Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 3101 to 3150 of 3,335 Grade C entries. Page 63 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/skills-tools-comparison.md:138 curl -fsSL https://raw.githubusercontent.com/runkids/skillshare/main/instaAgent Skill Porter (Skill)
Compatibility: Not stated.
<div align="center"> en | <a href="README_ja.md">ja</a> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
.agents/skills/skill-creator/eval-viewer/generate_review.py:291 result = subprocess.run(Agent Skills (Skill)
Compatibility: Not stated.
Reusable agent skills for AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL
plugins/agy/scripts/agy_companion.py:256 proc = subprocess.Popen(Agy Cc (Plugin)
Compatibility: Not stated.
A Claude Code plugin that hands code review, adversarial review, plan writing and rescue tasks to Google's Antigravity CLI (`agy`, Gemini 4 Argon) as tracked, isolated background jobs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:20 id_rsaAi Design System (Skill)
Compatibility: Not stated.
A coding-agent skill that documents when and how to use your UI components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/desktop-outfit-video/scripts/seedance.py:201 resp = requests.get(url, timeout=300)Ai Desktop Outfit Video (Skill)
Compatibility: Not stated.
把最近很火的「AI 桌面换装视频」拆成了可复用的提示词模板和一个 Agent Skill。一条提示词直出 30 秒成片，不需要任何后期剪辑。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/ai-film-production-system/scripts/quick_validate.py:50 subprocess.run([sys.executable, str(SCRIPT_DIR /Ai Film Director Workbench (Skill)
Compatibility: Not stated.
这是一套给 AI 电影、AI 短片和连续剧集使用的双 Skill 工具箱。你可以把它理解成两位协作助手：
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
supply-chain-guard/references/attack-patterns.md:159 rg -n 'process\.env|\.npmrc|GITHUB_TOKEN|NPM_TOKEN|AWS_|AAi Supply Chain Guard (Skill)
Compatibility: Not stated.
Agent-facing install guide for a portable, tool-agnostic supply-chain defense skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/analyzing-webshells/scripts/analyst.py:20 "php": ["eval(", "assert(", "system(", "exec(", "passthru(",Analyst Ai Pack (Skill)
Compatibility: Not stated.
**An open agent-skills library for malware analysis, reverse engineering, and threat hunting.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
desktop-bridge/antigravity_api.py:28 res = subprocess.run(antigravitymb (Plugin)
Compatibility: Not stated.
<p align="center"> <b>Português</b> • <a href="README.en.md">English</a> • <a href="README.es.md">Español</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/api-security-review/SKILL.md:213 const response = await fetch(req.body.url);Apisec Skills (Skill)
Compatibility: Not stated.
OWASP API Security Top 10 skills for AI coding agents: BOLA detection, auth and RBAC scaffolding, injection checks, security test generation, full API security review, and OpenAPI schema hardening.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:35 prepareAptos Agent Skills (Skill)
Compatibility: Not stated.
AI-assisted Aptos blockchain development with **Claude Code**, **Cursor**, and **GitHub Copilot**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
scripts/test_package.py:19 for name in ['skills/automation-mining/.env', 'assets/local-notes.md', '.codex-plugAutomation Mining Skill (Skill)
Compatibility: Not stated.
Find repeated manual work in activity records.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/en/weixin-article-to-obsidian/scripts/download_weixin_article.py:37 with urllib.request.urlopen(req, tiAwesome Agent Skills (Skill)
Compatibility: Not stated.
**English** | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
app-demos/engine/src/hiapi/client.ts:176 response = await fetch(url, {Awesome Ai Video Workflows (Skill)
Compatibility: Not stated.
Use when planning, creating, reviewing, or researching AI product videos from product images, ecommerce listings, or product briefs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bots/Gravilo/bridge.py:65 resp = requests.post(Awesome Antigravity (Skill)
Compatibility: Not stated.
<!--lint ignore double-link-->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/lib.py:182 with urllib.request.urlopen(req, timeout=30) as resp:Awesome Seo Geo Skills (Skill)
Compatibility: Not stated.
<!-- 本文件由 scripts/build.py 生成，请勿手改。要改内容请编辑 data/ 或 templates/ 后重新生成。 -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/install.sh:3 # curl -fsSL https://raw.githubusercontent.com/kukemc/bili-cli/main/scripts/install.sh |Bili Cli (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
examples/brca1/scripts/verify_brca1_qc_promotion.py:84 completed = subprocess.run(Bio Gene To Reference Tree (Skill)
Compatibility: Not stated.
