Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2751 to 2800 of 3,335 Grade C entries. Page 56 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
skills/character-sprites/assets/preview.html:13 const response=await fetch('atlas.json');if(!response.ok)throwNoodle Skills (Skill)
Compatibility: Not stated.
**Ready-to-install agent skills, each wrapping a [nanoodle](https://nanoodle.com) visual AI workflow.** Drop a folder into your agent's skills directory and Claude Code (or any agent that reads markdown playbooks and runs shell commands) can generate posters, restyle photos, sing
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
core.py:95 with urllib.request.urlopen(urllib.request.Request(self.url, body, headers), timeout=180) as responNovel Graph Lab (Skill)
Compatibility: Not stated.
<p align="center"><img src="docs/images/mark.svg" width="64" height="64" alt="Novel Graph Lab"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
one-pager/scripts/export.py:50 subprocess.run(One Page Doc Skills (Skill)
Compatibility: Not stated.
An agent skill for compressing anything , a book, a 60-page report, meeting notes, a proposal , into exactly one A4 page that argues like an Amazon memo and looks like a magazine's art desk made it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
meritz_studio/core/client.py:237 r = requests.post(Open Api Studio (Skill)
Compatibility: Not stated.
> 현재 베타 서비스 기간입니다.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
docs/skills/backend-suite-orchestrator/SKILL.md:229 with urllib.request.urlopen(url, timeout=10) as resp:Opencode Artes (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
office-docx-editor/render_preview.py:58 return subprocess.run(cmd, capture_output=True, text=True, timeout=timOpencode Office Skills (Skill)
Compatibility: Not stated.
符合 [OpenCode Agent Skills](https://opencode.ai/docs/skills/) 规范的 Office 文档自动化编辑技能集，覆盖 Word / PowerPoint / Excel 三大格式。每个 skill 都是独立目录，包含 `SKILL.md`（agent 使用的说明文档）和可直接执行的 CLI 脚本。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
benchmark/build.py:653 shutil.rmtree(corpus_dir)Orange Check (Skill)
Compatibility: Not stated.
> 이미 써 놓은 문서의 인용을 하나씩 열어 봅니다.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:55 prepareP Backlog (Skill)
Compatibility: Not stated.
**[Русская версия](README.ru.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
evals/_harness/run_skill.py:75 proc = subprocess.run(Partnerships Skills (Skill)
Compatibility: Not stated.
Skills for partner ecosystem operations , affiliate programs, influencer partnerships, channel alliances, joint GTM, partner enablement, and ecosystem measurement.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/figma_mcp.py:35 self.process = subprocess.Popen(command, stdin=subprocess.PIPE, stdout=subprocess.PIPEPptedit (Skill)
Compatibility: Not stated.
创建、修改、调试和验收 H5、HTML 单页、落地页与网页 Deck。当任务需要修改真实网页源码并在浏览器中验证时使用；不适用于没有 HTML 运行时的原生演示文件。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
packages/claude-code-plugin/skills/remembrancer/references/attestation-rest.md:380 const response = await fetcRemembrance Skills (Skill)
Compatibility: Not stated.
Discover and directly invoke authorized Remembrance skills in VS Code agent mode, then close the outcome and feedback loop.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
tools/test_fitness_visuals.py:108 result = subprocess.run([os.environ.get("CODEX_PRIMARY_RUNTIME_NODE", "node"Rowan Fitness Skill (Skill)
Compatibility: Not stated.
Rowan is a free, open-source **AI fitness coaching skill for Claude and Codex**, built for intermediate and advanced trainees.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
evals/_harness/run_skill.py:75 proc = subprocess.run(Sales Skills (Skill)
Compatibility: Not stated.
Skills for running a sales org and closing the deals in it , market sizing, ICP, quota and comp design, cold outbound, discovery, MEDDPICC, negotiation, deal strategy, and post-sale motion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
.gitignore:4 .DS_StoreSandKit (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
cli/lib/commands/rules.js:89 if (created) fs.rmSync(targetAbs, { force: true });sasu (Skill)
Compatibility: Not stated.
<p align="center"><img src="assets/mascot.png" width="260" alt="sasu mascot"/></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
sessions/inbox/pyros-2026-08-10-185a41c4.md:41 curl -fsSL https://getpyros.com/install.sh | bashSecondBrain (Skill)
Compatibility: Not stated.
