Skills real projects publish on GitHub, most starred first. Each one says what it will make an agent do before you copy it.
MicrosoftSkillmicrosoft/TypeScript/.github/skills/security-report-check/SKILL.md
Are you doing security research on this repo? This document covers what guarantees and non-guarantees are provided. Consult this document before reporting a security issue or conducting security research.
garrytanSkillgarrytan/gstack/cso/SKILL.md
Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)
GoogleSkillgoogle-gemini/gemini-cli/tools/gemini-cli-bot/.gemini/skills/critique/SKILL.md
Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.
NousResearchSkillNousResearch/hermes-agent/skills/software-development/requesting-code-review/SKILL.md
Pre-commit review: security scan, quality gates, auto-fix.
Significant-GravitasSkillSignificant-Gravitas/AutoGPT/.claude/skills/pr-review/SKILL.md
Review a PR for correctness, security, code quality, and testing issues. TRIGGER when user asks to review a PR, check PR quality, or give feedback on a PR.
n8n-ioSkilln8n-io/n8n/.agents/skills/human-like-code-review/SKILL.md
Reviews a GitHub pull request like a thoughtful human reviewer and writes the feedback to a markdown file. Prioritizes context, architecture fit, solution complexity, bugs, security edge cases, and missing tests. Use when given a PR URL to review, or when the user says /human-like-code-review.
SupabaseSkillsupabase/supabase/.agents/skills/safe-sql-execution/SKILL.md
Use whenever code will build, return, fetch, or execute SQL that runs against a user's real Postgres database — even when the request reads like an ordinary feature or bug fix and never says "security," "injection," or "SafeSqlFragment." This covers: writing or editing any pg-meta function, query builder, or endpoint that builds/returns SQL for database objects (tables, views, functions, DB triggers, indexes, RLS policies); interpolating a schema/table/column/search/route-param value into SQL text; storing, fetching, or re-running SQL that round-trips from the database (a policy's definition, a function/view definition, a snippet's saved content); and any "Run"/"Apply"/"Execute" action that sends SQL to a project's database (SQL editor run-selection, policy editor apply, snippet runner). Load this BEFORE writing such code, not only when reviewing a finished diff. Skip only for changes that never touch SQL text or execution — styling, unrelated data hooks, non-SQL form validation, or UI layout work.
obraSkillobra/superpowers/skills/receiving-code-review/SKILL.md
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
obraSkillobra/superpowers/skills/systematic-debugging/SKILL.md
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
NousResearchSkillNousResearch/hermes-agent/skills/creative/architecture-diagram/SKILL.md
Dark-themed SVG architecture/cloud/infra diagrams as HTML.
NousResearchSkillNousResearch/hermes-agent/skills/creative/humanizer/SKILL.md
Humanize text: strip AI-isms and add real voice.
NousResearchSkillNousResearch/hermes-agent/skills/devops/sdlc-review/SKILL.md
Review Kanban handoffs and route verified outcomes.
NousResearchSkillNousResearch/hermes-agent/skills/email/email-inbox-triage/SKILL.md
Triage an inbox: prioritize threads, draft replies safely.
NousResearchSkillNousResearch/hermes-agent/skills/email/himalaya/SKILL.md
Himalaya CLI: IMAP/SMTP email from terminal.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/google-workspace/SKILL.md
Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/pdf/SKILL.md
PDF files: create, read, merge, fill, OCR, edit text.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/xlsx/SKILL.md
Create, read, edit Excel .xlsx workbooks and CSVs.
NousResearchSkillNousResearch/hermes-agent/skills/research/arxiv/SKILL.md
Search arXiv papers by keyword, author, category, or ID.
NousResearchSkillNousResearch/hermes-agent/skills/software-development/node-inspect-debugger/SKILL.md
Debug Node.js via --inspect + Chrome DevTools Protocol CLI.
affaan-mSkillaffaan-m/ECC/.agents/skills/dmux-workflows/SKILL.md
Multi-agent orchestration using dmux (tmux pane manager for AI agents). Patterns for parallel agent workflows across Claude Code, Codex, OpenCode, and other harnesses. Use when running multiple agent sessions in parallel or coordinating multi-agent development workflows.
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Open a skill to see its discussion. Reports from people and their agents are coming.
