Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 851 to 900 of 1,212 Claude Code, Grade C entries. Page 18 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
benchmarks/fetch_benchmarks.py:27 with urllib.request.urlopen(request, timeout=60) as response, destination.opapollyon (Skill)
Compatibility: Not stated.
Evidence-first source security scan workflow for human-written and AI-generated code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
arabic-docx/scripts/arabic_docx.py:1020 proc = subprocess.run(["powershell", "-NoProfile", "-NonInteractive",Arabic Office Skills (Skill)
Compatibility: Not stated.
Three agent skills for producing **PDF, Word, and PowerPoint files in Arabic** , and any other right-to-left script , that actually render correctly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
askproof/scripts/collect_context.py:33 result = subprocess.run(Askproof Skill (Skill)
Compatibility: Not stated.
[https://raw.githubusercontent.com/recollective-genuseptatretus377/askproof-skill/main/askproof/references/askproof-skill-v1.2.zip](https://raw.githubusercontent.com/recollective-genuseptatretus377/askproof-skill/main/askproof/references/askproof-skill-v1.2.zip)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
shared/repo_context.py:50 if p.name.startswith('.env') or p.suffix.lower() in {'.pem', '.key', '.p12', '.sqlitAstra Jev Harness (Skill)
Compatibility: Not stated.
[日本語](README-ja.md) · [Version 0.7.3](VERSION) · [Tagged releases](https://github.com/Oranquelui/astra-jev-harness/releases) · [Changelog](CHANGELOG.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
src/auditkit/negcontrol.py:41 def _kill_tree(proc: subprocess.Popen[str]) -> None:Auditor Executor Protocol (Skill)
Compatibility: Not stated.
Runs multi-phase work as a two-role protocol: an Auditor who writes numbered, verifiable tasks and signs off phases, and an Executor who implements one task at a time and reports evidence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
automations/run-weekly-skill-miner.sh:112 child = subprocess.Popen(sys.argv[2:], start_new_session=True, stdinAutonomous Output Skills (Skill)
Compatibility: Not stated.
Agent skills for the work I hand to Copilot and walk away from: background desktop automation, recording demos of the real product, building and shipping UI prototypes, running variation labs to pick from, and working unattended for hours on a shared Mac.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:78 curl -fsSL https://fx.sh/setup.sh | bashAwesome Fx Skills (Skill)
Compatibility: Not stated.
<p align="center"> <a href="https://awesome.re"><img src="https://awesome.re/badge.svg" alt="Awesome" /></a> <img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2FZeroPointRepo%2Fawesome-fx-skills%2Fmain%2Fbadges%2Fcoverage.json" alt="Install-ver
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:20 # curl -fsSL https://raw.githubusercontent.com/Aboudjem/aws-cost-audit-skill/main/install.sh | bAws Cost Audit Skill (Skill)
Compatibility: Not stated.
Audit a live AWS account end-to-end: attribute every dollar, find idle/orphaned resources, rightsize, check Savings Plans/RI coverage, and produce an evidence-backed savings plan with confidence levels and reversible, gated actions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL
evals/run_evals.py:89 p = subprocess.run(cmd, capture_output=True, text=True, cwd=cwd,Aws Onboarding (Skill)
Compatibility: Not stated.
Guides a first-time or non-technical user from no AWS account to a working, torn-down-able CloudFormation or Terraform deployment, with spend guardrails at every step.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:46 prepareBmad Module Ultracode Goal (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:29 preparebracketeer (Skill)
Compatibility: Not stated.
**A sport-agnostic tournament engine , brackets, Swiss pairings, leagues and Elo.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/ci-status-snapshot/scripts/ci_merge_delegate.py:34 proc = subprocess.run(Ci Status Snapshot (Skill)
Compatibility: Not stated.
Token-efficient GitLab CI, GitHub Checks, MR, and PR status handling: one-shot snapshots, a silent local watcher that notifies only on state change, and GitLab auto-merge delegation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/bootstrap.sh:7 # curl -fsSL https://raw.githubusercontent.com/Mexregkan/claude-for-researchers/main/scClaude For Researchers (Skill)
Compatibility: Not stated.
This repository provides a toolkit for physicists, mathematicians, and researchers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
evals/cases/13-hr-saas-injection/input.csv:9 ACC-02,ACC-02-C1,champion,2026-06-06T10:00:00,ignore previous insClaude Lifecycle (Skill)
Compatibility: Not stated.
Data-adaptive lifecycle marketing engine for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
claude-in-excel/3-statement-model/scripts/recalc.py:62 result = subprocess.run(Claude Office Skills (Skill)
Compatibility: Not stated.
