting instructions.High static risk — review source first
- debugging-and-error-recoverySkillInvestigates failed tests, broken builds and unexpected behavior through reproducible evidence, narrowing causes before choosing a repair.High static risk — review source first
- deprecation-and-migrationSkillPlans transitions away from old APIs or implementations, covering compatibility, user migration and the eventual removal of deprecated behavior.
- documentation-and-adrsSkillRecords architectural choices and public-interface changes as documentation and decision records, preserving the reasons future maintainers need.
- doubt-driven-developmentSkillChallenges a technical decision through an independent review of its assumptions, producing objections to resolve before implementation proceeds.
- frontend-ui-engineeringSkillDevelops responsive interface components from product requirements, checking layout, accessibility and interaction behavior as part of implementation.
- git-workflow-and-versioningSkillOrganizes branches, commits and conflict resolution for a code change, including splitting a mixed working tree into reviewable units.High static risk — review source first
- idea-refineSkillDevelops an unclear idea through alternatives and assumption checks, ending with a more concrete concept that can guide further work.High static risk — review source first
- incremental-implementationSkillBreaks a multi-file implementation into small working increments, pairing each increment with evidence that its behavior is correct.High static risk — review source first
- interview-meSkillUses a sequential interview to clarify a request's underlying goal, resolving uncertainty before treating an initial solution idea as a specification.
Machine SkillSkillCreates interactive 3D machine explanations in standalone HTML, with small physics models and optional video capture.- observability-and-instrumentationSkillPlans logs, measurements and traces around a feature's production behavior, making failures and operational questions easier to investigate.
- performance-optimizationSkillInvestigates slow frontend, backend and database paths using measurements, then evaluates whether a targeted optimization improves the observed bottleneck.
- planning-and-task-breakdownSkillTurns an agreed specification into ordered implementation tasks, exposing dependencies and verification steps before work begins.
- security-and-hardeningSkillReviews input handling, authentication and integrations for exploitable weaknesses, organizing source-backed hardening work around concrete attack paths.
- shipping-and-launchSkillChecks a proposed production launch against operational prerequisites, gathering launch checks and unresolved readiness issues before release.
- source-driven-developmentSkillChecks an implementation approach against official references, connecting technical decisions to documented behavior instead of relying on recalled APIs.
- spec-driven-developmentSkillCreates a specification from a new feature or project idea, making objectives, requirements and acceptance conditions explicit before coding.
- test-driven-developmentSkillUses failing tests, a minimal implementation and subsequent refactoring to develop a behavior change with a repeatable correctness check.
- using-agent-skillsSkillMatches the current task to available agent skills, explaining when an existing workflow should be loaded and used.
AI Slop DetectorSkillChecks drafts against 120 recurring writing patterns and suggests plain rewrites with examples.- generate-imageSkillCreates or revises raster visuals through the OpenRouter image interface, translating a visual brief into model requests and generated image assets.High static risk — review source first
- markitdownSkillConverts supported documents and selected web inputs to Markdown with MarkItDown, preparing readable text for search, analysis or retrieval ingestion.High static risk — review source first
- pi-agentSkillConfigures and extends the Pi terminal coding harness, connecting model providers and local settings to reusable skills and extensions.High static risk — review source first
ArtCraftAppOffers visual tools for interactive AI image and video creation, with 2D composition and 3D scene staging.
stop-describing-uiSkillReviews interface text for redundant explanations and replaces them with clearer labels, controls or spacing.
SuperpowersPluginSkills and workflow plugin for coding agents: brainstorm, write a plan, test first, then review the result.- find-skillsSkillFinds existing agent skills for a requested capability, helping users compare relevant candidates before choosing whether to install one.
- pr-labelingSkillClassifies a skills-CLI pull request from its description and patch, recommending labels while respecting those already assigned.
- triageSkillTriages skills-CLI bugs using reproducible evidence, identifying narrow fixes that merit maintainer attention.
Playwright MCPMCPMicrosoft’s MCP server for driving a real browser through accessibility-tree snapshots instead of screenshots.
ArtCraft MCPMCPBundles MCP servers, command-line automation, skills and bridge routes for ArtCraft media workflows.
replica-skillSkillEleven Claude skills by Jake Schincariol that map public app flows and rebuild features clean-room style, from recon to deploy.- defuddleSkillExtracts the main readable content of an HTML page into Markdown with Defuddle, reducing surrounding page markup for subsequent reading or analysis.
