38 KiB
External AI agent skills — health-and-safety-engineer
Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.
Tiers: core = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; adjacent =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.
Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
pipeline/p5_enrich_ai_skills.py on 2026-07-14.
Source: anthropics/skills
- Repository: https://github.com/anthropics/skills (commit
f6656c1, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | source |
pdf |
adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | source |
Source: a5c-ai/babysitter
- Repository: https://github.com/a5c-ai/babysitter (commit
44a5d58b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
iso14971-risk-analyzer |
core | Comprehensive risk management skill implementing ISO 14971:2019 methodology for medical device risk analysis | source |
translation-management |
core | Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. | source |
root-cause-analyzer |
core | Systematic root cause identification skill with 5 Whys, fishbone diagrams, fault tree analysis, and hypothesis testing | source |
systematic-debugging |
core | Structured debugging methodology using hypothesis-driven investigation, log analysis, and bisection to isolate and resolve defects. | source |
A/B Test Design |
core | Statistical experiment design and analysis capabilities for product experimentation | source |
Source: aaron-he-zhu/aaron-marketing-skills
- Repository: https://github.com/aaron-he-zhu/aaron-marketing-skills (commit
b7b0b9f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
competitor-analysis |
core | Use when the user asks to "analyze competitors" or "竞品分析"; benchmarks competitor keywords, content, backlinks, AI citations, and traffic share into strengths, weaknesses, and an action plan. Not for a pairwise topic-coverage gap map — use … | source |
Source: affaan-m/everything-claude-code
- Repository: https://github.com/affaan-m/everything-claude-code (commit
ed38744, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
agentic-os |
core | Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. | source |
competitive-report-structure |
core | Use after benchmark-methodology has produced scored competitor profile cards. Assembles findings into a decision-grade report: landscape map, competitor profiles, benchmarking matrix, white-space analysis, strategic recommendations, and … | source |
Source: AgriciDaniel/claude-ads
- Repository: https://github.com/AgriciDaniel/claude-ads (commit
669c760, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
ads-test |
core | Design and evaluate paid-ad experiments with hypotheses, randomization units, sample-size and duration assumptions, guardrails, platform experiment tools, analysis, and decision rules. Use for A/B test, split test, experiment design, … | source |
Source: AgriciDaniel/claude-blog
- Repository: https://github.com/AgriciDaniel/claude-blog (commit
49842ea, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
blog-audit |
core | Full-site blog health assessment scanning all blog files for quality scores, orphan pages, topic cannibalization, stale content, and AI citation readiness. Spawns parallel subagents for comprehensive analysis. Produces per-post scores and … | source |
blog-strategy |
core | Blog strategy development including topic cluster architecture with hub-and-spoke design, audience mapping, competitive landscape analysis, AI citation surface strategy across ChatGPT/Perplexity/AI Overviews, distribution channel planning … | source |
Source: AgriciDaniel/claude-seo
- Repository: https://github.com/AgriciDaniel/claude-seo (commit
6cf1ea9, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
seo-local |
core | Local SEO analysis covering Google Business Profile optimization, NAP consistency, citation health, review signals, local schema markup, location page quality, multi-location SEO, and industry-specific recommendations. Detects business … | source |
seo-content |
core | Content quality and E-E-A-T analysis with AI citation readiness assessment. Use when user says "content quality", "E-E-A-T", "content analysis", "readability check", "thin content", or "content audit". | source |
Source: ahacker-1/cre-agent-skills
- Repository: https://github.com/ahacker-1/cre-agent-skills (commit
618734e, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
cre-office |
core | CRE Office analysis suite - 8 specialist skills for U.S. office acquisitions, refinancings, lease-up, tenant credit, TI/LC underwriting, financing fit, and investment committee memo writing. | source |
Source: basicmachines-co/basic-memory
- Repository: https://github.com/basicmachines-co/basic-memory (commit
53da71c, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
memory-tasks |
core | Task management via Basic Memory schemas: create, track, and resume structured tasks that survive context compaction. Uses BM's schema system for uniform notes queryable through the knowledge graph. | source |
memory-literary-analysis |
core | Analyze a complete literary work into a structured Basic Memory knowledge graph. Covers schema design, entity seeding, chapter-by-chapter processing, cross-referencing, validation, and visualization. | source |
Source: brycewang-stanford/Auto-Empirical-Research-Skills
- Repository: https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills (commit
