Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 51 to 100 of 1,212 Claude Code, Grade C entries. Page 2 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:14 id_rsaAnti Ai Writing (Plugin)
Compatibility: Not stated.
Edit any draft to remove AI tells.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
references/plus/injection.md:27 array de argumentos (`subprocess.run(["cmd", arg])`), nunca string montadaAnti Eu (Skill)
Compatibility: Not stated.
Hardening defensivo adaptativo em duas trilhas , Anti-Abuso (bots, enumeração, IDOR, cadastro fraudulento, acesso não autorizado) e PLUS (injeção, segredos, autenticação, upload, dependências, exaustão de recursos, lógica de negócio) , que analisa qualquer site, app, API ou ser
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
anti-slop-brain/anti_slop_brain/cli.py:14 return subprocess.call([PY, str(REPO / "scripts" / script), *args],Anti Slop (Skill)
Compatibility: Not stated.
Find and repair substance defects in AI-assisted prose, code, documentation, and agent output.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
src/commands/task-download.ts:216 await fs.unlink(filePath);Anygen Cli (Skill)
Compatibility: Not stated.
CLI for [AnyGen](https://www.anygen.io) , AI-powered content generation platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/apple-notes/skills/apple-notes/scripts/create-note.py:49 result = subprocess.run(["osascript", "-e", sApple Notes (Skill)
Compatibility: Not stated.
A Claude Code plugin for interacting with Apple Notes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/arc-skill/scripts/arc_skill/broker.py:362 process = subprocess.Popen(Arc Skill (Skill)
Compatibility: Not stated.
An agent skill that plays [ARC-AGI-3](https://arcprize.org/arc-agi/3/) , 25 video games that never explain their rules , from nothing but a game ID.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/gates/scanners/v2-public-gates.mjs:83 process.on('exit', () => { try { fs.rmSync(tmp, { recursive: truearcgram (Plugin)
Compatibility: Not stated.
Arcgram , an interactive diagram engine for human, AI collaboration: an AI agent draws its reasoning as an auditable node-and-edge flow and self-audits it, delivered as one standalone HTML file.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
skills/arxiv-doc-builder/arxiv_doc_builder/convert_latex.py:166 out = subprocess.run(Arxiv Skills (Skill)
Compatibility: Not stated.
Custom Claude skills for working with arXiv papers - fetching, searching, and converting to reference documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED
package.json:41 prepareatelier (Skill)
Compatibility: Not stated.
> A personal development toolkit for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
plugins/audio-transcriber/skills/audio-transcribe/SKILL.md:166 # Bedrock (uses AWS credential chain: IAM role,Audio Transcriber (Plugin)
Compatibility: Not stated.
Agent skill for multi-speaker meeting & podcast transcription , FunASR (Paraformer/SenseVoice/Whisper) + MiMo-V2.5-ASR + CAM++ speaker diarization + LLM cleanup.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES OBFUSCATION_ENCODED_BLOB
src/autoharness/hook/dispatch.py:83 subprocess.Popen( # host-detach: fire-and-forget so the Stop hook returnsautoharness (Skill)
Compatibility: Not stated.
Autoharness , a self-learning skill layer for Claude Code , distills skills from your real sessions, updates them as you work, and prunes the ones that stop getting used.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zEMiQzER0" style="display:none">jvb2fnwBuxV8w65C7xEk5AYSr9fmBdCof2VP+TMgzVm46/p0fhH8byWOAutomated Application Pipeline (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
examples/02-unshaped-magic-adventure/sol-high/benchmark/verify_benchmark.py:141 ngram_run = subprocess.run(Autonovel Agent Skills (Skill)
Compatibility: Not stated.
`autonovel-agent-skills` is a multi-skill fiction pipeline maintained by [DukeTwoCan](https://github.com/DukeTwoCan).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/avenox-thumbnail/references/logo-library.md:20 curl -sL "https://cdn.simpleicons.org/<slug>/<HEX>" -o <avenoxskills (Skill)
Compatibility: Not stated.
Agent skills built and battle-tested in production by [Avenox](https://avenox.lol).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
scripts/update_rankings.py:719 with urllib.request.urlopen(request, timeout=30) as response:Awesome Academic Research Skills (Skill)
Compatibility: Not stated.