**Build the reference set before you build the tree.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
browse_code/cli.py:53 subprocess.run("clip", input=text.encode("utf-8"), check=True)browse_code (Skill)
Compatibility: Not stated.
<p align="center"> <img src="logo.svg" alt="Browse Code" width="200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
bto-event-review/scripts/align_photos.py:67 r = subprocess.run(["mdls", "-raw", "-name", "kMDItemContentCreatiBto Skills (Skill)
Compatibility: Not stated.
**Mười một skill rút từ [Build to Own](https://build2own.dev), cài vào agent của bạn trong một phút.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
deploy.sh:96 code="$(curl -sS -o /dev/null -m "${2:-6}" -w '%{http_code}' "$1" 2>/dev/null || true)"carrel (Skill)
Compatibility: Not stated.
English | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
benchmark/run.py:185 shutil.rmtree(temp_dir, ignore_errors=True)cinch (Skill)
Compatibility: Not stated.
<div align="center"> <img src="assets/banner.svg" alt="cinch , Universal agents and skills for every harness." width="100%" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/reddit-cultivate/SKILL.md:122 subprocess.run(['pbcopy'], input=js.encode(), check=True)Claude Agent Skills (Skill)
Compatibility: Not stated.
Collection of Claude Code Agent Skills for founders, indie hackers, and growth engineers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.claude/hooks/protect-files.sh:16 *.env|*.env.*|*.pem|*.key|*.p12|*.pfx|*id_rsa*|*secret*|*credentials*|*.clauClaude Code Growth Os (Skill)
Compatibility: Not stated.
**Run your whole go-to-market inside Claude Code , not just your code.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/fodo/dashboard/index.php:679 $proc = @proc_open([$bin, 'agents', '--json', '--all'], [0 => ['file', '/Claude Plugins (Plugin)
Compatibility: Not stated.
Peter Forret's Claude Code plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/power_automate_cli/auth.py:33 result = subprocess.run(cmd, capture_output=True, text=True, timeout=45)Claude Power Automate (Skill)
Compatibility: Not stated.
**A Claude Code suite for Microsoft Power Automate development** , eight focused Agent Skills plus a local, open CLI for inspecting and deploying cloud flows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT
scripts/install_skills.py:102 shutil.rmtree(path)Claude Skills Collection (Skill)
Compatibility: Not stated.
Reusable Swift and Apple platform skills for coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/mg-registry-snapshot.mjs:51 const r = await fetch(url, { signal: ac.signal });cli (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/validate_release.py:139 shutil.rmtree(smoke_dir)cosmosmith (Skill)
Compatibility: Not stated.
**Give your AI coding agents a product team, an architecture desk, a task board, and a release gate in one command.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/actions/claude-code-action/action.yml:50 curl -LsSf https://astral.sh/uv/install.sh | shCuration Skills (Skill)
Compatibility: Not stated.
Skills are folders of instructions, scripts, and resources that Claude loads dynamically to improve performance on specialized tasks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/daftai-chinese-copywriting/scripts/autocorrect.ts:121 fs.rmSync(tempDir, { recursive: true, force: trueDaftai Skills (Skill)
Compatibility: Not stated.
English | [中文](./README.zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
.agents/skills/deepworkplan/shared/benchmark.py:230 proc = subprocess.run(['git', '-C', repo_root] + args,Deepworkplan Skill (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/build-design-system/scripts/capture.mjs:185 const res = await fetch(new URL(s.route, base), { redirect:design.how (Skill)
Compatibility: Not stated.
Skills and design systems for coding agents, from [design.how](https://design.how).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
dify_workflow/remote_config.py:13 DEFAULT_CONFIG_FILENAME = "credentials.json"Dify Workflow Cli (Skill)
Compatibility: Not stated.
[English README](README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:66 preparedittu (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:9 curl -fsSL https://raw.githubusercontent.com/SimpleEve/eo-skills/main/install.sh | shEo Skills (Skill)
Compatibility: Not stated.
