Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 301 to 350 of 1,212 Claude Code, Grade C entries. Page 7 of 25.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zSkQXCvc0" style="display:none">HbIjrnHPojFjRqarpEeeZ56wYNwrW2BF5XlWhE4v8pgrry+kc9/lSzoLPlan Execute Verify Claude Code (Plugin)
Compatibility: Not stated.
Best AI Coding Workflow Plugin Pipeline 2026
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/lib/api.ts:67 const response = await fetch(`${API_BASE}/user/login`, {Pocketcast Skill (Plugin)
Compatibility: Not stated.
Pocket Casts integration - access starred episodes, listening history, show notes, and podcast metadata
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
requirements.txt:1 yt-dlpPodcast Transcript Txt Skill (Skill)
Compatibility: Not stated.
Deterministic workflow to find and export full podcast transcripts as cleaned TXT files from YouTube URLs, episode webpages (including Xiaoyuzhou), Apple Podcasts title search, X/Twitter links, direct audio URLs, or plain episode titles.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
apps/desktop/src/main/runtime/credentials.ts:24 const path = pathOps.join(claudeHome, '.credentials.json')port (Plugin)
Compatibility: Not stated.
A Claude Code plugin that turns GitHub issues into merge-ready pull requests, with humans at the gates that matter.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/skill-safety-checker/scripts/scan_safety.py:84 r'>\s*~?/\.ssh/', r'cat\s+.*id_rsa', r'cat\s+.*id_ed2551Portable Agent Skills (Skill)
Compatibility: Not stated.
<div align="center"> <img src="assets/hero.svg" alt="Portable Agent Skills , Research, Deploy, Audit" width="100%"> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:54 @types/pgpostiz (Plugin)
Compatibility: Not stated.
Social media automation CLI for scheduling posts, managing integrations, uploading media, and tracking analytics across 28+ platforms including X, LinkedIn, Reddit, YouTube, TikTok, Instagram, and more
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
scripts/build-skill.js:36 fs.unlinkSync(file);Prompt Architect (Skill)
Compatibility: Not stated.
Agent skill for analyzing and improving prompts using 31 frameworks across 7 intent categories.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/prompt-english-coach/scripts/coach-hook.js:106 fs.rmSync(filePath, { force: true });Prompt English Coach (Plugin)
Compatibility: Not stated.
Learn English while you prompt Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zmoNEt0b0" style="display:none">SO6L4uJ0QZ62xavxCTfsTqM3Xmj8GBaqZ4qWs65YzIt+84fo4GQG5O+IPrompt Integrity Validator (Plugin)
Compatibility: Not stated.
**Say goodbye to prompt bloat, hallucination triggers, and costly API waste.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
scripts/lint.js:601 const PR002_VERB_LIST = '(?:write|writes|writing|summari[sz]e|summari[sz]es|summari[sz]ingPrompt Refiner Skill (Plugin)
Compatibility: Not stated.
Hybrid prompt linter , deterministic Node detector for 18 of 20 rules plus an LLM model layer for PR003, PR009, and semantic cases of PR002, PR005, and PR010.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:11 supermemory>=3.0.0Prompt Studio (Skill)
Compatibility: Not stated.
Prompt engineering workbench with a Lean persona layer that cuts LLM output size, cost, and latency.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/check_page.py:29 result = subprocess.run(args, capture_output=True, text=True, cwd=REPO)promptalias (Skill)
Compatibility: Not stated.
**[The visual walkthrough is at kishormorol.github.io/promptalias](https://kishormorol.github.io/promptalias/)** , what a prompt is, the seven of them, how a typed sentence reaches one, and what is actually measured.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/foldseek/SKILL.md:60 subprocess.run([Protein Design Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/hero_animation.svg" width="560" alt="Protein Design Skills"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
scb-pxwebapi-v2-skill/scripts/check_examples.py:115 with urllib.request.urlopen(req, timeout=60) as r:Pxwebapi Skills (Skill)
Compatibility: Not stated.
<!--- Language: no ---> [_English see below_](#english)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/run_eval.py:51 result = subprocess.run(Qdrant Skills (Plugin)
Compatibility: Not stated.
Agent skills for Qdrant vector search covering scaling, performance optimization, search quality, monitoring, deployment, model migration, version upgrades, and SDK usage across Python, TypeScript, Rust, Go, .NET, and Java.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/package.mjs:49 fs.rmSync(temporary, { recursive: true, force: true });qgraphflow (Skill)
Compatibility: Not stated.
Generate evidence-grounded interactive software diagrams with offline HTML, SVG and PNG export.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zX2pBNrG0" style="display:none">a9GG4OEbaaau57SF0CGv5npCvXUzyJqHojrX2AcNf5ZdzIrq4wsu3PeqQuillshield Audit Engine (Plugin)
Compatibility: Not stated.
