40 KiB
External AI agent skills — co-pilot
Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.
Tiers: core = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; adjacent =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.
Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
pipeline/p5_enrich_ai_skills.py on 2026-07-14.
Source: anthropics/skills
- Repository: https://github.com/anthropics/skills (commit
f6656c1, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | source |
pdf |
adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | source |
Source: a5c-ai/babysitter
- Repository: https://github.com/a5c-ai/babysitter (commit
44a5d58b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
translation-management |
core | Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. | source |
SSA/IR Design |
core | Expert skill for designing intermediate representations and implementing SSA construction | source |
cuda-debugging |
adjacent | Expert skill for GPU debugging using CUDA-GDB and NVIDIA Compute Sanitizer. Detect memory errors, race conditions, uninitialized memory access, validate atomic operations, analyze kernel synchronization issues, and generate debugging … | source |
gas-optimization |
adjacent | Advanced gas optimization techniques for EVM smart contracts. Covers storage packing, memory vs calldata optimization, assembly/Yul, efficient data structures, batch operations, and benchmark-driven optimization strategies. | source |
embedded-docs |
adjacent | Embedded firmware documentation generation and maintenance using Doxygen and related tools. Expert skill for API documentation, hardware interface documentation, memory maps, and integration with documentation systems. | source |
nsight-profiler |
adjacent | Expert skill for NVIDIA Nsight Systems and Nsight Compute profiling tools. Configure profiling sessions, analyze kernel reports, interpret occupancy metrics, roofline model data, memory bandwidth bottlenecks, and warp execution efficiency. | source |
context-engineering |
adjacent | Context window monitoring and budget management. Keeps orchestrator at 15-30% context usage while subagents get full 200k tokens. Provides warnings at thresholds, context-aware summarization triggers, and wave-level budget planning. | source |
Source: aaron-he-zhu/aaron-marketing-skills
- Repository: https://github.com/aaron-he-zhu/aaron-marketing-skills (commit
b7b0b9f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
memory-management |
adjacent | Use when the user asks to "remember project context", review saved findings, initialize runtime memory, archive stale work, reconcile notes, or erase a subject; manages authorized HOT/WARM/COLD working memory across all disciplines while … | source |
Source: affaan-m/everything-claude-code
- Repository: https://github.com/affaan-m/everything-claude-code (commit
ed38744, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
agentic-os |
core | Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. | source |
autonomous-agent-harness |
adjacent | Transform Claude Code into a fully autonomous agent system with persistent memory, scheduled operations, computer use, and task queuing. Replaces standalone agent frameworks (Hermes, AutoGPT) by leveraging Claude Code's native crons, … | source |
google-workspace-ops |
adjacent | Operate across Google Drive, Docs, Sheets, and Slides as one workflow surface for plans, trackers, decks, and shared documents. Use when the user needs to find, summarize, edit, migrate, or clean up Google Workspace assets without dropping … | source |
Source: alirezarezvani/claude-skills
- Repository: https://github.com/alirezarezvani/claude-skills (commit
0241f43, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
compliance-readiness |
adjacent | /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … | source |
ceo-advisor |
adjacent | Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … | source |
Source: basicmachines-co/basic-memory
- Repository: https://github.com/basicmachines-co/basic-memory (commit
53da71c, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
memory-lifecycle |
core | Manage entity status transitions in Basic Memory: archive completed work, move notes between status folders, update frontmatter, and handle edge cases. Use when marking items complete, archiving old entities, or managing any folder-based … | source |
Source: brycewang-stanford/Auto-Empirical-Research-Skills
- Repository: https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills (commit
85bf545, retrieved 2026-07-14) - License: CC-BY-4.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
research-lit |
core | Search and analyze research papers, find related work, summarize key ideas. Use when user says "find papers", "related work", "literature review", "what does this paper say", or needs to understand academic papers. | source |
Source: davepoon/buildwithclaude
- Repository: https://github.com/davepoon/buildwithclaude (commit
3c94e0c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
googlesheets-automation |
adjacent | Automate Google Sheets operations (read, write, format, filter, manage spreadsheets) via Rube MCP (Composio). Read/write data, manage tabs, apply formatting, and search rows programmatically. | source |
ops-voice |
adjacent | Voice operations — make phone calls (Bland AI), text-to-speech (ElevenLabs), transcribe audio (Whisper/Groq). Replace OpenClaw voice capabilities. | source |