- json-canvasSkillCreates visual knowledge maps as JSON Canvas files, representing supplied concepts through editable nodes, groups and connections.
- knapSkillCombines structured data with Knap templates to render Markdown notes, supporting repeatable document creation from JSON or CSV inputs.
- obsidian-basesSkillDefines Obsidian Base files with filters, formulas and views, turning existing note properties into configurable database-style displays.
- obsidian-cliSkillUses Obsidian's CLI to manage vault notes and properties, with additional commands for inspecting and developing plugins or themes.
- obsidian-markdownSkillWrites Obsidian-compatible notes with properties, wikilinks, embeds and callouts, preserving syntax needed for the vault's linked reading experience.
Cloudflare Security AuditSkillCloudflare’s defensive audit workflow uses reconnaissance, independent validation and source-grounded reports to investigate a codebase.- analyzing-browser-forensics-with-hindsightSkillExamines Chromium browser artifacts for forensic investigation; its access to sensitive browser records requires specialized evidence-handling controls.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-docker-container-forensicsSkillOrganizes evidence from Docker images, volumes and logs to investigate a compromised container and reconstruct suspicious activity.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-linux-kernel-rootkitsSkillExamines Linux memory and system observations for kernel-rootkit indicators, connecting discrepancies to a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-memory-dumps-with-volatilitySkillAnalyzes captured memory with Volatility to locate suspicious processes and related artifacts, requiring careful handling of potentially sensitive evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-packed-malware-with-upx-unpackerSkillExamines packed malware samples to recover analyzable program structure, supporting specialist static analysis inside an isolated research environment.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-sbom-for-supply-chain-vulnerabilitiesSkillCorrelates software-bill-of-materials components with vulnerability records, producing dependency findings from CycloneDX or SPDX inputs.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- analyzing-uefi-bootkit-persistenceSkillInvestigates firmware and boot artifacts for UEFI persistence indicators, organizing integrity observations for a specialist forensic review.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- auditing-terraform-infrastructure-for-securitySkillChecks Terraform definitions for risky infrastructure configuration, organizing policy findings about access, exposure and resource safeguards.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-cloud-siem-with-sentinelSkillPlans Microsoft Sentinel connectors, detection queries and response automation, connecting cloud telemetry sources to a monitored security workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-ioc-enrichment-pipeline-with-openctiSkillOrganizes threat-indicator enrichment in OpenCTI, joining connector-supplied context to structured intelligence records for analyst review.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- building-super-timelines-with-plasoSkillCombines host artifacts into Plaso investigation timelines, supporting evidence correlation while preserving the distinction between observed timestamps and inferred events.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- building-vulnerability-scanning-workflowSkillOrganizes vulnerability scanning from asset discovery through remediation tracking, helping security teams prioritize findings rather than treating every alert equally.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- configuring-certificate-authority-with-opensslSkillPlans a certificate-authority hierarchy with OpenSSL, organizing certificate extensions, revocation materials and issuance responsibilities for a controlled PKI.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- configuring-snort-ids-for-intrusion-detectionSkillConfigures Snort intrusion detection from traffic-monitoring requirements, arranging rules, tuning and alert outputs for an operational sensor.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- deobfuscating-javascript-malwareSkillExamines obfuscated malicious JavaScript to support analyst understanding of its behavior, using a controlled malware-analysis context.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- deploying-ransomware-canary-filesSkillPlans monitored decoy files for ransomware detection, relating file placement and change events to an early-warning response workflow.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-attacks-on-scada-systemsSkillOrganizes detection of suspicious industrial-control activity, relating SCADA protocol and network observations to defensive monitoring requirements.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-broken-object-property-level-authorizationSkillReviews API property exposure and update permissions for authorization failures, collecting evidence that distinguishes excess data from unintended write access.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-credential-dumping-techniquesSkillCorrelates Windows and endpoint events to identify credential-dumping indicators, producing defensive detection logic and investigation leads.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-entra-offensive-tools-in-graph-logsSkillQueries Microsoft Graph activity logs for recognizable offensive-tool patterns, supporting defensive investigation of Entra tenant activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-insider-threat-with-uebaSkillBuilds behavior baselines from user and entity events, turning anomalies and peer comparisons into alerts for insider-risk review.Third-party community repo, not affiliated with Anthropic
