40 KiB
External AI agent skills — customs-officer
Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.
Tiers: core = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; adjacent =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.
Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
pipeline/p5_enrich_ai_skills.py on 2026-07-14.
Source: anthropics/skills
- Repository: https://github.com/anthropics/skills (commit
f6656c1, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | source |
pdf |
adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | source |
Source: a5c-ai/babysitter
- Repository: https://github.com/a5c-ai/babysitter (commit
44a5d58b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
anti-drift |
adjacent | Hierarchical coordination and drift detection with frequent checkpoints, shared memory coherence validation, role specialization enforcement, and short task cycles. | source |
session-memory |
adjacent | Mandatory memory persistence system across session resets using three markdown surfaces in .claude/cc10x/. Iron law - every workflow must load at start and update at end. | source |
unified-memory |
adjacent | Expert skill for CUDA Unified Memory and memory prefetching optimization. Configure managed memory allocations, implement memory prefetch strategies, handle page fault analysis, configure memory hints and advise, profile unified memory … | source |
gas-optimization |
adjacent | Advanced gas optimization techniques for EVM smart contracts. Covers storage packing, memory vs calldata optimization, assembly/Yul, efficient data structures, batch operations, and benchmark-driven optimization strategies. | source |
memlab-analysis |
adjacent | Expert skill for JavaScript memory leak detection using Facebook MemLab. Configure MemLab scenarios, execute memory leak detection runs, analyze heap snapshots, identify detached DOM elements, find event listener leaks, and integrate with … | source |
memory-analysis |
adjacent | Embedded memory analysis, optimization, and leak detection | source |
pandas-dataframe-analyzer |
adjacent | Automated DataFrame analysis skill for statistical summaries, missing value detection, data type inference, and memory optimization recommendations. | source |
Source: affaan-m/everything-claude-code
- Repository: https://github.com/affaan-m/everything-claude-code (commit
ed38744, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
ck |
adjacent | Persistent per-project memory for Claude Code. Auto-loads project context on session start, tracks sessions with git activity, and writes to native memory. Commands run deterministic Node.js scripts — behavior is consistent across model … | source |
Source: AgriciDaniel/claude-blog
- Repository: https://github.com/AgriciDaniel/claude-blog (commit
49842ea, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
blog-calendar |
adjacent | Generate editorial calendars for blogs with topic clusters, publishing schedules, content decay detection, freshness update plans, seasonal opportunities, content mix formula, template integration, and distribution scheduling. Plans … | source |
Source: alirezarezvani/claude-skills
- Repository: https://github.com/alirezarezvani/claude-skills (commit
0241f43, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
compliance-readiness |
core | /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … | source |
promote |
adjacent | Graduate a proven pattern from auto-memory (MEMORY.md) to CLAUDE.md or .claude/rules/ for permanent enforcement. Use when the user runs /si:promote or asks to make a learned behavior permanent. | source |
cross-eval |
adjacent | /cs:cross-eval — Multi-model consensus on a board memo or strategy brief. Claude + Codex + Gemini cross-review with graceful degradation. Use when a high-stakes memo needs an independent sanity check before the boardroom — e.g. a … | source |
Source: anbeime/skill
- Repository: https://github.com/anbeime/skill (commit
ddad607, retrieved 2026-07-14) - License: no explicit license — referenced by link only
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
law-to-markdown |
adjacent | 将法条/规范文件(.txt/.docx/.pdf)转为 Markdown。适用于用户要求“法条转 markdown”“pdf/docx 转 markdown”。处理 .pdf/.docx 时先检查是否已安装 mineru-ocr skill;未安装先引导安装,安装后优先用 mineru-ocr;仅在用户明确同意时再用本地回退方案。 | source |
Source: avelikiy/great_cto
- Repository: https://github.com/avelikiy/great_cto (commit
4fe1e39, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
well-architected |
adjacent | 6-pillar architecture review framework. Adapted from AWS Well-Architected for use by great_cto's architect agent on every non-nano ARCH document. Forces explicit answers across operational excellence, security, reliability, performance, … | source |
Source: basicmachines-co/basic-memory
- Repository: https://github.com/basicmachines-co/basic-memory (commit
53da71c, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
code-review |
adjacent | Use when reviewing Basic Machines code for house style, architecture risk, pre-merge hardening, or whether a change fits basic-memory/basic-memory-cloud conventions. | source |
bm-setup |
adjacent | Set up the Basic Memory plugin for this project — a short guided interview that configures the project mapping, seeds note schemas, learns or suggests placement conventions, and enables capture reflexes. Use when the user runs … | source |
bm-status |
adjacent | Show the Basic Memory plugin's current state for this project — active project, capture folders, output style, recent session checkpoints, and whether Basic Memory is reachable. | source |
