Find the best CLAUDE.md, AGENTS.md and Claude skills

nettySkill

netty-review

netty/netty/.claude/skills/netty-review/SKILL.md

Review Netty code changes (the current diff, a branch, or a PR) for bugs, security vulnerabilities, thread-safety problems, native/JNI issues and style, using Netty's project-specific checklists. Use when asked to review a change, diff, branch or PR in this repository.

GitHubReads credentialsSkill

codeql

github/awesome-copilot/skills/codeql/SKILL.md

Comprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshooting CodeQL analysis.

electronSkill

chrome-release-cls

electron/electron/.claude/skills/chrome-release-cls/SKILL.md

Given a Chrome Releases blog post URL (chromereleases.googleblog.com), extract every CVE/bug and find the underlying Gerrit CL that fixed it by searching the local Chromium checkout and sub-repos. Use when asked to map Chrome security release notes to fixing CLs, or to find which commits correspond to CVEs in a Chrome stable update.

No other project uses it yet

zauberzeugSkill

fix-dependabot-alert

zauberzeug/nicegui/.claude/skills/fix-dependabot-alert/SKILL.md

Fix one or more Dependabot security alerts by updating the affected packages, rebuilding bundles and vendored files, and preparing a commit. Use when asked to fix Dependabot alerts (e.g. "fix Dependabot alert 252", "fix all new Dependabot alerts").

No other project uses it yet

coollabsioSkill

testing-best-practices

coollabsio/coolify/.agents/skills/testing-best-practices/SKILL.md

Laravel test design and review. Use when selecting coverage, naming or structuring tests, choosing assertions or test data, isolating dependencies, testing HTTP or security boundaries, improving suite performance, or reviewing test value. Use framework guidance or search-docs for Pest and PHPUnit syntax.

Often used withinfer-conventions·configuring-horizon·ai-sdk-development

ruvnetSkill

Pair Programming

ruvnet/claude-flow/.agents/skills/pair-programming/SKILL.md

AI-assisted pair programming with multiple modes (driver$navigator$switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.

Often used withV3 CLI Modernization·agentic-jujutsu·browser

rohitg00Skill

learn-mcp

rohitg00/ai-engineering-from-scratch/.claude/skills/learn-mcp/SKILL.md

Focused interactive tutor for the Model Context Protocol (MCP) path in AI Engineering from Scratch. Start or resume this route when a learner wants to build, secure, debug, verify, or operate MCP clients, servers, transports, gateways, registries, or conformance gates. Teaches one lesson per invocation and records wire evidence in MCP-LEARNING.md.

krayinSkill

krayin-authorization

krayin/laravel-crm/.github/skills/krayin-authorization/SKILL.md

Understand, implement, debug, review, and test Krayin CRM branch 2.2 authorization. Covers ACL permissions, roles, Bouncer middleware, route-to-permission mapping, view permissions, data scoping, role privilege ceilings, user authorization, and authorization security testing.

GitHubReads credentialsSkill

create-spring-boot-java-project

github/awesome-copilot/skills/create-spring-boot-java-project/SKILL.md

Create a new Spring Boot Java project (Maven or Gradle) from start.spring.io with sensible defaults for configuration, PostgreSQL, logging, security, testing and Docker. Use when asked to scaffold, bootstrap or generate a Spring Boot application. Detects existing project versions and never upgrades implicitly.

No other project uses it yet

dotnetSkill

review-invariants

dotnet/orleans/.github/skills/review-invariants/SKILL.md

Correctness and invariants lens for Orleans — invariants and assertions, error handling, failure semantics, idempotence, grain concurrency and reentrancy, activation scheduling, async and cancellation, security boundaries, and observability. Use during code review, and when designing or implementing runtime or provider code.

No other project uses it yet

langflow-aiReads credentialsSkill

backend-code-review

langflow-ai/langflow/.agents/skills/backend-code-review/SKILL.md

Review backend code for quality, security, maintainability, and best practices based on established checklist rules. Use when the user requests a review, analysis, or improvement of backend files (e.g., `.py`) under the `src/backend/` directory. Do NOT use for frontend files (e.g., `.tsx`, `.ts`, `.js`). Supports pending-change review, code snippets review, and file-focused review.

netdataReads credentialsSkill

triage-sonarqube

netdata/netdata/.agents/skills/triage-sonarqube/SKILL.md

Inspect, review, or apply authorized triage decisions to SonarCloud issues and security hotspots; also review the Sonar helpers. Use for SonarQube/SonarCloud findings, code smells, vulnerabilities, and quality-gate evidence. Supplied evidence needs no live query; per-finding writes and project-wide policy changes have distinct scopes.

verdaccioSkill

review-code

verdaccio/verdaccio/.agents/skills/review-code/SKILL.md

Review a verdaccio diff, branch, or pull request against the repository review guide (security first, then npm-client compatibility, performance, product fit, maintainability), verify each finding against the code, and report actionable issues. Use for code reviews and for reviewing your own changes before or during a PR workflow.

medusajsSkill

reviewing-prs

medusajs/medusa/.claude/skills/reviewing-prs/SKILL.md

Reviews GitHub pull requests for the Medusa repository. Checks PR template compliance, contribution guidelines, code conventions, security, performance, and bugs. Emits a structured review decision (labels + review template) for a downstream step to apply. Use when a PR is opened or updated, whether you fetch the PR with scripts or are given its data.

GitHubSkill

sql-code-review

github/awesome-copilot/skills/sql-code-review/SKILL.md

Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). Focuses on SQL injection prevention, access control, code standards, and anti-pattern detection. Complements SQL optimization prompt for complete development coverage.

OpenAISkill

threat-model

openai/codex-security/plugins/codex-security/skills/threat-model/SKILL.md

Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create, update, or persist a repository threat model. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.

Often used withvuln-scan·adr·prd

GitHubSkill

openapi-to-application-java-spring-boot

github/awesome-copilot/skills/openapi-to-application-java-spring-boot/SKILL.md

Generate a Spring Boot (Java) application from an OpenAPI 3 specification using the spec-first approach: openapi-generator (Maven or Gradle) produces API interfaces and DTOs, you implement controllers, services, persistence, security and tests. Use when asked to build, scaffold or implement a Spring Boot API from an OpenAPI/Swagger file.

No other project uses it yet

apereoSkill

cas-mcp-server

apereo/cas/.claude/skills/cas-mcp-server/SKILL.md

Review and extend the CAS MCP server (support/cas-server-support-mcp): @McpTool beans, security and auditing, optional tool groups, typed results and output schemas, secret redaction, resources and completion, tests and the mcp-server-* scenarios. Use when adding or changing MCP tools, resources or prompts.

zhaoxuya520Skill

pentest-tools

zhaoxuya520/reverse-skill/skills/pentest-tools/SKILL.md

主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。 触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。

Often used withbinary-diff·js-reverse·mobile-reverse

GitHubSkill

quarkus-application-development

github/awesome-copilot/skills/quarkus-application-development/SKILL.md

Write Quarkus application code: REST with Quarkus REST, validation, exception mappers, OpenAPI, configuration, CDI (ArC), Hibernate ORM with Panache, Mutiny and virtual threads, Reactive Messaging with Kafka, OIDC security, health, metrics, OpenTelemetry, fault tolerance, REST Client, scheduler and cache. Use when implementing or changing features in an existing Quarkus project.

No other project uses it yet