85bf545, retrieved 2026-07-14) - License: CC-BY-4.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
law-skills |
core | 9 legal research skills. Trigger: legal research, case law analysis, regulatory compliance. Design: legal databases, citation networks, and judicial analytics tools. | source |
aer-statspai |
core | Use when aer-identification has fixed the design, after methodology choice and before aer-robustness or aer-tables-figures, to run an AER-track analysis with StatsPAI — the agent-native Python engine and MCP server for causal inference, … | source |
hypothesis-testing-guide |
core | Statistical hypothesis testing, power analysis, and significance reporting | source |
academic-baseline |
core | Use when working on any empirical academic research context — paper writing, data analysis, literature review, or any task involving citations, results, or publication artifacts. Establishes non-negotiable principles that govern all other … | source |
choosing-causalpy-methods |
core | Choose the appropriate CausalPy experiment class from a causal question, data structure, treatment assignment, and identification assumptions. Use before writing analysis code when the method is not yet settled. | source |
Source: davila7/claude-code-templates
- Repository: https://github.com/davila7/claude-code-templates (commit
fa79251, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
fda-database |
core | Query openFDA API for drugs, devices, adverse events, recalls, regulatory submissions (510k, PMA), substance identification (UNII), for FDA regulatory data analysis and safety research. | source |
cobrapy |
core | Constraint-based metabolic modeling (COBRA). FBA, FVA, gene knockouts, flux sampling, SBML models, for systems biology and metabolic engineering analysis. | source |
it-operations |
core | Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … | source |
agent-memory-mcp |
core | A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions). | source |
qutip |
core | Quantum mechanics simulations and analysis using QuTiP (Quantum Toolbox in Python). Use when working with quantum systems including: (1) quantum states (kets, bras, density matrices), (2) quantum operators and gates, (3) time evolution and … | source |
reactome-database |
core | Query Reactome REST API for pathway analysis, enrichment, gene-pathway mapping, disease pathways, molecular interactions, expression analysis, for systems biology studies. | source |
string-database |
core | Query STRING API for protein-protein interactions (59M proteins, 20B interactions). Network analysis, GO/KEGG enrichment, interaction discovery, 5000+ species, for systems biology. | source |
Excel Analysis |
core | Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. | source |
pymoo |
core | Multi-objective optimization framework. NSGA-II, NSGA-III, MOEA/D, Pareto fronts, constraint handling, benchmarks (ZDT, DTLZ), for engineering design and optimization problems. | source |
statistical-analysis |
core | Statistical analysis toolkit. Hypothesis tests (t-test, ANOVA, chi-square), regression, correlation, Bayesian stats, power analysis, assumption checks, APA reporting, for academic research. | source |
uspto-database |
core | Access USPTO APIs for patent/trademark searches, examination history (PEDS), assignments, citations, office actions, TSDR, for IP analysis and prior art searches. | source |
denario |
core | Multiagent AI system for scientific research assistance that automates research workflows from data analysis to publication. This skill should be used when generating research ideas from datasets, developing research methodologies, … | source |
Source: dotnet/skills
- Repository: https://github.com/dotnet/skills (commit
79a2ada, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
exp-mock-usage-analysis |
core | Audits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant, or replaceable mocks. Use when the user asks to audit mock usage, find unused or unnecessary mock … | source |
Source: elementalsouls/Claude-BugHunter
- Repository: https://github.com/elementalsouls/Claude-BugHunter (commit
05098fc, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
osint-methodology |
core | Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline (seed discovery, asset expansion, enrichment, exposure analysis, reporting), asset-graph … | source |
Source: foryourhealth111-pixel/Vibe-Skills
- Repository: https://github.com/foryourhealth111-pixel/Vibe-Skills (commit
34429a8, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
scholar-evaluation |
core | Systematically evaluate scholarly work using the ScholarEval framework, providing structured assessment across research quality dimensions including problem formulation, methodology, analysis, and writing with quantitative scoring and … | source |
scientific-critical-thinking |
core | Evaluate scientific claims and evidence quality. Use for assessing experimental design validity, identifying biases and confounders, applying evidence grading frameworks (GRADE, Cochrane Risk of Bias), or teaching critical analysis. Best … | source |
statistical-analysis |
core | Statistical analysis toolkit. Hypothesis tests (t-test, ANOVA, chi-square), regression, correlation, Bayesian stats, power analysis, assumption checks, APA reporting, for academic research. | source |
uspto-database |
