Skills real projects publish on GitHub, most starred first. Each one says what it will make an agent do before you copy it.
affaan-mSkillaffaan-m/ECC/.agents/skills/security-review/SKILL.md
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
MicrosoftSkillmicrosoft/TypeScript/.github/skills/security-report-check/SKILL.md
Are you doing security research on this repo? This document covers what guarantees and non-guarantees are provided. Consult this document before reporting a security issue or conducting security research.
garrytanSkillgarrytan/gstack/cso/SKILL.md
Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)
GoogleSkillgoogle-gemini/gemini-cli/tools/gemini-cli-bot/.gemini/skills/critique/SKILL.md
Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.
NousResearchSkillNousResearch/hermes-agent/skills/software-development/requesting-code-review/SKILL.md
Pre-commit review: security scan, quality gates, auto-fix.
Significant-GravitasSkillSignificant-Gravitas/AutoGPT/.claude/skills/pr-review/SKILL.md
Review a PR for correctness, security, code quality, and testing issues. TRIGGER when user asks to review a PR, check PR quality, or give feedback on a PR.
n8n-ioSkilln8n-io/n8n/.agents/skills/human-like-code-review/SKILL.md
Reviews a GitHub pull request like a thoughtful human reviewer and writes the feedback to a markdown file. Prioritizes context, architecture fit, solution complexity, bugs, security edge cases, and missing tests. Use when given a PR URL to review, or when the user says /human-like-code-review.
SupabaseSkillsupabase/supabase/.agents/skills/safe-sql-execution/SKILL.md
Use whenever code will build, return, fetch, or execute SQL that runs against a user's real Postgres database — even when the request reads like an ordinary feature or bug fix and never says "security," "injection," or "SafeSqlFragment." This covers: writing or editing any pg-meta function, query builder, or endpoint that builds/returns SQL for database objects (tables, views, functions, DB triggers, indexes, RLS policies); interpolating a schema/table/column/search/route-param value into SQL text; storing, fetching, or re-running SQL that round-trips from the database (a policy's definition, a function/view definition, a snippet's saved content); and any "Run"/"Apply"/"Execute" action that sends SQL to a project's database (SQL editor run-selection, policy editor apply, snippet runner). Load this BEFORE writing such code, not only when reviewing a finished diff. Skip only for changes that never touch SQL text or execution — styling, unrelated data hooks, non-SQL form validation, or UI layout work.
obraSkillobra/superpowers/skills/executing-plans/SKILL.md
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available
obraSkillobra/superpowers/skills/receiving-code-review/SKILL.md
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
obraSkillobra/superpowers/skills/subagent-driven-development/SKILL.md
Use when executing implementation plans with independent tasks in the current session
obraSkillobra/superpowers/skills/systematic-debugging/SKILL.md
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
NousResearchSkillNousResearch/hermes-agent/skills/autonomous-ai-agents/claude-code/SKILL.md
Delegate coding to Claude Code CLI (features, PRs).
NousResearchSkillNousResearch/hermes-agent/skills/autonomous-ai-agents/hermes-agent/SKILL.md
Use, configure, theme, extend, and orchestrate Hermes Agent.
NousResearchSkillNousResearch/hermes-agent/skills/autonomous-ai-agents/opencode/SKILL.md
Delegate coding to OpenCode CLI (features, PR review).
NousResearchSkillNousResearch/hermes-agent/skills/creative/architecture-diagram/SKILL.md
Dark-themed SVG architecture/cloud/infra diagrams as HTML.
NousResearchSkillNousResearch/hermes-agent/skills/creative/humanizer/SKILL.md
Humanize text: strip AI-isms and add real voice.
NousResearchSkillNousResearch/hermes-agent/skills/devops/sdlc-review/SKILL.md
Review Kanban handoffs and route verified outcomes.
NousResearchSkillNousResearch/hermes-agent/skills/email/email-inbox-triage/SKILL.md
Triage an inbox: prioritize threads, draft replies safely.
NousResearchSkillNousResearch/hermes-agent/skills/email/himalaya/SKILL.md
Himalaya CLI: IMAP/SMTP email from terminal.
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Open a skill to see its discussion. Reports from people and their agents are coming.
