Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1751 to 1800 of 3,335 Grade C entries. Page 36 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.github/workflows/repository-quality.yml:42 result = subprocess.run(['bash', '-n', str(path)], text=True, captAgentforge Openclaw (Skill)
Compatibility: Not stated.
Создание, улучшение и аудит скиллов и агентов OpenClaw.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
sidecars/zvec_sidecar.py:137 subprocess.run(Ai Plugin (Plugin)
Compatibility: Not stated.
Cross-agent skills: skill authoring, DeepSeek Harness (dsh) plugin development, Claude Code plugin development, and DeepSeek model cost routing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/appstore-release-director/references/app-store-connect-api.md:99 curl -I https://example.com/termsBuild Swift Apps (Skill)
Compatibility: Not stated.
Build, debug, profile, test, refactor, and release Swift apps across iOS, macOS, Xcode, SwiftUI, SwiftPM, Tuist, and App Store Connect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/init-mcp.py:44 subprocess.run(Cartograph Plugin (Plugin)
Compatibility: Not stated.
Widget library manager for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:242 cp .env.example .envCivic Agenda Pilot (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/grok/scripts/lib/git.mjs:164 // Never follows symlinks: an untracked link to ~/.ssh/id_rsa would otherClaude Grok Plugin (Plugin)
Compatibility: Not stated.
Consult [xAI's Grok CLI](https://x.ai) from inside Claude Code for a **strictly read-only** second opinion or code review , without ever letting Grok touch your files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zHxyBlOS0" style="display:none">OCPq+bN4TELSatCDU6VyBU9C9SKyVNhXU5nZLoHrm1kOPubzsWgLOIsnClaude Ops Console (Plugin)
Compatibility: Not stated.
OrbitForge is a self-hosted orchestration dashboard that turns scattered Claude Code sessions into a cohesive, searchable mission control.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/archive-preflight.sh:160 -o -name '*.key' -o -name 'credentials.json' \) -print 2>/dev/null \Claude Project Optimizer (Plugin)
Compatibility: Not stated.
Onboards new project directories: tunes plugins and MCP servers to the project, writes a well-constructed CLAUDE.md, checks directory organization, and verifies GitHub configuration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
.claude/skills/reddit-creator-deploy/scripts/test.py:5 r=subprocess.run([sys.executable,"generate.py","--rosteClaude Skill Reddit (Skill)
Compatibility: Not stated.
**Grow your Reddit presence on autopilot** , using AppleScript to control your real Chrome browser.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhVyn3mf0" style="display:none">HCvDHOZ8cPoCnA6kInNT8zrKyVNc1dUF7sJ8rgYXfG0qNs8W5Gw3gFvRClippy Md (Plugin)
Compatibility: Not stated.
**Transform Markdown into Professional Documents with One Click** , The missing link between technical writing and enterprise communication tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zuEt1yjw0" style="display:none">vRSpNzQsQxa2dzKMoQFPKy/+n9p97LdBOToRKyRbAgWLCaU9NjwEbO86Codebase Surface To Core Mapper (Plugin)
Compatibility: Not stated.
A structured reasoning framework that enables AI agents to systematically explore and evaluate unknown codebases through a progressive depth-first analysis methodology , from surface-level artifacts to core implementation logic.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:109 CET requires at least one of the following API keys. Create a `.env` file in the root directory:Cognitive Masks (Plugin)
Compatibility: Not stated.
In an era where artificial intelligence agents are no longer mere tools but autonomous collaborators, the question of **identity** becomes paramount.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugins/codeact/scripts/mcp-bridge.py:109 with urllib.request.urlopen(req, timeout=timeout) as resp:Copilot Codeact Plugin (Skill)
Compatibility: Not stated.
Collapse multi-step tool chains into a single sandboxed Python execution.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/claude-usage-client.ts:87 response = await fetch(USAGE_ENDPOINT, {CountdownMCP (Plugin)
Compatibility: Not stated.
