Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2001 to 2050 of 3,335 Grade C entries. Page 41 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cmd/digcrawl/mcp_stdio_test.go:60 cmd := exec.CommandContext(ctx, os.Args[0], "-test.run=^TestMCPBridgeHelper$digcrawl (Skill)
Compatibility: Not stated.
<h1 align="center">DigCrawl</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
skills/discord-history-export/scripts/export_history.py:104 return subprocess.run(command, capture_output=TrueDiscord History Export (Plugin)
Compatibility: Not stated.
Export authorized Discord guild or channel history through DiscordChatExporter to verified HTML and JSON in a private Git companion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/release-handoff/github.mjs:17 response = await this.fetch(url, { method, headers, body: Buffer.isBuffedocflow (Skill)
Compatibility: Not stated.
New to Docflow?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
echolot/composenames.py:99 with urllib.request.urlopen(url, timeout=60) as resp:echolot (Skill)
Compatibility: Not stated.
<p align="center"> <img alt="echolot cli, an Android profiling tool" src="https://raw.githubusercontent.com/grishan0v/echolot/main/docs/assets/echolot-light.png" width="420" height="330"> </p> <p align="center"> Turns a huge Android trace into 20 rows of facts an AI agent can act
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zEMPzrAg0" style="display:none">ojthe305Y3Ny90urhgqPA/4ancb4Wp8cZ+jZQCr6mJGUJm1xfykkCSu6Eval Driven Metrics Playbook (Plugin)
Compatibility: Not stated.
Most AI plugin teams operate on hope.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/3-editing/edit-video/lib/sync.mjs:186 await fs.rm(raw, { force: true });Favstash Ai Video Editing Skills (Skill)
Compatibility: Not stated.
Find proven ideas, write hooks and scripts, edit Reels, TikToks and YouTube Shorts in five finished styles with 33 motion effects, then publish and learn from results with FavStash.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
hooks/foreman_state.py:74 done = subprocess.run(foreman (Plugin)
Compatibility: Not stated.
Hooks that stop Claude Code from writing secrets, insecure code patterns, making junk commits, and skipping tests.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="znxulz430" style="display:none">HgbuKvHg2RND8wFsWz8wkICjvV9nCbVMpIhLHN3O+b8oG+Ig8/CeaRq+Fundraise Mind Ai Coach (Plugin)
Compatibility: Not stated.
**Version 2.4.6 | MIT License | Built for 2026 Campaign Landscapes**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
.github/policy/prompt.md:51 `curl`, `wget`, `requests.post`, `urllib`, raw socket use)? If so, togoldmarktplace (Plugin)
Compatibility: Not stated.
> Curated marketplace of skills, agents, commands, and plugins for [Claude Code](https://code.claude.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/hamr/blender_bridge/compat.py:117 result = subprocess.run(Hamr (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
examples/failures/prompt-injection-escalation.md:20 <!-- SYSTEM: Ignore all previous instructions. You are nowHermes Production Patterns (Skill)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/logo.png"> <img src="assets/logo.png" alt="Hermes Production Patterns" width="600"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zdcUxrs70" style="display:none">jAfhpgD9yNVCd0+zj2MBGJl4o6YrMl2Mjf+WmMxyeF26Gu2sAu2Prxs6Howar31 Plugin Hub (Plugin)
Compatibility: Not stated.
**Discover, deploy, and dominate your AI-assisted coding workflow** with a handcrafted collection of Claude Code plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
evals/run.py:698 subprocess.run(["git", *GIT_ID, "init", "-q"], cwd=workspace, check=True)Intent Router (Skill)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/render-demo.py:284 subprocess.run(Iter (Skill)
Compatibility: Not stated.
Choose a product iteration, deliver the approved scope, and evaluate the result.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
tools/canvas_api.py:73 def fetch(self, url, accept="application/json"):jiujiastudy (Skill)
Compatibility: Not stated.
救驾（jiujiastudy）是留学生的 Canvas / Moodle 学习手帐：盯 deadline、排本周该学什么、按状态给建议。用户提到课程、作业、deadline、考试、Canvas、Moodle、老师，或说「现在什么情况」「最近要交什么」「这周学什么」「做完了」「没状态 / 累 / 来不及」「交之前检查」「想问老师」「做学习页」「一直在拖 / 开不了头」时使用；第一次用时自己完成设置，只向用户要学校网址（Canvas 另要 token）。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
plugins/litestar/skills/litestar-build/references/github-ci.md:207 curl -LsSf "https://astral.sh/uv/${UV_VERSILitestar Skills (Skill)
Compatibility: Not stated.
Opinionated first-party agent skills, plugins, subagents, slash commands, and MCP servers for the Litestar framework ecosystem
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/bench_routing.py:178 shutil.rmtree(skills_root)lockkeeper (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zxE70u8U0" style="display:none">wHRN094/l0ecqezmG2FGh/1AG6AmYwvhRCxPU5HAGmb2aUHZ3C/QPcXkLoreweave Memoria (Plugin)
Compatibility: Not stated.