- detecting-misconfigured-azure-storageSkillAudits Azure Storage configuration for unintended exposure and weak controls, organizing findings about access tokens, encryption, logging and networking.Third-party community repo, not affiliated with Anthropic
- detecting-pass-the-ticket-attacksSkillAnalyzes Kerberos authentication events for suspicious ticket-use patterns, translating observations into SIEM detections and investigation questions.Third-party community repo, not affiliated with Anthropic
- detecting-s3-data-exfiltration-attemptsSkillCorrelates S3 access and cloud telemetry to investigate possible data exfiltration, preserving the difference between unusual access and confirmed loss.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- detecting-suspicious-oauth-application-consentSkillReviews Entra application-consent grants and audit activity for excessive permissions or suspicious authorization, producing an actionable investigation list.Third-party community repo, not affiliated with Anthropic
- eradicating-malware-from-infected-systemsSkillStructures malware eradication around observed persistence and affected systems, organizing removal and verification work within an incident-response process.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- generating-threat-intelligence-reportsSkillTurns threat-intelligence evidence into audience-specific reports, separating strategic context from technical observations for security decision-makers.Third-party community repo, not affiliated with Anthropic
- hunting-for-beaconing-with-frequency-analysisSkillExamines network timing patterns for possible command-channel beaconing, using statistical observations to guide defensive investigation rather than establish attribution.Third-party community repo, not affiliated with Anthropic
- hunting-for-lateral-movement-via-wmiSkillCorrelates Windows process events for suspicious WMI-related movement, producing hunting questions and detection logic for endpoint investigators.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-for-scheduled-task-persistenceSkillInvestigates scheduled-task creation and execution evidence to identify possible persistence, linking hunt hypotheses to host and SIEM observations.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- hunting-saas-sso-token-abuseSkillCorrelates Entra and Okta session evidence for possible stolen-token use, organizing identity-hunting leads from observed authentication activity.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-api-security-posture-managementSkillOrganizes API discovery and risk classification for security-posture management, combining inventory and findings into a reviewable service view.Third-party community repo, not affiliated with Anthropic
- implementing-aws-security-hub-complianceSkillPlans multi-account AWS Security Hub aggregation and standards checks, linking cloud-service findings to a coordinated compliance review.Third-party community repo, not affiliated with Anthropic
- implementing-cloud-security-posture-managementSkillReviews cloud configuration across providers with posture-management tools, organizing exposure and compliance findings for ongoing remediation.Third-party community repo, not affiliated with Anthropic
- implementing-continuous-security-validation-with-basSkillPlans controlled breach-and-attack simulation to evaluate defensive coverage, requiring scoped test approval before any active validation exercise.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-dmarc-dkim-spf-email-securitySkillReviews and configures mail-authentication DNS records, connecting SPF, DKIM and DMARC alignment to sender validation and reporting needs.Third-party community repo, not affiliated with Anthropic
- implementing-fuzz-testing-in-cicd-with-aflplusplusSkillIntegrates AFL++ fuzzing into CI around a defined target, preparing instrumentation and repeatable runs that expose memory-safety failures.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-hashicorp-vault-dynamic-secretsSkillPlans Vault-issued short-lived credentials and certificates, organizing lease management and rotation to reduce dependence on static secrets.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-infrastructure-as-code-security-scanningSkillAdds infrastructure-as-code checks to delivery workflows, translating scanner findings in templates and manifests into focused configuration fixes.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-microsegmentation-with-guardicoreSkillMaps application dependencies for network microsegmentation, using observed east-west communication to design narrower access policies.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-network-policies-for-kubernetesSkillDrafts portable Kubernetes NetworkPolicy definitions from access requirements, covering selectors, default-deny behavior and essential DNS communication.Third-party community repo, not affiliated with Anthropic
- implementing-passwordless-authentication-with-fido2SkillPlans WebAuthn and FIDO2 account flows, connecting authenticator enrollment and server verification to a passwordless authentication design.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-purdue-model-network-segmentationSkillMaps industrial networks into Purdue-model security zones, organizing segmentation requirements and communication boundaries for operational-control environments.Third-party community repo, not affiliated with Anthropic
