Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 101 to 150 of 1,212 Claude Code, Grade C entries. Page 3 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:13 prepareCe Pattern Kit (Skill)
Compatibility: Not stated.
Toolkit for the CE Pattern, a minimal, rule-based structure for organizing UI components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/challenge_plans/adapters.py:127 r = subprocess.run(["claude", "-p", "--output-format", "text", "ok"],Challenge Plans (Skill)
Compatibility: Not stated.
Before you execute a drafted plan/spec/design doc, run a multi-agent adversarial cross-review to surface the flaws that cause downstream rework, aggregating "evidenced, cross-family-verified" objections into a verdict.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
benchmarks/agentic/run.js:58 process.on('exit', () => fs.rmSync(ISO, { recursive: true, force: true }));Chisle (Plugin)
Compatibility: Portable across standard formats.
Cut your AI coding agent's token bill on three axes: terse prose, YAGNI-first code, and tool-output compression.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
hooks/guard.py:109 r"\.env(?:\.[\w.-]+)?|\.envrc|\.netrc|\.npmrc|\.pgpass|\.pypirc|\.git-credentials|"Claude 1Password (Plugin)
Compatibility: Not stated.
Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/deferred-migration-export.cjs:153 try { fs.rmSync(job.startupShortcut, { force: true }); } catch { /*Claude Account Switch (Plugin)
Compatibility: Not stated.
A keyboard-driven TUI for keeping independent sets of **Claude Code** and **Codex** ChatGPT accounts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
claude_ads_core/cockpit_demo.py:51 shutil.rmtree(destination.name, dir_fd=parent.fd, ignore_errors=True)Claude Ads (Skill)
Compatibility: Not stated.
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
curl/examples.md:16 curl https://api.anthropic.com/v1/messages \Claude Api (Skill)
Compatibility: Claude Code.
|-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zjVHapgJ0" style="display:none">hDvkhiXbhTZLqYwUgxKdp2Gto2AZhQmd5nce+kAlwQCyJuiMJ8vCTBLkClaude Browser Automator (Plugin)
Compatibility: Not stated.
**Version 1.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
server.mjs:151 fs.rmSync(entryPath, { recursive: true, force: true });Claude Code Dashboard (Plugin)
Compatibility: Not stated.
Local web dashboard for Claude Code , monitor rate limits, manage agents/skills/hooks/MCP servers, browse session history, track daily activity and usage rankings
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
requirements.txt:1 fastapi>=0.115Claude Code Monitor (Plugin)
Compatibility: Not stated.
Local usage, cost and failure dashboard for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/claude-automation-recommender/references/hooks-patterns.md:85 | `credentials.json`, `secrets.yaml` | SeClaude Code Setup (Plugin)
Compatibility: Claude Code.
Analyze codebases and recommend tailored Claude Code automations such as hooks, skills, MCP servers, and subagents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:11 prepareClaude Code Workflows (Skill)
Compatibility: Not stated.
Development workflows for Claude Code that keep broad exploration focused on the outcome you approved.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
scripts/build-adapter-knowledge.js:105 fs.rmSync(fullPath, { recursive: true, force: true });Claude Content Writer (Skill)
Compatibility: Not stated.
|
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.claude-plugin/hooks.json:9 "command": "python3 -c \"import json,subprocess,os; d=json.load(open(os.path.expanClaude Echolog (Plugin)
Compatibility: Not stated.
Stop rediscovering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/cloudflare-workers/SKILL.md:54 async fetch(request: Request, env: Env): Promise<Response> {Claude Googleadsagent (Plugin)
Compatibility: Not stated.
The most comprehensive Google Ads and advertising automation plugin for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/infrastructure/client-roots.ts:20 this.cached = await this.fetch();Claude Jev (Plugin)
Compatibility: Not stated.
Ask TypeSafe's Jev model for calibrated judgements during code review, investigation and planning.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
README.md:118 curl -fsSL https://bun.sh/install | bashClaude Mem Sync (Plugin)
Compatibility: Not stated.