Source: brycewang-stanford/Auto-Empirical-Research-Skills
- Repository: https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills (commit
85bf545, retrieved 2026-07-14) - License: CC-BY-4.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
marp-export |
adjacent | Export Marp slide markdown files to PDF (default), HTML, PPTX, or PNG. Handles theme loading, Chrome/Chromium detection for PDF export, and batch conversion. Trigger when user says "export slides", "convert marp to pdf", "marp export", … | source |
obsidian-project-memory |
adjacent | This skill should be used when the user asks to maintain an Obsidian knowledge base for a research project, import an existing research repository into Obsidian, keep project memory or daily notes synchronized, summarize project context … | source |
review |
adjacent | All quality reviews — routes to appropriate critics based on target file type and flags. Replaces /paper-excellence, /proofread, /econometrics-check, /review-r, /review-paper. | source |
slide-excellence |
adjacent | Multi-agent slide review (visual, pedagogy, proofreading). Use for comprehensive quality check before milestones. | source |
Source: davepoon/buildwithclaude
- Repository: https://github.com/davepoon/buildwithclaude (commit
3c94e0c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
outlook-calendar-automation |
adjacent | Automate Outlook Calendar tasks via Rube MCP (Composio): create events, manage attendees, find meeting times, and handle invitations. Always search tools first for current schemas. | source |
Source: davila7/claude-code-templates
- Repository: https://github.com/davila7/claude-code-templates (commit
fa79251, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx-official |
core | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', or requests to produce professional documents with formatting … | source |
code-review-excellence |
adjacent | Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement. | source |
Excel Analysis |
adjacent | Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. | source |
Source: dembrandt/dembrandt-skills
- Repository: https://github.com/dembrandt/dembrandt-skills (commit
38cd2b7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
authentic-product-representation |
adjacent | Product visuals — hero shots, demos, screenshots, landing-page panels — must reproduce the real product, not a stylised poster of it. Design with real content and real data, mirror the actual output the product generates, keep every label … | source |
Source: elementalsouls/Claude-BugHunter
- Repository: https://github.com/elementalsouls/Claude-BugHunter (commit
05098fc, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
hunt-file-upload |
adjacent | Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename. Bypass tables (10 techniques): double extension (shell.php.jpg if server checks last ext only), magic bytes spoofing (PNG header … | source |
Source: giuseppe-trisciuoglio/developer-kit
- Repository: https://github.com/giuseppe-trisciuoglio/developer-kit (commit
306f428, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
memory-md-management |
adjacent | Provides comprehensive memory file management capabilities including auditing, quality assessment, and targeted improvements for files such as CLAUDE.md. Use when user asks to check, audit, update, improve, fix, maintain, or validate … | source |
Source: heshengtao/super-agent-party
- Repository: https://github.com/heshengtao/super-agent-party (commit
181588d, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
officeCLI |
core | Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents. | source |
Source: hypnguyen1209/offensive-claude
- Repository: https://github.com/hypnguyen1209/offensive-claude (commit
4d62be7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
engagement-memory |
adjacent | Use when recalling prior techniques at recon/weaponize, or recording a confirmed finding at report — cross-engagement pattern memory ranked by impact | source |
malware-analysis |
adjacent | Use when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction (Cobalt Strike/CAPE), C2 traffic detection (JA4+, beaconing) | source |
Source: infrasity-labs/dev-gtm-claude-skills
- Repository: https://github.com/infrasity-labs/dev-gtm-claude-skills (commit
02cfefb, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
millers-law |
adjacent | Apply Miller's Law — chunk information into groups of ~4 to work within working memory limits. | source |
blog-calendar |
adjacent | Generate editorial calendars for blogs with topic clusters, publishing schedules, content decay detection, freshness update plans, seasonal opportunities, content mix formula, template integration, and distribution scheduling. Plans … | source |
Source: jabrena/plinth
- Repository: https://github.com/jabrena/plinth (commit
065eae8, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
145-java-refactoring-high-performance |
adjacent | Use when you need to refactor Java code for high performance — including memory/allocation reduction, CPU hot-path optimization, and syntax/API/control-flow improvements. This should trigger for requests such as Review Java code for high … | source |
162-java-profiling-analyze |
adjacent | Use when you need to analyze Java profiling data collected during the detection phase — including interpreting flamegraphs, memory allocation patterns, CPU hotspots, threading issues, systematic problem categorization, evidence … | source |
