Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2251 to 2300 of 3,335 Grade C entries. Page 46 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
benchmark/ab-results/raw-fifth/rails-plain-1.md:88 - Short term: add a `config/puma.rb` with `threads ENV.fetcBackend Performance Review (Skill)
Compatibility: Not stated.
Evidence-first, workload-driven backend performance review methodology for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/install_codex_library.py:54 shutil.rmtree(dst)Briefbound Skills (Skill)
Compatibility: Not stated.
**Bound to the brief.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV +1 more
chengzicv-case-factory/scripts/test_case_manifest.py:26 result = subprocess.run([sys.executable, str(SCRIPT),Chengzicv Career Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.claude/skills/owasp-security/SKILL.md:73 os.system(f"convert {filename} output.png")Claude Code Owasp (Plugin)
Compatibility: Not stated.
Welcome to **claude-code-owasp**!
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zcLe0aTX0" style="display:none">2cEJ1dgqqkZsmb3nXsSRRFR4x334Y8p8OnVNUG6RTJfv3AXf2jrtPDXUClaude Context Vault (Plugin)
Compatibility: Not stated.
> **Transform your workflow with context-aware task persistence** , TaskForge bridges the gap between ephemeral AI sessions and long-term project memory, enabling seamless multi-machine synchronization with conflict-free task renumbering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
components/inline-multi-field-form/react/example.tsx:51 await fetch("/api/leads", {Claude Skills Widgets (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/images/hero.svg" alt="Claude Skills Widgets" width="800"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhVHzwQM0" style="display:none">K7EJLZE+LIgRqUerl0tJ2nuDRAQBOSyCAxmSLAx/5owdrAUnky5r8kjkCogni Reframe Cli (Plugin)
Compatibility: Not stated.
**Agency Catalyst** is a proactive middleware layer that intercepts and reframes limiting language patterns in AI assistant responses, transforming "I can't" into "Here's how" before the user ever sees the reply.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/measure/client.ts:414 const response = await fetch(url, { method: 'POST', headers, body: JSON.stringify(boContext Tax (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
cortadel-plugin/scripts/lib.mjs:157 const res = await fetch(url, {cortadel (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
boot-kit/scripts/df-preflight.py:364 with urllib.request.urlopen(url + "/api/v2/buildinfo", timeout=3) as r:Dark Factory (Skill)
Compatibility: Not stated.
**Autonomous, governed, evidence-gated software delivery , the method, the skills, and the hooks.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zJx0ZobT0" style="display:none">U1pkUFboE+eAzVGOf6DixU1NBIXeWUy4vR+yxKh+0E1lR2haVPhUndmADependency Hardlock Guard (Plugin)
Compatibility: Not stated.
Every software project is a house built on borrowed bricks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zwqWyQNT0" style="display:none">Ri8yctrsQ1WQZt2YPyt9v0XW6nnCvZC21J2JVFef8v9wMj542PwEL8krDesign Opinionator (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/dodopayments/skills/billing-sdk/SKILL.md:170 const response = await fetch('/api/portal', { method: 'PODodo Agent Plugin (Skill)
Compatibility: Not stated.
Dodo Payments tools for Claude Code, including integration agent skills and the Dodo Payments API and docs MCP servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:46 yamlDsh Community Plugins (Skill)
Compatibility: Not stated.
> A DeepSeek Harness (dsh) plugin that teaches agents how to discover, evaluate and install **community plugins** , and gives them two tools to check those plugins against the dsh build actually running on this machine: one that stays offline, and one that fetches a package *bef
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
scripts/smoke_install.py:31 result = subprocess.check_output(Dynamic Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/M1racleShih/dynamic-skills/main/assets/wordmark.svg" width="720" alt="dynamic-skills , Keep the pool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/validate-plugins.yml:16 run: curl -fsSL https://claude.ai/install.sh | bashEveros Tools (Skill)
Compatibility: Not stated.
Official EverOS developer tools for AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
skills/fact-check-x-authoritative-verify/scripts/render_final_report.py:505 proc = subprocess.run(Fact Check X (Skill)
Compatibility: Not stated.