Smart contracts are the new digital deeds, irrevocable, autonomous, and unforgiving.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zVnVCBvv0" style="display:none">p97iXGVOv37TSeLQ7HMqbocaFEBpwbZcROfB0Zhc9guRw+5WZ174BIoERad Claude Agent Toolkit (Plugin)
Compatibility: Not stated.
Unlock the full potential of Claude Code with a decentralized marketplace of skill plugins, orchestration agents, and autonomous coding workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/sync_codex_plugin.py:52 shutil.rmtree(DESTINATION)Rate My Skill (Skill)
Compatibility: Not stated.
Audits Agent Skills for trigger precision, behavioral uplift, safety, package integrity, and marketplace readiness with evidence-backed release verdicts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/readless/tts.py:21 _active_proc: subprocess.Popen | None = Nonereadless (Skill)
Compatibility: Not stated.
Speak Claude Code activity out loud while you're AFK , agent-callable speak_summary / speak_status / speak_blocker tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/reeper/scripts/repo_fingerprint.py:37 result = subprocess.run(Reeper (Plugin)
Compatibility: Not stated.
Safely adapt external repositories into an existing codebase through evidence-first analysis, conflict interviews, and verified integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +1 more
skills/ref-downloader/references/agent-runbook.md:95 os.remove(tmp_db)Ref Downloader (Skill)
Compatibility: Not stated.
> **Stop losing an afternoon to chasing dozens of reference PDFs by hand.** > One DOI in, every reference PDF out , using your existing institutional access.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
pipeline/haiku.py:971 shutil.rmtree(d, ignore_errors=True)remember (Plugin)
Compatibility: Not stated.
Continuous memory for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
paper/experiment-grounded-paper-review/scripts/find_related_repos.py:36 proc = subprocess.run(cmd, capture_outResearch Agent (Skill)
Compatibility: Not stated.
> Language / 语言: **中文** | **[English](./README.en.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
skills/docker-ros2-development/SKILL.md:496 curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey \Robotics Agent Skills (Skill)
Compatibility: Not stated.
Agent skills that make AI coding assistants write production-grade robotics software.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
evals/catalog.py:14 commit = subprocess.check_output(Robust Skills (Skill)
Compatibility: Not stated.
Task-specific engineering skills for Bazel, backend and frontend architecture, JavaScript, CSS, PostgreSQL/Drizzle, Mermaid, Slack, and Microsoft Teams.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="ziCtxHk20" style="display:none">4/z8aULEWdNZjtvOixK3mTJKs7pXwI4n1SF5eaSWrhPV4fBjQNQeqQDDSageox Hivemind Engine (Plugin)
Compatibility: Not stated.
⚡ SageOx HiveMind 2026 , Agentic Engineering Toolkit for Autonomous Workflows
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zONcMfc20" style="display:none">XtgMWd+4bH6JrEwpOo8fljuO6pQoQ42bIzsrNylPfLRoxQBT3agrBNDhSalesforce Accelerator Patterns (Plugin)
Compatibility: Not stated.
> **Transform your Salesforce delivery velocity in 2026** , Ship production-ready skills, automations, and integrations 3x faster with pre-built, reusable components engineered for ISVs and consulting partners.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
scripts/build_release.py:184 proc = subprocess.run([sys.executable, str(validate_script)], capture_output=TrueSatori (Skill)
Compatibility: Not stated.
Clinically informed wisdom companion for the inner life , emotions, grief, meaning, burnout, relationship conflict, shadow work, and existential crossroads.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
skills/save-to-spotify/references/audio-providers.md:344 out = subprocess.check_output(Save To Spotify (Plugin)
Compatibility: Not stated.
Create polished audio episodes with TTS narration, rich timelines, cover images, and save them to Spotify via the save-to-spotify CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
commands/sofa.md:106 resp=$(curl -s -X POST \scaffolding (Plugin)
Compatibility: Not stated.
Spec-driven multi-agent orchestration plugin for Claude Code , 13 agents, 35 skills, per-phase model tiers, opt-in lifecycle hooks, and optional cross-device semantic memory.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scoville-code/scripts/check_text_size.py:102 result = subprocess.run(command, stdout=subprocess.PIPE, stderr=sScoville Code (Skill)
Compatibility: Not stated.
Passing tests are useful.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
amazon-skills/amazon-official/sealeap-amazon-listing-optimizer/scripts/sorftime_plan.py:121 completed = subproSealeap Amazon Skills (Skill)
Compatibility: Not stated.
Reusable Agent Skills for Amazon product research, listings, advertising, inventory, and operations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
README.md:10 curl -fsSL https://cli.search1api.com/install.sh | bashSearch1Api Cli (Skill)
Compatibility: Not stated.