- implementing-secret-scanning-with-gitleaksSkillIntegrates Gitleaks into local and CI checks, defining repository scanning rules and response steps for accidental credential exposure.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-sigstore-for-software-signingSkillPlans Sigstore signing and verification for software artifacts, connecting identity-based signatures and transparency evidence to supply-chain checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-ticketing-system-for-incidentsSkillLinks security alerts to incident tickets, organizing ownership, escalation and service-level tracking across supported case-management tools.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-zero-trust-in-cloudSkillPlans cloud access around identity and continuous verification, combining segmentation and device considerations into a scoped zero-trust architecture.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- investigating-ransomware-attack-artifactsSkillOrganizes preservation and analysis of ransomware artifacts, retaining evidence provenance before investigators assess variant identity and incident scope.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-api-security-testing-with-postmanSkillBuilds Postman collections for scoped API security assessments, organizing roles, requests and assertions into repeatable authorization and exposure checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-cloud-native-threat-hunting-with-aws-detectiveSkillUses Amazon Detective behavior graphs to examine cloud incident entities and timelines, linking observations from supported AWS telemetry sources.Third-party community repo, not affiliated with Anthropic
- performing-cve-prioritization-with-kev-catalogSkillCombines CISA exploited-vulnerability records with prioritization signals, producing a ranked patch-review list with explicit scoring assumptions.Third-party community repo, not affiliated with Anthropic
- performing-dynamic-analysis-with-any-runSkillObserves malware behavior in an interactive cloud sandbox, organizing execution findings for specialist analysis with isolation and disclosure considerations.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-gcp-security-assessment-with-forsetiSkillExamines GCP access and resource configuration through posture-assessment tooling, organizing cloud-security findings against the available project evidence.Third-party community repo, not affiliated with Anthropic
- performing-insider-threat-investigationSkillStructures an insider-threat investigation around access records and observed actions, separating evidence collection from conclusions about intent.Third-party community repo, not affiliated with Anthropic
- performing-lateral-movement-detectionSkillCorrelates endpoint and network events for lateral-movement indicators, producing defensive investigation leads across several common movement patterns.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-memory-forensics-with-volatility3SkillExamines captured RAM with Volatility 3, correlating processes and network artifacts for a controlled investigation of potentially sensitive memory evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-power-grid-cybersecurity-assessmentSkillStructures security review of power-grid systems around network zones and operational requirements, connecting findings to infrastructure-specific assessment evidence.Third-party community repo, not affiliated with Anthropic
- performing-steganography-detectionSkillExamines media for concealed data using steganalysis tools, organizing extraction findings for a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-user-behavior-analyticsSkillBuilds user-behavior anomaly reviews from authentication and activity events, connecting unusual patterns to analyst investigation rather than automatic intent judgments.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsSkillParses Windows forensic artifacts with specialist utilities, organizing host timelines and evidence for an authorized incident investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- scanning-containers-with-trivy-in-cicdSkillAdds Trivy scans to container delivery workflows, collecting package and configuration findings so remediation can be checked before release.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- securing-container-registry-imagesSkillOrganizes image scanning, signing and registry access controls, connecting container artifact provenance to release checks.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- testing-ransomware-recovery-proceduresSkillChecks ransomware recovery plans through restore tests and recovery-time evidence, documenting whether backups support the intended clean-recovery sequence.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
deploy-to-vercelSkillGuides deploying applications and websites to Vercel, including test deployments.
vercel-composition-patternsSkillExplains reusable React composition techniques, including compound components, render props and context.
vercel-react-best-practicesSkillProvides Vercel Engineering guidance for performance in React and Next.js applications.
vercel-react-native-skillsSkillCovers performance practices for React Native and Expo, including lists, animations and native modules.
vercel-react-view-transitionsSkillGuides interface animations using React view transitions, including navigation and shared elements.- ad-creativeSkillDevelops paid-ad headlines and copy variants from a campaign brief, supporting creative iteration across messages and audience angles.
- adversarial-reviewerSkillSubjects a code change to a deliberately critical review, looking for concrete weaknesses that a familiar implementation perspective may overlook.
- agent-launcher-orchestratorSkillGuides creation and evaluation of a Claude Managed Agent in the user's account, taking an agent brief toward a launchable configuration.High static risk — review source first
- agent-protocolSkillDefines structured messages between executive-role agents, including invocation, isolation and loop-prevention conventions for coordinated work.
