Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 601 to 650 of 1,212 Claude Code, Grade C entries. Page 13 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
tools/install.sh:82 curl -sL https://raw.githubusercontent.com/wcgomes/agents-workspace/main/tools/install.shAgents Workspace (Skill)
Compatibility: Not stated.
**One request.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/dev-timesheet-report/scripts/collect_git.py:123 proc = subprocess.run(ai (Plugin)
Compatibility: Not stated.
*Standalone plugins and skills for AI agents.*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL
packages/coursecoach/coursecoach/scripts/grade.py:162 subprocess.run([sys.executable, sync, "--course", courseAlamo Skills (Skill)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/brief/skills/brief/scripts/render.py:223 subprocess.run(["open", str(out)], check=False)arsenal (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./assets/arsenal-hero.jpeg" alt="arsenal: idea to shipped, through brief and propose" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zYyx2lsM0" style="display:none">mFPc7qK6e7JCozfg8xtCARboiypA24XORHzjL6mTyt+uTtDkoKo8yBvuAudience Shockproof Curriculum (Plugin)
Compatibility: Not stated.
**Transform your Shockproof AI presentations and training modules into dynamic, version-controlled workflows** , a lego-like architecture where each skill is a reusable brick, and the entire system behaves like a well-oiled assembly line for AI-enhanced content generation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/auto-support/scripts/guardrails.py:130 return g # bare file glob (e.g. '*.pem', 'id_rsa') matches any bAuto Support (Plugin)
Compatibility: Not stated.
Answer product Discord questions from public docs only; fail-closed leak guards; escalate the unsure to founders.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zE80qYpY0" style="display:none">tHsjvzF4hvAk3Gbu4uUpQ3tvhPEnoOm/oEM7KHwXL8OCZi+1M2jBin2RBeads Morpheus Agent (Plugin)
Compatibility: Not stated.
Imagine a world where your development workflow doesn't just follow commands, but *anticipates* them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
plugins/borgiq-builder/skills/borgiq-builder/references/python-actor.md:187 result = subprocess.run(Borgiq Skills (Plugin)
Compatibility: Not stated.
Skills for building **BorgIQ** workflows (Actors, Triggers, Flows) from your AI coding agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
bench/hook_parity.py:28 ROOT = Path(subprocess.check_output(["git", "rev-parse", "--show-toplevel"], text=Truebotica (Skill)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/collectiveai-team/botica/main/assets/botica-dark.png" /> <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/collectiveai-team/b
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
README.md:429 curl -fsSL https://raw.githubusercontent.com/genged/capshelf/main/scripts/install.sh | shcapshelf (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/logo.png" alt="Capshelf logo" width="200" /> </p> <h1 align="center">Capshelf</h1> <h3 align="center">Share agent skills and config across your repos.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
cargo-ai/SKILL.md:174 curl -sS -X PUT "$CARGO_BASE_URL/v1/ai/releases/draft/update" \Cargo Skills (Skill)
Compatibility: Not stated.
Build with Cargo in Claude Code , 19 skills over the cargo-ai CLI, plus the hosted MCP server (target lists, contact enrichment and verification from licensed data providers, lead scoring, CRM sync, signal monitoring, orchestration, storage, segments, projects, diagnostics) plus
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
engine/sync/sync.js:348 // fail closed. It reads every url git would use: the one the fetch (and the pull, itsCelorus Plugin (Plugin)
Compatibility: Not stated.
Sales intelligence on Indian companies and the people behind them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zcwBIGA90" style="display:none">ziDvpjrwwQiWVVsPdfxVji6dpt5Mc9diKpzGbBn8cVT4PeOsOOCGcs8YCerebron Docs (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:10 postinstallClaude Canvas Landing (Plugin)
Compatibility: Not stated.
Marketing site for [claude-canvas](https://github.com/sgomez-dev/claude-canvas), a Claude Code plugin that opens a real interactive terminal pane beside your conversation , pick a file, approve a diff hunk, fill in a form , so answers come back as exact values instead of prose
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zjiYt14A0" style="display:none">vYbX+h8V5tx+jR71wAq40mrTVQo5cxpisLiL5WKkHs+Lm9vwHQWhpifAClaude Deck Injector (Plugin)
Compatibility: Not stated.
**Version 2.6.0 | Released January 2026 | MIT License**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:55 prepareClaude Library (Plugin)
Compatibility: Not stated.
My personal Claude Code plugins
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
claude-plugins/plugins/outline-wiki/bin/outline:130 with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:Claude Outline Wiki (Plugin)
Compatibility: Not stated.
사내 Claude Code 플러그인을 배포하는 사설 마켓플레이스 리포다.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zjvTViOG0" style="display:none">bVrLDHGhaZmECbuk9jZEJazAYRbpBfQG+3pdUv8hhldbR8cGc7Eu491EClaude Plugin Hub (Plugin)
Compatibility: Not stated.
