Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 251 to 300 of 1,212 Claude Code, Grade C entries. Page 6 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:20 postinstallmapbox (Plugin)
Compatibility: Not stated.
Mapbox skills and MCP servers for building location-aware applications with AI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zqCGp1Sc0" style="display:none">B1Ody77ZveINDEv9UWpOiXnjbFBw8JZaEqYb/ht0x2gxTpHBvMn6mFRBMarkdown Fetcher Mcp (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
mathmodel_agent/cli.py:199 completed = subprocess.run(Mathmodel Weave (Skill)
Compatibility: Not stated.
中文是本项目的主要使用入口；[English README](README.en.md) 提供同等内容的英文说明。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
CLAUDE.md:21 - Push only via SSH using the mestudio key (`~/.ssh/id_ed25519_mestudio`).Me Review (Plugin)
Compatibility: Not stated.
Professional M&E skills for monitoring, evaluation, accountability and learning.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zwyceMRo0" style="display:none">A6RRfKU5c6pOpVw4KzB9rtl0z6NHQjlQ1/Z63vI+3vw1uV12pyk00BfoMedia Routing Mesh (Plugin)
Compatibility: Not stated.
Routed Media OS 2026: 96 AI Skills, 13 Modes & 7 Agents for FFmpeg, OBS, DeckLink & Dolby Vision
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
install/opencode.sh:8 # We deliberately do NOT support `curl | bash`. Clone the repo at a pinned tagmempenny (Plugin)
Compatibility: Not stated.
One memory, every AI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
hooks/test_validate_mp_credentials.py:37 return subprocess.run(mercadopago (Plugin)
Compatibility: Not stated.
Mercado Pago full-product integration toolkit.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
README.md:106 CLI profiles normally live in `~/.config/meshy/credentials.json` with mode 0600.Meshy 3D Agent (Skill)
Compatibility: Not stated.
Generate 3D models, textures, and images, rig and animate characters, and prepare models for 3D printing with the Meshy AI API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
scripts/claudecode-minara-skill-setup.sh:73 if curl -fsSL "$CLAWHUB_SKILL_URL/archive/main.tar.gz" -o "$TMP_DIMinara Skills (Skill)
Compatibility: Not stated.
The skills for trading, to make your agent earn for you.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
bench/fetch.py:85 with urllib.request.urlopen(req, timeout=300) as resp, tmp.open("wb") as out:mindex (Plugin)
Compatibility: Not stated.
**A coding agent should not read your codebase.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zBTEWWaG0" style="display:none">6hZh3nSh00IZlPK9lYjLoa3N1vHAcdGEEjb9qKwsygbcC23UdrGUOEDZMindseed Mcp Connector (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/fetch_schema.py:81 with urllib.request.urlopen(req, timeout=30) as resp:Mobileconfig Builder (Skill)
Compatibility: Not stated.
Erstellt produktionsreife .mobileconfig-Dateien (Apple Configuration Profiles) für macOS, iOS, iPadOS, tvOS, watchOS und visionOS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
data_feed.py:5 return float(requests.get(url).json()["price"])Money Atlas Intelligence Os (Skill)
Compatibility: Not stated.
|
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
cli/src/commands/rename.ts:56 await fs.unlink(oldSidecarPath);MRSF (Skill)
Compatibility: Not stated.
<p align="center"> <img src="media/mrsf-logo.png" alt="Sidemark / MRSF logo" width="200" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
packages/core/src/server.integration.test.ts:79 fs.rmSync(tmpHome, { recursive: true, force: true });Msw Mcp (Skill)
Compatibility: Not stated.
This monorepo provides a suite of tools that bridge AI agents with Mock Service Worker (MSW).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zl2bhRm90" style="display:none">v2rhzoljvGLwI1BFY9jSoXrnTt22YtPblaxDPKEPQ/OJd+3Ei3P7GKluMulti Agent Revenue Orchestrator (Plugin)
Compatibility: Not stated.