Source: jeremylongshore/claude-code-plugins-plus-skills
- Repository: https://github.com/jeremylongshore/claude-code-plugins-plus-skills (commit
e112938a, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
assemblyai-core-workflow-a |
adjacent | Execute AssemblyAI primary workflow: async transcription with audio intelligence. Use when transcribing audio/video files, enabling speaker diarization, sentiment analysis, entity detection, PII redaction, or content moderation. Trigger … | source |
twinmind-data-handling |
adjacent | Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … | source |
vertex-engine-inspector |
adjacent | Inspect and validate Vertex AI Agent Engine deployments including Code Execution Sandbox, Memory Bank, A2A protocol compliance, and security posture. Generates production readiness scores. Use when asked to inspect, validate, or audit an … | source |
calendar-to-workflow |
adjacent | Converts calendar events and schedules into Claude Code workflows, meeting prep documents, and standup notes. Use when the user mentions calendar events, meeting prep, standup generation, or scheduling workflows. Trigger with phrases like … | source |
Source: jezweb/claude-skills
- Repository: https://github.com/jezweb/claude-skills (commit
e875a6b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
shopify-products |
core | Create and manage Shopify products via the Admin GraphQL API or CSV import. Workflow: gather data, choose method, execute, verify. Use whenever the user wants to add products to Shopify, bulk-import a catalog from CSV/spreadsheet/URL, … | source |
Source: Leonxlnx/taste-skill
- Repository: https://github.com/Leonxlnx/taste-skill (commit
b177427, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
brandkit |
adjacent | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | source |
Source: ljagiello/ctf-skills
- Repository: https://github.com/ljagiello/ctf-skills (commit
d19f35f, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
ctf-forensics |
adjacent | Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, … | source |
ctf-pwn |
adjacent | Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as … | source |
Source: microsoft/skills
- Repository: https://github.com/microsoft/skills (commit
dc543aa, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
azure-ai-translation-document-py |
adjacent | Azure AI Document Translation SDK for batch translation of documents with format preservation. Use for translating Word, PDF, Excel, PowerPoint, and other document formats at scale. Triggers: "document translation", "batch translation", … | source |
Source: mohitagw15856/pm-claude-skills
- Repository: https://github.com/mohitagw15856/pm-claude-skills (commit
876fa30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
pptx-slide-auditor |
adjacent | Audit a PowerPoint presentation for layout issues, text overflow, visual hierarchy problems, and consistency gaps. Use when asked to review a slide deck, check a presentation before a meeting, audit slides for layout problems, or QA a deck … | source |
win-loss-analysis |
adjacent | Analyze why deals are won and lost and turn it into an action plan. Use when asked to run a win/loss analysis, review closed-won and closed-lost deals, understand why the team is losing to a competitor, or summarize sales feedback into … | source |
briefing-note |
adjacent | Write a one-page briefing note that gets a busy principal up to speed fast. Use when asked to brief a minister/executive/official, prepare a briefing note or read-ahead, or summarize an issue for a decision or meeting. Produces a tight, … | source |
candidate-scorecard |
adjacent | Turn interview notes into a structured candidate scorecard and hire recommendation. Use when asked to write an interview scorecard, a candidate evaluation, an interview debrief, or to summarize feedback into a hire/no-hire call. Produces a … | source |
Source: mukul975/Anthropic-Cybersecurity-Skills
- Repository: https://github.com/mukul975/Anthropic-Cybersecurity-Skills (commit
673da1f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
analyzing-macro-malware-in-office-documents |
adjacent | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | source |
detecting-process-injection-techniques |
adjacent | Detects and analyzes process injection techniques used by malware including classic DLL injection, process hollowing, APC injection, thread hijacking, and reflective loading. Uses memory forensics, API monitoring, and behavioral analysis … | source |
detecting-t1003-credential-dumping-with-edr |
adjacent | Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation. | source |
performing-endpoint-forensics-investigation |
adjacent | Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal … | source |
analyzing-linux-kernel-rootkits |
adjacent | Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, … | source |
detecting-fileless-malware-techniques |
adjacent | Detects and analyzes fileless malware that operates entirely in memory using PowerShell, WMI, .NET reflection, registry-resident payloads, and living-off-the-land binaries (LOLBins) without writing traditional executable files to disk. … | source |
detecting-t1055-process-injection-with-sysmon |
adjacent | Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns. | source |
implementing-memory-protection-with-dep-aslr |