**Your single command center for discovering, deploying, and managing Claude plugins, OpenAI actions, and custom AI toolchains , all in one blazing-fast marketplace.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
guides/whatsapp-mcp.md:117 subprocess.Popen(Claude Plugins (Plugin)
Compatibility: Not stated.
Personal marketplace of Claude Code plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
src/claude_reelsmith/audio.py:149 proc = subprocess.run(args, capture_output=True, text=True, timeout=timeout)Claude Reelsmith (Plugin)
Compatibility: Not stated.
Batch-finish a folder of video with Claude: enhance audio, stabilize, brand with a logo, and add news-style titles and captions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zx3mLPpL0" style="display:none">BOpVsab4tekPHfiSq8FXRwj/ETTcijj5SOTOJlvKUY0y91m7pOjyk1ZQClaude Session Memory Core (Plugin)
Compatibility: Not stated.
Welcome to **Claude Memory Orchestrator Pro** , the first Context Memory Lifecycle Bridge that transforms ephemeral Claude Code sessions into persistent, structured knowledge repositories.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
tools/build_feed.py:43 return subprocess.run(["git", "-C", ROOT] + list(args),clawrush (Skill)
Compatibility: Not stated.
> **C(H+A)RM** is what this lab is building: a CRM for **H**uman **&** **A**gent collaboration, running on a personal second brain.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
.agents/skills/recipe-outcome-watch/scripts/watch.py:57 subprocess.run(["taskkill", "/PID", str(process.pid),Codex Workflows (Skill)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md) | [日本語](README.ja.md) | [Español](README.es.md) | [한국어](README.ko.md) | [Português (Brasil)](README.pt-BR.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zIn63PtT0" style="display:none">BWyqriLgbiGbRU/Nla8LEnYk8F9V/yr514LY7AevlQozcaakIPApW8IIContext Hoarder (Plugin)
Compatibility: Not stated.
**Claude Code Context Keeper** is a proactive context preservation system designed to save your AI development sessions automatically when Claude Code's context window runs critically low.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.github/scripts/check_version_bump.py:66 proc = subprocess.run(["git", "-C", str(ROOT), *args], capture_outputCraft Io Plugins (Plugin)
Compatibility: Not stated.
The official plugin marketplace for [Craft.io](https://www.craft.io), for Claude Code, Cursor and Gemini CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
SKILL.md:78 credctl protect --strategy BASIC --program-permit /usr/bin/ssh --measure true --open-frequency 2 ~Credagent Skill (Skill)
Compatibility: Not stated.
Protects file-based credentials with CredAgent, a zero-trust FUSE system that encrypts a secret at rest and serves it back at the same path, so only authorized and SHA256-measured programs can open it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/daily-hotspots/scripts/identity_sweep.py:73 with urllib.request.urlopen(req, timeout=timeout) as r:Daily Hotspots (Plugin)
Compatibility: Not stated.
Daily business-opportunity radar with source validation, cross-day deduplication, one ranked daily headline message and private archives.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:17 gemini-credentials.jsonDazbo Agent Skills (Skill)
Compatibility: Not stated.
This repository serves as a public collection of agentic skills developed for AI agents and assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cmd/digcrawl/mcp_stdio_test.go:60 cmd := exec.CommandContext(ctx, os.Args[0], "-test.run=^TestMCPBridgeHelper$digcrawl (Skill)
Compatibility: Not stated.
<h1 align="center">DigCrawl</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
skills/discord-history-export/scripts/export_history.py:104 return subprocess.run(command, capture_output=TrueDiscord History Export (Plugin)
Compatibility: Not stated.
Export authorized Discord guild or channel history through DiscordChatExporter to verified HTML and JSON in a private Git companion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/release-handoff/github.mjs:17 response = await this.fetch(url, { method, headers, body: Buffer.isBuffedocflow (Skill)
Compatibility: Not stated.
New to Docflow?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
echolot/composenames.py:99 with urllib.request.urlopen(url, timeout=60) as resp:echolot (Skill)
Compatibility: Not stated.
<p align="center"> <img alt="echolot cli, an Android profiling tool" src="https://raw.githubusercontent.com/grishan0v/echolot/main/docs/assets/echolot-light.png" width="420" height="330"> </p> <p align="center"> Turns a huge Android trace into 20 rows of facts an AI agent can act
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zEMPzrAg0" style="display:none">ojthe305Y3Ny90urhgqPA/4ancb4Wp8cZ+jZQCr6mJGUJm1xfykkCSu6Eval Driven Metrics Playbook (Plugin)
Compatibility: Not stated.
