# External AI agent skills — legal-consultant

Proven, publicly available AI agent skills mapped to this occupation.
Nothing is copied from the sources: every entry is a name, a one-line
summary and a link to the upstream skill package. Each section names
its source repository, commit, license and retrieval date.

**Tiers:** `core` = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; `adjacent` =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.

_Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
`pipeline/p5_enrich_ai_skills.py` on 2026-07-14._

## Source: anthropics/skills

- Repository: [https://github.com/anthropics/skills](https://github.com/anthropics/skills) (commit `f6656c1`, retrieved 2026-07-14)
- License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `docx` | adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | [source](https://github.com/anthropics/skills/tree/main/skills/docx) |
| `pdf` | adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | [source](https://github.com/anthropics/skills/tree/main/skills/pdf) |
| `pptx` | adjacent | Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even … | [source](https://github.com/anthropics/skills/tree/main/skills/pptx) |

## Source: wshobson/agents

- Repository: [https://github.com/wshobson/agents](https://github.com/wshobson/agents) (commit `6fd3247`, retrieved 2026-07-14)
- License: MIT (c) Seth Hobson

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `employment-contract-templates` | core | Create employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation. | [source](https://github.com/wshobson/agents/tree/main/plugins/hr-legal-compliance/skills/employment-contract-templates) |
| `gdpr-data-handling` | core | Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. | [source](https://github.com/wshobson/agents/tree/main/plugins/hr-legal-compliance/skills/gdpr-data-handling) |

## Source: a5c-ai/babysitter

- Repository: [https://github.com/a5c-ai/babysitter](https://github.com/a5c-ai/babysitter) (commit `44a5d58b`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `policy-management` | core | Manage corporate policy lifecycle from drafting through compliance | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/legal/skills/policy-management) |
| `license-compliance-checker` | core | Automated license compliance verification for dependencies to ensure legal compliance during migration | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/code-migration-modernization/skills/license-compliance-checker) |
| `interview-questions` | core | Generate competency-based and behavioral interview questions with legal compliance validation | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/human-resources/skills/interview-questions) |
| `gdpr-compliance-automator` | core | GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/security-compliance/skills/gdpr-compliance-automator) |
| `echidna-fuzzer` | core | Property-based testing and fuzzing using Echidna for smart contracts. Includes invariant definition, corpus management, coverage analysis, and CI/CD integration for comprehensive security testing. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/cryptography-blockchain/skills/echidna-fuzzer) |
| `hardhat-framework` | core | Expert usage of Hardhat for smart contract development, testing, and deployment. Includes TypeChain generation, plugin ecosystem, network forking, and deployment management. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/cryptography-blockchain/skills/hardhat-framework) |
| `board-governance` | core | Support board of directors governance and meeting management | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/legal/skills/board-governance) |
| `bug-bounty` | core | Bug bounty program management and security disclosure expertise for smart contracts. Covers program setup on Immunefi, vulnerability triage, responsible disclosure coordination, bounty payments, and post-disclosure analysis. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/cryptography-blockchain/skills/bug-bounty) |
| `collection-documentation` | core | Create and maintain comprehensive collection records including cataloging, photography, condition documentation, and database management following AAM/ICOM standards | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/social-sciences-humanities/arts-culture/skills/collection-documentation) |
| `context-engineering` | core | Context window monitoring and budget management. Keeps orchestrator at 15-30% context usage while subagents get full 200k tokens. Provides warnings at thresholds, context-aware summarization triggers, and wave-level budget planning. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/methodologies/gsd/skills/context-engineering) |
| `contract-analyzer` | core | Contract analysis and negotiation support skill with clause extraction and risk identification | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/contract-analyzer) |
| `entity-management` | core | Track and manage subsidiary and entity information | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/legal/skills/entity-management) |

## Source: affaan-m/everything-claude-code

- Repository: [https://github.com/affaan-m/everything-claude-code](https://github.com/affaan-m/everything-claude-code) (commit `ed38744`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `react-patterns` | core | React 18/19 patterns including hooks discipline, server/client component boundaries, Suspense + error boundaries, form actions, data fetching, state management decision trees, and accessibility-first composition. Use when writing or … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/.kiro/skills/react-patterns) |
| `enterprise-agent-ops` | core | Operate long-lived agent workloads with observability, security boundaries, and lifecycle management. | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/enterprise-agent-ops) |
| `agentic-os` | core | Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/agentic-os) |

## Source: ahacker-1/cre-agent-skills

- Repository: [https://github.com/ahacker-1/cre-agent-skills](https://github.com/ahacker-1/cre-agent-skills) (commit `618734e`, retrieved 2026-07-14)
- License: Apache-2.0