Team memory sharing for claude-mem , sync AI memories across developers, with Claude Code plugin, github action and knowledge distillation
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zcFsoQdv0" style="display:none">3QY3O73xyNro7tAX5dd+7n9+NXHNW9EaiyI364DzipzrGzsxv+GPoLGjClaude Minder (Plugin)
Compatibility: Not stated.
In the growing ecosystem of AI-assisted workflows, your Claude conversations accumulate like leaves in autumn, useful, beautiful, but eventually overwhelming without proper tending.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/oss-bootstrap/references/project-detection.md:65 - `*.env`, `*.pem`, `*.key`, `id_rsa`, `credentials*`,Claude Oss Skills (Skill)
Compatibility: Not stated.
A set of practical Claude Code runbooks for developing public open-source projects on resource-constrained hardware.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zBV6zBSC0" style="display:none">L6kkyH6AfISs3APbuNGorOlcIlgCwmMP022JZhHFJnAZtCjCfJA7/vWRClaude Plugin Fundraisers (Plugin)
Compatibility: Not stated.
An open-source, AI-native extension framework for the PayIt2 fundraising platform, enabling automated donor engagement, campaign optimization, and intelligent workflow orchestration through Claude-powered plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:15 postinstallClaude Plugin Marketplace (Plugin)
Compatibility: Not stated.
Automated Claude plugin generator and marketplace publisher
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
agent-reliability/skills/production-autopsy/scripts/finalize.py:70 result = subprocess.run(Claude Plugins (Plugin)
Compatibility: Not stated.
The ByteStack Labs marketplace for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
bin/claude-rem.js:600 fs.rmSync(out, { force: true });Claude Rem (Plugin)
Compatibility: Not stated.
A brain that remembers everything.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
hooks/hooks.py:322 out = subprocess.run(Claude Security (Plugin)
Compatibility: Claude Code.
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
claude-connect/launch.ts:214 fs.unlinkSync(tmpCert);Claude Share (Plugin)
Compatibility: Not stated.
Securely share your Claude Code with your friends.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
commands/wiki-ingest.md:35 transcript = api.fetch('VIDEO_ID', languages=['ko', 'en', 'en-US'])Claude Skills (Plugin)
Compatibility: Not stated.
Research, career, finance, productivity and automation , 29 slash commands + 4 skills for Claude Code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/cold-email-drafter/draft_email.py:69 """Parse curl stdout defensively. Returns {} on any non-JSON (netwClaude Skills (Skill)
Compatibility: Not stated.
A small, curated collection of **[Agent Skills](https://docs.claude.com/en/docs/claude-code/skills)** for Claude Code (and any skill-compatible agent).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
skills/gh-cli/SKILL.md:21 curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd oClaude Ui Color Palette (Plugin)
Compatibility: Not stated.
Design color palettes, audit contrast, generate code, and sync to Figma, Penpot, Sketch, and Framer , powered by the UI Color Palette API
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
hooks/format-on-edit.py:75 subprocess.run(cmd, capture_output=True, timeout=10)Claude Workflow V2 (Skill)
Compatibility: Not stated.
Universal Claude Code workflow plugin with agents, skills, hooks, and commands
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/article-optimizer/scripts/run_single_score.py:45 result = subprocess.run(Claude Writing Skills (Skill)
Compatibility: Not stated.
Claude Code skills for long-form content workflow: research collection via NotebookLM, multi-platform publishing via wechatsync, viral-score evaluation, single-article rewrite loops, and yt-dlp media helpers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:47 prepareclaude_plugin_realistic_cost (Plugin)
Compatibility: Not stated.
Estimate what a 100% human-driven engineering team (PM, EM, design, backend, frontend, QA, DevOps, security, data, tech writing) would have cost to produce the work in an AI coding session , as a terminal receipt, status line, or exported report.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
api-designer/references/common-patterns.md:296 fetch('/api/v1/payments', {ClaudeSkills (Plugin)
Compatibility: Not stated.
Skills for Claude.ai and Claude Code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
scripts/scan-content.mjs:64 [/\biex\s*\(/i, 'PowerShell Invoke-Expression'],Clean Backend (Plugin)
Compatibility: Not stated.
Claude agent skill for production-hardening practices whenever you're designing, writing, or reviewing your backend code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:14 id_rsaClever Comebacks (Plugin)
Compatibility: Not stated.