google-calendar-automation |
adjacent | Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. | source |
Source: davila7/claude-code-templates
- Repository: https://github.com/davila7/claude-code-templates (commit
fa79251, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
gh-fix-ci |
core | Inspect GitHub PR checks with gh, pull failing GitHub Actions logs, summarize failure context, then create a fix plan and implement after user approval. Use when a user asks to debug or fix failing PR CI/CD checks on GitHub Actions and … | source |
deadline-prep |
core | Generate a structured demo outline from your session's change log and git history. Reads .claude/critical_log_changes.csv and git log to produce presentation-ready talking points for end-of-day demos, standups, or delivery deadlines. | source |
memory-search |
core | Search conversation history and semantic memory to recall previous discussions, decisions, and context. Use when the user asks to "search memory", "what did we discuss", "remember when", "find previous conversation", "check history", or … | source |
it-operations |
adjacent | Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … | source |
vaex |
adjacent | Use this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and … | source |
Excel Analysis |
adjacent | Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. | source |
ai-agents-architect |
adjacent | Expert in designing and building autonomous AI agents. Masters tool use, memory systems, planning strategies, and multi-agent orchestration. Use when: build agent, AI agent, autonomous agent, tool use, function calling. | source |
treatment-plans |
adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | source |
Source: foryourhealth111-pixel/Vibe-Skills
- Repository: https://github.com/foryourhealth111-pixel/Vibe-Skills (commit
34429a8, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vaex |
adjacent | Use this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and … | source |
sentry |
adjacent | Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require SENTRY_AUTH_TOKEN. |
source |
gh-fix-ci |
adjacent | Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use gh to inspect checks and logs, summarize failure context, draft a fix plan, and implement only after explicit approval. Treat external … |
source |
treatment-plans |
adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | source |
Source: hypnguyen1209/offensive-claude
- Repository: https://github.com/hypnguyen1209/offensive-claude (commit
4d62be7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vulnerability-analysis |
adjacent | Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks | source |
Source: indranilbanerjee/digital-marketing-pro
- Repository: https://github.com/indranilbanerjee/digital-marketing-pro (commit
a3d119c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
media-plan |
core | Create a paid media plan. Use when: building media buy schedules, cross-channel budget allocation, or creative rotation calendars. | source |
Source: infrasity-labs/dev-gtm-claude-skills
- Repository: https://github.com/infrasity-labs/dev-gtm-claude-skills (commit
02cfefb, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
millers-law |
adjacent | Apply Miller's Law — chunk information into groups of ~4 to work within working memory limits. | source |
Source: jabrena/plinth
- Repository: https://github.com/jabrena/plinth (commit
065eae8, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
145-java-refactoring-high-performance |
adjacent | Use when you need to refactor Java code for high performance — including memory/allocation reduction, CPU hot-path optimization, and syntax/API/control-flow improvements. This should trigger for requests such as Review Java code for high … | source |
Source: jeremylongshore/claude-code-plugins-plus-skills
- Repository: https://github.com/jeremylongshore/claude-code-plugins-plus-skills (commit
e112938a, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
hyperflow-status |
core | Hyperflow project status. Use to see current hyperflow state — "what is hyperflow doing", "show task progress", "where are we". Read-only — reports in-flight tasks, memory count, and progress. Never modifies state or runs work. | source |
memorystore-config |
core | Configure memorystore config operations. Auto-activating skill for GCP Skills. Triggers on: memorystore config, memorystore config Part of the GCP Skills skill category. Use when configuring systems or services. Trigger with phrases like … | source |
excel-macro-creator |
core | Create excel macro creator operations. Auto-activating skill for Business Automation. Triggers on: excel macro creator, excel macro creator Part of the Business Automation skill category. Use when working with excel macro creator … | source |
presentation-slide-outliner |
core | Manage presentation slide outliner operations. Auto-activating skill for Visual Content. Triggers on: presentation slide outliner, presentation slide outliner Part of the Visual Content skill category. Use when working with presentation … | source |
calendar-event-creator |
core | Create calendar event creator operations. Auto-activating skill for Business Automation. Triggers on: calendar event creator, calendar event creator Part of the Business Automation skill category. Use when working with calendar event … | source |