一套开发工作流 skill 集合，可装进任何支持 Agent Skills 约定的 agent（Claude Code / Codex / Antigravity 等）。以 change 工件为核心，配套可选的 codegraph 代码召回与 agent-handbook 项目操作手册，把从构思、变更、实施、测试、审查到归档的全流程拆成可独立调用的 skill，并支持跨 agent 协作。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/exam-review-helper/scripts/controller.py:495 result = subprocess.run(Exam Review Helper (Skill)
Compatibility: Not stated.
> 把 PDF / Word / TXT / Markdown 教材浓缩成交互式 HTML 复习文档的 Claude Code / Codex CLI Skill。 > 自动识别文科/理工科，5-pass 深度提取，原生支持扫描版 PDF OCR。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
tools/flow_completion.py:190 subprocess.run(flow (Skill)
Compatibility: Not stated.
Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and OKF knowledge bundles.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
extensions/skills/game-asset-spine-cutout/assets/workspace/scripts/spine-cutout-rig.py:54 os.remove(_old)Game Asset Aesthetic Test (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/banner.svg" alt="Game Art Skill Library：像素精灵、骨骼动画、方块角色与讲解配音" width="1280" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
btn_3ca3d.svg:12 @font-face{font-family:"Inter";src:url("data:font/woff2;base64,d09GMgABAAAAADYEABEAAAAAgLgAADGame Slop Purge (Skill)
Compatibility: Not stated.
> *"The player never notices good UI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
gouvernai/scripts/guardrails-enforce.py:137 # Direct curl/wget posting of secret filesGouvernai Claude Code Plugin (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/gouvernai-icon-512.svg" alt="GouvernAI" width="120"> </p> <h1 align="center">GouvernAI , Claude Code Plugin</h1> <p align="center"> <em>gouvernail (n.) , French for helm, rudder.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.skills/harness-engineering-playbook/scripts/harness_wizard.py:104 result = subprocess.run(command, check=FalsHarness Engineering (Skill)
Compatibility: Not stated.
Implement OpenAI Harness Engineering practices in any repository , AGENTS.md, PLANS.md, deterministic smoke/test/lint harness commands, strict architecture boundaries, observability from day 1, and entropy-control audits for reliable autonomous agent runs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/helm/scripts/jev.py:171 with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:Helm (Skill)
Compatibility: Not stated.
Routes each coding task to the best AI agent installed on your machine.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/herdr-dispatch/scripts/test_dispatch_runtime.py:335 proc = subprocess.run([sys.executable, cli, *args,Herdr Skills (Skill)
Compatibility: Not stated.
Agent skills for coordinating coding agents inside [Herdr](https://github.com/herdrdev/herdr): spawn other coding CLIs as workers, dispatch work, collect results , from one-off jobs to full agent swarms.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:2 Pillow>=10,<13Idea To Print (Skill)
Compatibility: Not stated.
从一句话、一张参考图或已有模型开始，制作可编辑的 3D 雕塑，完成造型检查、尺寸适配和打印前交付。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
build.py:147 shutil.rmtree(child) if child.is_dir() else child.unlink()Image Style Skill (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="docs/banner.svg" alt="SlashFrame: 403 slash commands for AI image prompts" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
scripts/quality.py:32 status = subprocess.run(iparq (Skill)
Compatibility: Not stated.
After reading [this blog](https://duckdb.org/2025/01/22/parquet-encodings.html), I began to wonder which Parquet version and compression methods the everyday tools we rely on actually use, only to find that there's no straightforward way to determine this.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
3d-deep-research/scripts/render_report.py:67 result = subprocess.run(Jeffy Skills (Skill)
Compatibility: Not stated.
我的个人 Skill 仓库。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
plugins/jobfishing/scripts/jobfishing_engine/install.py:38 shutil.rmtree(target)Jobfishing Ai (Skill)
Compatibility: Not stated.
**jobfishing** ([jobfish.ing](https://jobfish.ing), formerly JobMatchFlow) is a free AI job search and CV matching service for Switzerland, Luxembourg, Germany and the Netherlands.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
scripts/check_js_reverse_ops_deps.py:20 result = subprocess.run(cmd, capture_output=True, text=True, timeout=1Js Reverse Ops (Skill)
Compatibility: Not stated.
Execute advanced JavaScript reverse-engineering workflows for modern web applications, including signature recovery, runtime instrumentation, deobfuscation, bundle analysis, anti-debug bypass, environment rebuild, and replay validation.
This grade is a hygiene screen, not proof of safety.
