Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1001 to 1050 of 1,212 Claude Code, Grade C entries. Page 21 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/plans/0017-plan-promptkit-2026-08-07.md:15 **Success:** paste a half-formed instruction, get back a prompskills (Skill)
Compatibility: Not stated.
<!-- wikikit:front-door:start --> My personal collection of AI agent skills for day-to-day development, installable and managed with [skills.sh](https://www.skills.sh).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
accept-x402-payments/SKILL.md:115 curl https://api.stripe.com/v1/crypto/deposit_addresses \skills (Skill)
Compatibility: Not stated.
Claude Code skills for AI-aware development and life organization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
skills/04-responsividade-e-qualidade/webapp-testing/scripts/with_server.py:69 process = subprocess.Popen(skills (Skill)
Compatibility: Not stated.
139 skills organizadas em 16 temas, em português e inglês, para o [Claude Code](https://claude.com/claude-code).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/natural-writing/SKILL.md:102 curl -fsSL 'https://en.wikipedia.org/w/api.php?action=query&titles=Wikipedskills (Skill)
Compatibility: Not stated.
Installable, plugin-ready skills that give coding agents disciplined workflows, from code standards and review gates to multi-agent orchestration
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/dev/client.js:67 saving = fetch('/__save', {Slide Nextup (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/parallel-development/infra/scripts/arch_contract_api.py:237 # fetch("..."), axios.get("..."), axios.possolidforge (Skill)
Compatibility: Not stated.
A Loop Engineering system for AI coding agents , one Claude Code plugin.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
CHANGELOG.md:560 `~/.ssh/config`, always preview destructive operations) called outsolx (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
evals/baseline_operator.py:205 result = subprocess.run(stackshift (Skill)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
benchmarks/run.py:75 p = subprocess.run(argv, cwd=SANDBOX,Stop Me (Skill)
Compatibility: Not stated.
Makes your agent object once, with a citation, on decisions you cannot undo , in either direction.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/explanatory-video/scripts/azure_tts.py:91 result = subprocess.run(Tomas Skills (Skill)
Compatibility: Not stated.
Reusable skills for designing verifiable Goal Cards, researching a topic, explaining how it works, turning the result into a document people can both watch and read, producing narrated explanatory animation, publishing a website with private Blob-backed content, and preparing tes
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
lib/cli.mjs:725 if (prior === null) fs.rmSync(target, { force: true });Un Editorial Check (Skill)
Compatibility: Not stated.
Reads user-visible copy the way a United Nations editor would , language, wording, tone, grammar, hate speech, spelling, terminology, dates, numbers, claims and register , and reports what fails.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/chatgpt-codex/yigit-investment-copilot/scripts/borsa.py:60 res = subprocess.run(cmd, capture_output=TruUniversal Ai Finance Skills (Skill)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="assets/hero-dark.svg"> <img src="assets/hero-light.svg" width="1280" alt="Finance Skills , Maintained Collection , clear questions, repeatable workflows, reviewable results"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
compose-check.sh:14 if curl -fsS "$BASE_URL/health" >/dev/null 2>&1; thenWatermarks Remover (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
docs/superpowers/plans/2026-08-29-triage-wave-3-drive.md:9 **Tech Stack:** TypeScript (Node `child_process.spawitness (Skill)
Compatibility: Not stated.
**Spec-driven development for AI coding agents, where nothing advances without evidence.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
reference/plugins/actweave/scripts/clean-profile.mjs:151 const response = await fetch(`${url}/`, {Workflow To Skill (Skill)
Compatibility: Not stated.
English | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
server/harness/bridge.py:411 if event in ("subprocess.Popen", "os.system", "os.exec", "os.posix_spawn", "os.foAgent Ops (Plugin)
Compatibility: Not stated.
Manage Codex, Claude Code and Kiro CLI conversations and runs locally.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
caveman-compress/scripts/compress.py:40 result = subprocess.run(Agent Skills (Skill)
Compatibility: Not stated.
Eight Claude Code skills I designed and built, plus two entries adapted from Julius Brussee's [caveman](https://github.com/JuliusBrussee/caveman) (MIT), all curated down from a larger private set to the ones I use daily.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
structural-refactor/SKILL.md:77 bash <(curl -sL get-comby.netlify.app) # Ubuntu/DebianAgent Skills (Skill)
Compatibility: Not stated.