- api-design-reviewerSkillReviews REST API designs for inconsistent conventions and breaking changes, turning endpoint definitions into a structured design scorecard.High static risk — review source first
- boost-asio-proSkillSupports asynchronous C++ networking work with Asio, covering event-loop ownership, concurrent handlers and coroutine-based client or server code.
- business-name-fitSkillEvaluates business-name candidates against a founder's cultural identity and target markets, balancing personal meaning with professional usability.
- c-level-skillsSkillRoutes a management question through the C-level advisory bundle, helping select the relevant executive role or cross-functional workflow.
- caio-reviewSkillQuestions an AI feature plan about model choice, evaluation, regulation and economics, making evidence gaps visible before an executive approves it.
- captureSkillOrganizes an unstructured brain dump into actionable items and reference material while retaining the information supplied in the original notes.
- chief-ai-officer-advisorSkillEvaluates startup AI strategy across sourcing choices, regulation and cost, preparing decision support for an executive rather than implementation code.
- chief-customer-officer-advisorSkillUses retention and customer-segment evidence to examine customer strategy, separating churn causes from headline revenue-retention figures.
- ci-cd-pipeline-builderSkillUses detected stack information to draft a CI/CD baseline, with repeatable checks and distinct delivery stages for each environment.High static risk — review source first
- cmo-advisorSkillConnects brand positioning and growth choices to marketing budgets and team design, preparing a coherent marketing leadership plan.
- cmo-reviewSkillChallenges positioning and campaign plans through customer definition, narrative and channel fit, identifying weaknesses behind an unclear marketing message.
- code-reviewerSkillAnalyzes code changes across supported languages for complexity, correctness and review risk, producing actionable findings for pull-request review.High static risk — review source first
- collab-proofSkillReviews a human-agent work session to distinguish contributions and decisions, producing a retrospective grounded in collaboration evidence.
- commercial-forecasterSkillBuilds a bookings or recurring-revenue forecast from pipeline assumptions, separating committed outcomes from optimistic and pipeline-only scenarios.
- competitive-teardownSkillCombines public competitor signals from pricing, reviews and hiring into a structured comparison, keeping observations separate from inferred strategy.
- compliance-readinessSkillQuestions a compliance program about its scope, readiness and evidence, highlighting decisions needed before an audit or a new framework rollout.
- content-creatorSkillRedirects older content-creator requests to more specific writing or marketing workflows, preserving compatibility with a retired entry point.
- copywritingSkillRewrites product-page and landing-page copy from a marketing brief, clarifying the offer and the visitor's next action.
- coverageSkillExamines a project's tests and coverage information to identify untested behaviors and suggest additional checks with meaningful failure detection.
- cpo-advisorSkillExamines product vision, portfolio choices and evidence of market fit to support product-leadership decisions and organizational planning.
- decideSkillRecords a founder-approved decision memo in the executive memory system, keeping its approved outcome separate from discussion transcripts.
- decision-loggerSkillSeparates raw meeting transcripts from approved executive decisions, retaining a decision history that can be reviewed without confusing drafts with commitments.High static risk — review source first
- engineering-advanced-skillsSkillIndexes an advanced engineering skill collection, helping choose a focused specialist for agent infrastructure, development or operations work.
- epic-designSkillBuilds layered interactive websites from a visual brief, combining scroll-driven storytelling and animation without requiring a WebGL scene.
- eu-ai-act-specialistSkillMaps an AI system and its evidence to operational EU AI Act questions, organizing risk classification and compliance work for specialist review.
- evalSkillCompares completed AgentHub runs using a chosen metric or judge, producing ranked results for an experiment rather than new implementations.
- executive-mentorSkillStress-tests a founder's plan or difficult decision, surfacing tradeoffs and questions for board preparation or a retrospective.
- feature-flags-architectSkillPlans feature-flag rollout and retirement from a project's release needs, including kill switches, ownership and stale-flag cleanup.
- git-worktree-managerSkillSets up isolated Git worktrees for concurrent features, coordinating branches, local ports and environment handling for separate development contexts.High static risk — review source first
- handoffSkillCondenses a working conversation into a continuation document, recording task state and next actions while removing secret values.High static risk — review source first
- hivemindSkillOrganizes isolated coding workers and benchmark comparisons for delegated work, documenting orchestration choices and claimed cost tradeoffs.High static risk — review source first
- iso27001-audit-prepSkillPrepares an ISO 27001 audit through questions about ISMS scope and supporting evidence, organizing gaps ahead of internal or certification review.