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `cre-legal` | core | CRE Legal review suite — 6 specialist skills for PSA review, title & survey analysis, estoppel tracking, loan document review, insurance coordination, and transfer document preparation for multifamily acquisitions. | [source](https://github.com/ahacker-1/cre-agent-skills/tree/618734e/claude-code-plugins/cre-legal) |

## Source: alirezarezvani/claude-skills

- Repository: [https://github.com/alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills) (commit `0241f43`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `iso42001-specialist` | core | ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/ra-qm-team/compliance-team-iso42001/skills/iso42001-specialist) |
| `ceo-advisor` | core | Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/ceo-advisor) |
| `ciso-advisor` | core | Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/ciso-advisor) |
| `founder-coach` | core | Personal leadership development for founders and first-time CEOs. Covers founder archetype identification, delegation frameworks, energy management, CEO calendar audits, leadership style evolution, blind spot identification, imposter … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/founder-coach) |
| `gc-review` | core | /cs:gc-review <plan> — General Counsel interrogation of contracts, IP, regulatory, term sheets, and employment-law surface. Use when reviewing a term sheet before signing, redlining a customer MSA, or checking IP assignment and regulatory … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/c-level-agents/skills/gc-review) |

## Source: anbeime/skill

- Repository: [https://github.com/anbeime/skill](https://github.com/anbeime/skill) (commit `ddad607`, retrieved 2026-07-14)
- License: no explicit license — referenced by link only

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `contract-review` | core | Contract review skill that adds comment-based issue annotations without changing original text. Enforces a three-layer review (basic, business, legal), writes structured comments (issue type, risk reason, revision suggestion) with risk … | [source](https://github.com/anbeime/skill/tree/ddad607/skills/legal-assistant-skills-main/contract-review) |

## Source: basicmachines-co/basic-memory

- Repository: [https://github.com/basicmachines-co/basic-memory](https://github.com/basicmachines-co/basic-memory) (commit `53da71c`, retrieved 2026-07-14)
- License: custom (see upstream LICENSE)

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `memory-schema` | core | Schema lifecycle management for Basic Memory: discover unschemaed notes, infer schemas, create and edit schema definitions, validate notes, and detect drift. Use when working with structured note types (Task, Person, Meeting, etc.) to … | [source](https://github.com/basicmachines-co/basic-memory/tree/53da71c/skills/memory-schema) |

## Source: bitwize-music-studio/claude-ai-music-skills

- Repository: [https://github.com/bitwize-music-studio/claude-ai-music-skills](https://github.com/bitwize-music-studio/claude-ai-music-skills) (commit `96446de`, retrieved 2026-07-14)
- License: custom (see upstream LICENSE)

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `researchers-legal` | core | Researches court documents, indictments, plea agreements, and sentencing records. Use when the album subject involves legal proceedings or criminal cases. | [source](https://github.com/bitwize-music-studio/claude-ai-music-skills/tree/96446de/skills/researchers-legal) |

## Source: brycewang-stanford/Auto-Empirical-Research-Skills

- Repository: [https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills) (commit `85bf545`, retrieved 2026-07-14)
- License: CC-BY-4.0

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `law-skills` | core | 9 legal research skills. Trigger: legal research, case law analysis, regulatory compliance. Design: legal databases, citation networks, and judicial analytics tools. | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/law) |
| `legal-research-guide` | core | Legal research methods, case law analysis, and compliance tools | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/law/legal-research-guide) |
| `legal-nlp-guide` | core | NLP techniques for legal text analysis, case law mining, and contracts | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/law/legal-nlp-guide) |
| `business-skills` | core | 5 business research skills. Trigger: business strategy, market analysis, competitive intelligence. Design: analytical frameworks and methods for management and innovation research. | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/business) |
| `opencontracts-guide` | core | Legal document annotation, versioning, and analysis platform | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/law/opencontracts-guide) |
| `legal-agent-skills-guide` | core | Agent skills collection for legal research and automation | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/43-wentorai-research-plugins/skills/domains/law/legal-agent-skills-guide) |
| `hud` | core | Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/25-HosungYou-Diverga/skills/hud) |

## Source: davepoon/buildwithclaude

- Repository: [https://github.com/davepoon/buildwithclaude](https://github.com/davepoon/buildwithclaude) (commit `3c94e0c`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `monday-automation` | core | Automate Monday.com work management including boards, items, columns, groups, subitems, and updates via Rube MCP (Composio). Always search tools first for current schemas. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/monday-automation) |
| `google-calendar-automation` | core | Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/google-calendar-automation) |

## Source: davila7/claude-code-templates

- Repository: [https://github.com/davila7/claude-code-templates](https://github.com/davila7/claude-code-templates) (commit `fa79251`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `agent-memory-mcp` | core | A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions). | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/agent-memory-mcp) |
| `c-pro` | core | Write efficient C code with proper memory management, pointer | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/development/c-pro) |
| `context-window-management` | core | Strategies for managing LLM context windows including summarization, trimming, routing, and avoiding context rot Use when: context window, token limit, context management, context engineering, long context. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/ai-research/context-window-management) |
| `it-operations` | core | Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/development/it-operations) |

