Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 151 to 200 of 1,212 Claude Code, Grade C entries. Page 4 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/validate-cursor-commands.py:275 if subprocess.run([sys.executable, str(check_script)], check=False).reCursor Commands (Skill)
Compatibility: Not stated.
Production-grade Cursor slash commands with paired skill contracts, behavioral evals, and ship-gate CI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
scripts/marketplace.py:110 runner: Callable[..., subprocess.CompletedProcess[str]] = subprocess.run,Damascus Ink Plugins (Plugin)
Compatibility: Not stated.
Ясность: три открытых MIT-скилла для юриста , грамматика · логика · риторика.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
.agents/hooks/telemetry_hook.js:16 ;if(d)return d}throw s}finally{try{this.fs.unlinkSync(l)}catch{}}}catch(t){Data Agent Kit (Plugin)
Compatibility: Not stated.
This plugin provides a specialized suite of skills for data engineers and database practitioners working on Google Cloud.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
dazzle_claude_config/aideep.py:85 return subprocess.run(["git", "-C", str(cwd), *args], capture_output=True, tDazzle Claude Config Sync (Skill)
Compatibility: Not stated.
**Git-backed sync for your Claude Code configuration (skills, commands, agents, hooks, and `CLAUDE.md`) across every machine you work on, with credential protection on the way in and backups on every write.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:182 cp .env.example .envDebate Engine Synthesis (Plugin)
Compatibility: Not stated.
Ultimate AI Debate Panel Generator 2026 - Auto-Document Decision Synthesis
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/release-please/skills/setup/references/gotchas.md:49 necessarily the account you want. Use the matchinDeckHand (Plugin)
Compatibility: Not stated.
[English](README.md) | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:6 postinstallDemo Video Factory (Plugin)
Compatibility: Not stated.
Turn any SaaS URL into a ~26s branded product-demo video , brand-matched scenes, a recreated product-UI 'wow' scene, real screenshots, and a soundtrack.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
hooks/dep-guard.py:44 result = subprocess.run(Dep Guard (Plugin)
Compatibility: Not stated.
Dependency guardian , intercepts package installs to enforce latest versions and block vulnerable packages.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
evals/real-world/cluster-gpu-monitor/input/compose.yaml:99 response = urllib.request.urlopen('http://127.0.0.1Deslop Gpt (Skill)
Compatibility: Not stated.
Test-first, evidence-backed cleanup for accumulated test, verification, and fallback bloat.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
evals/_harness/run_skill.py:75 proc = subprocess.run(Dev Event Organizer Skills (Skill)
Compatibility: Not stated.
Skills for technical event operations , conferences, meetups, hackathons, and community programs covering strategy, speakers, sponsors, programming, day-of production, and post-event learning.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
skills/diagram-skills/scripts/diagram_skills.py:1416 lines.append('.lane-box{fill:var(--surface);stroke:var(--Diagram Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="skills/diagram-skills/assets/icon.svg" width="88" alt="DiagramSkills mark"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
docs/STATUS.md:327 > Perplexity path **skips** the re-fetch (its URLs are already grounded → no added latency)diffmode_free (Plugin)
Compatibility: Not stated.
Free guerrilla growth tactics for startups, the kind your competitors won't come up with on their own.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
bin/setup-dragonscale.sh:108 if command -v curl >/dev/null 2>&1; thenDigital Brain (Skill)
Compatibility: Not stated.
Claude + Obsidian knowledge companion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
server/digits_server.py:55 proc = subprocess.run(Digits (Plugin)
Compatibility: Not stated.
Digits: connect Claude to Apple Numbers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
examples/todos/native-appearance.ts:106 const server = Bun.serve({ hostname: "127.0.0.1", port, async fetch(redirect (Skill)
Compatibility: Not stated.
> 🎯 Direct gives each state of your app its own URL.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/disk-space-analyzer/scripts/macos/list_volumes.py:20 out = subprocess.check_output(Disk Space Analyzer Skill (Skill)
Compatibility: Not stated.
Claude Code Skill for analyzing disk space and finding cleanable files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/yd-frontend-build/scripts/check_bundle.py:43 # JS 호출: fetch("..."), import("..."), importScripts("...")Doksam Skills (Skill)
Compatibility: Not stated.
Claude Code·Codex·Antigravity 에서 쓰는 Agent Skill 25개입니다.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
mcp-servers/domino_mcp_server/domino_mcp_server.py:72 resp = requests.get("http://localhost:8899/access-token"dominodatalab (Plugin)
Compatibility: Not stated.