Generate a single-sentence clever comeback to a mean message at a chosen intensity tier , soft (playful), medium (cutting), heavy (savage), or trainwreck (unhinged).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/commands/init.ts:754 fs.rmSync(tmpDir, { recursive: true, force: true });cli (Skill)
Compatibility: Not stated.
Firecrawl CLI and agent skills: web search, scraping, crawling and browser interaction from your terminal or any coding agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:39 preparecli (Skill)
Compatibility: Not stated.
[简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
cmd/auth/login.go:484 return exec.Command(cmd, args...).Start()cli (Skill)
Compatibility: Not stated.
[中文版](./README.zh.md) | [English](./README.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
cli2skill/mcp2skill.py:61 proc = subprocess.Popen(cli2skill (Skill)
Compatibility: Not stated.
Turn any CLI or MCP server into an Agent Skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
packages/clickhouse-best-practices-build/src/check-external-links.ts:116 let response = await fetch(url, {Clickhouse Best Practices (Plugin)
Compatibility: Portable across standard formats.
28 best practice rules for ClickHouse schema design, query optimization, and data ingestion , prioritized by impact
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
.agents/skills/ai-agent-security-llm-threats/SKILL.md:117 subprocess.run(["kubectl", "scale", f"deploy/{model_Cloud Platform Skills (Skill)
Compatibility: Not stated.
43 production-grade, evaluated engineering skills for **Cloud, Platform, SRE, Security and FinOps** work , portable across every major AI coding agent, and usable by humans as runbooks, ADRs and SOPs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/install_skill.py:43 shutil.rmtree(path)Codex Agent Orchestration Skill (Skill)
Compatibility: Not stated.
This repository now ships two independent Codex skills:
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:8 credentials.jsonCodex Automation Audit (Skill)
Compatibility: Not stated.
Audit recent Codex automation and personal skill runs, compare task behavior with prompts and local docs, then prepare numbered patch-ready recommendations without changing files during the scheduled run.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
src/codex_fast_proxy/benchmark.py:840 completed = subprocess.run(Codex Fast Proxy (Skill)
Compatibility: Not stated.
Codex App auth-split proxy for third-party OpenAI-compatible APIs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/git-for-research-code/SKILL.md:118 out = subprocess.run(Combinatorial Optimization Skills (Skill)
Compatibility: Not stated.
A curated set of 76 Claude Code skills covering exact methods, metaheuristics, classic problems, and research workflow for combinatorial optimization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
README.md:44 - Avoids committing files with secrets (.env, credentials.json)Commit Commands (Plugin)
Compatibility: Claude Code.
Commands for git commit workflows including commit, push, and PR creation
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/computer-repair-skill/references/playbook-setup-cuda.md:49 wget https://developer.download.nvidia.com/cComputer Repair Skill (Skill)
Compatibility: Not stated.
让 Codex、Claude Code 等 AI Agent 成为你的跨平台电脑维修助手：64 个按需加载的 Playbook，覆盖诊断、清理、性能、网络与安全维护, , C 盘爆满、电脑卡顿、流氓软件、应用迁移、数据恢复都能直接问；先取证、再计划，确认后修改。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:6 prepareContent Stack (Plugin)
Compatibility: Not stated.
A content operations ecosystem that transforms strategy into published outcomes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:19 prepareContext Kit (Skill)
Compatibility: Not stated.
> Generate AI context for your dev stack , works with Claude Code, Cursor, Windsurf, GitHub Copilot, Gemini CLI, or any LLM.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
cowork-ai-os/skills/browse-skills/lib/fetch-live-catalog.md:23 ### Step 1 - Try live fetch (BOTH sources, in pCowork Ai Os (Plugin)
Compatibility: Not stated.
AI Operating System for Claude Cowork - install AI infrastructure instead of bouncing between chat tabs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:32 postinstallCreate Chrome Extension (Plugin)
Compatibility: Not stated.
Six skills that scaffold a Chrome extension, fill the listing copy, capture screenshots, set up Chrome Web Store OAuth, and orchestrate submission.
This grade is a hygiene screen, not proof of safety.