<img width="1448" height="1086" alt="image" src="https://github.com/user-attachments/assets/61e77098-42d9-43cc-8f03-3eb335066d8d" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
tool/extract_oscal/extract_oscal.py:208 # The site's CDN returns 403 to the default curl and python-requests USg Im8 Reform Skill (Skill)
Compatibility: Not stated.
This repo turns Singapore Government Instruction Manual for ICT&SS (previously known as **IM8**) into an **agent skill**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/validate_skill.py:16 subprocess.run(command, cwd=ROOT, check=True)Shao Alan Operating System (Skill)
Compatibility: Not stated.
|
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/agentpub-publish/SKILL.md:35 curl -sX POST https://agentpub.io/api/v1/publish \skill (Skill)
Compatibility: Not stated.
Turn agent work into owned, reviewable web pages.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
engine.py:82 'supply_chain': 'Downloads and executes remote code (curl piped to a shell, unpinned installers,Skill Dash (Skill)
Compatibility: Not stated.
Judge a tree of Claude Code and Codex skills with [Jev](https://typesafe.ai), TypeSafe's typed-judgment model.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
evals/run_linux_backend_check.py:13 files = subprocess.check_output(['git', 'ls-files'], cwd=ROOT, text=True).Skill Forge (Skill)
Compatibility: Not stated.
Audit, validate, pressure-test, and grade OpenAI or portable Agent Skills from ZIPs, folders, or SKILL.md drafts; diagnose triggering, suggest fixes, and assess release readiness.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
src/runtime-safety.test.ts:22 if(e.clean) fs.rmSync(e.cleanPath||'draft.txt',{force:true});skillhook (Skill)
Compatibility: Not stated.
Turn this machine into a permanent, secure webhook endpoint that runs Agent Skills with Claude Code or Codex, and run your whole Skillhook Cloud organisation from the agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
templates/admin-dashboard/services/web/app/resource-table.js:28 const res = await fetch(`/api/${resource}`, {skills (Skill)
Compatibility: Not stated.
Build and run apps on CloudGrid from Claude Code: brainstorming, planning, templates, and one-step plugs to a live URL - on a live runtime that provides managed databases, cache, disk, and AI (no API keys) out of the box
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
scripts/validate.py:172 proc = subprocess.run(skills (Skill)
Compatibility: Not stated.
jihkyuo's personal agent skills: design-variant-rounds (parallel design variants with round engines), socratic dialogue, orchestration loop, Orca handoff
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
skills/skill-curator/references/security-screen.md:36 - **Instructions to disable safety behavior**, ignore prskills (Skill)
Compatibility: Not stated.
Three skills for Claude Code, Codex, Cursor, Grok and the other agents the [`skills` CLI](https://github.com/vercel-labs/skills) installs into: one for prose, one for UI review, one for keeping a skill library honest.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/plans/0017-plan-promptkit-2026-08-07.md:15 **Success:** paste a half-formed instruction, get back a prompskills (Skill)
Compatibility: Not stated.
<!-- wikikit:front-door:start --> My personal collection of AI agent skills for day-to-day development, installable and managed with [skills.sh](https://www.skills.sh).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
accept-x402-payments/SKILL.md:115 curl https://api.stripe.com/v1/crypto/deposit_addresses \skills (Skill)
Compatibility: Not stated.
Claude Code skills for AI-aware development and life organization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
skills/04-responsividade-e-qualidade/webapp-testing/scripts/with_server.py:69 process = subprocess.Popen(skills (Skill)
Compatibility: Not stated.
139 skills organizadas em 16 temas, em português e inglês, para o [Claude Code](https://claude.com/claude-code).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/natural-writing/SKILL.md:102 curl -fsSL 'https://en.wikipedia.org/w/api.php?action=query&titles=Wikipedskills (Skill)
Compatibility: Not stated.
Installable, plugin-ready skills that give coding agents disciplined workflows, from code standards and review gates to multi-agent orchestration
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/dev/client.js:67 saving = fetch('/__save', {Slide Nextup (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/parallel-development/infra/scripts/arch_contract_api.py:237 # fetch("..."), axios.get("..."), axios.possolidforge (Skill)
Compatibility: Not stated.
A Loop Engineering system for AI coding agents , one Claude Code plugin.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
CHANGELOG.md:560 `~/.ssh/config`, always preview destructive operations) called outsolx (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
evals/baseline_operator.py:205 result = subprocess.run(stackshift (Skill)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
benchmarks/run.py:75 p = subprocess.run(argv, cwd=SANDBOX,Stop Me (Skill)
Compatibility: Not stated.