core | Access USPTO APIs for patent/trademark searches, examination history (PEDS), assignments, citations, office actions, TSDR, for IP analysis and prior art searches. | source |
denario |
core | Multiagent AI system for scientific research assistance that automates research workflows from data analysis to publication. This skill should be used when generating research ideas from datasets, developing research methodologies, … | source |
designing-experiments |
core | Design experiments and quasi-experiments before analysis. Use when choosing study design, treatment/control structure, outcomes, assumptions, validation plans after scientific experiment failure, or which of DiD, ITS, synthetic control, or … | source |
Source: glittercowboy/taches-cc-resources
- Repository: https://github.com/glittercowboy/taches-cc-resources (commit
1757615, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
debug-like-expert |
core | Deep analysis debugging mode for complex issues. Activates methodical investigation protocol with evidence gathering, hypothesis testing, and rigorous verification. Use when standard troubleshooting fails or when issues require systematic … | source |
Source: himself65/finance-skills
- Repository: https://github.com/himself65/finance-skills (commit
87f688e, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
sepa-strategy |
core | Analyze stocks using Mark Minervini's SEPA (Specific Entry Point Analysis) methodology. Use this skill whenever the user mentions SEPA, Minervini, superperformance, trend template, VCP (Volatility Contraction Pattern), Stage 2 uptrend, … | source |
Source: hypnguyen1209/offensive-claude
- Repository: https://github.com/hypnguyen1209/offensive-claude (commit
4d62be7, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
vulnerability-analysis |
core | Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks | source |
malware-analysis |
core | Use when reverse-engineering or detecting malware — static triage + capa/YARA-X, emulation/DBI/.NET unpacking, dynamic/fileless/Volatility 3 memory analysis, C2 config extraction (Cobalt Strike/CAPE), C2 traffic detection (JA4+, beaconing) | source |
Source: infrasity-labs/dev-gtm-claude-skills
- Repository: https://github.com/infrasity-labs/dev-gtm-claude-skills (commit
02cfefb, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
blog-audit |
core | Full-site blog health assessment scanning all blog files for quality scores, orphan pages, topic cannibalization, stale content, and AI citation readiness. Spawns parallel subagents for comprehensive analysis. Produces per-post scores and … | source |
seo-local |
core | Local SEO analysis covering Google Business Profile optimization, NAP consistency, citation health, review signals, local schema markup, location page quality, multi-location SEO, and industry-specific recommendations. Detects business … | source |
seo-content |
core | Content quality and E-E-A-T analysis with AI citation readiness assessment. Use when user says "content quality", "E-E-A-T", "content analysis", "readability check", "thin content", or "content audit". | source |
blog-strategy |
core | Blog strategy development including topic cluster architecture with hub-and-spoke design, audience mapping, competitive landscape analysis, AI citation surface strategy across ChatGPT/Perplexity/AI Overviews, distribution channel planning … | source |
Source: jeremylongshore/claude-code-plugins-plus-skills
- Repository: https://github.com/jeremylongshore/claude-code-plugins-plus-skills (commit
e112938a, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
excel-variance-analyzer |
core | Analyze budget vs actual variances in Excel with drill-down and root cause analysis. Use when performing variance analysis or explaining budget differences. Trigger with phrases like ''excel variance'', ''analyze budget variance'', … | source |
twinmind-observability |
core | Monitor TwinMind transcription quality, meeting coverage, action item extraction rates, and memory vault health. Use when implementing observability, or managing TwinMind meeting AI operations. Trigger with phrases like "twinmind … | source |
Source: K-Dense-AI/claude-scientific-skills
- Repository: https://github.com/K-Dense-AI/claude-scientific-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
scholar-evaluation |
core | Systematically evaluate scholarly work using the ScholarEval framework, providing structured assessment across research quality dimensions including problem formulation, methodology, analysis, and writing with quantitative scoring and … | source |
scientific-critical-thinking |
core | Evaluate scientific claims and evidence quality. Use for assessing experimental design validity, identifying biases and confounders, applying evidence grading frameworks (GRADE, Cochrane Risk of Bias), or teaching critical analysis. Best … | source |
statistical-analysis |
core | Guided statistical analysis for research data - test selection, assumption checking, effect sizes, power analysis, Bayesian alternatives, and APA-formatted reporting. Use whenever a user wants to compare groups, test a hypothesis, analyze … | source |
Source: K-Dense-AI/scientific-agent-skills
- Repository: https://github.com/K-Dense-AI/scientific-agent-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
scholar-evaluation |
core | Systematically evaluate scholarly work using the ScholarEval framework, providing structured assessment across research quality dimensions including problem formulation, methodology, analysis, and writing with quantitative scoring and … | source |