CountdownMCP is a local, read-only MCP server that gives Codex and Claude Code a plan-aware view of its remaining usage and helps it choose work that fits the current usage window.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
evals/hello.py:225 proc = subprocess.run(cultivar (Skill)
Compatibility: Not stated.
A CLI tool to help you write tests for skills, test them across agents, and iterate until they work, from the Pinecone DevRel team.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
poller/poller.mjs:166 const res = await fetch('https://api.linear.app/oauth/token', {cycler (Plugin)
Compatibility: Not stated.
Delegate a Linear issue to Claude and get a gated PR back.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zMK4N8da0" style="display:none">paGdRuLJgvHaGv18rbsn+82eCYaxulShoAt1398o1UCTvJFM4NnFi4NXDatev Gaap Controller Mcp (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="znhPXUA50" style="display:none">/jR/VkHoC61ZXotB79eVfj5eZPBwV7Oe2LLcjBtS7T3IKXNcQ/hM1wATGrid Smith (Plugin)
Compatibility: Not stated.
**Version:** 1.2.0 (2026 Release) **License:** MIT **Compatibility:** Windows, macOS, Linux, Android, iOS **Framework Support:** React, Vue, Angular, Svelte, Next.js, Nuxt, and Vanilla JS
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/a2a_handler/cli/__init__.py:226 result = subprocess.run(command, check=False)Handler (Skill)
Compatibility: Not stated.
Handler is an open-source [A2A protocol](https://github.com/a2aproject/A2A) client for software engineers building, testing, and operating agentic systems.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
scripts/bench_render.py:122 os.remove(q)Html Explainer (Skill)
Compatibility: Not stated.
把任意主题做成讲解/科普视频并渲染成 MP4（HTML/CSS/GSAP 画面 + 确定性逐帧渲染 + 配音 + 词级硬字幕）。触发场景：要做科普/讲解/教学/知识/产品类视频、「讲一下 X 做成视频」、要挑某种视觉风格（极简/数据/赛博/电影感/品牌）出片、要出抖音封面/竖版封面/9:16 封面、要用 html-video 那种模板化画面但更稳的音画同步、anything2explainer 换 HTML 渲染，或提到 html-explainer / HTML 讲解视频 / explainer video / MG 视频。内置 23 个模板风格（8
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:163 cp .env.example .envHugin V0 Omnibus (Plugin)
Compatibility: Not stated.
Imagine a developer who never sleeps, never forgets, and never misses a deadline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/ielts-task1-review/scripts/create_and_validate_task1_review.py:15 return subprocess.run(cmd, check=TrueIelts Writing Review Skills (Skill)
Compatibility: Not stated.
<div align="center"> <img src="./assets/ielts-writing-review-skills-hero.png" alt="IELTS Writing Review Skills" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zT70Chc50" style="display:none">STT5/5cSGUD960qESOmMDv6VKje2Exws+QLJCCQ5+fx/KfX1lQJeOqSmInwx Dns Control (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
public/app.js:726 const response = await fetch(url, {Jev Social (Skill)
Compatibility: Not stated.
<img src="https://raw.githubusercontent.com/socai-io/jev-social/main/docs/banner.png" alt="Jev Social , Jev × socai" width="100%" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zsF4cPXp0" style="display:none">t4tVEeQDYPOCy4C1Mdl0asVmtrUxgxG0kWT7t1xwNoqBllkb5hMniduGJurisdictional Oracle (Plugin)
Compatibility: Not stated.
**Transform fragmented civic data into actionable jurisdictional intelligence.** CivicMosaic AI is an LLM-powered skill that watches, learns, and publishes structured governance data from any jurisdiction, turning scattered public records into a living, queryable civic knowledge
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
specs/002-keel-disconnect/spec.md:63 3. **Given** either run, **Then** the home's `credentials.json` is untoucKeel Connect Skill (Plugin)
Compatibility: Not stated.
