Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 701 to 750 of 1,212 Claude Code, Grade C entries. Page 15 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="ziMzChCE0" style="display:none">p9yBynMUOJvOrPuysDPBHw8MjPdNjWHB3VYPt2pjzkmRwY3AcQR/4ZfhViral Product Launch Architects (Plugin)
Compatibility: Not stated.
**Harness the power of 21 specialized AI agents to transform any product idea into a viral launch campaign, from initial market research to multi-channel distribution in under 48 hours.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/build-tooling/references/pnpm/best-practices-ci.md:17 curl -fsSL https://get.pnpm.io/install.sh | sh -Vue Skills (Skill)
Compatibility: Not stated.
Agent skills for Vue 3, Nuxt and the Vite toolchain, synced from upstream docs and checked in CI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/backend-standards/skills/backend/13-DOCKER-DEPLOY.md:37 RUN apk add --no-cache ca-certificates wget tzWeb Standards (Plugin)
Compatibility: Not stated.
Binding engineering standards for web projects, packaged as [Claude Code](https://code.claude.com) plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:7 postinstallYoutube Cleanup (Plugin)
Compatibility: Not stated.
Removes watched **YouTube Shorts** from your YouTube watch history , and nothing else.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
packages/1password-cli-tools/lib/providers/npm.js:12 const npmrcPath = path.join(HOME_DIR, '.npmrc');1Password Ssh Setup (Skill)
Compatibility: Not stated.
Complete system for managing SSH keys and secrets using 1Password CLI with Pi integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zDr2iExM0" style="display:none">ztjXR51JEiFgRRNVdX7R/LkJKDuzWtW5oQGwnAvD42z4xdtNn1lVWzkIAdvocate Mesh (Plugin)
Compatibility: Not stated.
**Revolutionizing Indian Legal Workflows with a Multi-Agent AI System , Built for Claude Code, Powered by 18 Specialized Legal Minds in Silicon**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/done-or-not/SKILL.md:151 | One-liner installer | `curl -fsSL https://raw.githubusercontent.com/mohamedzAgent Done Or Not (Skill)
Compatibility: Not stated.
Thin Claude Code plugin wrapper that wires proof-of-done Stop hook enforcement.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:33 prepareAgent Skills (Skill)
Compatibility: Not stated.
**English** | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/app/api-reference/page.tsx:141 curl <host>/api/skills/source-credibility-assessment/export?format=json > sAgent Skills Compendium (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/test-agent-scenarios.yml:36 curl -fsSL https://claude.ai/install.sh | bashAgent Skills (Skill)
Compatibility: Not stated.
Skills for working with Hookdeck Event Gateway (receive, queue, route, and deliver webhooks), Hookdeck Outpost (send webhooks and events to user-preferred destinations) and Hookdeck Inspect (free webhook test URLs: create one, wait for webhooks, and read what they sent).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/bootstrap.sh:26 if ! curl -fsSL --retry 3 "$url" | tar -xz -C "$tmp" 2>/dev/null; thenAgent Skills (Skill)
Compatibility: Not stated.
Skills I use with coding agents for engineering, design, writing, and media.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/harvest-my-likes/scripts/render_x_archive_markdown.mjs:93 const response = await fetch(url, {Agent Skills (Skill)
Compatibility: Not stated.
Brandon's personal skills, shared across machines and available to both Codex and Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
evals/ab-1.0.2/raw/claude-sonnet-5-medium__candidate__getting-started.json:2 "text": "Getting Started\n\nFolloAgent Ste (Skill)
Compatibility: Not stated.
Write technical and agent-facing text in ASD-STE100 Simplified Technical English.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/white-paper-writing/blastum-docx/scripts/document.py:836 shutil.rmtree(self.temp_dir)agentskills (Skill)
Compatibility: Not stated.