**Revenue Agent Orchestrator 2026** is a specialized multi-agent business development framework engineered to mirror and extend the capabilities of Outreach.ai's AI Agents suite.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
src/convert/converter.ts:121 fs.unlinkSync(filePath);N8N Cli (Skill)
Compatibility: Not stated.
A command-line interface for managing [n8n](https://n8n.io/) workflows as code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/agent/build.rs:856 estricted shell. Network requests (curl/wget to any host, LAN or public), package insnanopi (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
install.sh:27 version="$(curl -fsSL "https://api.github.com/repos/$repo/releases/latest" | sed -n 's/.*"tag_naneowright (Skill)
Compatibility: Not stated.
`neowright` is a CLI tool for agents to interact with a real Neovim TUI session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
ecommerce-1688-product-billboard/scripts/1688_product_billboard.py:71 os.remove(probe)Nexscope Ecommerce Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
.agents/skills/brainstorming/scripts/server.cjs:645 if (fs.existsSync(eventsFile)) fs.unlinkSync(eventsFile);Ng Agentic Skills (Skill)
Compatibility: Not stated.
A library of **agent skills** for Angular work , focused, reusable capabilities an AI agent can invoke for signal forms, data access, SignalStore state, migrations, refactoring, accessibility, performance and security reviews, prototyping, unit and e2e tests, and verifying a fea
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
gemeinsam.py:299 ca-certificates curl git jq procps \NightShift (Skill)
Compatibility: Not stated.
Two skills that turn Claude Code from an interactive tool into an autonomous worker.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
scripts/noc.py:205 shutil.rmtree(backup)Noc Living Docs (Skill)
Compatibility: Not stated.
A local feature archive for Codex, with a CLI that handles setup and one-time project initialization.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
scripts/validate_repo.py:45 result = subprocess.run(Nsfc Benzi Audit (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/nsfc-bamai-banner.svg" alt="NSFC 本子把脉" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
core/nutmeg_core/bundle.py:150 freeze = subprocess.run(["python3", "-m", "pip", "freeze"], capture_output=Truenutmeg (Skill)
Compatibility: Not stated.
Football data analytics toolkit for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
bench/make_oneshot.py:24 subprocess.run(nybls (Plugin)
Compatibility: Not stated.
Watch videos for your agent: summarize lectures, tutorials, webinars, recorded meetings, demos and screen recordings - YouTube or local files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/oc-security-audit/skills/oc-security-audit/scripts/scan.sh:2 set -u # Note: NOT set -e - npm audit andOc Security Audit (Skill)
Compatibility: Not stated.
*Dedicated to [Ohad Cohen](https://cohenron09.wixsite.com/boodi), a brave Israeli soldier who gave his life protecting Kibbutz Be'eri on October 7, 2023.*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
cli/lazybones/commands/serve.py:22 subprocess.run(["npm", "ci"], cwd=frontend_dir, check=False)Oh My Lazybones (Skill)
Compatibility: Not stated.
<p align="center"><em>Laziness, automated.</em></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zvJTkXwp0" style="display:none">24APUfaFE9v8+e89okagQC1XQbFpkn/kRqTVNiiiUKLtnQNb9JVUoaW0One Maker Automation Engine (Plugin)
Compatibility: Not stated.
Solo Automation Suite 2026: Build Production-Grade Make Workflows with Official Modules for One-Person Businesses
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/run_local_installer.py:33 subprocess.run(Open Claude Design (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
npm/postinstall.js:33 fs.unlinkSync(tmp);Open Enthrium Ai Mcp Server (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
src/report.js:239 *{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:radial-gradientOpen Skill Sunset (Skill)
Compatibility: Not stated.
[English](README.md) | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
install.mjs:373 fs.rmSync(staging, { recursive: true, force: true });Open Skills (Skill)
Compatibility: Not stated.
Reusable, inspectable skills for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.opencode/plugins/README.md:7 | [`protect-secrets.js`](protect-secrets.js) | Blocks any tool call (read/write/Opencode Primer (Skill)
Compatibility: Not stated.