excel-formula-generator |
core | Generate excel formula generator operations. Auto-activating skill for Business Automation. Triggers on: excel formula generator, excel formula generator Part of the Business Automation skill category. Use when working with excel formula … | source |
memory-profiler-setup |
core | Configure memory profiler setup operations. Auto-activating skill for Performance Testing. Triggers on: memory profiler setup, memory profiler setup Part of the Performance Testing skill category. Use when working with memory profiler … | source |
ink-calendar |
core | Build a content calendar — editorial plan, publishing cadence, topic assignment, and distribution workflow. Use when asked to "build a content calendar", "plan our content for the quarter", "how often should we publish", or "create an … | source |
twinmind-data-handling |
adjacent | Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … | source |
notion-load-scale |
adjacent | High-volume Notion operations: parallel requests within 3 req/sec, worker queues, database pagination at scale, incremental sync for large workspaces, and memory management for bulk operations. Trigger with phrases like "notion scale", … | source |
status |
adjacent | Use when the user wants a one-screen view of current hyperflow project state — version, profile freshness, memory count, and live progress on every in-flight task. Read-only; never modifies state, never dispatches workers. Trigger with … | source |
twinmind-reference-architecture |
adjacent | Production architecture for meeting AI systems using TwinMind: transcription pipeline, memory vault, action item workflow, and calendar integration. Use when implementing reference architecture, or managing TwinMind meeting AI operations. … | source |
Source: K-Dense-AI/claude-scientific-skills
- Repository: https://github.com/K-Dense-AI/claude-scientific-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vaex |
adjacent | Use this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and … | source |
treatment-plans |
adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | source |
Source: K-Dense-AI/scientific-agent-skills
- Repository: https://github.com/K-Dense-AI/scientific-agent-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vaex |
adjacent | Use this skill for processing and analyzing large tabular datasets (billions of rows) that exceed available RAM. Vaex excels at out-of-core DataFrame operations, lazy evaluation, fast aggregations, efficient visualization of big data, and … | source |
treatment-plans |
adjacent | Generate concise (3-4 page), focused medical treatment plans in LaTeX/PDF format for all clinical specialties. Supports general medical treatment, rehabilitation therapy, mental health care, chronic disease management, perioperative care, … | source |
Source: Leonxlnx/taste-skill
- Repository: https://github.com/Leonxlnx/taste-skill (commit
b177427, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
brandkit |
adjacent | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | source |
Source: mohitagw15856/pm-claude-skills
- Repository: https://github.com/mohitagw15856/pm-claude-skills (commit
876fa30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
punch-list-builder |
core | Turn walkthrough notes, photos, or voice-memo transcripts into a proper construction punch list with location, trade, and spec reference per item. Use when asked to build a punch list, clean up walkthrough notes, organise a deficiency … | source |
Source: mukul975/Anthropic-Cybersecurity-Skills
- Repository: https://github.com/mukul975/Anthropic-Cybersecurity-Skills (commit
673da1f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
analyzing-macro-malware-in-office-documents |
core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | source |
detecting-t1055-process-injection-with-sysmon |
adjacent | Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns. | source |
implementing-memory-protection-with-dep-aslr |
adjacent | Implements memory protection mechanisms including DEP (Data Execution Prevention), ASLR (Address Space Layout Randomization), CFG (Control Flow Guard), and other exploit mitigations to prevent memory corruption attacks. Use when hardening … | source |
performing-fuzzing-with-aflplusplus |
adjacent | Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, … | source |
Source: nexu-io/open-design
- Repository: https://github.com/nexu-io/open-design (commit
4b66023, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
brandkit |
adjacent | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | source |
Source: nicobailon/visual-explainer
- Repository: https://github.com/nicobailon/visual-explainer (commit
528b71f, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
visual-explainer |
adjacent | Generate self-contained HTML visual explanations for systems, code changes, plans, data, and technical concepts. Use for diagrams, architecture overviews, diff or plan reviews, project recaps, comparison tables, slide decks, and other … | source |
Source: nWave-ai/nWave
- Repository: https://github.com/nWave-ai/nWave (commit
1d0f13c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
nw-production-readiness |
adjacent | Monitoring, observability, operational procedures, CI/CD lessons learned, and quality gate definitions. Load when assessing production readiness or validating operational excellence. | source |
