Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1101 to 1150 of 1,212 Claude Code, Grade C entries. Page 23 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zQ685h1B0" style="display:none">rlpN0rv5EzxMyEbBM1nwYSh52cBL7UhpEjQLFWNTJR6YR0HYuelURhWFTariff Oracle (Plugin)
Compatibility: Not stated.
**TariffBrain** is a next-generation, AI-native trade compliance microservice designed for autonomous agents, developer workflows, and enterprise supply chain stacks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/tars/extract.py:31 response = httpx.get(url, follow_redirects=True, timeout=30,tars (Skill)
Compatibility: Not stated.
TARS Answers from Raw Sources , local-first second brain: capture, ask, digest, sync connectors, taxonomy gardening.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/build.py:27 if subprocess.call([sys.executable, str(ROOT / "scripts" / "validate.py")]) != 0:Termos Ui Ux (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
INSTALL.md:83 curl -fsSL https://raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh | shToken Savers (Skill)
Compatibility: Not stated.
**The token-saving starter pack for coding agents.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
examples/llm-qa/solution-multi/solution.py:23 result = subprocess.run(["claude", "-p", question], capture_outptrap (Skill)
Compatibility: Not stated.
> ## [trapstreet.run](https://trapstreet.run) > > **Find the AI solution that actually works.** Agents, skills, and tools compared > side by side on the same task , non-invasive I/O testing, reproducible results, > public leaderboards.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
benchmark/bench.py:74 subprocess.run(git[:1] + ["init", "-q"], cwd=d, check=True)TrustMeBro (Skill)
Compatibility: Not stated.
> A plan-first project workflow for Claude Code and IBM Bob: map the code in `LAYOUT.md`, plan the work in `PLAN.md`, track it in `ROADMAP.md`, and have your AI keep them current as work lands.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
src/uat/install.py:525 if policy.planning != "off" and commands.get("path"):Universal Agent Toolkit (Skill)
Compatibility: Not stated.
Install AI coding rules, skills, MCP servers, safety guardrails and a project planning workflow into any project , **for the coding agent you actually use, and nothing else.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
bin/unprompted.mjs:3570 var defaultFetch = (endpoint, init) => globalThis.fetch(endpoint, init);unprompted (Skill)
Compatibility: Not stated.
Analyze the user's own local Claude Code / Codex session history and show who they are on different projects , two contrasting modes, what they never say, the moments that contradict each other, and a playful MBTI-style AI-use persona with a bespoke card.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
SKILL.md:89 ssh -i ~/.ssh/id_ed25519 [email protected] "systemctl status ipsec shadowsocks-libev --no-pager |VpnLine (Skill)
Compatibility: Not stated.
|
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
examples/05-dragonlobster/install.sh:17 if command -v curl >/dev/null; thenWezterm Skill (Skill)
Compatibility: Not stated.
Configure, customize, and operate the WezTerm terminal emulator.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
plugins/zero-to-hero/skills/zero-to-hero/scripts/apply_zero_to_hero_templates.py:161 result = subprocess.run(Zero To Hero (Skill)
Compatibility: Not stated.
**Turn ambiguous product work into an implementation-ready handoff.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
memories-off-skill/scripts/install.py:28 if subprocess.call([cmd, "-c", "import sys; sys.exit(0 if sys.versionAgent Skill Memories Off (Skill)
Compatibility: Not stated.
提供一个极简、结构化的本地知识管理方案，让你的 Agent 具备长期记忆，且文档对人类阅读和编辑也足够友好。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/skills-tools-comparison.md:138 curl -fsSL https://raw.githubusercontent.com/runkids/skillshare/main/instaAgent Skill Porter (Skill)
Compatibility: Not stated.
<div align="center"> en | <a href="README_ja.md">ja</a> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
.agents/skills/skill-creator/eval-viewer/generate_review.py:291 result = subprocess.run(Agent Skills (Skill)
Compatibility: Not stated.
Reusable agent skills for AI coding assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL
plugins/agy/scripts/agy_companion.py:256 proc = subprocess.Popen(Agy Cc (Plugin)
Compatibility: Not stated.
A Claude Code plugin that hands code review, adversarial review, plan writing and rescue tasks to Google's Antigravity CLI (`agy`, Gemini 4 Argon) as tracked, isolated background jobs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:20 id_rsaAi Design System (Skill)
Compatibility: Not stated.