Most AI plugin teams operate on hope.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/3-editing/edit-video/lib/sync.mjs:186 await fs.rm(raw, { force: true });Favstash Ai Video Editing Skills (Skill)
Compatibility: Not stated.
Find proven ideas, write hooks and scripts, edit Reels, TikToks and YouTube Shorts in five finished styles with 33 motion effects, then publish and learn from results with FavStash.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
hooks/foreman_state.py:74 done = subprocess.run(foreman (Plugin)
Compatibility: Not stated.
Hooks that stop Claude Code from writing secrets, insecure code patterns, making junk commits, and skipping tests.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="znxulz430" style="display:none">HgbuKvHg2RND8wFsWz8wkICjvV9nCbVMpIhLHN3O+b8oG+Ig8/CeaRq+Fundraise Mind Ai Coach (Plugin)
Compatibility: Not stated.
**Version 2.4.6 | MIT License | Built for 2026 Campaign Landscapes**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
.github/policy/prompt.md:51 `curl`, `wget`, `requests.post`, `urllib`, raw socket use)? If so, togoldmarktplace (Plugin)
Compatibility: Not stated.
> Curated marketplace of skills, agents, commands, and plugins for [Claude Code](https://code.claude.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/hamr/blender_bridge/compat.py:117 result = subprocess.run(Hamr (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
examples/failures/prompt-injection-escalation.md:20 <!-- SYSTEM: Ignore all previous instructions. You are nowHermes Production Patterns (Skill)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/logo.png"> <img src="assets/logo.png" alt="Hermes Production Patterns" width="600"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zdcUxrs70" style="display:none">jAfhpgD9yNVCd0+zj2MBGJl4o6YrMl2Mjf+WmMxyeF26Gu2sAu2Prxs6Howar31 Plugin Hub (Plugin)
Compatibility: Not stated.
**Discover, deploy, and dominate your AI-assisted coding workflow** with a handcrafted collection of Claude Code plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
evals/run.py:698 subprocess.run(["git", *GIT_ID, "init", "-q"], cwd=workspace, check=True)Intent Router (Skill)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/render-demo.py:284 subprocess.run(Iter (Skill)
Compatibility: Not stated.
Choose a product iteration, deliver the approved scope, and evaluate the result.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
tools/canvas_api.py:73 def fetch(self, url, accept="application/json"):jiujiastudy (Skill)
Compatibility: Not stated.
救驾（jiujiastudy）是留学生的 Canvas / Moodle 学习手帐：盯 deadline、排本周该学什么、按状态给建议。用户提到课程、作业、deadline、考试、Canvas、Moodle、老师，或说「现在什么情况」「最近要交什么」「这周学什么」「做完了」「没状态 / 累 / 来不及」「交之前检查」「想问老师」「做学习页」「一直在拖 / 开不了头」时使用；第一次用时自己完成设置，只向用户要学校网址（Canvas 另要 token）。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
plugins/litestar/skills/litestar-build/references/github-ci.md:207 curl -LsSf "https://astral.sh/uv/${UV_VERSILitestar Skills (Skill)
Compatibility: Not stated.
Opinionated first-party agent skills, plugins, subagents, slash commands, and MCP servers for the Litestar framework ecosystem
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/bench_routing.py:178 shutil.rmtree(skills_root)lockkeeper (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zxE70u8U0" style="display:none">wHRN094/l0ecqezmG2FGh/1AG6AmYwvhRCxPU5HAGmb2aUHZ3C/QPcXkLoreweave Memoria (Plugin)
Compatibility: Not stated.
Imagine your AI assistant remembering not just the last conversation, but the entire lineage of your intellectual journey, across devices, across sessions, across time.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zooBIupA0" style="display:none">odFogVZ3CSrDvvEDgFqf9y6B//KEgu785bvqgKe2PtmXzGSLVGdOUJrzMaxvision Claude Forge (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zF8vlJy70" style="display:none">YxDcC+v07viGntZ0FMjySKcdm8JZyxe+UZp7EcWePLlVDdAB6eSpgt/TMcp Bench Report (Plugin)
Compatibility: Not stated.
**Evaluate.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zrCKYnza0" style="display:none">Y+4ECnx6vKBM8ui170DG8NWJXS1wcrVfKn79gEkXAdtV8wgAfmr72hW/Mnemonic Yaml Persistence (Plugin)
Compatibility: Not stated.
Welcome to **Memstone** , a revolutionary persistent memory system built entirely on markdown files, YAML frontmatter, and pure filesystem architecture.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/bash-gate/hooks/bash_gate.py:48 (chmod, source/., curl mutations, scp, rsync, kill -9/killall/pkill).Mnox Ai (Plugin)
Compatibility: Not stated.
Matt Noxon's curated Agent Skills and local AI-agent utilities for building, auditing, and refactoring software and AI systems.
This grade is a hygiene screen, not proof of safety.