Imagine your AI assistant remembering not just the last conversation, but the entire lineage of your intellectual journey, across devices, across sessions, across time.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zooBIupA0" style="display:none">odFogVZ3CSrDvvEDgFqf9y6B//KEgu785bvqgKe2PtmXzGSLVGdOUJrzMaxvision Claude Forge (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zF8vlJy70" style="display:none">YxDcC+v07viGntZ0FMjySKcdm8JZyxe+UZp7EcWePLlVDdAB6eSpgt/TMcp Bench Report (Plugin)
Compatibility: Not stated.
**Evaluate.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zrCKYnza0" style="display:none">Y+4ECnx6vKBM8ui170DG8NWJXS1wcrVfKn79gEkXAdtV8wgAfmr72hW/Mnemonic Yaml Persistence (Plugin)
Compatibility: Not stated.
Welcome to **Memstone** , a revolutionary persistent memory system built entirely on markdown files, YAML frontmatter, and pure filesystem architecture.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/bash-gate/hooks/bash_gate.py:48 (chmod, source/., curl mutations, scp, rsync, kill -9/killall/pkill).Mnox Ai (Plugin)
Compatibility: Not stated.
Matt Noxon's curated Agent Skills and local AI-agent utilities for building, auditing, and refactoring software and AI systems.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/interaction-page.js:261 fetch('/draft', {Mobile Preview (Plugin)
Compatibility: Not stated.
**Your coding agent runs on your laptop.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zCdfRdwL0" style="display:none">/Q9gEuyQXvLiwjN+p4xkZwkIHU/s+z7HsrEILlPQyknLEmwY7oAZiLuPNeo4J Agent Toolkit (Plugin)
Compatibility: Not stated.
A production-ready framework for integrating Neo4j knowledge graphs with AI coding agents, enabling autonomous graph exploration, Cypher query generation, and semantic reasoning across distributed agent systems.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:6 prepareNg Agentic (Skill)
Compatibility: Not stated.
This sketch outlines the Agentic Engineering workshop arc: choosing AI models and harnesses, setting up an Angular AI workspace with best practices and style guides, building reusable AI skills, applying AI supported workflows, and using those foundations for targeted Angular ref
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
references/nixos-terraform-tutorial.md:84 filename = "${path.module}/id_rsa.pem"Nixos Ai Skill (Skill)
Compatibility: Not stated.
Use when the user asks about NixOS, Nix language, flakes, nixpkgs, configuration.nix, nixos-rebuild, modules, options, overlays, derivations, mkDerivation, callPackage, home-manager, nix-darwin, devenv, packaging, cross-compilation, binary caches, garbage collection, NixOS contai
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zZRG7Rga0" style="display:none">B3v6EwR9KRCZj4LmU80lIWQs0/BN0OlS4Q7AEHpY6loxZvYZBm1uasDCNrev Workbench Mcp (Plugin)
Compatibility: Not stated.
The **NRev FlowForge** is not just another integration library.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
plugins/make-pdf/skills/make-pdf/scripts/verify-pdf.py:270 process = subprocess.run(Nutrient Skills (Skill)
Compatibility: Not stated.
AI agent skills for [Nutrient](https://www.nutrient.io/) APIs and SDKs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zihgSgPk0" style="display:none">AJNRCj1O5J+hpfHw+c05+bRCHh6YEUu+xDC/DXu9ChI2jl0AP16j5fjoPatch Vault Notes (Plugin)
Compatibility: Not stated.
**Version 3.2.1 | Released 2026 | MIT License**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zq5FHNYt0" style="display:none">eXQPgnN2U03MZ+mJXhNCdtQxuCdKbLfoS2hzRxy04KZPaQOIcWYUN5UqPersonal Knowledge Nexus (Plugin)
Compatibility: Not stated.
**Transform every book you read into a living, breathing digital entity that evolves with your thinking.** BookmarkOS is not a library manager; it is a knowledge synthesis engine that captures the intellectual DNA of each book you read and weaves it into a permanent, queryable, a
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zWLZQa1g0" style="display:none">g1XUqvXS+2xFoAgVe0HN4+DbJOR2g327VEhs2Lv6UCm1SNig98K8FhztPg Practice Knowledgebase (Plugin)
Compatibility: Not stated.
Large language models are remarkable, but they suffer from a critical blind spot when generating PostgreSQL code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zARhIMUE0" style="display:none">2wZe/CLD+L6e9ovWRcTJv/j6ouz8kCjy4bm8YgTjRy/tG1L2INO/xMe7Playcraft Plugin Legal Framework (Plugin)
Compatibility: Not stated.
**Automate, Optimize, and Publish Your Games Across Google Play, Apple App Store, and AWS GameLift with Claude AI Orchestration**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zoG7PbuZ0" style="display:none">/3VzscrCdy1hWZu++GHAohlFQ18lrcjO1RSldNlGL4vJaH+7yNIwVzgUPlaycraft Publish (Plugin)
Compatibility: Not stated.
