Claude skills directory
Short answer
A Claude skills directory is a browsable catalog of reusable instructions for Claude and other agents, with links to their sources. AgentSkillsDir is an independent, source-linked directory for discovering Claude and Codex skills, plus separate MCP server and agent collections. It is not Anthropic’s official documentation or a hosted runtime.
How to use itBrowse by task, open a skill card, then review its source and follow the upstream installation instructions for your client.
- 327 entries
- 33 publishers
- 323 with an open license
- Checked 17 Oct 2026 – 1 Nov 2026
All Claude skills
327 entries, metadata checked 17 Oct 2026 – 1 Nov 2026
Use case
Productivity113Development72Security analysis69Scientific research65Threat detection18Incident response & forensics17Creative tools15Cloud & infrastructure security12Application & supply-chain security10Identity & email security3Integrations3OT & ICS security3Publisher
mukul975170xS4N4TG0addyosmani0AirsupHQ0alchaincyf0alirezarezvani0anthropics0artouc0assafkip0cloudflare0cursor0debpalash0DietrichGebert0EL4CTEO0FeedHive0Fission-AI0Garinmckayl0garrytan0GhostPawJS0Graphify-Labs0heydamir0Jakeschincariol0juliobsz0K-Dense-AI0kepano0lemomo-ai0Leonxlnx0mattpocock0phuryn0tt-a1i0vercel-labs0wheresryan220Yuan1z08250Community first · Anthropic official entries follow. Sort applies within each group.
- analyzing-browser-forensics-with-hindsightExamines Chromium browser artifacts for forensic investigation; its access to sensitive browser records requires specialized evidence-handling controls.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-docker-container-forensicsOrganizes evidence from Docker images, volumes and logs to investigate a compromised container and reconstruct suspicious activity.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-linux-kernel-rootkitsExamines Linux memory and system observations for kernel-rootkit indicators, connecting discrepancies to a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-memory-dumps-with-volatilityAnalyzes captured memory with Volatility to locate suspicious processes and related artifacts, requiring careful handling of potentially sensitive evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- analyzing-packed-malware-with-upx-unpackerExamines packed malware samples to recover analyzable program structure, supporting specialist static analysis inside an isolated research environment.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- analyzing-uefi-bootkit-persistenceInvestigates firmware and boot artifacts for UEFI persistence indicators, organizing integrity observations for a specialist forensic review.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- building-super-timelines-with-plasoCombines host artifacts into Plaso investigation timelines, supporting evidence correlation while preserving the distinction between observed timestamps and inferred events.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.
- deobfuscating-javascript-malwareExamines obfuscated malicious JavaScript to support analyst understanding of its behavior, using a controlled malware-analysis context.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- eradicating-malware-from-infected-systemsStructures malware eradication around observed persistence and affected systems, organizing removal and verification work within an incident-response process.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- implementing-ticketing-system-for-incidentsLinks security alerts to incident tickets, organizing ownership, escalation and service-level tracking across supported case-management tools.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
- investigating-ransomware-attack-artifactsOrganizes preservation and analysis of ransomware artifacts, retaining evidence provenance before investigators assess variant identity and incident scope.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-dynamic-analysis-with-any-runObserves malware behavior in an interactive cloud sandbox, organizing execution findings for specialist analysis with isolation and disclosure considerations.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-insider-threat-investigationStructures an insider-threat investigation around access records and observed actions, separating evidence collection from conclusions about intent.Third-party community repo, not affiliated with Anthropic
- performing-memory-forensics-with-volatility3Examines captured RAM with Volatility 3, correlating processes and network artifacts for a controlled investigation of potentially sensitive memory evidence.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-steganography-detectionExamines media for concealed data using steganalysis tools, organizing extraction findings for a controlled forensic investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsParses Windows forensic artifacts with specialist utilities, organizing host timelines and evidence for an authorized incident investigation.Third-party community repo, not affiliated with AnthropicFor authorized defensive security testing, incident forensics, and research only. Unauthorized access is prohibited.High static risk — review source first
- testing-ransomware-recovery-proceduresChecks ransomware recovery plans through restore tests and recovery-time evidence, documenting whether backups support the intended clean-recovery sequence.Third-party community repo, not affiliated with AnthropicHigh static risk — review source first
Guides that use this category
Best Blender MCP Servers & Skills (2026)Blender MCP connects an AI client to a running Blender session through the Model Context Protocol, so the model can read your scene and run Python through Blender’s API.Blender Agent Skills
Install Claude Code Skills: Folder, Plugin & CLIChoose one of three ways to install Claude Code skills: copy a complete skill folder, install a plugin from its marketplace, or use npx skills add with Claude Code selected.frontend-designpdfvercel-react-best-practices
Claude Code Security: Audit & Hardening SkillsA Claude Code security review starts with an authorized scope and a question to investigate.Cloudflare Security Auditsecurity-and-hardening
Best Codex Skills (2026)Codex can use agent skills: folders with a SKILL.Skills for Real EngineersgstackTaste SkillawwwardsAI Slop DetectorGhostPaw Codexhuashu-motionLemo-OpuscarMachine SkillanatomyBlender Agent Skills
Best Claude Skills for Video EditingPick a Claude skill by the video you need to ship.huashu-motionpapercut-explainerLemo-OpuscarMachine Skill
Skills directory and structure FAQ
6 questions · what the directory is, how skill folders are laid out, how to submit
What is a Claude skills directory?
A Claude skills directory is a browsable catalog of reusable instructions for Claude and other agents, with links to their sources. AgentSkillsDir is an independent, source-linked directory for discovering Claude and Codex skills, plus separate MCP server and agent collections. It is not Anthropic’s official documentation or a hosted runtime.
What is the typical Claude / agent skills directory structure?
Under the common Agent Skills convention, each skill has its own folder with a SKILL.md file. Optional scripts/, references/ and assets/ folders hold supporting code, documents and templates. This is a common layout, not a requirement for every listed project: follow each repository’s layout and your client’s documentation.
How is AgentSkillsDir different from claude.com docs / skillmd?
AgentSkillsDir provides source links and independent editorial summaries to help you discover resources. It is separate from Anthropic’s official Claude documentation and from other directories such as skillmd. Use official documentation for Claude product behavior and each publisher’s repository for setup, compatibility and license terms. A listing does not certify safety or successful installation.
How do I find the best Claude skills or MCP servers from here?
Start with the task and client you need, then compare the source-linked entries. For focused shortlists, use the video skills, Codex skills or Cursor MCP guides below. Check each candidate’s prerequisites and source terms; inclusion is not a promise that it will work in your setup.
How do I submit a skill or MCP server?
Open the submission page and share the public repository or project URL for manual review. Nothing is published automatically, and listing is not guaranteed. If online intake is unavailable, email the public link to submit@agentskillsdir.com.
What is a SKILL.md file?
SKILL.md is the instruction file in an Agent Skills folder. In the standard format, YAML front matter records a name and description, followed by Markdown instructions explaining the task. Read it and any supporting scripts before enabling a skill; the file is instructions, not proof of an audited or tested workflow.