## Source: jabrena/plinth

- Repository: [https://github.com/jabrena/plinth](https://github.com/jabrena/plinth) (commit `065eae8`, retrieved 2026-07-14)
- License: Apache-2.0

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `125-java-concurrency` | core | Use when you need to apply Java concurrency best practices — including thread safety fundamentals, ExecutorService thread pool management, concurrent design patterns like Producer-Consumer, asynchronous programming with CompletableFuture, … | [source](https://github.com/jabrena/plinth/tree/065eae8/skills/125-java-concurrency) |

## Source: jeffallan/claude-skills

- Repository: [https://github.com/jeffallan/claude-skills](https://github.com/jeffallan/claude-skills) (commit `e8be415`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `angular-architect` | core | Generates Angular 17+ standalone components, configures advanced routing with lazy loading and guards, implements NgRx state management, applies RxJS patterns, and optimizes bundle performance. Use when building Angular 17+ applications … | [source](https://github.com/jeffallan/claude-skills/tree/e8be415/skills/angular-architect) |

## Source: jeremylongshore/claude-code-plugins-plus-skills

- Repository: [https://github.com/jeremylongshore/claude-code-plugins-plus-skills](https://github.com/jeremylongshore/claude-code-plugins-plus-skills) (commit `e112938a`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `find-law-firm` | core | Use whenever the user wants to find, shortlist, vet, or enrich US B2B law firms — corporate, IP/patent, M&A and securities, employment, commercial litigation, regulatory/compliance, data privacy/cyber, real estate, and tax. Triggers on … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/mcp/servicegraph/skills/find-law-firm) |
| `flexport-data-handling` | core | Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-data-handling) |
| `supabase-data-handling` | core | Implement GDPR/CCPA compliance with Supabase: RLS for data isolation, user deletion via auth.admin.deleteUser(), data export via SQL, PII column management, backup/restore workflows, and retention policies. Use when handling sensitive … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/supabase-pack/skills/supabase-data-handling) |
| `twinmind-data-handling` | core | Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/twinmind-pack/skills/twinmind-data-handling) |
| `apollo-data-handling` | core | Apollo.io data management and compliance. Use when handling contact data, implementing GDPR compliance, or managing data exports and retention. Trigger with phrases like "apollo data", "apollo gdpr", "apollo compliance", "apollo data … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/apollo-pack/skills/apollo-data-handling) |
| `instantly-data-handling` | core | Implement Instantly.ai lead data management, GDPR/CAN-SPAM compliance, and list operations. Use when handling lead imports, managing block lists, implementing unsubscribe flows, or ensuring compliance with email regulations. Trigger with … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/instantly-pack/skills/instantly-data-handling) |
| `posthog-data-handling` | core | PostHog PII handling, GDPR compliance, consent management, data deletion, property sanitization, and privacy-safe analytics configuration. Trigger: "posthog data", "posthog PII", "posthog GDPR", "posthog data retention", "posthog privacy", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/posthog-pack/skills/posthog-data-handling) |
| `abridge-cost-tuning` | core | Optimize Abridge clinical AI costs through tier selection, session management, and usage monitoring for healthcare organizations. Use when analyzing Abridge billing, optimizing encounter volume, or right-sizing your Abridge contract for … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/abridge-pack/skills/abridge-cost-tuning) |
| `contract-review` | core | Orchestrates a comprehensive multi-agent contract review that analyzes risk, plain-English translation, missing protections, and compliance in parallel. Use when a user shares a contract and wants a full review, safety score, or executive … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/business-tools/general-legal-assistant/skills/contract-review) |
| `glean-core-workflow-b` | core | Execute Glean secondary workflow: bulk document indexing, custom datasource connectors, and content lifecycle management via the Indexing API. Trigger: "glean bulk index", "glean custom connector", "glean datasource", "glean indexing".  | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/glean-pack/skills/glean-core-workflow-b) |
| `recording-pentest-engagement` | core | Package an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering every file. Establishes chain of custody so legal counsel, internal audit, or an outside SOC can verify … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/security/penetration-tester/skills/recording-pentest-engagement) |
| `twinmind-core-workflow-b` | core | Execute TwinMind secondary workflow: Action item extraction and follow-up automation. Use when automating meeting follow-ups, extracting tasks, or integrating with project management tools. Trigger with phrases like "twinmind action … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/twinmind-pack/skills/twinmind-core-workflow-b) |

