One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
MicrosoftSkillmicrosoft/TypeScript/.github/skills/security-report-check/SKILL.md
Are you doing security research on this repo? This document covers what guarantees and non-guarantees are provided. Consult this document before reporting a security issue or conducting security research.
affaan-mCursor ruleaffaan-m/ECC/.cursor/rules/php-security.md
PHP security extending common rules
affaan-mCursor ruleaffaan-m/ECC/.cursor/rules/common-security.md
Security: mandatory checks, secret management, response protocol
garrytanSkillgarrytan/gstack/cso/SKILL.md
Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)
GoogleSkillgoogle-gemini/gemini-cli/tools/gemini-cli-bot/.gemini/skills/critique/SKILL.md
Expertise in auditing and fixing repository scripts and GitHub Actions workflows to ensure technical robustness and security.
NousResearchSkillNousResearch/hermes-agent/skills/software-development/requesting-code-review/SKILL.md
Pre-commit review: security scan, quality gates, auto-fix.
Significant-GravitasSkillSignificant-Gravitas/AutoGPT/.claude/skills/pr-review/SKILL.md
Review a PR for correctness, security, code quality, and testing issues. TRIGGER when user asks to review a PR, check PR quality, or give feedback on a PR.
n8n-ioSkilln8n-io/n8n/.agents/skills/human-like-code-review/SKILL.md
Reviews a GitHub pull request like a thoughtful human reviewer and writes the feedback to a markdown file. Prioritizes context, architecture fit, solution complexity, bugs, security edge cases, and missing tests. Use when given a PR URL to review, or when the user says /human-like-code-review.
SupabaseSkillsupabase/supabase/.agents/skills/safe-sql-execution/SKILL.md
Use whenever code will build, return, fetch, or execute SQL that runs against a user's real Postgres database — even when the request reads like an ordinary feature or bug fix and never says "security," "injection," or "SafeSqlFragment." This covers: writing or editing any pg-meta function, query builder, or endpoint that builds/returns SQL for database objects (tables, views, functions, DB triggers, indexes, RLS policies); interpolating a schema/table/column/search/route-param value into SQL text; storing, fetching, or re-running SQL that round-trips from the database (a policy's definition, a function/view definition, a snippet's saved content); and any "Run"/"Apply"/"Execute" action that sends SQL to a project's database (SQL editor run-selection, policy editor apply, snippet runner). Load this BEFORE writing such code, not only when reviewing a finished diff. Skip only for changes that never touch SQL text or execution — styling, unrelated data hooks, non-SQL form validation, or UI layout work.
obraSkillobra/superpowers/skills/receiving-code-review/SKILL.md
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
obraSkillobra/superpowers/skills/systematic-debugging/SKILL.md
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
NousResearchSkillNousResearch/hermes-agent/skills/creative/architecture-diagram/SKILL.md
Dark-themed SVG architecture/cloud/infra diagrams as HTML.
NousResearchSkillNousResearch/hermes-agent/skills/creative/humanizer/SKILL.md
Humanize text: strip AI-isms and add real voice.
NousResearchSkillNousResearch/hermes-agent/skills/devops/sdlc-review/SKILL.md
Review Kanban handoffs and route verified outcomes.
NousResearchSkillNousResearch/hermes-agent/skills/email/email-inbox-triage/SKILL.md
Triage an inbox: prioritize threads, draft replies safely.
NousResearchSkillNousResearch/hermes-agent/skills/email/himalaya/SKILL.md
Himalaya CLI: IMAP/SMTP email from terminal.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/google-workspace/SKILL.md
Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/pdf/SKILL.md
PDF files: create, read, merge, fill, OCR, edit text.
NousResearchSkillNousResearch/hermes-agent/skills/productivity/xlsx/SKILL.md
Create, read, edit Excel .xlsx workbooks and CSVs.
NousResearchSkillNousResearch/hermes-agent/skills/research/arxiv/SKILL.md
Search arXiv papers by keyword, author, category, or ID.
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.
