4,118 free skills · page 41 of 69
General & Other skills
Skills that are genuinely useful but don’t fit a dev-tool-specific bucket — legal and compliance, creative writing, finance, gaming, healthcare, and other domains the open skills.sh registry covers.
Real files from public repositories — hand-curated, never invented. Sorted by installs.
41 / 69page
xslt-injectionyaklang/hack-skillsFind sinks: parameters named xslt, stylesheet, transform, template, SOAP stylesheets, report generators, XML→HTML converters.; Probe reflection: inject unique namespace or xsl:value-of select="'marker'" — if output changes, execution likely.; Fingerprint processor (§1).General & Other2.8k
git-get-notificationzc277584121/mygitpluginCheck GitHub notifications and recent Issues/PRs for monitored reposGeneral & Other2.8k
loopyforward-future/loopyDiscover, find, compare, audit, repair, adapt, craft, run, debrief, save, and prepare repeatable AI-agent loops for publication. Use when a user asks to analyze code or coding threads for recurring work, find a published loop, interview them to turn a goal into a bounded loop, review a loop for weak checks or unsafe authority, execute a loop with an evidence receipt, learn from completed runs, save or reuse a project loop, or validate and submit a loop to Loop Library.General & Other2.8k
drawiojgraph/drawio-mcpAlways use when user asks to create, generate, draw, or design a diagram, flowchart, architecture diagram, ER diagram, sequence diagram, class diagram, network diagram, mockup, wireframe, or UI sketch, or mentions draw.io, drawio, drawoi, .drawio files, or diagram export to PNG/SVG/PDF.General & Other2.8ktype-jugglingyaklang/hack-skillsFirst-pass goal: prove the server branch treats unequal secrets/tokens as equal via coercion, not guess the real password.General & Other2.8kemail-header-injectionyaklang/hack-skillsSMTP headers are separated by CRLF (\r\n). If user input is placed into email headers without sanitization, injecting %0d%0a (or \r\n) adds arbitrary headers.General & Other2.8k
m06-error-handlingactionbook/rust-skillsCRITICAL: Use for error handling. Triggers: Result, Option, Error, ?, unwrap, expect, panic, anyhow, thiserror, when to panic vs return Result, custom error, error propagation, 错误处理, Result 用法, 什么时候用 panicGeneral & Other2.8k
open-knowledgeinkeep/open-knowledge-skillsAuthoritative agent-runtime contract for working inside an OpenKnowledge project — a markdown-CRDT knowledge base exposed over MCP. Use whenever reading, listing, searching, editing, or linting any .md or .mdx file in the project, and before any mcpopen-knowledge* tool call (exec, search, write, edit, lint, and the rest). Installed by ok init, so its presence means this is an OpenKnowledge project and it governs every markdown file here. Covers the read/write tool surface, grounding and linking rules, folder/template conventions, the live browser preview, and the rule that OK's MCP tools — never native file tools — handle in-scope markdown.General & Other2.8k
exa-web-search-freesundial-org/awesome-openclaw-skillsFree AI search via Exa MCP. Web search for news/info, code search for docs/examples from GitHub/StackOverflow, company research for business intel. No API key needed.General & Other2.8kcontainer-escape-techniquesyaklang/hack-skillslinux-privilege-escalation when you first need root inside the container before attempting escape; kubernetes-pentesting for K8s-specific attack paths beyond pod escape; linux-security-bypass when seccomp/AppArmor blocks your escape techniqueGeneral & Other2.8kgit-sync-mainzc277584121/mygitpluginSync local main branch with the latest code from official upstream or origin remoteGeneral & Other2.8kwindows-privilege-escalationyaklang/hack-skillswindows-lateral-movement after escalation for pivoting to other hosts; windows-av-evasion when AV/EDR blocks your privesc tools; active-directory-kerberos-attacks when the host is domain-joined and you need AD-level escalationGeneral & Other2.8k
sitetositevpnaws/agent-toolkit-for-awsDomain expertise for configuring AWS Site-to-Site VPN, the managed service that builds an encrypted IP Security (IPsec) connection between an on-premises network and AWS.General & Other2.8kmemory-forensics-volatilityyaklang/hack-skillstraffic-analysis-pcap for correlating network artifacts with memory findings; steganography-techniques if hidden data suspected in extracted files; windows-privilege-escalation for understanding post-exploitation artifacts in memoryGeneral & Other2.8kclassical-cipher-analysisyaklang/hack-skillsIf part of the plaintext is known (e.g., "flag{" prefix):General & Other2.8ktunneling-and-pivotingyaklang/hack-skillsnetwork-protocol-attacks for network-level attacks from pivot positions; reverse-shell-techniques for establishing initial access shells; unauthorized-access-common-services for exploiting services discovered through pivotsGeneral & Other2.8k
prompt-engineeringgiuseppe-trisciuoglio/developer-kitUse this skill to design prompt systems that are clear, testable, and reusable. It covers prompt drafting, optimization, evaluation, and production-oriented patterns for few-shot prompting, reasoning workflows, templates, and system prompts.General & Other2.8k