Source: oliver-kriska/claude-elixir-phoenix
- Repository: https://github.com/oliver-kriska/claude-elixir-phoenix (commit
d6b21b5, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
catchup |
adjacent | Summarize and review what changed while you were away. Use after a weekend, vacation, or flight to check missed PRs, git commits, Linear tickets, and meetings — one prioritized brief, not a firehose. | source |
Source: open-gitagent/opengap
- Repository: https://github.com/open-gitagent/opengap (commit
d7a8e2e, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
document-review |
adjacent | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | source |
Source: OthmanAdi/langsmith-fetch-skill
- Repository: https://github.com/OthmanAdi/langsmith-fetch-skill (commit
1a995f1, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
langsmith-fetch |
adjacent | Debug LangChain and LangGraph agents by fetching execution traces from LangSmith Studio. Use when debugging agent behavior, investigating errors, analyzing tool calls, checking memory operations, or examining agent performance. … | source |
Source: ruvnet/claude-code-flow
- Repository: https://github.com/ruvnet/claude-code-flow (commit
73914bd, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
AgentDB Memory Patterns |
core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | source |
Hooks Automation |
adjacent | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | source |
AgentDB Performance Optimization |
adjacent | Optimize AgentDB performance with quantization (4-32x memory reduction), HNSW indexing (150x faster search), caching, and batch operations. Use when optimizing memory usage, improving search speed, or scaling to millions of vectors. | source |
V3 Memory Unification |
adjacent | Unify 6+ memory systems into AgentDB with HNSW indexing for 150x-12,500x search improvements. Implements ADR-006 (Unified Memory Service) and ADR-009 (Hybrid Memory Backend). | source |
Source: ruvnet/ruflo
- Repository: https://github.com/ruvnet/ruflo (commit
73914bd, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
AgentDB Memory Patterns |
core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | source |
Hooks Automation |
adjacent | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | source |
AgentDB Performance Optimization |
adjacent | Optimize AgentDB performance with quantization (4-32x memory reduction), HNSW indexing (150x faster search), caching, and batch operations. Use when optimizing memory usage, improving search speed, or scaling to millions of vectors. | source |
V3 Memory Unification |
adjacent | Unify 6+ memory systems into AgentDB with HNSW indexing for 150x-12,500x search improvements. Implements ADR-006 (Unified Memory Service) and ADR-009 (Hybrid Memory Backend). | source |
Source: samber/cc-skills-golang
- Repository: https://github.com/samber/cc-skills-golang (commit
4881c01, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
golang-security |
core | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | source |
Source: ThinkInAIXYZ/deepchat
- Repository: https://github.com/ThinkInAIXYZ/deepchat (commit
f275c92, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
feishu-tools |
adjacent | Use the Feishu/Lark plugin MCP tools for Feishu documents, spreadsheets, knowledge content, and other matching workspace operations. | source |
Source: trailofbits/skills
- Repository: https://github.com/trailofbits/skills (commit
cfe5d7b, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
c-review |
core | Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or … | source |
rust-review |
core | Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or … | source |
Source: vibeeval/vibecosystem
- Repository: https://github.com/vibeeval/vibecosystem (commit
cea9462, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
minimax-xlsx |
adjacent | Open, create, read, analyze, edit, or validate Excel/spreadsheet files (.xlsx, .xlsm, .csv, .tsv). Use when the user asks to create, build, modify, analyze, read, validate, or format any Excel spreadsheet, financial model, pivot table, or … | source |
Source: wanshuiyin/Anti-Autoresearch
- Repository: https://github.com/wanshuiyin/Anti-Autoresearch (commit
c7f7f0d, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
novelty-duplication-advisory |
adjacent | MEMO-ONLY prior-work overlap advisory: surfaces the two ADVISORY taxonomy signals neither a tool nor a model can decide from the paper alone — ADV-TRIVIAL-COMBINATION (standard A+B+C / 缝合 stapling) and ADV-DUPLICATE-PUBLICATION (repackaged … | source |
Source: wanshuiyin/Auto-claude-code-research-in-sleep
- Repository: https://github.com/wanshuiyin/Auto-claude-code-research-in-sleep (commit
eb5c9d7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
research-lit |
core | Search and analyze research papers, find related work, summarize key ideas. Use when user says "find papers", "related work", "literature review", "what does this paper say", or needs to understand academic papers. | source |
Source: zxkane/aws-skills
- Repository: https://github.com/zxkane/aws-skills (commit
68530c6, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
aws-cost-operations |
adjacent | AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when … | source |