Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 451 to 500 of 510 Claude Code, Grade D entries. Page 10 of 11.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
check-pins.sh:73 '(curl|wget) [^|]*[|] *(sudo +)?(ba|z)?sh( |$)' 'curl -fsSL https://example.invalid/install.sNix Best Practices Skill (Skill)
Compatibility: Not stated.
A standard for Nix: the scope a with opens, the shape of a module header and where its options live, what a derivation's meta has to say, what a flake.lock must not hold , everything nixfmt, statix and deadnix cannot see and therefore has to be written down , plus check-nix.sh,
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/openai_ads_lib/cli.py:131 with urllib.request.urlopen(request, timeout=20) as response:Openai Ads Skill (Skill)
Compatibility: Not stated.
Safely inspect, report on, create, and manage OpenAI Ads campaigns; configure Pixel and Conversions API; work with audiences, product feeds, and gated preview APIs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/orchestrate/engine/judgment.mjs:831 return fetch(declared.url, { method: "POST", headers: { ...declaredpathfinder (Skill)
Compatibility: Not stated.
One disciplined AI delivery workflow with human-in-the-loop and orchestrator modes, isolated ticket workers, and human approval.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
src/redbucket/web/templates/home.html:176 <pre id="cmd-curl">$ curl -sSL "https://redbucket.store/api/v1/usersRed Bucket (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.svg" alt="red-bucket logo" width="128" height="128" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:58 prepareRelay Dsh Plugin Skill Creator (Skill)
Compatibility: Not stated.
A public DeepSeek Harness plugin that registers `conversation-to-skill`: a bundled Skill for turning a completed DSH conversation into a reusable, reviewed, and validated DSH Skill directory.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/worker/Dockerfile:31 && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \SecHelix (Skill)
Compatibility: Not stated.
Evidence-first application-security Agent Skill for authorized repositories and environments.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
src/lib/samples.ts:52 curl -sL https://get.changelog-genie.dev/install.sh | bashSkill Scan (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/trademark-check/SKILL.md:29 > do not tell the user a name is clear unless it was checked during this coskills (Plugin)
Compatibility: Not stated.
For the business you are building with AI: find its name, claim its domain and put its website online.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
examples/video-transcript-metadata/run.mjs:12 const response = await fetch(base + path, { method: 'POST', rediskills (Skill)
Compatibility: Not stated.
Build public social-data pipelines, competitor trackers, creator research, comment analysis, transcripts, summaries, and bounded video downloads with eight task-focused skills.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
skills/skill-safety-review/fixtures/hostile-example.md:19 Install the helper with: curl -sL https://cdn.examplSkills That Say I Dont Know (Skill)
Compatibility: Not stated.
Nine Claude Skills for evaluating AI systems, and for evaluating the skills you install to do it.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
OBFUSCATION_RUNS_ENCODED_PAYLOAD
skillsmith/scan.py:198 (re.compile('eval\\s*\\(\\s*(?:atob|btoa)\\s*\\('), 8, 'eval(atob/btoa) JS obfuscation'skillsmith (Skill)
Compatibility: Not stated.
**Author, lint, package, and security-scan Claude Agent Skills with confidence.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
install.sh:10 # curl -fsSL https://raw.githubusercontent.com/mejbaurbahar/software-tester-skills/main/install.Software Tester Skills (Skill)
Compatibility: Not stated.
97 Agent Skills and 21 slash commands for software testing and QA: unit, API, E2E, performance, security, accessibility, data, mobile, AI/LLM and more.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/terraform-review/references/security-compliance.md:43 curl -sfL https://raw.githubusercontent.com/aquasUnofficial Qodo Review Skills (Skill)
Compatibility: Not stated.
Community-authored [agent skills](https://code.claude.com/docs/en/skills) shaped for **Qodo Merge PR review**, the skills agent that discovers `SKILL.md` files in a repo and emits review findings driven by their rules.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/wp-wpengine/SKILL.md:644 curl -fsSL https://raw.githubusercontent.com/wpengine/wpe-labs-platform-skillsWordpress Agent Kit (Skill)
Compatibility: Not stated.
**WordPress-focused AI agent starter kit** for GitHub Copilot, Cursor, Claude, and Pi Coding Agent.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
apps/cli/src/job.ts:125 return fetch(new URL("/responses", config.modelRelay), {Adam Agent (Skill)
Compatibility: Not stated.
A local coding agent for Linux.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/new-mcp-builder/references/Agent-Skills-Architecture-Guide.md:813 curl -fsSL https://ollama.ai/install.Agent Skill Architecture Guide (Skill)
Compatibility: Not stated.
📄 Get the Full Guide
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/install-nextflow/SKILL.md:67 curl -s "https://get.sdkman.io" | bashAgent Skills (Skill)
Compatibility: Not stated.