A collection of shareable, high-quality AI coding agent skills and workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
diary/benchmarks/measure_journal_generation.py:158 cli_version = subprocess.check_output(["codex", "--version"Agent Toolkit (Skill)
Compatibility: Not stated.
A collection of tools and frameworks for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:10 # curl -fsSL https://raw.githubusercontent.com/erikhoward/agent-tools/main/install.sh | bashAgent Tools (Skill)
Compatibility: Not stated.
A curated set of opencode [agents](agents/), [commands](commands/), [skills](skills/), and a global [AGENTS.md](AGENTS.md) , the flow workflow (ideate → plan → implement), Git helpers, and language skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/agent_xplat/diff.py:47 completed = subprocess.run(Agent Xplat (Skill)
Compatibility: Not stated.
> Find the OS assumptions that break AI-agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/generate_starter.py:28 shutil.rmtree(destination)Agentic Gtm (Skill)
Compatibility: Not stated.
Fifteen GTM skills with playbooks, backed by a deterministic, approval-gated CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/agentui-automations/SKILL.md:35 const { data } = await axios.get(inputs.url);Agentui Tools (Skill)
Compatibility: Not stated.
Deploy and host apps on AgentUI from your coding agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
examples/call_agy.py:194 proc = subprocess.run(Agy Sub Agent (Skill)
Compatibility: Not stated.
Delegate a self-contained subtask to Antigravity (official `agy` CLI, headless) and retrieve a structured JSON result.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
inertia-react/skills/laravel-inertia-react/rules/form-file-uploads.md:24 await fetch('/upload', {Ai Toolkit (Skill)
Compatibility: Not stated.
Agent skills for deep code review and grounded investigation in PHP, TypeScript, Python and beyond, plus dedicated Laravel and React packs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
package.json:46 prepareAIpush (Skill)
Compatibility: Not stated.
**Get recommended by ChatGPT, Perplexity & Gemini , automatically.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
alluvia/checks.py:87 process = subprocess.Popen(argv, cwd=cwd, env=env, stdin=subprocess.DEVNULL,alluvia (Skill)
Compatibility: Not stated.
Remember this repository's decisions and turn corrected Python behavior into a regression test with /alluvia:protect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
mcp-servers/nextdns/src/client.ts:78 const response = await fetch(url, {Alpha Skills (Skill)
Compatibility: Not stated.
A homelab skills repository with two purposes that stay strictly separate: a growing collection of [Agent Skills](https://agentskills.io) meant for publishing to [skills.sh](https://www.skills.sh), and a set of local MCP servers built on top of those same skills' reference docs,
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/aws_test_plugin/scripts/run_tests.py:70 result = subprocess.run(cmd, cwd=root, check=False)Aws Test Plugin (Skill)
Compatibility: Not stated.
AI-powered test generation skills for AWS Python projects , Lambda, API Gateway, Step Functions, and Batch.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/bank_agent_llm/cli.py:61 def fetch(Bank Agent Llm (Skill)
Compatibility: Not stated.
Local-first, AI-powered pipeline for personal financial intelligence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
scripts/check-code-blocks.py:17 p=subprocess.run(['bash','-n'],input=src,text=True,capture_output=True)Baodao Skill (Skill)
Compatibility: Not stated.
<p align="center"> <a href="https://tahodev.github.io/baodao-skill/"> <img src="https://tahodev.github.io/baodao-skill/emblem.png" alt="baodao-skill 青花台字印章標誌" width="120"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/pre-merge-check/scripts/check_dependencies.py:30 return subprocess.run(cmd, cwd=cwd, capture_output=TruBaseline Skills (Skill)
Compatibility: Not stated.
Three [Agent Skills](https://github.com/anthropics/skills) that give any AI coding agent (Claude Code, Codex CLI, Antigravity, Cursor, Windsurf, and anything else that speaks the open Agent Skills format) a working default for secure, well-set-up software, without you having to w
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
bootstrap/src/checksum.test.ts:19 fs.rmSync(p);berimor (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
bigquery-blockchain-datasets/scripts/regenerate-schema-tables.py:37 p = subprocess.run(cmd, capture_output=TruBigquery Blockchain Skills (Skill)
Compatibility: Not stated.