adjacent | Implements memory protection mechanisms including DEP (Data Execution Prevention), ASLR (Address Space Layout Randomization), CFG (Control Flow Guard), and other exploit mitigations to prevent memory corruption attacks. Use when hardening … | source |
performing-plc-firmware-security-analysis |
adjacent | This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including hardcoded credentials, insecure update mechanisms, backdoor functions, memory corruption flaws, and undocumented debug … | source |
analyzing-memory-forensics-with-lime-and-volatility |
adjacent | Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux … | source |
Source: nexu-io/open-design
- Repository: https://github.com/nexu-io/open-design (commit
4b66023, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Create, edit, and analyze Word documents with tracked changes, comments, and formatting. Useful for design briefs, copy docs, and review-ready deliverables. | source |
brandkit |
adjacent | Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … | source |
Source: nWave-ai/nWave
- Repository: https://github.com/nWave-ai/nWave (commit
1d0f13c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
nw-production-readiness |
adjacent | Monitoring, observability, operational procedures, CI/CD lessons learned, and quality gate definitions. Load when assessing production readiness or validating operational excellence. | source |
Source: oliver-kriska/claude-elixir-phoenix
- Repository: https://github.com/oliver-kriska/claude-elixir-phoenix (commit
d6b21b5, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
catchup |
adjacent | Summarize and review what changed while you were away. Use after a weekend, vacation, or flight to check missed PRs, git commits, Linear tickets, and meetings — one prioritized brief, not a firehose. | source |
Source: open-gitagent/opengap
- Repository: https://github.com/open-gitagent/opengap (commit
d7a8e2e, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
document-review |
adjacent | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | source |
Source: OpenSenseNova/SenseNova-Skills
- Repository: https://github.com/OpenSenseNova/SenseNova-Skills (commit
d8bb438, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
outlier-detection-and-quality-assessment |
adjacent | 执行全面的异常值检测与数据质量评估,利用 IQR 方法识别异常值并结合偏度、峰度分析数据分布特征,适用于非正态分布数据的预处理阶段。 | source |
categorical-comparison-analysis |
adjacent | 对两类分类数据进行对比分析,统计数量差异与比例关系并生成可视化图表。 | source |
category-filtering-and-difficulty-analysis |
adjacent | 对Excel数据进行自定义分类统计、交叉分析与可视化,并基于多维度指标(如文本长度、术语密度、正则匹配等)进行综合评分与分级,适用于多类别数据分布统计及文本内容难度/质量评估场景。 | source |
chart-embedded-export |
adjacent | 从结构化数据中提取分类分布执行清洗与统计,生成多维度交叉分析、高分辨率对比图表及包含下载链接的完整分析报告,适用于大文件处理与嵌入式可视化场景。 | source |
Source: pedrohcgs/claude-code-my-workflow
- Repository: https://github.com/pedrohcgs/claude-code-my-workflow (commit
be53c12, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
coauthor-brief |
adjacent | Generate a co-author / collaborator handoff brief for a multi-author, multi-machine project — summarizing what changed since the last brief (git delta), the current state of each artifact (manuscript, analysis, slides), open questions, how … | source |
slide-excellence |
adjacent | Multi-agent comprehensive slide review (visual + pedagogy + proofreading, plus TikZ / parity / substance conditionally). Use when user says "full review", "excellence pass", "comprehensive check", "review everything", "pre-release review", … | source |
Source: samber/cc-skills-golang
- Repository: https://github.com/samber/cc-skills-golang (commit
4881c01, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
golang-security |
adjacent | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | source |
Source: silverstein/minutes
- Repository: https://github.com/silverstein/minutes (commit
3fb2e83, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
minutes-mirror |
core | Self-coaching analysis of your own behavior across meetings — talk-time ratio, filler words, hedging language, monologue length, energy patterns, and (when meetings are tagged via /minutes-tag) what your behavior in winning meetings looks … | source |
Source: snyk/agent-scan
- Repository: https://github.com/snyk/agent-scan (commit
f3a4621, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
Source: staruhub/ClaudeSkills
- Repository: https://github.com/staruhub/ClaudeSkills (commit
3d4045d, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
deep-research |
adjacent | Use this skill when the user wants an evidence-based research memo, literature review, market/policy/technical landscape, or a multi-source decision brief with citations, trade-offs, and a clear conclusion. Best for tasks that need … | source |
Source: ThinkInAIXYZ/deepchat
- Repository: https://github.com/ThinkInAIXYZ/deepchat (commit
f275c92, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new … | source |
Source: trailofbits/skills
- Repository: https://github.com/trailofbits/skills (commit
cfe5d7b, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
c-review |
adjacent | Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or … | source |
rust-review |
adjacent | Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or … | source |
Source: zxkane/aws-skills
- Repository: https://github.com/zxkane/aws-skills (commit
68530c6, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
aws-cost-operations |
adjacent | AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when … | source |