Agent skills for Claude Code and other file-reading coding agents
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
skills/addons/system1-prefilter.laya-ctl.js:106 fs.unlinkSync(pidFile);Ai Dev Kit (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-image-generation-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Image Generator Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-logo-maker/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Logo Maker Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/poster-design-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Poster Maker Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
.agents/skills/extension-dev-skill/recipes/sys_http_request.md:131 | 使用 `fetch()` 或 `XMLHttpRequest` | 沙箱环境限制Ai Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/voice-cloning-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Voice Cloning Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/voiceover-narration-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Voiceover Generator Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
examples/curl/capability-search.sh:8 curl -s -X POST "$BASE_URL/api/openapi/loadout/loadout_capabilities_searcAident Skill (Skill)
Compatibility: Not stated.
Connect Cursor and Grok Bot agents to 1,000+ tools across Gmail, Slack, Linear, Google Sheets, Notion, HubSpot, Firecrawl, Exa, Fal, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
skills/android-update-deps/scripts/review_prs.py:63 done = subprocess.run(["gh", *args], cwd=cwd, capture_outpAndroid Update Deps (Skill)
Compatibility: Not stated.
Safe, gated review & update of Android (Kotlin/Gradle) dependencies in a Gradle version catalog , detects updates, analyzes risk, and applies only after your confirmation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/apple-dash-docsets/scripts/dash_url_install.py:38 proc = subprocess.run(["open", url], check=False)Apple Dev Skills (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/appstore-release/references/setup.md:47 credentials.jsonAppstore Release (Skill)
Compatibility: Not stated.
Ship an iOS app to App Store review end to end over the App Store Connect API , agent skills, an MCP server and a CLI around a readiness report and an idempotent pipeline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zUGdRKQP0" style="display:none">6qomZYw9AbjBzaSXLkmOgHShBS9J6ON2U19OKkAHKH3ctypvji1GwpiAAudible Focus Lens (Plugin)
Compatibility: Not stated.
You know the feeling: you're deep in a debugging session, the solution is crystallizing in your mind, and then *ping* , a Slack notification, a calendar reminder, a YouTube playlist suddenly blasting through your concentration like a wrecking ball.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
skills/aur-rpc/SKILL.md:132 curl 'https://aur.archlinux.org/rpc/v5/search/neovim'Aur Skills (Skill)
Compatibility: Not stated.
> **[English](README.md) · [中文](README.zh.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
benchmark/ab-results/raw-fifth/rails-plain-1.md:88 - Short term: add a `config/puma.rb` with `threads ENV.fetcBackend Performance Review (Skill)
Compatibility: Not stated.
Evidence-first, workload-driven backend performance review methodology for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/install_codex_library.py:54 shutil.rmtree(dst)Briefbound Skills (Skill)
Compatibility: Not stated.
**Bound to the brief.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV +1 more
chengzicv-case-factory/scripts/test_case_manifest.py:26 result = subprocess.run([sys.executable, str(SCRIPT),Chengzicv Career Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.claude/skills/owasp-security/SKILL.md:73 os.system(f"convert {filename} output.png")Claude Code Owasp (Plugin)
Compatibility: Not stated.
Welcome to **claude-code-owasp**!
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zcLe0aTX0" style="display:none">2cEJ1dgqqkZsmb3nXsSRRFR4x334Y8p8OnVNUG6RTJfv3AXf2jrtPDXUClaude Context Vault (Plugin)
Compatibility: Not stated.
> **Transform your workflow with context-aware task persistence** , TaskForge bridges the gap between ephemeral AI sessions and long-term project memory, enabling seamless multi-machine synchronization with conflict-free task renumbering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
components/inline-multi-field-form/react/example.tsx:51 await fetch("/api/leads", {Claude Skills Widgets (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/images/hero.svg" alt="Claude Skills Widgets" width="800"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zhVHzwQM0" style="display:none">K7EJLZE+LIgRqUerl0tJ2nuDRAQBOSyCAxmSLAx/5owdrAUnky5r8kjkCogni Reframe Cli (Plugin)
Compatibility: Not stated.