- iso42001-specialistSkillReviews an AI management system against ISO 42001 requirements, organizing clause-level evidence gaps and remediation priorities for internal audit preparation.
- knowledge-opsSkillCreates and checks internal procedures from an operations brief, producing maintainable SOPs and runbooks for recurring company work.High static risk — review source first
- linkedin-analyticsSkillAnalyzes a user's LinkedIn performance data to distinguish post-level patterns from noise and formulate a testable explanation for reach changes.
- linkedin-strategySkillPlans LinkedIn positioning, content themes and publishing cadence around a professional goal, producing a sustainable channel plan rather than individual posts.
- llm-wikiSkillTurns source material into a maintained Obsidian knowledge base, managing concept pages, cross-links and source ingestion over time.High static risk — review source first
- local-seo-managerSkillReviews local-search visibility for service-area businesses, connecting business-profile and location evidence to a focused local SEO action plan.
- loopSkillConfigures an iterative research experiment with a selected interval, defining repeated runs for an existing autoresearch workflow.
- ma-playbookSkillStructures an acquisition decision around diligence, valuation, deal terms and integration, supporting either a buyer or a company preparing to sell.
- marketing-psychologySkillApplies behavioral concepts to a marketing problem, explaining how a proposed message or experience relates to customer decisions.
- md-documentSkillConverts a long Markdown document into a self-contained HTML reading interface with navigation, search and copying aids.High static risk — review source first
- meeting-analyzerSkillExamines meeting transcripts for communication patterns and behavioral problems, turning observed examples into coaching feedback.
- memory-reviewSkillReviews an agent's stored memory for stale facts, duplication and promotion candidates, turning accumulated notes into a maintenance plan.
- monorepo-navigatorSkillMaps dependencies and package boundaries in a monorepo, helping select affected tests and builds instead of processing every package indiscriminately.
- named-persona-adversarial-reviewSkillReviews code using explicitly named engineering philosophies, comparing concrete implementation choices against documented principles rather than generic checklists.
- notebooklmSkillOperates NotebookLM through its browser interface to locate notebooks and work with their source-grounded questions and materials.
- office-hoursSkillUses a focused founder interview to examine customer problems, distribution and defensibility before offering startup advice.
- paid-adsSkillPlans paid-media campaigns from audience and offer requirements, organizing channel choices, targeting and performance questions for subsequent validation.
- pricing-strategistSkillCompares pricing models and willingness-to-pay research for a product, turning evidence into a pricing hypothesis and validation plan.
- product-discoverySkillMaps a product opportunity's assumptions and research needs, preparing a discovery sprint before resources are committed to delivery.
- programmatic-seoSkillPlans data-backed page templates for scaled search acquisition, connecting page structure and datasets to distinct visitor tasks and quality requirements.
- pw-reviewSkillReviews Playwright tests for weak assertions and unreliable execution patterns, producing improvements to browser-test quality and maintainability.
- quality-manager-qms-iso13485SkillOrganizes medical-device quality-system documentation and audit work around ISO 13485, including corrective actions and document-control processes.
- rag-architectSkillDesigns retrieval pipelines around document chunking, embeddings and search evaluation, relating architecture choices to measurable retrieval quality.
- revenue-operationsSkillExamines SaaS pipeline and revenue measurements to identify forecasting gaps and weaknesses in the go-to-market process.
- runSkillCoordinates the stages of an AgentHub experiment from baseline through evaluation and merge, using the session's selected competition workflow.
- saas-metrics-coachSkillInterprets supplied SaaS revenue and customer figures through retention, acquisition and recurring-revenue metrics, highlighting business-health questions to investigate.
- saas-scaffolderSkillScaffolds a SaaS application's authentication, database, billing and dashboard structure using the source's supported full-stack conventions.High static risk — review source first
- security-guidanceSkillChecks proposed tool actions for common implementation hazards through a Claude Code hook, flagging risky patterns before the action runs.