Agent Skills ([agentskills.io](https://agentskills.io)) for querying the BigQuery public blockchain datasets: `goog_blockchain_{ethereum_mainnet,polygon_mainnet,arbitrum_one,optimism_mainnet,avalanche_contract_chain,cronos_mainnet,tron_mainnet}_us`, `crypto_ethereum`, and `crypto
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/bitwarden_lease_broker.py:70 completed = subprocess.run(Bitwarden Lease (Skill)
Compatibility: Not stated.
Install, operate, diagnose, and safely consume an owner-only macOS Bitwarden CLI lease that uses one native hidden-answer unlock interaction for a 24-hour process-continuity window.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
doctor/bouch-doctor:88 p = subprocess.run(Bouch Plugins (Skill)
Compatibility: Not stated.
UK-specific Claude Code plugins for property investors, solicitors, small business owners, and project managers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
breakthrough-whatsapp-triage/scripts/wa_doctor.py:179 result = subprocess.run([sys.executable, "-m", "pip", "-Breakthrough Whatsapp Triage (Skill)
Compatibility: Not stated.
A Claude Code skill that turns an overwhelming WhatsApp backlog into a one page action board.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/carnap-auto-research/install.py:31 subprocess.run(command, check=True)Carnap Harness (Skill)
Compatibility: Not stated.
**Turn open-ended research into an evidence workflow that can be inspected, advanced, and stopped.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
docs/demo/gen.mjs:6 fs.rmSync(root, { recursive: true, force: true });ccfind (Plugin)
Compatibility: Not stated.
Full-text search across your past Claude Code sessions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
packages/watch-video/skills/watch-video/scripts/doctor.py:235 result = subprocess.run(charms (Skill)
Compatibility: Not stated.
Charms is a monorepo of two independent, portable [Agent Plugins v1](https://agent-plugins.org/specification).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
install.js:85 fs.rmSync(skillDest, { recursive: true, force: true });checkmyvibe (Skill)
Compatibility: Not stated.
>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
.claude/skills/evidence-driven-testing/scripts/evidence.py:100 result = subprocess.run(Claude Code Harness (Skill)
Compatibility: Not stated.
A curated harness for Claude Code: **13 specialized agents**, **16 skills**, and a six-beat **AGENTS.md workflow** that takes a task from an isolated worktree to an evidence-backed pull request.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zInuUMSD0" style="display:none">q7uiAHHV+pJpj1W8/FRZS5ekGwgOhe5NAOk30HzcO8Odpq4Kc8W96DDCClaude Feedback Rings (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zWTKhJkQ0" style="display:none">F3VApjB3RBUR3uBYyCPM/SnJgBU9VqyhEPmVdMRDUUohaEysMmcDb0iTClaude Plugins Weave (Plugin)
Compatibility: Not stated.
**WeaveFlow** is an innovative open-source framework that transforms how AI agents communicate, share context, and execute complex workflows across multiple plugin ecosystems.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/github-multi-account/skills/setup/references/git.md:12 ssh-keygen -t ed25519 -C "<email1> $(hostname -Claude Skills (Skill)
Compatibility: Not stated.
Skills for Claude Code, packaged as installable plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:154 Agentic Stack authenticates with **OpenAI API** using environment variables or a `.env` file. ThCli Boot Agents (Plugin)
Compatibility: Not stated.
**Version 1.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/guard_sensitive_paths.py:34 r"(^|[\s\\/])\.npmrc($|[\s\"'`;<>|&])",Copilot Harness (Skill)
Compatibility: Not stated.
Drop-in harness for a bare GitHub Copilot: instructions, skills, custom agents, MCP config, guard hook, and a cost playbook for token-based billing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
update_package_version.py:55 result = subprocess.run(Dbr Project Sample (Skill)
Compatibility: Not stated.
Reference implementation for a Python library that runs locally through [Databricks Connect](https://docs.databricks.com/aws/en/dev-tools/databricks-connect/python/) and as an installed [Python wheel](https://packaging.python.org/en/latest/specifications/binary-distribution-forma
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
skill/ocio-color/scripts/_command.py:25 return subprocess.run(list(args), check=True, capture_output=True, texDcc Texture Pipeline (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/dcc-texture-pipeline.svg" alt="DCC-MCP · TEXTURE-PIPELINE" width="600"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
demo-generator/setup/check-dependencies.sh:34 check "uv" "uv" "" "curl -LsSf https://astral.sh/uv/install.sh |Dev Toolbox (Skill)
Compatibility: Not stated.
Standalone dev tools and AI infrastructure I built for my own workflow.
This grade is a hygiene screen, not proof of safety.