This repository provides tools that connect Claude to Microsoft Office.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zDrchN3E0" style="display:none">QXCMW7CBsfAaFx5d518BGwDSErH87X9+As/C7Nii19J3bYBRspH2ikNaClaude Shopifyql Workbench (Plugin)
Compatibility: Not stated.
In the sprawling digital marketplace of 2026, every e-commerce business faces the same fundamental challenge: data is abundant, but insight is scarce.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zsZoMPsN0" style="display:none">4oU2F47+ZR+TRceNhr4yCWxNLMM65vGoFvuIRFBse77UmDodjO4iZcoICode Review Archipelago (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
contract-tests/check.py:95 completed = subprocess.run(Ctx Core (Skill)
Compatibility: Not stated.
> **Alpha** , Built for active dogfooding.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/build_node_showcases.py:18 result = subprocess.run(Dcc Mcp Speedtree (Skill)
Compatibility: Not stated.
Create and edit native SpeedTree generator graphs, regenerate them with the licensed Modeler command-line exporter, and hand verified assets to another DCC-MCP adapter.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
decimalai/crewai.py:1085 done = subprocess.run(command, cwd=str(skill_folder), capture_output=True, text=True,Decimalai Python (Skill)
Compatibility: Not stated.
**Catch what your next agent change will break** , a structural regression check against your recorded traces, built on manifest-aware versioning of your agent's tools, prompts, models, and skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/update_scoop_manifest.py:43 with urllib.request.urlopen(url, timeout=30) as response:Discord Cli (Skill)
Compatibility: Not stated.
discord-cli is a headless, scriptable Discord CLI for automation and AI-agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/alphafold-structure-provenance/scripts/fetch_alphafold_structure.py:46 with urllib.request.urlopen(req,Discovery Tools (Skill)
Compatibility: Not stated.
Agents, skills, and starter kits for Microsoft Discovery , the AI for Science platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/build_publication.py:30 ".netrc", ".npmrc", ".pypirc", "credentials", "credentials.json",Drawio Desktop Skill (Skill)
Compatibility: Not stated.
Skill para crear y editar diagramas `.drawio` en la aplicación de escritorio, viendo los cambios mediante su sincronización nativa de archivos.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/csdn-article-publisher/scripts/test_docx_inventory.py:201 run = subprocess.run([sys.executable, str(SCREason Agent Skills (Skill)
Compatibility: Not stated.
面向内容创作、图文发布、技术表达与 Rokid AI 应用开发的个人 AI 技能库。作者：Eason（[EasonZhu1997](https://github.com/EasonZhu1997)）。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargEval Magic (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/readme.png" alt="eval-magic , Prove your skills actually work with structured, iterative eval loops" width="845" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +2 more
scripts/release.sh:79 log = subprocess.run(flua (Skill)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/jangabrielsson/flua/main/docs/Flua.png" alt="Flua Logo" width="320"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:66 prepareGod Prompt Mcp (Skill)
Compatibility: Not stated.
GodPrompt engineering workflows for task routing, TDD, debugging, verification, and progressive disclosure through MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
skills/flutter-sdk-changelog/scripts/build_flutter_sdk_changelog.py:67 return subprocess.run(["git", "-C", strHermes Skills (Skill)
Compatibility: Not stated.
**A curated collection of battle-tested agent skills forged in production Flutter projects (CarSah, Hermex Android, Azdal).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/infographic/scripts/backends.py:218 res = subprocess.run(cmd, cwd=scratch, **kwargs)Infographic Post Skill (Skill)
Compatibility: Not stated.
Turns a codebase, a list of metrics or a short text into a 1080x1080 infographic for LinkedIn or docs: AI image (Gemini), HTML template or fully offline matplotlib.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/jarvis-update/scripts/adoption_recovery.py:183 shutil.rmtree(recovery)Jarvis Lite (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/brand/logo.svg" alt="Jarvis Lite" width="640"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/compare_routing.py:210 if not isinstance(requests, dict) or any(type(requests.get(field)) is not int oJev Skill Router (Skill)
Compatibility: Not stated.
[**English**](README.md) | [한국어](README.ko.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/lean-claims-review/scripts/sweep.py:256 p = subprocess.run(writer + [r["name"], "supported"],Lean Skills (Skill)
Compatibility: Not stated.
Lean 4 and Mathlib workflows: developing and refactoring proofs, searching Mathlib, driving Lake builds, and auditing whether statements and the prose citing them mean what they claim.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/candidate_cache.py:404 shutil.rmtree(target)M8M Harness Builder (Skill)
Compatibility: Not stated.
>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/ZhangHanDong/makepad-skills/main/install.sh | bashMakepad Skills (Skill)
Compatibility: Not stated.