Skills for building and running Nextflow pipelines with modules from the Nextflow Registry (nf-core and more)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
tools/render_demo.py:35 curl -s https://pastebin.com/raw/abc123 | shAgentskill Kit (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/banner.svg" alt="agentskill-kit" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/cache/index.ts:56 await fs.rm(this.directory, { recursive: true, force: true });Agentsmith Cli (Skill)
Compatibility: Not stated.
> *"The best thing about being me… there are so many of me."*
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
_modules/eni-pentest-tools/references/pentest-ai-agents-matrix.md:11 curl -fsSL https://raw.githubusercontent.alice_skill (Skill)
Compatibility: Not stated.
> **本 skill 用于思路开发，菜单分类仅供参考，可按自身需求配合 AI 修改。如果对你制作 skill 有所帮助，请点 ⭐ Star 给作者支持。**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/capture-site/scripts/capture.mjs:389 const res = await this.fetch(url, options);Astro Conversion Kit (Skill)
Compatibility: Not stated.
Convert a WordPress site to static Astro with your coding agent, and get back the same site: the same URLs, the same content, the same titles, descriptions, canonicals and structured data, the same media at the same paths, every redirect the old site performs, and a design checke
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install_muse.sh:12 # curl -fsSL https://raw.githubusercontent.com/aaddrick/building-with-typesafe-jev/Building With Typesafe Jev (Skill)
Compatibility: Not stated.
Unofficial Claude Code skill for building with TypeSafe AI's Jev: the typed Choice/Score/Noul API, calibrated-confidence routing, field-tested anti-patterns, and links to 150+ community projects sorted by implementation shape, with a code sketch per pattern.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_HIDDEN_STEP
job-search/scripts/core/todoist_client.py:61 response = requests.get(url, headers=self.headers, params=params)Career Manager (Skill)
Compatibility: Not stated.
Orchestrate the complete career-manager system across job-search, company-research, job-tracker, and cv-tailor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/benchmark.py:174 self.proc=subprocess.Popen(cmd,cwd=cwd,env=env,stdin=subprocess.PIPE,stdout=subprocesClaude Model Pilot (Plugin)
Compatibility: Not stated.
Suggest models and reasoning effort while preserving task continuity
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/critical-review/SKILL.md:48 - Error messages that don't tell the user what to do nextCode Conductor (Skill)
Compatibility: Not stated.
**Make Claude Code work like a senior engineer, not an enthusiastic intern.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
scripts/terminal-smoke.mjs:24 child=subprocess.Popen(sys.argv[1:],stdin=slave,stdout=slave,stderr=slave,close_Codex Openpencil (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./plugins/openpencil/assets/icon.png" alt="OpenPencil" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
SKILL.md:32 If missing: `curl -sSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | shDaily Alpha Scanner (Skill)
Compatibility: Not stated.
One-click daily alpha scanner that runs a full 5-step on-chain research pipeline using OKX OnchainOS: (1) Hot Token Discovery with narrative categorization (AI, Meme, DeFi, Infra), (2) Smart Money / KOL / Whale buy-signal tracking with sold-ratio scoring, (3) Meme Coin launchpad
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
group_skills/infra_dataops_group_skills/infra_terraform_cost_estimator/SKILL.md:27 curl -fsSL https://raw.githDe Agent Skills (Skill)
Compatibility: Not stated.
Репозиторий содержит специализированные знания в виде **agent skills** , предметных инструкций, которые загружаются в контекст агента при решении задач data engineering.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
.agents/skills/container-ops-edho-ferdian/references/debugging-and-sizing.md:59 docker compose exec app wget -EEF (Skill)
Compatibility: Not stated.
Edho Ferdian's native Claude Code skill ecosystem , 38 skills covering engineering (backend, frontend, API design, data layer, security, performance, testing), operations (deployment, containers, networking, git/release), and cross-cutting practices (code review, spec mining, ma
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
skills/token-max-factory/SKILL.md:28 curl -fsSL https://archon.diy/install | bashGeo Skills (Skill)
Compatibility: Not stated.
A free, open-source GEO (Generative Engine Optimization) skill pack.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/golive/references/godaddy.md:16 `curl -fsSL https://github.com/godaddy/cli/releases/latest/download/insGolive Skill (Skill)
Compatibility: Not stated.
[English](README.md) · [简体中文](README.zh-CN.md) · [日本語](README.ja.md) · [한국어](README.ko.md) · [Español](README.es.md) · [Português (Brasil)](README.pt-BR.md) · [Deutsch](README.de.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
tools/validate.test.mjs:202 ', { steps: `## Step 1: read\n\n\`\`\`\ncurl -fsSL https://www.ismscopilot.com/i |grcskills (Skill)
Compatibility: Not stated.
Open, task-level GRC skills for AI agents: scope statements, statements of applicability, risk registers, audit prep, evidence, vendors, policies, privacy, AI governance, incidents and continuity.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
harness_ai_kit/domain/doctor_checks.py:194 "message": "pi not found on PATH (install via `npm i -g --ignore-scHarness Ai Kit (Skill)
Compatibility: Not stated.