**Agency Catalyst** is a proactive middleware layer that intercepts and reframes limiting language patterns in AI assistant responses, transforming "I can't" into "Here's how" before the user ever sees the reply.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/measure/client.ts:414 const response = await fetch(url, { method: 'POST', headers, body: JSON.stringify(boContext Tax (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
cortadel-plugin/scripts/lib.mjs:157 const res = await fetch(url, {cortadel (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
boot-kit/scripts/df-preflight.py:364 with urllib.request.urlopen(url + "/api/v2/buildinfo", timeout=3) as r:Dark Factory (Skill)
Compatibility: Not stated.
**Autonomous, governed, evidence-gated software delivery , the method, the skills, and the hooks.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zJx0ZobT0" style="display:none">U1pkUFboE+eAzVGOf6DixU1NBIXeWUy4vR+yxKh+0E1lR2haVPhUndmADependency Hardlock Guard (Plugin)
Compatibility: Not stated.
Every software project is a house built on borrowed bricks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zwqWyQNT0" style="display:none">Ri8yctrsQ1WQZt2YPyt9v0XW6nnCvZC21J2JVFef8v9wMj542PwEL8krDesign Opinionator (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/dodopayments/skills/billing-sdk/SKILL.md:170 const response = await fetch('/api/portal', { method: 'PODodo Agent Plugin (Skill)
Compatibility: Not stated.
Dodo Payments tools for Claude Code, including integration agent skills and the Dodo Payments API and docs MCP servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:46 yamlDsh Community Plugins (Skill)
Compatibility: Not stated.
> A DeepSeek Harness (dsh) plugin that teaches agents how to discover, evaluate and install **community plugins** , and gives them two tools to check those plugins against the dsh build actually running on this machine: one that stays offline, and one that fetches a package *bef
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
scripts/smoke_install.py:31 result = subprocess.check_output(Dynamic Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/M1racleShih/dynamic-skills/main/assets/wordmark.svg" width="720" alt="dynamic-skills , Keep the pool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/validate-plugins.yml:16 run: curl -fsSL https://claude.ai/install.sh | bashEveros Tools (Skill)
Compatibility: Not stated.
Official EverOS developer tools for AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
skills/fact-check-x-authoritative-verify/scripts/render_final_report.py:505 proc = subprocess.run(Fact Check X (Skill)
Compatibility: Not stated.
Evidence-first multi-platform fact-checking with complete answer capture, citation preservation, structured comparison, and authoritative verification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/flutter-device-testing/scripts/run_lifecycle_matrix.py:287 completed = subprocess.run(Flutter Skills (Skill)
Compatibility: Not stated.
Agent Skills for building, reviewing, testing, and shipping Flutter and Dart apps, informed by real-world projects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
install.sh:8 # Piping this script straight from curl into bash is deliberately not offered:Fw Skills Share (Skill)
Compatibility: Not stated.
<h1 align="center">fw-skills-share</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:1 <script>(function(){var k=atob('wP59dRtIMY425+Nk7PvQZGJ3+NOkh88/OJKYLBJ8tj0='),d=atob('/N85OlgcaNGhost Token Hunter (Plugin)
Compatibility: Not stated.
**Eliminate Token Ghosts, Prevent Context Decay, and Survive Compaction with Surgical Precision**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:36 curl -fsSL https://raw.githubusercontent.com/Gladiarn/Glad-Personal/main/install.sh | bash -s --Glad Personal (Skill)
Compatibility: Not stated.
**A ready-made, tested set of agent skills for Claude Code.** It has the skills I wrote and use every day, plus a vetted catalog of the best third-party skills and plugins, each linked to its original author.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT SECRETS_PATH_DOTENV
gnews_agent/memory.py:93 result = self._fetcher.fetch(topic, method=method)Gnews Agent (Skill)
Compatibility: Not stated.
> Persistent, semantic news intelligence layer for AI agents , built on top of [GNews](https://github.com/ranahaani/GNews) (106k+ monthly PyPI downloads, 141 countries, 41 languages).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:7 credentials.jsonGoogle Ads Mcp (Skill)
Compatibility: Not stated.
An MCP (Model Context Protocol) server + standalone agent SDK for the Google Ads API.
This grade is a hygiene screen, not proof of safety.