Full Domino Data Lab platform support , workspaces, jobs, model deployment, experiment tracking, GenAI tracing, Spark/Ray/Dask, and app deployment for data science teams
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
hooks/douchebag-activate.js:16 try { fs.unlinkSync(flagPath); } catch (e) {}douchebag (Plugin)
Compatibility: Not stated.
Turns your coding agent into a loud vulgar gym-bro chad.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/verify_capture.py:62 result = subprocess.run(command, capture_output=True, text=True)Draw Ui (Skill)
Compatibility: Not stated.
UI design & mockup skill for Claude Code & Codex, from screenshot to code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/diff.ts:101 fs.rmSync(tmp, { recursive: true, force: true });driftlint (Skill)
Compatibility: Not stated.
**Your CLAUDE.md is lying to your agent.** driftlint keeps agent context files true, two ways: a **drift linter** that finds the claims in `CLAUDE.md`, `AGENTS.md`, skills, subagents and cursor rules that your code no longer supports , and **Reviewed Memory**, the missing approv
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/install.sh:2 # ds-rescue installer - curl this from README quickstartDs Rescue Cc (Plugin)
Compatibility: Not stated.
Let your claude-code get second opinion and review cc execution results from Deepseek
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/build_learning_example.py:21 run = subprocess.run([sys.executable, '-B', '-X', 'utf8', str(CORE / 'tooDuya Skills (Skill)
Compatibility: Not stated.
墨涅斯的商业与线索获客：主入口、12项业务快捷方式、选题与短视频生产新流程、一句话更新、24篇知识、真实模板MCP与本地项目记忆。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:21 This system treats profiles as **living configuration files**—version-controlled, modular, and hoEngineer By Example (Plugin)
Compatibility: Not stated.
**Version 2.4.1** | **MIT Licensed** | **Released 2026 Edition**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
skills/impeccable/scripts/modern-screenshot.umd.js:7 tTimeout(()=>a.abort(),r):void 0;return fetch(t,D({signalEngineering Review Board (Skill)
Compatibility: Not stated.
This repository is the canonical local source for reusable, project-neutral agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/english-exam-coach/skills/english-exam-coach/scripts/speak.py:104 done = subprocess.run(command, stdouEnglish Exam Coach (Plugin)
Compatibility: Not stated.
Claude Code plugin for CEFR-aligned English exam prep: IELTS, TOEFL iBT (2026 format), CEFR B1-C2.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/enterprise-legal-ops/scripts/archive_record.py:405 proc = subprocess.run(cmd, text=True, stdout=subprocEnterprise Legal Ops (Skill)
Compatibility: Not stated.
中小企业本地法务运营管理 Skill。用于企业内部管理合同、员工/劳动合同/年假/制度、公章证照、章程权限、股东出资、提醒和本地自然语言问库。用户要初始化企业法务工作区、上传历史合同/员工花名册/劳动制度/证照/章程/授权/用印记录、生成本地台账、查询到期提醒、做企业内部合同审查 Word 修订稿、合同起草、HR 风险预判、制度冲突检查、旧制度合法性审查、公章用印权限校验、股东出资提醒、飞书日历提醒配置时触发。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
packages/cli/src/Cli.ts:727 fs.unlinkSync(target)etemaro (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/favicon.svg" alt="Etemaro Logo" width="100" height="100" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zZGV26Ph0" style="display:none">Ra+DJ9QSYQlBS1iI/JH1vWncpE5rG3bxFcB2yeH4m8lzso8t1gImcxgGEtsy Ugc Compliance Harvester (Plugin)
Compatibility: Not stated.
Etsy Seller Ops: The 2026 Open-Source Suite for Claude Code Automation & Compliance
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
package.json:52 prepareexa (Plugin)
Compatibility: Not stated.
Exa AI web search, deep research, and content extraction.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zklwhrCm0" style="display:none">s9FGldMBOytOsfrXEM4fbuHrXjNjjovc9qbc0bHUmhOFzEqf0RF8URf8Exo Harness Ai Pipeline (Plugin)
Compatibility: Not stated.
Claude Code AI Pipeline 2026 , PEV Framework Harness Plugin for Developers
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
codex-app/scripts/harness/host.ts:40 const response = await fetch("/rpc", {Fallow Skills (Skill)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/fallow-rs/fallow/main/assets/logo-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/fallow-rs/fallow/main/assets/lo
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/image-gen/SKILL.md:574 curl -fsSL https://raw.githubusercontent.com/buildoak/fieldwork-skills/main/skilFieldwork Skills (Skill)
Compatibility: Not stated.