Command-line interface for [Search1API](https://s1.dev) , web search, news, crawl, sitemap, trending, and turning a URL into an Agent Skill, from your terminal.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
assets/site/pages-data.js:2 window.SBOS_PAGES={"01-concepts/what-is-a-second-brain":{"html":"<p>One local foldSecond Brain Os (Skill)
Compatibility: Not stated.
An AI second brain that maintains itself.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
evals/authz-fail-open/fixture/server.js:47 const res = await fetch(POLICY_URL, {securitymaxxing (Plugin)
Compatibility: Not stated.
Evidence-based application security for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
.gitignore:30 credentials.jsonSf Metadata Parser (Plugin)
Compatibility: Not stated.
Parse SAP SuccessFactors OData $metadata XML into user-friendly Excel data dictionaries, Word reports, CSV exports, HTML interactive views, and instance comparison reports.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/gate_audit.py:61 r = subprocess.run(['cmd', '/c', cmd], cwd=cwd, capture_output=True,Shisan Xinuo Workflow (Skill)
Compatibility: Not stated.
> **v4.2.0**（2026-10-14 已发 GitHub Release · npm/Gitee/About 待批 · 上一全渠道发行态 v4.1.0 / 2026-10-12）· MIT · 中文为主 · [GitHub 源库](https://github.com/zxc663/shisan-xinuo-workflow)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_UNNAMED_HOST SECRETS_PATH_UNCONFIRMED
SKILL.md:111 out = subprocess.run(["gh", "api", url], capture_output=True, text=True)Should I Contribute (Skill)
Compatibility: Not stated.
Research any open-source repository end to end and answer the core question , SHOULD YOU contribute to it?
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/shuling/scripts/preflight.py:128 result = subprocess.run(Shuling Skill (Skill)
Compatibility: Not stated.
Public repository laiyangjun-dotcom/shuling-skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
skills/sigma-legal-bid-workflow/scripts/check_environment.py:180 completed = subprocess.run(Sigma Legal Bid Workflow (Skill)
Compatibility: Not stated.
**西格玛小鬼出品｜律师投标工作流**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
src/sim_plugin_abaqus/driver.py:88 result = subprocess.run(Sim Plugin Abaqus (Skill)
Compatibility: Not stated.
Use Codex, Claude Code, or another AI agent to work with [Dassault Systemes SIMULIA Abaqus](https://www.3ds.com/products/simulia/abaqus) input decks and Abaqus/CAE Python scripts through [sim-cli](https://github.com/svd-ai-lab/sim-cli).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
visualization/render-cleanup-map.mjs:509 fs.rmSync(directory, { recursive: true, force: true });Simplify Codebase (Skill)
Compatibility: Not stated.
Prove and remove accidental codebase complexity without breaking behavior.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
.agents/skills/site-harvester/assets/templates/collect.py:236 r = subprocess.run([sys.executable, str(SCRAPER_Site Harvester (Plugin)
Compatibility: Not stated.
Multi-host agent plugin (Claude Code, Codex, Antigravity, Hermes) that harvests content from login-walled sites into a local vault: hidden-API recon, OAuth login via Playwright, human-paced resumable collection, cron incremental updates
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/gen_pdf.py:505 result = subprocess.run(cmd, capture_output=True, text=True, timeout=120)Skill Blue Book (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
run_trigger_matrix.py:590 shutil.rmtree(self._config_dir(workspace), ignore_errors=True)Skill Eval Harness (Skill)
Compatibility: Not stated.
Skill Eval Harness is a Python CLI that measures the **causal lift** of an Agent Skill: it runs the same case, model, and repetition with and without the skill, validates that exact experimental identity, then reports what changed, what passed, and whether the eval leaked its own
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
data/instruction_unit_tests/task_checks.py:273 result = subprocess.run(Skill Inject (Skill)
Compatibility: Not stated.
A comprehensive benchmark for measuring prompt injection vulnerabilities in LLM agent skill files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
on-this-day-reader/scripts/save_reader_document.py:58 completed = subprocess.run(Skill On This Day Reader (Skill)
Compatibility: Not stated.
A portable local skill for turning Day One's "On This Day" memories into a thoughtful Markdown analysis and saving that analysis to [Readwise Reader](https://readwise.io/aft/).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:3 .claude/.credentials.jsonSkill Radar (Plugin)
Compatibility: Not stated.
Lean signal-driven skill triage for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
install.sh:60 for command in curl tar; doSkill Recorder (Skill)
Compatibility: Not stated.
Desktop app that records your on-screen work session and uses the GitHub Copilot SDK to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Autopilots like Scout, Microsoft Copilot Cowork, or Copilot Studio.
This grade is a hygiene screen, not proof of safety.