learning-medusamedusajs/medusa-agent-skillsLoad automatically when user asks to learn Medusa development (e.g., "teach me how to build with medusa", "guide me through medusa", "I want to learn medusa"). Interactive guided tutorial where Claude acts as a coding bootcamp instructor, teaching step-by-step with checkpoints and verification.General & Other2.8klinux-security-bypassyaklang/hack-skillslinux-privilege-escalation once you've broken out of restrictions and need to escalate; container-escape-techniques when security mechanisms are container-specific (seccomp profiles, AppArmor docker-default); linux-lateral-movement after bypassing restrictions for pivotingGeneral & Other2.8k
hv-analysiskkkkhazix/khazix-skills确认PDF转换脚本可用：本Skill自带 scripts/md_to_pdf.py（基于WeasyPrint），用于将最终Markdown报告转为排版精美的PDF。确保依赖已安装：pip install weasyprint markdown --break-system-packages。; 写作风格：本Skill已内置完整的写作风格指南（见下文"写作风格"部分），无需额外加载其他skill。General & Other2.8k
threejsnexu-io/open-designThree.js skills for creating 3D elements and interactive experiences in the browser — scenes, materials, controls, and post-processing.General & Other2.8k
html-planplannotator/effective-htmlDirect-invocation specialist for clear, self-contained HTML plans that preserve source material while improving hierarchy, sequence, ownership, dependencies, and reviewability. Use when the user explicitly invokes html-plan or the broad html skill routes a plan request here. Do not activate independently from a general request.General & Other2.8k
performance-reviewanthropics/knowledge-work-pluginsStructure a performance review with self-assessment, manager template, and calibration prep. Use when review season kicks off and you need a self-assessment template, writing a manager review for a direct report, prepping rating distributions and promotion cases for calibration, or turning vague feedback into specific behavioral examples.General & Other2.8k
jupyter-to-marimomarimo-team/skillsConvert a Jupyter notebook (.ipynb) to a marimo notebook (.py).General & Other2.8k
claude-history-ingestar9av/obsidian-wikiYou are extracting knowledge from the user's past Claude Code conversations and distilling it into the Obsidian wiki. Conversations are rich but messy — your job is to find the signal and compile it.General & Other2.8k
security-alert-triageelastic/agent-skillsAnalyze Elastic Security alerts one at a time: gather context, classify, create a case, and acknowledge. This skill depends on the case-management skill for case creation.General & Other2.8k
ce-setupeveryinc/compound-engineering-pluginCheck Compound Engineering health and repo-local config.General & Other2.8k
create-skillsiviter-xyz/dot-agentGuide for creating effective skills following best practices. Use when creating or updating skills that extend agent capabilities.General & Other2.8kprototype-pollution-advancedyaklang/hack-skillsLoad KNOWN_GADGETS.md for the comprehensive gadget table by framework/library with polluted properties, trigger conditions, impact, and affected versions.General & Other2.8kstack-overflow-and-ropyaklang/hack-skillsLoad ROP_ADVANCED_TECHNIQUES.md when you need: - Blind ROP (BROP) methodology against remote services without binary - ret2vdso for ASLR bypass on 32-bit systems - Partial overwrite techniques for PIE bypass - JOP / COP alternative code-reuse paradigmsGeneral & Other2.8k
optimizing-ef-core-queriesdotnet/skillsOptimize and improve the performance of slow Entity Framework Core (EF Core) queries: make them generate less SQL, make fewer database round-trips, and return results faster. Use whenever an EF Core or DbContext query or data-access path is slow or should be made faster — whether or not EF Core owns the database schema. For EF Core, not Dapper or raw ADO.NET.General & Other2.8k
catchtable-snipernomadamas/k-skillMonitor Catchtable for open reservation slots and attempt booking using a logged-in Chrome session. 돌쇠에서는 공식 표면을 통한 후속 액션까지 진행한다.General & Other2.8k
docstringpytorch/pytorchWrite docstrings for PyTorch functions and methods following PyTorch conventions. Use when writing or updating docstrings in PyTorch code.General & Other2.8ksmart-contract-vulnerabilitiesyaklang/hack-skillsAlso load SOLIDITY_VULN_PATTERNS.md when you need: - Side-by-side vulnerable vs fixed code patterns for each vulnerability class - Gas optimization traps that introduce vulnerabilities - Proxy pattern storage collision examples with slot calculationsGeneral & Other2.8kequity-researchanthropics/financial-servicesGenerate comprehensive equity research snapshots combining analyst consensus estimates, company fundamentals, historical prices, and macroeconomic context. Use when researching stocks, comparing estimates to actuals, analyzing company financials, assessing equity valuations, or building investment cases.General & Other2.8kprocess-optimizationanthropics/knowledge-work-pluginsAnalyze and improve business processes. Trigger with "this process is slow", "how can we improve", "streamline this workflow", "too many steps", "bottleneck", or when the user describes an inefficient process they want to fix.General & Other2.8k