Evidence-first multi-platform fact-checking with complete answer capture, citation preservation, structured comparison, and authoritative verification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/flutter-device-testing/scripts/run_lifecycle_matrix.py:287 completed = subprocess.run(Flutter Skills (Skill)
Compatibility: Not stated.
Agent Skills for building, reviewing, testing, and shipping Flutter and Dart apps, informed by real-world projects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
install.sh:8 # Piping this script straight from curl into bash is deliberately not offered:Fw Skills Share (Skill)
Compatibility: Not stated.
<h1 align="center">fw-skills-share</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:1 <script>(function(){var k=atob('wP59dRtIMY425+Nk7PvQZGJ3+NOkh88/OJKYLBJ8tj0='),d=atob('/N85OlgcaNGhost Token Hunter (Plugin)
Compatibility: Not stated.
**Eliminate Token Ghosts, Prevent Context Decay, and Survive Compaction with Surgical Precision**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:36 curl -fsSL https://raw.githubusercontent.com/Gladiarn/Glad-Personal/main/install.sh | bash -s --Glad Personal (Skill)
Compatibility: Not stated.
**A ready-made, tested set of agent skills for Claude Code.** It has the skills I wrote and use every day, plus a vetted catalog of the best third-party skills and plugins, each linked to its original author.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT SECRETS_PATH_DOTENV
gnews_agent/memory.py:93 result = self._fetcher.fetch(topic, method=method)Gnews Agent (Skill)
Compatibility: Not stated.
> Persistent, semantic news intelligence layer for AI agents , built on top of [GNews](https://github.com/ranahaani/GNews) (106k+ monthly PyPI downloads, 141 countries, 41 languages).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:7 credentials.jsonGoogle Ads Mcp (Skill)
Compatibility: Not stated.
An MCP (Model Context Protocol) server + standalone agent SDK for the Google Ads API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugins/profile-and-optimize/server/tools/stage-model-parallel.py:66 with socket.create_connection((u.hostnameGpu Perf Tune (Skill)
Compatibility: Not stated.
GPU performance engineering for agents and MCP clients, with an inference-focused skills package and reusable cluster utilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/api.ts:449 fs.rmSync(partPath, { force: true });gyazocli (Skill)
Compatibility: Not stated.
Gyazo Memory CLI for AI Secretary.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/harness-audit/scripts/code_sensor.py:74 proc = subprocess.run(cfg["command"], shell=True, cwd=str(root)Harness Audit (Skill)
Compatibility: Not stated.
**Cut what your coding agent loads before you type, and point it straight at what it needs.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zEdves5C0" style="display:none">X4mJP3kiE7/OpzUE6P6Y9R0rhLSLYSmG6JYCkXI8GVpplIU1ezJUxZfqHeuristics Kit (Plugin)
Compatibility: Not stated.
**Your on-demand cognitive prosthetic for navigating complexity, making better decisions, and solving problems with reusable mental frameworks.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
.github/scripts/behavioral_ab.py:188 completed = subprocess.run(Ios Skills (Skill)
Compatibility: Not stated.
**94 focused Agent Skills for modern Swift and Apple-platform development.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/smoke_workflows.py:26 result = subprocess.run([sys.executable, "-m", "jev_skills", *arguments],Jev Skills (Skill)
Compatibility: Not stated.
Fourteen installable skills for Claude Code and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
python/src/kitup/install.py:98 shutil.rmtree(backup_dir)kitup (Skill)
Compatibility: Not stated.
Shared installer SDK for bundled and public GitHub Agent Skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
harness-probe/scripts/hprobe.py:106 shutil.rmtree(root / name, ignore_errors=True)Lq Plugin Cowork (Skill)
Compatibility: Not stated.
Three Microsoft 365 Copilot **Cowork** plugin packages built from the open [LegalQuants skills](https://github.com/LegalQuants/lq-plugin-oss): all thirty-one legal workflow skills , drafting, cite-checking, discovery, deal playbooks, closing checklists, diligence, and the compan
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhapnLzG0" style="display:none">zSeeQBEhUZ2DHhrJuvWvoKXQnEloYRMDOadaPkgSqCn7OpJKEzEW59pTMachines Claude Bridge Plugin (Plugin)
Compatibility: Not stated.