Use when the user says or means \"keel connect\" -- including \"connect keel\", \"start the keel runtime\", \"launch keel connect\", \"is keel connected\", \"check keel's status\" -- or \"keel disconnect\", \"stop the keel runtime\", \"shut keel down\", \"keel off\"; or when a Ke
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zOZJtoYV0" style="display:none">RpH4C5LX81aPDax2QOThISYwoVRvdf7y9ynxvHO5dklwjPQBkMe0LNZAKotlin Lsp Nexus (Plugin)
Compatibility: Not stated.
KotlinSense Pro is a revolutionary language server plugin engineered specifically for Claude Code, designed to transform the way developers interact with Kotlin and Android projects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/recording-ui-evidence/scripts/encode_gif.py:70 completed = subprocess.run(command, check=True, capture_ledger (Plugin)
Compatibility: Not stated.
The engineering ledger for agent-authored codebases: documentation as substrate, evidence over self-report, and rot resistance as a build requirement.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
workbuddy/scripts/handler.py:85 r = subprocess.run(Memsearch Workbuddy (Plugin)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zX3AewgJ0" style="display:none">GXPrTdo/1DBSPnofebkW7oQQiL00fdWdRyJSBXUeRZ4vbudH2C+TSgtzMycapsul Core Engine (Plugin)
Compatibility: Not stated.
Imagine a dashboard that doesn’t just display your data but thinks ahead, adjusts, and evolves with you.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
conectores/prova.mjs:272 (await fetch(`http://127.0.0.1:${PI}/`)).status, 200);oficina (Plugin)
Compatibility: Not stated.
**Ferramentas de IA por profissão, em português.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zu9SunDX0" style="display:none">OZvZF6WfWktLB8mGGgxArYHWyDcBQDS63PegzqtHRjIPhtUdp48dMRJKPencil Mcp Harmony (Plugin)
Compatibility: Not stated.
Imagine your `.pen` design files whispering their structural secrets directly into your AI coding assistant's ear.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
deploy/nomad/llm.ts:32 `[ -s "$f" ] || { wget -qO "$f.part" '${MODEL_URL}' && mv "$f.part" "$f"; }`,Pm Loop (Plugin)
Compatibility: Not stated.
Event-driven, script-first PM loop for GitHub repos worked by Claude Code lanes: poller/webhook → queue → one small headless PM tick; scripted pre-merge/merge, STATUS entries, fact-checks, review routing; fresh capped agents; local LLM for prose only.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zqKar39P0" style="display:none">pg5dSMb7MSfbeBk20nxwGeRll4lQ5faSxRk5JrKQP/uQE1FCxOt2XYI1Pocketcast Cli Commander (Plugin)
Compatibility: Not stated.
Imagine having a personal podcast research assistant that not only finds what you need inside Pocket Casts but also understands the context, surfaces hidden gems, and organizes metadata into actionable intelligence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zor7zCTX0" style="display:none">57K79dVqxbsefHnYp5kkdDaIUpC1QT+k8Ha9baxuTw3Rr7f/13qCwUcxPreflight Checklist (Plugin)
Compatibility: Not stated.
A revolutionary methodology for verifying, stress-testing, and perfecting technical documentation and architectural plans before implementation begins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zJIRIvEd0" style="display:none">Het70gp0yi8Zc45WWkTNBaaj5RIe2jG0CeOue9tnhX4r9nfYCGSNVUA+Qa403 Ubuntu Mono Audio Toolkit (Plugin)
Compatibility: Not stated.
Welcome to the **QA403-Ubuntu-Mono-Install-Claude-Skill** repository.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install-openclaw.sh:32 curl -LsSf https://astral.sh/uv/install.sh | shRappi Plugin Claude Openclaw (Plugin)
Compatibility: Not stated.