A coding-agent skill that documents when and how to use your UI components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/desktop-outfit-video/scripts/seedance.py:201 resp = requests.get(url, timeout=300)Ai Desktop Outfit Video (Skill)
Compatibility: Not stated.
把最近很火的「AI 桌面换装视频」拆成了可复用的提示词模板和一个 Agent Skill。一条提示词直出 30 秒成片，不需要任何后期剪辑。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/ai-film-production-system/scripts/quick_validate.py:50 subprocess.run([sys.executable, str(SCRIPT_DIR /Ai Film Director Workbench (Skill)
Compatibility: Not stated.
这是一套给 AI 电影、AI 短片和连续剧集使用的双 Skill 工具箱。你可以把它理解成两位协作助手：
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
supply-chain-guard/references/attack-patterns.md:159 rg -n 'process\.env|\.npmrc|GITHUB_TOKEN|NPM_TOKEN|AWS_|AAi Supply Chain Guard (Skill)
Compatibility: Not stated.
Agent-facing install guide for a portable, tool-agnostic supply-chain defense skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/analyzing-webshells/scripts/analyst.py:20 "php": ["eval(", "assert(", "system(", "exec(", "passthru(",Analyst Ai Pack (Skill)
Compatibility: Not stated.
**An open agent-skills library for malware analysis, reverse engineering, and threat hunting.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
desktop-bridge/antigravity_api.py:28 res = subprocess.run(antigravitymb (Plugin)
Compatibility: Not stated.
<p align="center"> <b>Português</b> • <a href="README.en.md">English</a> • <a href="README.es.md">Español</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/api-security-review/SKILL.md:213 const response = await fetch(req.body.url);Apisec Skills (Skill)
Compatibility: Not stated.
OWASP API Security Top 10 skills for AI coding agents: BOLA detection, auth and RBAC scaffolding, injection checks, security test generation, full API security review, and OpenAPI schema hardening.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:35 prepareAptos Agent Skills (Skill)
Compatibility: Not stated.
AI-assisted Aptos blockchain development with **Claude Code**, **Cursor**, and **GitHub Copilot**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
scripts/test_package.py:19 for name in ['skills/automation-mining/.env', 'assets/local-notes.md', '.codex-plugAutomation Mining Skill (Skill)
Compatibility: Not stated.
Find repeated manual work in activity records.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skills/en/weixin-article-to-obsidian/scripts/download_weixin_article.py:37 with urllib.request.urlopen(req, tiAwesome Agent Skills (Skill)
Compatibility: Not stated.
**English** | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
app-demos/engine/src/hiapi/client.ts:176 response = await fetch(url, {Awesome Ai Video Workflows (Skill)
Compatibility: Not stated.
Use when planning, creating, reviewing, or researching AI product videos from product images, ecommerce listings, or product briefs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bots/Gravilo/bridge.py:65 resp = requests.post(Awesome Antigravity (Skill)
Compatibility: Not stated.
<!--lint ignore double-link-->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/lib.py:182 with urllib.request.urlopen(req, timeout=30) as resp:Awesome Seo Geo Skills (Skill)
Compatibility: Not stated.
<!-- 本文件由 scripts/build.py 生成，请勿手改。要改内容请编辑 data/ 或 templates/ 后重新生成。 -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/install.sh:3 # curl -fsSL https://raw.githubusercontent.com/kukemc/bili-cli/main/scripts/install.sh |Bili Cli (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
examples/brca1/scripts/verify_brca1_qc_promotion.py:84 completed = subprocess.run(Bio Gene To Reference Tree (Skill)
Compatibility: Not stated.
**Build the reference set before you build the tree.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
browse_code/cli.py:53 subprocess.run("clip", input=text.encode("utf-8"), check=True)browse_code (Skill)
Compatibility: Not stated.
<p align="center"> <img src="logo.svg" alt="Browse Code" width="200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
bto-event-review/scripts/align_photos.py:67 r = subprocess.run(["mdls", "-raw", "-name", "kMDItemContentCreatiBto Skills (Skill)
Compatibility: Not stated.
**Mười một skill rút từ [Build to Own](https://build2own.dev), cài vào agent của bạn trong một phút.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
deploy.sh:96 code="$(curl -sS -o /dev/null -m "${2:-6}" -w '%{http_code}' "$1" 2>/dev/null || true)"carrel (Skill)
Compatibility: Not stated.
English | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
benchmark/run.py:185 shutil.rmtree(temp_dir, ignore_errors=True)cinch (Skill)
Compatibility: Not stated.
<div align="center"> <img src="assets/banner.svg" alt="cinch , Universal agents and skills for every harness." width="100%" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/reddit-cultivate/SKILL.md:122 subprocess.run(['pbcopy'], input=js.encode(), check=True)Claude Agent Skills (Skill)
Compatibility: Not stated.
Collection of Claude Code Agent Skills for founders, indie hackers, and growth engineers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.claude/hooks/protect-files.sh:16 *.env|*.env.*|*.pem|*.key|*.p12|*.pfx|*id_rsa*|*secret*|*credentials*|*.clauClaude Code Growth Os (Skill)
Compatibility: Not stated.
**Run your whole go-to-market inside Claude Code , not just your code.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/fodo/dashboard/index.php:679 $proc = @proc_open([$bin, 'agents', '--json', '--all'], [0 => ['file', '/Claude Plugins (Plugin)
Compatibility: Not stated.
Peter Forret's Claude Code plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/power_automate_cli/auth.py:33 result = subprocess.run(cmd, capture_output=True, text=True, timeout=45)Claude Power Automate (Skill)
Compatibility: Not stated.
**A Claude Code suite for Microsoft Power Automate development** , eight focused Agent Skills plus a local, open CLI for inspecting and deploying cloud flows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT
scripts/install_skills.py:102 shutil.rmtree(path)Claude Skills Collection (Skill)
Compatibility: Not stated.
Reusable Swift and Apple platform skills for coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/mg-registry-snapshot.mjs:51 const r = await fetch(url, { signal: ac.signal });cli (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/validate_release.py:139 shutil.rmtree(smoke_dir)cosmosmith (Skill)
Compatibility: Not stated.
**Give your AI coding agents a product team, an architecture desk, a task board, and a release gate in one command.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/actions/claude-code-action/action.yml:50 curl -LsSf https://astral.sh/uv/install.sh | shCuration Skills (Skill)
Compatibility: Not stated.
Skills are folders of instructions, scripts, and resources that Claude loads dynamically to improve performance on specialized tasks.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/daftai-chinese-copywriting/scripts/autocorrect.ts:121 fs.rmSync(tempDir, { recursive: true, force: trueDaftai Skills (Skill)
Compatibility: Not stated.
English | [中文](./README.zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
.agents/skills/deepworkplan/shared/benchmark.py:230 proc = subprocess.run(['git', '-C', repo_root] + args,Deepworkplan Skill (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/build-design-system/scripts/capture.mjs:185 const res = await fetch(new URL(s.route, base), { redirect:design.how (Skill)
Compatibility: Not stated.
Skills and design systems for coding agents, from [design.how](https://design.how).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
dify_workflow/remote_config.py:13 DEFAULT_CONFIG_FILENAME = "credentials.json"Dify Workflow Cli (Skill)
Compatibility: Not stated.
[English README](README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:66 preparedittu (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:9 curl -fsSL https://raw.githubusercontent.com/SimpleEve/eo-skills/main/install.sh | shEo Skills (Skill)
Compatibility: Not stated.
一套开发工作流 skill 集合，可装进任何支持 Agent Skills 约定的 agent（Claude Code / Codex / Antigravity 等）。以 change 工件为核心，配套可选的 codegraph 代码召回与 agent-handbook 项目操作手册，把从构思、变更、实施、测试、审查到归档的全流程拆成可独立调用的 skill，并支持跨 agent 协作。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/exam-review-helper/scripts/controller.py:495 result = subprocess.run(Exam Review Helper (Skill)
Compatibility: Not stated.
> 把 PDF / Word / TXT / Markdown 教材浓缩成交互式 HTML 复习文档的 Claude Code / Codex CLI Skill。 > 自动识别文科/理工科，5-pass 深度提取，原生支持扫描版 PDF OCR。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
tools/flow_completion.py:190 subprocess.run(flow (Skill)
Compatibility: Not stated.
Unified toolkit for Context-Driven Development with spec-first planning, TDD workflow, and OKF knowledge bundles.
This grade is a hygiene screen, not proof of safety.