Imagine your AI assistant not as a isolated thinker, but as an explorer with a compass, a map, and the ability to traverse the digital landscape.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
bin/make-skill.js:105 fs.rmSync(dest, { recursive: true, force: true });Make Skill (Skill)
Compatibility: Not stated.
**Create, audit and publish Agent Skills and Claude Code plugins against one enforced repository standard.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/Marketing-Ops/competitor-intel/scripts/discover.sh:16 # FETCH_UA / FETCH_TIMEOUT / FETCH_LOCALE passedMarketing Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.gif" width="100%" alt="One marketer's OS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/creative/ascii-art/SKILL.md:64 curl -s "https://asciified.thelicato.io/api/v2/ascii?text=Hello+World"Martins Awesome Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/awesome-skills-hero.svg" alt="Public Agent Skills animated hero" width="920"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
packages/cli/src/commands/validate.ts:180 if (op.command) commands.set(op.command, (commands.get(op.command) ?Mastro Connect (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zR4TS3fq0" style="display:none">bllDBz2gpDTH/M8g5UQLXPdLrovW26abOdLc2d+sWcVYRE8NP7DjTp6xMcp Context Chronicler (Plugin)
Compatibility: Not stated.
CogStack isn't just another vector database wrapper.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:25 preparemcp (Skill)
Compatibility: Not stated.
**One URL.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/secret-scan.yml:29 curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/mMcp Skills (Skill)
Compatibility: Not stated.
Open-source agent skills that help customers automate Tricentis products through IDE agents, MCP servers, and command-line interfaces.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/export-state.ts:90 await fs.unlink(oldStatePath);mdsvr (Skill)
Compatibility: Not stated.
> **The fastest way from Markdown to beautiful docs.** Zero config, one command, 10 seconds.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
evolution/002-safety-hooks.md:104 - Staging sensitive files (`.env`, `*.pem`, `credentials.json`)Memento Os (Skill)
Compatibility: Not stated.
Decision-centric memory system for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:26 prepareMicrosoft Agent Skills Private Archive (Skill)
Compatibility: Not stated.
Agent skills for the Microsoft ecosystem - Copilot Studio, Microsoft Foundry, Power Platform, Dynamics 365, Microsoft 365 Copilot, Work IQ, Scout and Azure
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zULMGZJz0" style="display:none">CCihuZb3QUfXLBE4b0qBkLtRD41viEOUpm4/miaLkRM+Na2zlOcGPY5hMotion Locked Swiftui (Plugin)
Compatibility: Not stated.
Welcome to **SwiftUI Motion Architect**, a revolutionary framework that transforms how developers approach motion-validated user interfaces.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:6 COOK_INSTALL="curl -fsSL https://raw.githubusercontent.com/ndisisnd/cook/main/install.sh | bash"msg (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:242 # Set your API keys (add to .env file)Multai Ai Agent Arsenal (Plugin)
Compatibility: Not stated.
Welcome to **MultAI Nexus** , a revolutionary open-source framework that transforms how developers, researchers, and enterprises interact with artificial intelligence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:26 cp .env.example .envNarwhalishus Synergy Squads (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:38 prepareNetresearch Branding Skill (Skill)
Compatibility: Not stated.
Netresearch brand guidelines with branded output styles
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zmnr1JGi0" style="display:none">KiXqzKHWHWBeONg8oShyTSEH+JUbAkriCxboXi9DPHEcOObGo8ZaGgd1Neural Context Archive (Plugin)
Compatibility: Not stated.
**Your AI's Long-Term Memory, Woven into Operational Intelligence** *For developers building autonomous agents, multi-session chatbots, and recursive AI workflows that need to remember, reflect, and refine across conversations.*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/build_release.py:158 shutil.rmtree(output)Opc Skills (Skill)
Compatibility: Not stated.
> 把书中的方法、清单和案例，变成可以直接与 AI 对话执行的工作流。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:259 Create a `.env` file in the project root:Persona Chamber (Plugin)
Compatibility: Not stated.
Imagine a world where your development environment doesn't just compile code , it **participates in standups**, **reviews pull requests aloud**, and **generates meeting minutes** while you sleep.
This grade is a hygiene screen, not proof of safety.