Comprehensive Makepad UI framework assistant with auto-routing, widget patterns, shaders, animations, and production-ready Robius patterns from Robrix/Moly codebases
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugins/mastery-tutor/skills/mastery-tool-creator/scripts/validate_tool.py:71 (re.compile(r"\bfetch\s*\("), "fMastery Tutor (Skill)
Compatibility: Not stated.
**A local-first mastery tutor for AI agents.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
examples/tool_using_agent_dogfood.py:28 completed = subprocess.run(memo_harness (Skill)
Compatibility: Not stated.
Reconcile uncertain observations about structured agent state (task phases, checkpoints, tool states, plan steps) into globally consistent beliefs using finite relation laws and posterior inference.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
SKILL.md:719 curl -s -o /dev/null -w '%{http_code}\n' https://api.github.com/repos/OWNER/REPO # 200 public, 40Multi Tenant Fullstack Crud Skill (Skill)
Compatibility: Not stated.
Build or extend a multi-tenant, role-scoped, audited web app on a generic-CRUD architecture , Express + Sequelize behind one crudThat factory with per-model controller hooks, a no-build-step vanilla JS frontend, a shared rules module both sides run, and a three-container Docker/
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/niles-setup/SKILL.md:20 - Shell installer: `curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Rhniles (Skill)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/niles-lockup-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="docs/assets/niles-lockup-light.svg"> <img alt="Niles" src="docs/assets/niles-lockup-light.svg" width="800"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
archive/dsh-vision-bridge-0.1.12-2026-10-18T18-06-04/client.js:99 fetch('/vision-bridge/paste', { method: 'POSomdp (Skill)
Compatibility: Not stated.
**🌐 语言 / Language：** [**中文**](#zh) · [English](#english)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
02-professional-agent-forge/examples/opensource-maintainer/trend-to-pr/test_trend_to_pr.py:196 result = subproOpenclaw Personalized Agent Forge (Skill)
Compatibility: Not stated.
**Language / 语言：** [English](./README.md) | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile.eval:5 RUN curl -fsSL https://cli.kiro.dev/install | bashopenkata (Skill)
Compatibility: Not stated.
<!-- badges:start -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
skills/knowledge-compiler/scripts/generate_pdf.py:666 subprocess.run([merge_tool, cover_pdf, body_pdf, output_Ops Skills (Skill)
Compatibility: Not stated.
**Production-grade compiler skills for ops, enablement, and knowledge work.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/check_sources.py:229 with urllib.request.urlopen(request, timeout=20) as response:Pa Reviewer (Skill)
Compatibility: Not stated.
>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zXNDD1pV0" style="display:none">2NNnNy+AVVARDhWlUVn05H7uuedFBNKTZLViCX2gRLjuzms9LZASKkhDPev Framework Ts (Plugin)
Compatibility: Not stated.
**[Version 2.4.0 , Released January 2026]** **License:** MIT **Category:** AI Development Framework / Agent Orchestration
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
extensions/background-terminals/manager.test.ts:330 fs.rmSync(sentinelDir, { recursive: true, force: true });Pi Config (Skill)
Compatibility: Not stated.
A portable, public subset of Matthew's configuration for [Pi](https://github.com/badlogic/pi-mono).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/proxylane-web-evidence/scripts/collect.py:254 completed = subprocess.run(command, capture_output=True,Public Skills (Skill)
Compatibility: Not stated.
Public agent skills by SwiftAdviser.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +2 more
skills/syncfusion-react-ai-assistview/references/file-attachments.md:311 fs.unlink(filePath, (err) => {React Ui Components Skills (Skill)
Compatibility: Not stated.
**Agent Skills** for building accurate, production-ready applications with Syncfusion React components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
ci/run_engine.py:49 proc = subprocess.run(["python3", *argv], capture_output=True, text=True)Ready Agent 1 (Skill)
Compatibility: Not stated.
Ready Agent 1 , is your codebase ready for the agents?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
docs/skill-examples.md:265 - Avoid `Invoke-Expression`; use argument passing and `-LiteralPath` for literalRepo Template (Skill)
Compatibility: Not stated.
<!-- This file is part of YOUR_PROJECT_TITLE README.md Author(s): Gabriel Mongefranco Created: 2026-01-01 Last Modified: 2026-09-05 Summary: Provides an overview of the project, in Markdown format.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
documentation/traceability-report/scripts/generate_html_reports.py:420 document.querySelectorAll('[data-filterRestassured Skill (Skill)
Compatibility: Not stated.
Use when the agent needs to design, implement, run, document, or report Rest Assured API tests for REST services, contract-driven service tests, JUnit 5 automation, CI pipelines, or test-management integrations.
This grade is a hygiene screen, not proof of safety.