**Teach your AI agent to operate 10x better.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/fiftyone-app-playwright/SKILL.md:43 os.remove(TRIGGER)fiftyone (Plugin)
Compatibility: Not stated.
Build high-quality datasets and computer vision models.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
workflow-skills/video-interaction-mapper/scripts/extract_key_frames.py:33 result = subprocess.run(cmd, capturefigma (Plugin)
Compatibility: Not stated.
Figma design platform integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/filtalgo.js:43 if (now - fs.statSync(file).mtimeMs > stateLifetimeMs) fs.unlinkSync(file);Filtmall Shopping Skill (Skill)
Compatibility: Not stated.
Agent-native shopping for extreme value: verifiable same-product price evidence, checkout, orders, delivery, and after-sales.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zQyLO63o0" style="display:none">jTPwSCKZPIGq7hm4OdWImt2zBfMSjuxSk6JGxnW1Xbq7LvxCIIl7+/OjFlow Gated Planning (Plugin)
Compatibility: Not stated.
**SpecFlow Architect** is a revolutionary file-based planning system that transforms how developers, project managers, and AI agents collaborate on complex software projects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/diffdock/scripts/dock.py:64 result = subprocess.run(cmd, cwd=diffdock_dir)FM4Life (Skill)
Compatibility: Not stated.
<div align="center"> <img src="assets/logo.svg" alt="FM4Life , Skills for Life Science Foundation Models" width="100%"/> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:241 You configure API keys in the `.env` file or via the profile configuration:Force Multiverse Hub (Plugin)
Compatibility: Not stated.
**Version 1.2.3 , Released January 2026**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/forge-app-builder/scripts/create_forge_app.py:26 subprocess.run(['forge', '--version'], capture_output=Forge Skills (Plugin)
Compatibility: Not stated.
Forge-focused skills and MCP configuration for Atlassian Forge: scaffold and deploy apps (forge create, templates, dev spaces), build Teamwork Graph connectors for Rovo Search/Rovo Chat, pre-deploy review, systematic debugging, plus Forge docs and Atlassian Design System lookups
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:37 prepareforkmind (Plugin)
Compatibility: Not stated.
🧠 Local-first LLM state branching & debugging.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
moodboard-generator/scripts/render_png.py:28 subprocess.run(Game Design Skills Bundle (Skill)
Compatibility: Not stated.
A curated bundle of reusable game design skills for OpenClaw / ClawHub-style agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
gap-trap/templates/gates/instruction_gate_test.py:168 r = subprocess.run(["git", "cat-file", "-e", f"{h}^{{comGap Trap (Skill)
Compatibility: Not stated.
<p align="center"><img src="assets/gap-trap.png" alt="gap-trap logo: a net catching code puzzle pieces" width="200"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
scripts/responsive-check.mjs:90 c.#ws = new WebSocket(url);gccli (Skill)
Compatibility: Not stated.
Fast, script-friendly CLI for Garmin Connect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
hooks/stop-acceptance.mjs:59 try { fs.unlinkSync(blocksFile); } catch { /* absent → nothing to reset */ }genesis (Skill)
Compatibility: Not stated.
Three modes for Claude Code projects: create a new one from an empty folder (research and design before stack, then build and test it), transition an existing repository to a stated standard, and check the user-level ~/.claude layer that loads in every session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
cursor/gitgud-hook.js:61 fs.unlinkSync(PENDING_TASK_FILE);gitgud (Plugin)
Compatibility: Not stated.
Keep your coding skills sharp in the age of AI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.codexignore:16 credentials.jsonGo Ultimate (Skill)
Compatibility: Not stated.
Opinionated Go development skill , architecture, conventions, production readiness, repo/CI hygiene, review, and MCP/agent patterns.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
claude-code/skills/goalfydata/references/scheduled-sync-guide.md:69 r = subprocess.run(["uds-cli", "--task-id"goalfydata (Skill)
Compatibility: Not stated.
<br>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
apps/web/src/services/forecastApi.ts:86 response = await fetch(buildUrl("/api/v1/forecast/latest"), {goldfxgraph (Skill)
Compatibility: Not stated.
[English](README.md) | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
cmd/data_pagination_test.go:150 // A caller-supplied --page-token must seed the first fetch (resume).Google Health Cli (Skill)
Compatibility: Not stated.
Google Health CLI , one command-line tool for the Google Health API.
This grade is a hygiene screen, not proof of safety.
