Find the best CLAUDE.md, AGENTS.md and Claude skills

apereoSkill

cas-groovy-scripting

apereo/cas/.claude/skills/cas-groovy-scripting/SKILL.md

Review and change Groovy scripting support (core/cas-server-core-scripting): ScriptResourceCacheManager, CompiledGroovyScript, inline vs external scripts, compiling off the request path, script security. Use when touching Groovy scripts or any module that runs them.

GitHubSkill

java-helidon

github/awesome-copilot/skills/java-helidon/SKILL.md

Get best practices for developing applications with Helidon 4 (SE and MP). Use when working with Helidon SE or Helidon MP, HttpService routing, Helidon DB Client, MicroProfile Config, Helidon Security, or Helidon testing in Java 21+ projects.

No other project uses it yet

dotnetSkill

code-review

dotnet/efcore/.agents/skills/code-review/SKILL.md

Review EF Core pull requests or local changes for concrete correctness, compatibility, performance, security, and test-coverage problems. Use when asked to review, critique, or check code changes before merge or submission.

Often used withclose-spec·add-new-model·compare-screenshots

abpframeworkSkill

abp-authorization

abpframework/abp/.agents/skills/abp-authorization/SKILL.md

ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side. Use when working with permissions, authorization, role-based access, or security in ABP projects.

No other project uses it yet

OWASPSkill

code-review

OWASP/CheatSheetSeries/.github/skills/code-review/SKILL.md

Rigorous review of OWASP Cheat Sheet Series pull requests across security correctness, practicality, link and source verification, duplication, and language. Use for any pull request that touches cheatsheets/ or cheatsheets_draft/, or that adds or changes external links or citations.

Often used withclose-spec·add-new-model·compare-screenshots

rohitg00Skill

learn-agent-skills

rohitg00/ai-engineering-from-scratch/.claude/skills/learn-agent-skills/SKILL.md

Focused interactive tutor for the Agent Skills Engineering path in AI Engineering from Scratch. Start or resume this route when a learner wants to create, discover, invoke, secure, evaluate, package, or port Agent Skills. Teaches one lesson per invocation and records evidence in AGENT-SKILLS-LEARNING.md.

GoogleSkill

google-cloud-recipe-auth

google/skills/plugins/cloud/google-cloud-developer/skills/google-cloud-recipe-auth/SKILL.md

Provides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.

simstudioaiSkill

validate-selector

simstudioai/sim/.agents/skills/validate-selector/SKILL.md

Audit a Sim dynamic selector across its declaration, browser-safe manifest, server attachment, provider primitive, and selectors.execute security boundary. Use when reviewing selector correctness, secret handling, scope authorization, or dead selector-only routes.

No other project uses it yet

trufflesecuritySkill

dep-updates

trufflesecurity/trufflehog/.cursor/skills/dep-updates/SKILL.md

Plan and apply Go dependency updates, including advisory-driven bumps, Trivy/govulncheck validation, and supply-chain review. Use when the user asks to update dependencies, refresh modules for security alerts, or run dependency vulnerability scans.

No other project uses it yet

OpenAISkill

cloud-findings

openai/codex-security/plugins/codex-security/skills/cloud-findings/SKILL.md

Read existing Codex Security Cloud findings, reports, recorded assignment and verification, and scan status from the connected account. Use for Cloud read requests and finding links, not local scans or requests to change Cloud data.

coderSkill

code-review

coder/coder/.claude/skills/code-review/SKILL.md

Reviews code changes for bugs, security issues, and quality problems. Use for a single-pass review of a PR, branch, or local diff; for large PRs that span several subsystems, use deep-review (`.agents/skills/deep-review/`).

Often used withclose-spec·add-new-model·compare-screenshots

trycompaiSkill

nestjs-best-practices

trycompai/crm/.agents/skills/nestjs-best-practices/SKILL.md

NestJS best practices and architecture patterns for building production-ready applications. This skill should be used when writing, reviewing, or refactoring NestJS code to ensure proper patterns for modules, dependency injection, security, and performance.

ruvnetSkill

Pair Programming

ruvnet/wifi-densepose/.claude/skills/pair-programming/SKILL.md

AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

Often used withV3 CLI Modernization·agentic-jujutsu·browser

OpenAISkill

fix-finding

openai/codex-security/plugins/codex-security/skills/fix-finding/SKILL.md

Use only when the user explicitly asks to fix and verify a validated or plausible security vulnerability. Do not use for ordinary bug fixes, correctness or design review findings, general validation, or full PR, commit, branch, patch, or repository scans.

rolling-scopesSkill

nestjs-best-practices

rolling-scopes/rsschool-app/.agents/skills/nestjs-best-practices/SKILL.md

NestJS best practices and architecture patterns for building production-ready applications. This skill should be used when writing, reviewing, or refactoring NestJS code to ensure proper patterns for modules, dependency injection, security, and performance.

zauberzeugSkill

advisory-text

zauberzeug/nicegui/.claude/skills/advisory-text/SKILL.md

Write the publication text (title and description) of a NiceGUI security advisory and patch it into the advisory via the API. Use when asked to prepare an advisory for publication (e.g. "prepare GHSA-xxxx-xxxx-xxxx for publication", "write the advisory text").

No other project uses it yet

koala73Skill

review-worldmonitor-change

koala73/worldmonitor/.agents/skills/review-worldmonitor-change/SKILL.md

Review a WorldMonitor diff or PR with the repo's review lenses (TypeScript quality, security, performance, architecture, simplicity) and its key code patterns. Use when asked to review a change, self-review before opening a PR, or check a branch against WorldMonitor conventions. Read-only unless the user asks for fixes.

DietrichGebertSkill

ponytail-audit

DietrichGebert/ponytail/skills/ponytail-audit/SKILL.md

Quality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to delete, merge or split. Ranked, each finding explained in plain English. One-shot report, changes nothing. Use for "audit this codebase", "review the whole repo", "find bloat", "what can I delete", /ponytail-audit.

AgriciDanielSkill

seo-technical

AgriciDaniel/claude-seo/skills/seo-technical/SKILL.md

Audit technical SEO across crawlability, indexability, security, URLs, mobile, Core Web Vitals, rendering, structured data, and IndexNow. Use when the user asks for a technical SEO audit or about crawling, indexing, rendering, or site speed. Exclude content strategy and backlinks.

Often used withseo-maps·seo-sitemap·seo-backlinks

ruvnetSkill

Pair Programming

ruvnet/claude-flow/.claude/skills/pair-programming/SKILL.md

AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

Often used withV3 CLI Modernization·agentic-jujutsu·browser