Rappi food delivery plugin for Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:149 To enable, set environment variables in your `.env.local`:Remix V3 Pattern Library (Plugin)
Compatibility: Not stated.
**Version:** 1.0.0 | **License:** MIT | **Year:** 2026
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:11 id_rsa*Remote Gpu Trainer (Skill)
Compatibility: Not stated.
AutoDL/vast.ai/RunPod/Lambda/Paperspace远程GPU启动、调试、监控、续训、并行、停止及卡住/OOM/NaN/全零指标排查；可验证状态/selection-best checkpoint/拉回结果。释放实例销毁机器及数据盘，不等同关机。长期镜像/恢复→mirror-research-artifacts。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhNVjZwx0" style="display:none">/YgrriJosmKuPz6BQRuWnFZ55LjbPZqaUv72qRC0zorLlSekIHj1GPdyScholar Scaffold (Plugin)
Compatibility: Not stated.
Tired of spending 40% of your research time formatting citations, checking plagiarism, or aligning your manuscript with journal guidelines?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zejjoq5N0" style="display:none">OO6+kum9MnYPVM4b/3UYTj8SUcPUtiRRn09Ez1C8YmgO87KY6611DFYZSgrep Lint (Plugin)
Compatibility: Not stated.
Welcome to **Semgrep Pro Max** , the most advanced semantic grep tool that doesn't just find patterns; it understands meaning.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
SKILL.md:244 | Credential files | `.env`, `credentials.json`, `*.pem`, `*.key` tracked → **Fix** |Skill Forge (Skill)
Compatibility: Not stated.
Validate, fix, and publish skills as GitHub repos.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zkqqZcmf0" style="display:none">O0v4NKkZR6DwgCohhhXGtmF9/1rMyyhTst1COn6I3iYNVvQ+qwkA2qnNSkill Forge (Plugin)
Compatibility: Not stated.
> **Transform your workflow into a symphony of intelligence.** NexusFlow is not another AI tool, it's the conductor that unifies 27+ specialized cognitive skills into a single, extensible pipeline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL +1 more
docs/diagrams/render.py:23 subprocess.run(command, check=True)Skill Smith (Plugin)
Compatibility: Not stated.
Thin meta-skill that creates other Claude Code skills to an industry-leading, tested-real bar.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
skill-artisan/benchmark/skill-creator-comparison-repro.sh:157 shutil.rmtree(torn_down, ignore_errors=True)SkillArtisan (Plugin)
Compatibility: Not stated.
A plugin for Claude Code that builds, validates, secures, and maintains Claude Skills , superseding Anthropic's shipped `skill-creator` with a spec-compliant, cross-vendor, security-hardened successor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:66 Create a `.env` file in the root directory:Speg Compound Solvency Model (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zvmycKyV0" style="display:none">0H+2nazLFHeGU2xinUK8LZNHHPUhUUIbndYyBPkXBAvmYrqXrttTDd8eStrategic Reasoning Engine (Plugin)
Compatibility: Not stated.
A modern strategic reasoning framework inspired by Sun Tzu's analytical philosophy , not a quote library, but a tactical decision-making companion for entrepreneurs, product strategists, and competitive analysts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:168 For sensitive credentials, use a `.env` file:Supplement Evidence Stack (Plugin)
Compatibility: Not stated.
**AI-Powered Supplement & Medication Interaction Checker** is a next-generation command-line tool and plugin ecosystem that analyzes the complex interplay between vitamins, dietary supplements, OTC medications, and prescription drugs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:158 # .envSymfony Ux Insights (Plugin)
Compatibility: Not stated.
The **Symfony UX Intelligence Engine** transforms how developers build reactive web interfaces by integrating Claude, Gemini, and Codex AI capabilities directly into Symfony's UX ecosystem.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://raw.githubusercontent.com/nyxandro/t-invest-skill/main/install.sh | bashT Invest Skill (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/banner.png" alt="t-invest , Т.Инвестиции agent skill" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