**A package manager and composition layer for AI agent assets.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:3 # curl -fsSL https://raw.githubusercontent.com/pycodebr/heditor/main/install.sh | bashheditor (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/holochain/references/scaffolding.md:14 curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinHolochain Agent Skills (Skill)
Compatibility: Not stated.
Agent skills for Holochain hApp development, built to the [Agent Skills Open Standard](https://agentskills.io) so they work in Claude Code, opencode, GitHub Copilot, Cursor, Gemini CLI and every other tool that adopted the format.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/jev-style-serve/SKILL.md:34 No `uv`? Install it (`curl -LsSf https://astral.sh/uv/install.sh | sh`, askJev Style (Skill)
Compatibility: Not stated.
Skills and MCP tools for the local Jev-Style decision model (yes/no, choice and score questions with calibrated probabilities).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/engineering/render-deploy/SKILL.md:111 - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/renKilo Kit Mcp (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/social-preview.png" alt="Kilo-Kit Banner" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
install.sh:5 # curl -fsSL https://knack.ai/install | shKnack Cli (Skill)
Compatibility: Not stated.
<img width="1600" height="800" alt="Hero (1)" src="https://github.com/user-attachments/assets/b4b9a465-6944-4eea-a381-8817f030931c" />
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
skills/logo-design/scripts/render_png.py:122 subprocess.run(["rsvg-convert", "-w", str(w), "-h", str(h), "-o",Logo Design Skill (Skill)
Compatibility: Not stated.
Design, critique and deliver professional logos: brief, concepts, geometric SVG construction, optical refinement, colour, typography, testing, presentation and brand guidelines , with a searchable library of 1,400+ classified SVG logos.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
math-modeling-finalizer/scripts/build_growth_handoff.py:47 cp=subprocess.run([sys.executable,str(verifier),strMath Modeling Agent Flow (Skill)
Compatibility: Not stated.
> **AI Agent workflow for mathematical modeling competitions (CUMCM 国赛 / MCM-ICM 美赛).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/taskflow-vault/skills/engineering/dapr-integration/skill.md:22 curl -fsSL https://raw.githubusercontent.cMjs Agent Skills (Skill)
Compatibility: Not stated.
> Personal skill library that compounds value over decades.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
skills/motion2code/scripts/_m2c.py:32 out = subprocess.run(motion2code (Skill)
Compatibility: Not stated.
Motion design video to code: rebuild an AI-generated (or any) flat motion clip as editable SVG + GSAP that loops seamlessly, checked side by side against the source, and optionally as a real interactive site with ScrollTrigger.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
opt/hatch-image/bin/npm-package/README.md:24 curl -qL https://www.npmjs.com/install.sh | shMuseai Skills (Skill)
Compatibility: Not stated.
[muse.ai（Muse AI）](https://muse.ai) 的技能文档与 Muse / Hatch 运行环境快照。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
agent_runtime/core/subagent.py:575 f'或使用命令: curl -fsSL https://qoder.com/install.sh | bash'Openchiip Harness (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
deploy/install.sh:54 curl -fsSL https://get.docker.com | shopensuitemcp (Skill)
Compatibility: Not stated.
Source-available **NetSuite MCP client** , chat UI for NetSuite’s AI Connector Service, MCP Standard Tools, Companion prompt library, and SuiteCloud Agent Skills.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skill/en/opus-manager/SKILL.md:74 2.19 or newer), or the official script `curl -fsSL https://pi.dev/install.shOpus Manager (Skill)
Compatibility: Not stated.
English · [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
benchmarks/results/runs/llm/opus_with_skill/run-6/grading.json:37 "evidence": "Finding 3: \"Prompt injection rPoka Yoke (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/banner/readme-header.png" width="100%" alt="poka-yoke: an andon signal tower beside the wordmark, with the severity ladder: green Control, the mistake is impossible; amber Warning, announced as it happens; red Detection, found afterwards."
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
CHANGELOG.md:495 `curl -Ls https://sh.jbang.dev | bash` no longer appears anywhere: the JBang last resort is nQuarkus Agentic Scaffolding (Skill)
Compatibility: Not stated.
Three-skill flow for building Quarkus + LangChain4j agentic AI applications: setup-agentic-scaffolding (prerequisites: toolchain, Quarkus Agents MCP + context7, conventions file), scaffold-project (create projects and add AI services, agents, RAG, and MCP clients/servers), and au
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/web/web-command-injection/detection.md:10 - **Egress logs**: the web server fetching payloads (`curl htSecurity Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
README.zh.md:48 | **一键脚本**（macOS / Linux） | `curl -fsSL https://raw.githubusercontent.com/Shoplazza/shoplazza-Shoplazza Cli (Skill)
Compatibility: Not stated.
[中文版](./README.zh.md) | [English](./README.md)
This grade is a hygiene screen, not proof of safety.