> 面向中文用户的学术论文与科研 Agent Skill 每日排行榜。自动搜索、过滤并排名 GitHub 上与论文写作、文献综述、深度研究、评审反馈、实验复现相关的 Skill / Agent / Workflow 仓库。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/update_metadata.py:45 with urllib.request.urlopen(req, timeout=30) as resp:Awesome Academic Skills (Skill)
Compatibility: Not stated.
<div align="right">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/awesome-code-standards/SKILL.md:109 const response = await fetch(url);Awesome Agent Skills (Skill)
Compatibility: Not stated.
Skills for AI coding agents: code review, test writing, design docs, debugging, security and dependency audits, git history surgery, refactoring, copywriting, and cleaning up AI-written code and text.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
.github/workflows/hygiene.yml:38 files = subprocess.run(Awesome Agentic Engineering (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
document-skills/docx/ooxml/scripts/pack.py:103 result = subprocess.run(Awesome Claude Skills (Skill)
Compatibility: Not stated.
A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/alphaear-signal-tracker/scripts/utils/md_to_html.py:147 <p>Generated by AlphaEar @ {os.popen('date').reAwesome Finance Skills (Skill)
Compatibility: Not stated.
A collection of Awesome Finance Agent Skills for free and easy to start | 一系列开源免费的金融分析Agent Skills
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
docs/app.js:740 fetch("examples.json"),Awesome Goal Prompts (Skill)
Compatibility: Not stated.
When Claude Code, Codex, Cursor, or another coding agent starts making broad edits, paste a contract that says exactly what to inspect, what not to touch, how to verify, and when to stop.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
scripts/auto_add_skills.py:32 result = subprocess.run(["gh", *args], capture_output=True, text=True)Awesome Human Distillation (Skill)
Compatibility: Not stated.
A curated catalog of human distillliation agent skills
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
cloudphone-adb-tunnel/SKILL.md:54 curl -fsSL <你的脚本URL> -o ~/install-termux.sh && bash ~/install-termux.shAwesome Skills (Skill)
Compatibility: Not stated.
Independent Agent Skills packaged according to the Anthropic Agent Skills specification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
skills/security-webshells/references/Web-Shells/WordPress/plugin-shell.php:70 passthru($command , $return_var)Awesome Skills Security (Skill)
Compatibility: Not stated.
Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
hooks/scripts/install-telemetry.sh:201 if command -v curl >/dev/null 2>&1; thenazure (Plugin)
Compatibility: Portable across standard formats.
Transform Claude into an Azure expert.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
docs/assets/js/main.js:336 fetch(url).then(function (r) {Azure Sql Developer (Plugin)
Compatibility: Portable across standard formats.
Agent skills for Azure SQL Developer, the Azure SQL Database engine running locally in a container.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zBcOzWGC0" style="display:none">pcNf6CgoHkGkbQKnWqaSM7Lnno3ajbJtMxV1B6HorcqT3lPiKjhZO/0gB2B Outreach Orchestrator (Plugin)
Compatibility: Not stated.
AI-Powered B2B Outreach Plugin 2026: Persistent Briefing & 40 Skills for Claude Code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/cdx-sol/cdx-sol.mjs:250 fs.rmSync(fx, { recursive: true, force: true });Babel Orchestration (Plugin)
Compatibility: Not stated.
Multi-model code review and orchestration for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/backend-security/skills/backend-security/references/injection.md:25 - `child_process.exec`, `execSync`Backend Security Skill (Plugin)
Compatibility: Not stated.
<a id="top"></a>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
internal/cli/persona_permissions.go:202 cmd := exec.Command("npm", "install", spec, "--prefix", dir, "--no-savbaron (Plugin)
Compatibility: Not stated.
Local-first AI coding agent orchestrator with a terminal UI , isolated worktrees, a real build/lint/test gate, and policy-controlled auto-merge.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/batocera-roms/scripts/dat-verify.py:243 subprocess.run([SEVENZ, "x", "-y", f"-o{tmp}", filepath],Batocera Skills (Plugin)
Compatibility: Not stated.
Agent skills that teach coding agents to operate a Batocera arcade cabinet: ops, ROMs, display, tuning, maintenance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/baidu-drive/scripts/install.sh:192 if command -v curl &> /dev/null; thenBdpan Storage (Skill)
Compatibility: Not stated.
