constant-time-testing
allanninal/claude-code-skills/skills/constant-time-testing/SKILL.md
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.
One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
allanninal/claude-code-skills/skills/constant-time-testing/SKILL.md
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.
allanninal/claude-code-skills/skills/cosmos-vulnerability-scanner/SKILL.md
Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts. (project, gitignored)
allanninal/claude-code-skills/skills/coverage-analysis/SKILL.md
Coverage analysis measures code exercised during fuzzing. Use when assessing harness effectiveness or identifying fuzzing blockers.
allanninal/claude-code-skills/skills/d3js-visualization/SKILL.md
Create interactive data visualizations using D3.js. Use when building charts, graphs, maps, or custom visualizations for dashboards and data analysis.
allanninal/claude-code-skills/skills/deep-research/SKILL.md
深度调研的多Agent编排工作流:把一个调研目标拆成可并行子目标,用 Claude Code 非交互模式(`claude -p`)运行子进程;联网与采集优先使用已安装的 skills,其次使用 MCP 工具;用脚本聚合子结果并分章精修,最终交付"成品报告文件路径 + 关键结论/建议摘要"。用于:系统性网页/资料调研、竞品/行业分析、批量链接/数据集分片检索、长文写作与证据整合,或用户提及"深度调研/Deep Research/Wide Research/多 Agent 并行调研/多进程调研"等场景。
Often used withcommunity-led-growthacademic-paper-revieweracademic-pipeline
allanninal/claude-code-skills/skills/differential-review/SKILL.md
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
allanninal/claude-code-skills/skills/dispatching-parallel-agents/SKILL.md
Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies
Often used withchinese-code-reviewdiagnosing-superpowersworkflow-runner
allanninal/claude-code-skills/skills/doc-coauthoring/SKILL.md
Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers. Trigger when user mentions writing docs, creating proposals, drafting specs, or similar documentation tasks.
Steady2 mentions in 2 weeks
168 projects use a version of this
Often used withcontext7-efficientweb-artifacts-builderdiscernment-nudge
allanninal/claude-code-skills/skills/documentation/SKILL.md
Generate professional technical documentation with ASCII diagrams, flowcharts, architecture visualizations, and industry-standard templates
allanninal/claude-code-skills/skills/docx/SKILL.md
Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks
193 projects use a version of this
Often used withgift-evaluatorVideo Generationfile-reading
allanninal/claude-code-skills/skills/dwarf-expert/SKILL.md
Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers when understanding DWARF information, interacting with DWARF files, answering DWARF-related questions, or working with code that parses DWARF data.
allanninal/claude-code-skills/skills/entry-point-analyzer/SKILL.md
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-only functions. Use when auditing smart contracts (Solidity, Vyper, Solana/Rust, Move, TON, CosmWasm) or when asked to find entry points, audit flows, external functions, access control patterns, or privileged operations.
allanninal/claude-code-skills/skills/executing-plans/SKILL.md
Use when you have a written implementation plan to execute in a separate session with review checkpoints
Often used withchinese-code-reviewdiagnosing-superpowersworkflow-runner
allanninal/claude-code-skills/skills/finishing-a-development-branch/SKILL.md
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
Often used withchinese-code-reviewdiagnosing-superpowersworkflow-runner
allanninal/claude-code-skills/skills/fix-review/SKILL.md
Verifies that git commits address security audit findings without introducing bugs. This skill should be used when the user asks to "verify these commits fix the audit findings", "check if TOB-XXX was addressed", "review the fix branch", "validate remediation commits", "did these changes address the security report", "post-audit remediation review", "compare fix commits to audit report", or when reviewing commits against security audit reports.
allanninal/claude-code-skills/skills/frontend-design/SKILL.md
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications (examples include websites, landing pages, dashboards, React components, HTML/CSS layouts, or when styling/beautifying any web UI). Generates creative, polished code and UI design that avoids generic AI aesthetics.
Rising+15 new adopters in 4 weeks
186 projects use a version of this
Often used withfile-readingbrief-to-tasksinstantly-campaign
allanninal/claude-code-skills/skills/fuzzing-dictionary/SKILL.md
Fuzzing dictionaries guide fuzzers with domain-specific tokens. Use when fuzzing parsers, protocols, or format-specific code.
allanninal/claude-code-skills/skills/fuzzing-obstacles/SKILL.md
Techniques for patching code to overcome fuzzing obstacles. Use when checksums, global state, or other barriers block fuzzer progress.
allanninal/claude-code-skills/skills/google-design-md/SKILL.md
Generate and maintain DESIGN.md files for software projects following Google Labs conventions. Use when documenting system architecture and design decisions.
allanninal/claude-code-skills/skills/guidelines-advisor/SKILL.md
Comprehensive smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing. Provides actionable recommendations. (project, gitignored)
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.