scientific-critical-thinking |
core | Evaluate scientific claims and evidence quality. Use for assessing experimental design validity, identifying biases and confounders, applying evidence grading frameworks (GRADE, Cochrane Risk of Bias), or teaching critical analysis. Best … | source |
statistical-analysis |
core | Guided statistical analysis for research data - test selection, assumption checking, effect sizes, power analysis, Bayesian alternatives, and APA-formatted reporting. Use whenever a user wants to compare groups, test a hypothesis, analyze … | source |
Source: mohitagw15856/pm-claude-skills
- Repository: https://github.com/mohitagw15856/pm-claude-skills (commit
876fa30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
win-loss-analysis |
core | Analyze why deals are won and lost and turn it into an action plan. Use when asked to run a win/loss analysis, review closed-won and closed-lost deals, understand why the team is losing to a competitor, or summarize sales feedback into … | source |
Source: mukul975/Anthropic-Cybersecurity-Skills
- Repository: https://github.com/mukul975/Anthropic-Cybersecurity-Skills (commit
673da1f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
analyzing-macro-malware-in-office-documents |
core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | source |
conducting-memory-forensics-with-volatility |
core | Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, … | source |
performing-endpoint-forensics-investigation |
core | Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal … | source |
analyzing-linux-kernel-rootkits |
core | Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, … | source |
conducting-cyber-risk-assessment-with-nist-800-30 |
core | Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine … | source |
Source: nWave-ai/nWave
- Repository: https://github.com/nWave-ai/nWave (commit
1d0f13c, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
nw-stress-analysis |
core | Advanced architecture stress analysis methodology for designing systems that survive unknown stresses. Load when --residuality flag is used or when designing high-uncertainty, mission-critical systems. | source |
nw-jtbd-analysis |
core | JTBD methodology for extracting real jobs behind feature requests — job statements, abstraction layers, first-principles extraction, ODI outcome statements, and opportunity scoring | source |
Source: OpenSenseNova/SenseNova-Skills
- Repository: https://github.com/OpenSenseNova/SenseNova-Skills (commit
d8bb438, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
category-filtering-and-difficulty-analysis |
core | 对Excel数据进行自定义分类统计、交叉分析与可视化,并基于多维度指标(如文本长度、术语密度、正则匹配等)进行综合评分与分级,适用于多类别数据分布统计及文本内容难度/质量评估场景。 | source |
Source: rampstackco/claude-skills
- Repository: https://github.com/rampstackco/claude-skills (commit
bc6d961, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
cro-optimization |
core | Run conversion rate optimization through hypothesis-driven testing including audit, hypothesis generation, test design, statistical analysis, and rollout decisions. Use this skill whenever the user wants to optimize conversion, run A/B … | source |
Source: rohitg00/skillkit
- Repository: https://github.com/rohitg00/skillkit (commit
d2e5c34, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
root-cause-analysis |
core | Performs systematic root cause analysis to identify the true source of bugs, errors, and unexpected behavior through structured investigation phases — not just treating symptoms. Use when a user reports a bug, crash, error, or broken … | source |
Source: ruvnet/claude-code-flow
- Repository: https://github.com/ruvnet/claude-code-flow (commit
73914bd, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
AgentDB Memory Patterns |
core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | source |
memory-management |
core | AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … | source |
Hooks Automation |
core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | source |
Source: ruvnet/ruflo
- Repository: https://github.com/ruvnet/ruflo (commit
73914bd, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
AgentDB Memory Patterns |
core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | source |
memory-management |
core | AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … | source |
Hooks Automation |
core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | source |
Source: samber/cc-skills-golang
- Repository: https://github.com/samber/cc-skills-golang (commit
4881c01, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
golang-security |
core | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | source |
Source: ThinkInAIXYZ/deepchat
- Repository: https://github.com/ThinkInAIXYZ/deepchat (commit
f275c92, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
memory-management |
core | Guide the agent to recall, remember, and route durable learning into Memory, Skills, Scheduled Tasks, or Tape. | source |
Source: trailofbits/skills
- Repository: https://github.com/trailofbits/skills (commit
cfe5d7b, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
c-review |
core | Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or … | source |
rust-review |
core | Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or … | source |