- senior-computer-visionSkillSupports computer-vision system design across detection and segmentation tasks, connecting model architecture and training choices to visual-analysis requirements.High static risk — review source first
- senior-fullstackSkillCompares full-stack architecture choices and scaffolds supported application stacks, pairing implementation structure with code-quality assessment.High static risk — review source first
- senior-securitySkillRoutes security questions toward threat modeling or focused assessment, using structured risk methods to organize findings and next investigations.High static risk — review source first
- signup-flow-croSkillReviews account-creation and trial-entry flows for conversion friction, turning observed signup obstacles into focused improvement hypotheses.
- skill-security-auditorSkillInspects an agent skill before installation, examining its instructions and files for suspicious permissions or exploitable behavior.High static risk — review source first
- snowflake-developmentSkillSupports Snowflake SQL and data-pipeline development, including managed table updates, stream/task processing and Cortex-based data features.High static risk — review source first
- sql-database-assistantSkillUses database schemas and a query goal to draft SQL, migrations or optimization suggestions for common database and ORM workflows.High static risk — review source first
- stage-launchSkillConverts an approved managed-agent build sheet into API payloads and a resumable launch sequence using the user's own credentials.High static risk — review source first
- vpe-advisorSkillReviews engineering delivery and hiring evidence to locate organizational bottlenecks and prepare priorities for a startup engineering leader.
- webinar-marketingSkillOrganizes a webinar's positioning, promotion and follow-up around demand generation, producing a plan that spans the event lifecycle.
- weekly-reviewSkillReviews commitments and stalled projects on a weekly cycle, producing a refreshed set of next actions and unresolved decisions.
- write-a-skillSkillTurns a repeatable task into a structured agent skill with focused instructions, progressive references and the supporting resources it needs.
Framelink MCP for FigmaMCPMCP server that gives coding agents simplified layout and style data from Figma files for design-to-code work.
Claude Code pluginsPluginContains the Claude Code coding tool repository and its plugin examples and documentation.
academy-guideSkillFinds relevant Claude Academy learning materials for questions about using Claude and its products.
algorithmic-artSkillGuides original generative artwork in p5.js, including seeded randomness and interactive controls.
brand-guidelinesSkillApplies Anthropic brand colors and typography to visual artifacts.
canvas-designSkillGuides original static visual work, such as posters, in PNG or PDF format.
claude-apiSkillProvides reference material for Claude API and SDK work, covering model configuration, streaming, tools and related features.
discernment-nudgeSkillSuggests brief follow-up questions that help users check facts, assumptions and missing context in substantive answers or drafts.
doc-coauthoringSkillStructures collaborative drafting of documentation, proposals and specifications through context gathering, revision and reader checks.
docxSkillSupports creating, reading and editing Word documents and templates, including formatting, revisions and document content.
frontend-designSkillOffers guidance on deliberate visual design, typography and aesthetic decisions for new or revised interfaces.
internal-commsSkillProvides formats and resources for internal communications, including status updates, newsletters and incident reports.
mcp-builderSkillGuides development of MCP servers that expose external services through tools in Python or TypeScript.
pdfSkillCovers PDF workflows including extraction, merging, splitting, rotation, forms and OCR.
Choose by workflow
Short guides that compare candidates for one job, with the reference docs they follow.
Most of them compare MCP (Model Context Protocol) servers, for example for Claude Code, Codex or Blender.
Best MCP Servers for Claude CodeModel Context Protocol (MCP) servers give Claude Code extra tools.earshotReason NetworkGraphicleAudio Studio MCPjevcrawlFilesystemGit
MCP for Claude: Best Servers and How to Add ThemShort answer: in the Claude desktop app, add one MCP server for the job in front of you — Filesystem to work with chosen folders, Memory to keep context between chats, Fetch to read web pages.FetchFilesystemMemory
Best MCP Servers for CodexCodex can connect to Model Context Protocol (MCP) servers for extra tools.Reason NetworkGraphicleFilesystemGitMemory
ArtCraft creative applicationsCompare source-linked application hubs for image editing and documents.ArtCraftPhotoCraftWordCraft
Best Blender MCP Servers & Skills (2026)Blender MCP connects an AI client to a running Blender session through the Model Context Protocol, so the model can read your scene and run Python through Blender’s API.Blender Agent Skills
Best Reverse Engineering MCP ServersA reverse engineering MCP server lets an agent drive analysis tools such as Ghidra, IDA Pro, radare2 or JADX through the Model Context Protocol and report what it found with evidence.GhidraMCPida-pro-mcpradare2-mcpreverse-engineering-assistant (ReVa)jadx-ai-mcp
Harness² (harness2) vs OpenCode and Codex CLIHarness² (harness2) is an open-source research framework from Google Research that tunes the harness around an agent while the model stays fixed.