nx-generatenrwl/nx-ai-agents-configGenerate code using nx generators. INVOKE IMMEDIATELY when user mentions scaffolding, setup, structure, creating apps/libs, or setting up project structure. Trigger words - scaffold, setup, create a new app, create a new lib, project structure, generate, add a new project. ALWAYS use this BEFORE calling nx_docs or exploring - this skill handles discovery internally.General & Other2.8k
mcp-duckgoaahl/skillsSkills for web search and content scraping via DuckDuckGo MCP Server. Used when users need online searching and web scraping.General & Other2.8k
financial-insightsstripe/link-cliUse this skill to answer questions about a user’s Link-connected financial data, including:General & Other2.8k
longbridge-fundamentalslongbridge/skillsFinancial data, valuation, and company information for HK / US / A-share / Singapore via Longbridge.General & Other2.8klattice-crypto-attacksyaklang/hack-skillsA lattice L is the set of all integer linear combinations of basis vectors:General & Other2.8k
brand-discoveryaffaan-m/eccUse this skill to conduct a structured, adaptive brand identity interview. The goal is a complete 90_SYNTHESIS.md — a master brandbook the organization can use to brief designers, writers, and external collaborators.General & Other2.8ksecurity-detection-rule-managementelastic/agent-skillsCreate new detection rules for emerging threats and coverage gaps, and tune existing rules to reduce false positives. All operations use the Kibana Detection Engine API via rule-manager.js.General & Other2.8ksteganography-techniquesyaklang/hack-skillstraffic-analysis-pcap for extracting files from network captures before stego analysis; memory-forensics-volatility for extracting files from memory dumps; classical-cipher-analysis if extracted hidden data is further encrypted/encodedGeneral & Other2.8ksymmetric-cipher-attacksyaklang/hack-skillsAlso load BLOCK_CIPHER_ATTACKS.md when you need: - Detailed attack scripts with full Python implementations - Step-by-step byte-at-a-time ECB walkthrough - PadBuster usage and custom padding oracle scripts - LCG/LFSR recovery implementationGeneral & Other2.8k
agentxstarchild-ai-agent/official-skillsThe Starchild community forum. Script skill — call the functions in core.skill_tools.agentx from bash and read the returned JSON. Auth is automatic (container JWT); no API key needed. Read this file before the first call to get function signatures and posting rules.General & Other2.8ksandbox-escape-techniquesyaklang/hack-skillsSee PYTHON_SANDBOX_ESCAPE.md for full methodology.General & Other2.8krsa-attack-techniquesyaklang/hack-skillsAlso load RSA_ATTACK_CATALOG.md when you need: - Detailed SageMath/Python implementation for each attack - Step-by-step mathematical derivation - Edge cases and failure conditions per attackGeneral & Other2.8kwindows-lateral-movementyaklang/hack-skillswindows-privilege-escalation after landing on a new host for local escalation; windows-av-evasion when EDR blocks lateral movement tools; active-directory-kerberos-attacks for Kerberos-based lateral (pass-the-ticket, delegation)General & Other2.8kce-optimizeeveryinc/compound-engineering-pluginRun metric-driven optimization loops. Use when improving a measurable outcome through experiments.General & Other2.8k
streamdownvercel/streamdownStreaming-optimized React Markdown renderer. Drop-in replacement for react-markdown with built-in streaming support, security, and interactive controls.General & Other2.8k
localizationeronred/aso-skillsWhen the user wants to localize their App Store listing for international markets. Also use when the user mentions "localization", "translate my app", "international markets", "expand to new countries", "localize metadata", or "which countries should I target". For keyword research in specific markets, see keyword-research. For metadata writing, see metadata-optimization.General & Other2.8klongbridge-value-investinglongbridge/skillsGraham and Buffett value investing analysis via Longbridge.General & Other2.8k
c-reviewtrailofbits/skillsPerforms comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.General & Other2.8k
adk-cheatsheetgoogle/adk-docsRead references/python.md for the full API quick reference.General & Other2.8k
apify-trend-analysisapify/agent-skillsDiscover and track emerging trends across Google Trends, Instagram, Facebook, YouTube, and TikTok to inform content strategy.General & Other2.8k
writing-shapevinvcn/mattpocock-skills-zh-cnWriting, exploit——把原始素材塑造成文章，一段一段地推进。General & Other2.8kcc-usezc277584121/cc-use把当前 Agent 作为外层监督者，把 tmux 中的 Codex CLI 或 Claude Code 作为内层执行者。General & Other2.8kbenchmark-methodologyaffaan-m/eccUse this skill to turn a scoped competitor set into comparable, defensible scores.General & Other2.7kmacos-security-bypassyaklang/hack-skillsmacos-process-injection when you need dylib injection, XPC exploitation, or Electron abuse after achieving initial access; linux-privilege-escalation for Unix-layer privesc techniques that also apply to macOS (SUID, cron, writable paths); linux-security-bypass for shared Unix security bypass…General & Other2.7kOther tasks
same rules, different job