Master OpenCode, the open-source AI coding agent , setup, agents, skills, plugins, MCP, Zen & headless CI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
package.json:85 @ff-labs/fff-nodeOpencode Ralph Rlm (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/ralph-rlm-overview.png" alt="Ralph-RLM: a coding loop you can hand off , outer loop (you + supervisor), inner loop (a fresh worker implements and runs verify until tests pass), optional parallel swarms, and why it works (memory in files,
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
organize-files-safely/scripts/organize_files.py:428 df_result = subprocess.run(Organize Files Safely (Skill)
Compatibility: Not stated.
[Português](README.pt-BR.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/agent-session.mjs:6 // curl -s localhost:47811 -d '{"name":"overleaf_read_doc","arguments":{...}}'Overleaf Mcp Rt (Skill)
Compatibility: Not stated.
Edit Overleaf projects live alongside human collaborators.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/build_binary.py:25 probe = subprocess.run([sys.executable, "-m", "PyInstaller", "--version"], capture_Own Your Diff (Skill)
Compatibility: Not stated.
Local ownership gate and multiple choice question approval skill for AI-assisted code diffs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/oxidize/scripts/parity_check.py:43 proc = subprocess.run(oxidize (Skill)
Compatibility: Not stated.
Migrate, port, or rewrite a codebase or app to Rust from Python, JS/TS, Go, C/C++, Java, Ruby, or C#.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skill/example.py:38 result = subprocess.run(cmd, capture_output=True, text=True, cwd=SKILL_ROOT)paper_claw (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:26 preparepaypal (Plugin)
Compatibility: Not stated.
PayPal development plugin for Claude , integrate payments, subscriptions, invoices, disputes, and more using PayPal's APIs and MCP server
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zTjmeRlM0" style="display:none">VTsyR0K23ukoBR75vhSNdeTeUv5Yn3/dSrmma5Dv2ZRjJj5NQKaZk3FIPdf Sculptor Toolkit (Plugin)
Compatibility: Not stated.
**PDF Fusion Studio** is not just another PDF editor , it's a universal document orchestration platform that transforms static PDF files into living, breathing digital assets.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zM0ZbEst0" style="display:none">ZW8Q7JMuv0eu2mzYprcUlj3B4vLs8KMiWBoCzrw2d5pTchzmkT74PfeXPdlc Forge (Plugin)
Compatibility: Not stated.
The Ultimate AI Code Workflow 2026 , 31 Hard-Contract PDLC Commands for Flawless GitOps
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="ztrvVFLD0" style="display:none">HNwyuz9DwTGUSWzwUyE8DjToNKDH6A0nl4WjSvYz8NUqwT6xPVOGS80EPerfex Crm Guardrails (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | Release Date: March 2026 | Maintained by the Community**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.github/scripts/generate-plugins.py:26 result = subprocess.run(Personal Statement Skill (Skill)
Compatibility: Not stated.
Assist in writing, structuring, and polishing personal statements and self-introductions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/pg-extension-lab/assets/benchmark-accelerator/ef_recall_sweep.py:20 subprocess.run(args.command_templatPg Extension Lab (Plugin)
Compatibility: Not stated.
A harness for developing, testing, benchmarking, and tuning PostgreSQL extensions , validating behavior in an isolated, reproducible environment, separately from the implementation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
photo-to-editorial-illustration/scripts/setup_image_runtime.py:133 return subprocess.run(Photo To Editorial Illustration (Skill)
Compatibility: Not stated.
<h1 align="center">Photo to Editorial Illustration</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/analyzing-views/SKILL.md:59 All active UVC page selectors are required constraints on the **final resulpigment (Plugin)
Compatibility: Not stated.
Analyze business data and build custom Pigment models, metrics, and boards through natural language.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:37 postinstallpitchcraft (Skill)
Compatibility: Not stated.
Structured persuasion for tech leads, PMs, and founders, not activity logs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
bin/launcher_contract.test.js:247 fs.rmSync(workspace, { recursive: true, force: true });Plan Auditor (Skill)
Compatibility: Not stated.
Invoke this skill by name as `plan-auditor` for non-trivial build/implement/fix work or whenever the user wants independent proof that an AI actually completed the requested work.
This grade is a hygiene screen, not proof of safety.