Agent Skill for Baidu Netdisk (百度网盘) , upload, download, transfer, share, search files via natural language.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/beautify-github-readme/scripts/render_motion_gif.py:184 subprocess.run(command, check=True, stdout=subpBeautify Github Readme (Skill)
Compatibility: Not stated.
README design skill for Claude Code & Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/beezi/lib/accounts.mjs:83 try { fs.rmSync(target, { recursive: true, force: true }); } catch { /* ignoBeezi Claude Plugin (Plugin)
Compatibility: Claude Code.
Official Beezi plugins for Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/blender-agent-studio/skills/blender-asset-validation/scripts/test_evidence_blender.py:16 result = subpBlender Agent Studio (Skill)
Compatibility: Not stated.
Route Blender asset creation, refinement, procedural systems, rendering, simulations, characters, validation, animation, MCP integration, and agent benchmarking work to the appropriate Blender Agent Studio workflow.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/install_dsh.py:76 shutil.rmtree(staging, ignore_errors=True)Blender Vse (Skill)
Compatibility: Not stated.
Revision-safe Blender VSE timeline execution for agents; pair with a director Skill for end-to-end production.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
boss_hr/adapters/browser_environment.py:150 proc = subprocess.Popen(Boss Hr Agent Toolkit (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/boss-hr-poster.png" alt="BOSS HR Agent Toolkit：让招聘筛选，更有章法。岗位解析、简历获取、逐份评分与可视化报告。" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
bin/cli.js:35 fs.rmSync(dir, { recursive: true, force: true });Bria Skill (Skill)
Compatibility: Not stated.
Generate, edit, and precisely control images directly from your AI coding agent using [Bria.ai](https://bria.ai)'s commercially-safe models.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/agent-onboarding/SKILL.md:253 curl -sS https://api.brightdata.com/request \Brightdata Plugin (Plugin)
Compatibility: Claude Code.
Web scraping, Google search, structured data extraction, and MCP server integration powered by Bright Data.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/check.sh:46 curl -sf --max-time 10 "${SEARXNG_URL}?format=json&q=health" >/dev/null 2>&1Browser Search (Skill)
Compatibility: Not stated.
A skill for AI agents: search the web with SearXNG, browse with Camofox, bypass protections with CloakBrowser.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK
uninstall.js:47 fs.unlinkSync(file);Burn Your Money (Plugin)
Compatibility: Not stated.
> **"看着你的存款实时归零。"**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
by2kb/agent_install.py:28 shutil.rmtree(target)by2kb (Skill)
Compatibility: Not stated.
**Forward a video.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
deploy/setup.sh:80 echo " curl -X POST https://mcp.illinihunt.org/mcp \\"Canvas Mcp (Skill)
Compatibility: Not stated.
Canvas LMS MCP server , up to 102 tools and 8 agent skills for students & educators.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:53 prepareCapcut Cli (Skill)
Compatibility: Not stated.
Independent, unofficial CLI to edit CapCut and JianYing (剪映) projects , subtitles, timing, speed, volume, templates, cut long-form to shorts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
capsule/contract.py:209 result = subprocess.run(capsule (Skill)
Compatibility: Not stated.
Agent control plane for governed, replayable execution.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/install_all_hermes_skills.py:59 subprocess.run(cmd, check=True)Carl Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/git-files.py:23 proc = subprocess.Popen(command, cwd=request["cwd"], env=env, stdin=subprocess.DEVNULLCc Git Graph (Plugin)
Compatibility: Not stated.
Browse Git history in a panel beside your Claude Code conversation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/golang-benchmark/references/pprof.md:690 curl -o heap.prof http://localhost:6060/debug/pprof/heapCc Skills Golang (Skill)
Compatibility: Not stated.
🧑🎨 A collection of Golang agentic skills that works
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/evals/evaluate-skill-routing.py:69 result = subprocess.run(Cc Thingz (Skill)
Compatibility: Not stated.
Portable skills, agents, hooks, and Pi-native extensions for Claude Code, Codex CLI, GitHub Copilot, Cursor, Grok, and Pi.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
claude-code-model-badge.js:55 const USAGE_BADGE = '(()=>{try{let G=globalThis,K="__ccUsageBadge",LS="cc-usage-Cc Vscode Statusbar (Plugin)
Compatibility: Not stated.
Brings improved statusbar to Claude Code VSCode extension.
This grade is a hygiene screen, not proof of safety.