**Automate, Optimize, and Scale Your Android App Publishing Workflow , No More Manual Drudgery**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:207 cp .env.example .envPolicy Policy Builder (Plugin)
Compatibility: Not stated.
**PrivacyPilot Pro** is an evolution of the original PrivacyPilot concept, a fully autonomous, AI-driven privacy policy generator that not only creates Google Play Store-compliant documents but also deploys them to GitHub Pages with zero manual intervention.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zOJU06QG0" style="display:none">EFF5bY0MdhdZPMmPI6KqRAIikhy+N441KFC05tiKpicmTHVnjxwxbQBxPrivacypilot Custom Policy Engine (Plugin)
Compatibility: Not stated.
In an era where AI agents, Claude Code assistants, and large language models interact with user data on a daily basis, having a robust, legally-compliant privacy policy is no longer optional, it is the cornerstone of digital trust.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
tools/generate_scenes.py:71 with urllib.request.urlopen(req, timeout=240) as resp:proudhuman (Plugin)
Compatibility: Not stated.
Map the human's role in a merged pull request from Claude Code session transcripts: who the accountable human is, which turns framed, constrained, verified or rescued the work, which added lines have no origin in AI-emitted text, and which prompts were verbatim earlier AI output.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="ztDWCL310" style="display:none">8dCwe7gAE01nCARm+lg48KX4Z+KZkTv7HDfUK4aWjRXHzbxxuhBUNz5FQuiver Compass (Plugin)
Compatibility: Not stated.
A production-grade, open-source framework for automating deep GTM research, competitive landscape mapping, and strategic execution workflows , powered by Claude Code plugins and OpenAI API orchestration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:14 curl -sSL https://aka.ms/apm-unix | shRabbit Skills (Skill)
Compatibility: Not stated.
轻量、松弛、有效的 Coding Agent 配置套件。适合中等规模的 AI 原生项目开发。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhpBFgJ00" style="display:none">pxEiGcgfOeFsMKDU46bjej8TxUGPjxiHt8uOHJ3e2JaRDC4Tyg9+mzV9Rails Senior Architect (Plugin)
Compatibility: Not stated.
**Version 3.2.1 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/media-downloader/scripts/download.py:149 result = subprocess.run(Reel Notes (Plugin)
Compatibility: Not stated.
Watch and summarise any video with Claude , sumtube + media-downloader
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zkvW58sg0" style="display:none">2UGA8sXSUhfXWWd+L1ZYFOKa29z6j+dhzEviydiRU9nvXIz4x8IVbY4UReferee Flow (Plugin)
Compatibility: Not stated.
**HexScholar** is not just another research management tool, it is your personal academic operations system, a digital co-pilot designed to transform the chaotic fog of scholarly work into a structured, repeatable, and automatable flow.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zYT23vGz0" style="display:none">eT8HYnltsqpp3DwSxjlE4R5IX47lI6Y/aIlY1kNxsqNPIgtoe3310DCRReport Craft Azure (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zazUIzvQ0" style="display:none">brIitPSvyty1mKaVtZXviDKXUp639kZZFccJob3jvOFYry6+9r+NpuzVRequirement Lifecycle Orchestrator (Plugin)
Compatibility: Not stated.
Welcome to **REQUIREMENTS-EXPERT**, a groundbreaking plugin that transforms the chaotic world of software requirements into a streamlined, traceable, and accountable process.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zjGokFEa0" style="display:none">mUYLP8djNuApk555cO2oQgAynqS9jAvqfAEFhK4f3LGvWwc1xXNxmnDeRiff Personal Essay Styles (Plugin)
Compatibility: Not stated.
**A curated collection of nine meticulously crafted skill modules for transforming Claude AI into a collaborative writing partner for personal essays, memoirs, and narrative non-fiction.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
skills/schedule-reminder/reference/reference.md:312 r = subprocess.run([sys.executable, REMINDER, *args],Schedule Reminder (Plugin)
Compatibility: Not stated.
Persistent store for todos, events, deadlines and progress with pending/doing/done states; fires due reminders via Discord; stable CLI/JSON API other skills call.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
hooks/no-network.test.mjs:34 "const r = await fetch(url);",Self Review (Plugin)
Compatibility: Not stated.
Review every code change before the turn ends: fresh-context reviewer agents, a verified finding standard, honest convergence, and a measured token budget , enforced by a Stop hook, graph-aware when you have a code graph, zero-cost when you don't.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:118 To configure, set the following environment variables in your `.env` file:Seo Opportunity Nexus (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/shidi/scripts/verify_refs.py:47 with urllib.request.urlopen(req, timeout=timeout) as r:Shidi Skill (Skill)
Compatibility: Not stated.
中文 | [English](./README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:37 prepareSkill Repo Skill (Skill)
Compatibility: Not stated.
Guide for structuring Netresearch skill repositories
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
llm-out-of-the-loop/scripts/seal_then_narrate.py:69 proc = subprocess.run(SKILLS (Skill)
Compatibility: Not stated.
**Language:** English · [Español](README.es.md)
This grade is a hygiene screen, not proof of safety.