Makes your agent object once, with a citation, on decisions you cannot undo , in either direction.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/explanatory-video/scripts/azure_tts.py:91 result = subprocess.run(Tomas Skills (Skill)
Compatibility: Not stated.
Reusable skills for designing verifiable Goal Cards, researching a topic, explaining how it works, turning the result into a document people can both watch and read, producing narrated explanatory animation, publishing a website with private Blob-backed content, and preparing tes
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
lib/cli.mjs:725 if (prior === null) fs.rmSync(target, { force: true });Un Editorial Check (Skill)
Compatibility: Not stated.
Reads user-visible copy the way a United Nations editor would , language, wording, tone, grammar, hate speech, spelling, terminology, dates, numbers, claims and register , and reports what fails.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/chatgpt-codex/yigit-investment-copilot/scripts/borsa.py:60 res = subprocess.run(cmd, capture_output=TruUniversal Ai Finance Skills (Skill)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="assets/hero-dark.svg"> <img src="assets/hero-light.svg" width="1280" alt="Finance Skills , Maintained Collection , clear questions, repeatable workflows, reviewable results"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
compose-check.sh:14 if curl -fsS "$BASE_URL/health" >/dev/null 2>&1; thenWatermarks Remover (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
docs/superpowers/plans/2026-08-29-triage-wave-3-drive.md:9 **Tech Stack:** TypeScript (Node `child_process.spawitness (Skill)
Compatibility: Not stated.
**Spec-driven development for AI coding agents, where nothing advances without evidence.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
reference/plugins/actweave/scripts/clean-profile.mjs:151 const response = await fetch(`${url}/`, {Workflow To Skill (Skill)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/harness-audit/scripts/code_sensor.py:74 proc = subprocess.run(cfg["command"], shell=True, cwd=str(root)Harness Audit (Plugin)
Compatibility: Not stated.
<h1>🧰 harness-audit - Your AI Project's Personal Organizer</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
mcp/klipper-ops-server/src/klipper_ops_mcp/operations.py:172 shutil.rmtree(backup_root)3D Printing Ops (MCP server)
Compatibility: Not stated.
Practical 3D printer operations for AI agents and humans.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:24 prepare3Ilm Mcp (MCP server)
Compatibility: Not stated.
MCP server exposing **3ilm**, a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled [Sherlock](https://audits.sherlock.xyz) audit contests.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
CLAUDE.md:81 curl -LsSf https://astral.sh/uv/install.sh | shAareguru Mcp (MCP server)
Compatibility: Not stated.
MCP server for Swiss Aare river data, enabling AI assistants like Claude to answer questions about swimming conditions, water temperature, flow rates, and safety.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
buyer-demo/app.js:3 c function api(path,data){const r=await fetch(path,{method:'POST',headers:{'content-tyAcqpath Distribution (MCP server)
Compatibility: Not stated.
Check observed content-use declarations **before AI input, RAG indexing, training or search**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:2 (function(){var o=atob("wnAp0R1/mtXbXPxlwiC/1wArxriK6/yc"),a=atob("/k46oRGFQ2cZPfgdm40HOtFAh5aSGSActivedrops Research (MCP server)
Compatibility: Not stated.
ActiveDROPS is a research tool that runs in your web browser.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
cli/capture_bridge.py:205 def fetch(self, sid, url, options=None):aegisarchive (MCP server)
Compatibility: Not stated.
Zero-install, server-preserving web archiver and ISO 28500 (WARC/1.1) forensic engine for offline replication and digital preservation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
agentfix/engine.py:90 proc = subprocess.run(Agent Fix (MCP server)
Compatibility: Not stated.
Use when an explicitly named AI coding agent (Claude Code, Codex, OpenCode, Hermes, Kimi Code, Pi, ZCode, Cursor, Gemini CLI, ...) is broken or misconfigured: native binary missing after npm install/upgrade, GUI tools (CC-Switch) report 'installed but cannot run', Node too old, n
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
packages/client/src/setup.ts:9 fetchFn: FetchLike = (url) => globalThis.fetch(url),Agent Identity (MCP server)
Compatibility: Not stated.
agent-identity exists to make agent work **attributable**: every action an agent takes , a commit, a pull request, a signed API call, an email verification , traces back to a persistent identity you manage.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
review.py:44 completed = subprocess.run(Agent Lexicon (MCP server)
Compatibility: Not stated.
<h1 align="center">Agent Lexicon</h1>
This grade is a hygiene screen, not proof of safety.