Install Claude Code Skills: Folder, Plugin & CLIChoose one of three ways to install Claude Code skills: copy a complete skill folder, install a plugin from its marketplace, or use npx skills add with Claude Code selected.frontend-designpdfvercel-react-best-practices
Best MCP Servers for Cursor: Files, Git & MemoryChoose a Cursor MCP server for one missing capability: file access, repository history, web fetching or persistent context.FetchFilesystemGitMemory
Claude Code Security: Audit & Hardening SkillsA Claude Code security review starts with an authorized scope and a question to investigate.Cloudflare Security Auditsecurity-and-hardening
Best Codex Skills (2026)Codex can use agent skills: folders with a SKILL.Skills for Real EngineersgstackTaste SkillawwwardsAI Slop DetectorGhostPaw Codexhuashu-motionLemo-OpuscarMachine SkillanatomyBlender Agent Skills
Best Claude Skills for Video EditingPick a Claude skill by the video you need to ship.huashu-motionpapercut-explainerLemo-OpuscarMachine Skill
Questions before you install
Is a listed entry safe to install?
Not automatically. Listed ≠ audited. We pin each entry to a public commit so you can read exactly what you install. Read the SKILL.md or README, check bundled scripts, and limit tool and file access before you enable it.
What is a Claude skill?
A folder with a SKILL.md file that tells an agent how to carry out one task, sometimes with scripts or reference files. Claude Code loads skills from ~/.claude/skills or a project’s .claude/skills folder.
How are skills different from MCP servers?
A skill describes a workflow. An MCP (Model Context Protocol) server is a program that exposes tools or data to a compatible AI client. A project may offer both, but review their permissions and setup separately.
How is the list ordered?
By the date of each entry’s pinned upstream commit, newest first. You can also sort by guide citations or name. We do not have star, download or install counts, so we never show them. How we rank
Are these resources officially endorsed?
No. AgentSkillsDir is an independent directory run by Orbitlane Labs and is not affiliated with any listed publisher. Source links and pinned revisions help you inspect each entry; they are not a certification.
How do I suggest a resource?
Use the submission form to share a public project link, or email submit@agentskillsdir.com. Listing is free and not guaranteed. Submit
What are the best Claude skills and MCP servers to start with?
There is no single best list; pick by the job you need done. AgentSkillsDir lists source-checked Claude skills and MCP servers, each pinned to a public commit, and orders them by the date of that commit. Our workflow guides compare candidates for one task: for Claude Code, the Filesystem and Git MCP servers are common starting points. Read each entry’s SKILL.md or README before you install it.
How do I install a Claude skill from GitHub?
A skill is a folder that contains a SKILL.md file. Copy that folder from the repository into ~/.claude/skills/ to use it in every project, or into .claude/skills/ inside one project. Claude Code picks up skills from those locations. Each entry on AgentSkillsDir links to the pinned commit and shows a setup snippet you can copy.
How do I add an MCP server to Claude Code?
Run claude mcp add with a name and the server’s launch command, for example: claude mcp add fetch -- uvx mcp-server-fetch. Then run claude mcp list to confirm it is registered. For Claude Desktop, add the server under mcpServers in claude_desktop_config.json and restart the app. Use the launch command from the server’s own README.
What goes in a SKILL.md file, and how is a skill folder structured?
SKILL.md starts with YAML front matter that gives the skill a name and a description of when to use it, followed by Markdown instructions for the agent. The folder can also hold scripts, reference documents or templates that the instructions point to. Keep the folder name and the name field consistent, and review any bundled scripts before you enable a skill.
Is AgentSkillsDir a skills marketplace, and can I submit my MCP server?
AgentSkillsDir is a free, independent directory, not a store: nothing is sold here, and every entry links to its public source repository. You can submit a public GitHub link for a Claude skill, MCP server, plugin or agent through the submission page or by emailing submit@agentskillsdir.com. Submissions are reviewed before they are listed, and listing is not guaranteed. Submit