## Source: mohitagw15856/pm-claude-skills

- Repository: [https://github.com/mohitagw15856/pm-claude-skills](https://github.com/mohitagw15856/pm-claude-skills) (commit `876fa30`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `clause-explainer` | core | Explain a contract clause in plain English — what it means, who it favours, the realistic risk, and what to negotiate. Use when asked what a clause means, to decode legal language, explain a term in a contract, or assess whether a … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-legal/skills/clause-explainer) |
| `contract-review` | core | Review and summarise any contract or legal agreement. Use when asked to review a contract, check an agreement, flag legal risks, or summarise key clauses. Produces a structured review with key terms, flagged clauses, risk rating, and plain … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-legal/skills/contract-review) |

## Source: mukul975/Anthropic-Cybersecurity-Skills

- Repository: [https://github.com/mukul975/Anthropic-Cybersecurity-Skills](https://github.com/mukul975/Anthropic-Cybersecurity-Skills) (commit `673da1f`, retrieved 2026-07-14)
- License: Apache-2.0

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `analyzing-outlook-pst-for-email-forensics` | core | Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-outlook-pst-for-email-forensics) |
| `performing-endpoint-forensics-investigation` | core | Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-endpoint-forensics-investigation) |
| `implementing-aws-security-hub` | core | This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that aggregates findings from GuardDuty, Inspector, Macie, and third-party tools. It details enabling security standards like CIS AWS … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-aws-security-hub) |
| `implementing-azure-defender-for-cloud` | core | Implementing Microsoft Defender for Cloud to enable cloud security posture management, workload protection across VMs, containers, databases, and storage, configure security recommendations, and set up adaptive security controls with … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-azure-defender-for-cloud) |
| `analyzing-macro-malware-in-office-documents` | core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-macro-malware-in-office-documents) |
| `implementing-iso-27001-information-security-management` | core | ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-iso-27001-information-security-management) |
| `implementing-zero-trust-with-hashicorp-boundary` | core | Implement HashiCorp Boundary for identity-aware zero trust infrastructure access management with dynamic credential brokering, session recording, and Vault integration. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-zero-trust-with-hashicorp-boundary) |

## Source: nexu-io/open-design

- Repository: [https://github.com/nexu-io/open-design](https://github.com/nexu-io/open-design) (commit `4b66023`, retrieved 2026-07-14)
- License: Apache-2.0

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `html-ppt-graphify-dark-graph` | core | Open Design's feature business case for the plugin marketplace: the user pain, options, tradeoffs, and the measure of success. Built as a decision-grade product management deck for PM, eng, design, leadership. | [source](https://github.com/nexu-io/open-design/tree/4b66023/design-templates/html-ppt-graphify-dark-graph) |

## Source: omergocmen/vibe-coder-kit

- Repository: [https://github.com/omergocmen/vibe-coder-kit](https://github.com/omergocmen/vibe-coder-kit) (commit `76c5b30`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `github` | core | Manages all git operations (commit, push, branch management, PR creation) in a standardized, safe, and consistent way. Automatically runs the code-review skill before any commit. Enforces Conventional Commits standard. Handles the full … | [source](https://github.com/omergocmen/vibe-coder-kit/tree/76c5b30/.agent/skills/github) |

## Source: open-gitagent/opengap

- Repository: [https://github.com/open-gitagent/opengap](https://github.com/open-gitagent/opengap) (commit `d7a8e2e`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `document-review` | core | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | [source](https://github.com/open-gitagent/opengap/tree/d7a8e2e/examples/full/skills/document-review) |

## Source: pedrohcgs/claude-code-my-workflow

- Repository: [https://github.com/pedrohcgs/claude-code-my-workflow](https://github.com/pedrohcgs/claude-code-my-workflow) (commit `be53c12`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `grant-proposal` | core | Scaffold a research grant proposal (NSF, NIH, ERC, or foundation) by composing existing primitives — pulls identification strategy from an `/interview-me` spec, delegates the data-management plan to `/data-management-plan` and the … | [source](https://github.com/pedrohcgs/claude-code-my-workflow/tree/be53c12/.claude/skills/grant-proposal) |

## Source: ruvnet/claude-code-flow

- Repository: [https://github.com/ruvnet/claude-code-flow](https://github.com/ruvnet/claude-code-flow) (commit `73914bd`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `AgentDB Memory Patterns` | core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | [source](https://github.com/ruvnet/claude-code-flow/tree/73914bd/.agents/skills/agentdb-memory-patterns) |
| `Hooks Automation` | core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | [source](https://github.com/ruvnet/claude-code-flow/tree/73914bd/.agents/skills/hooks-automation) |

## Source: ruvnet/ruflo

- Repository: [https://github.com/ruvnet/ruflo](https://github.com/ruvnet/ruflo) (commit `73914bd`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `AgentDB Memory Patterns` | core | Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. | [source](https://github.com/ruvnet/ruflo/tree/73914bd/.agents/skills/agentdb-memory-patterns) |
| `Hooks Automation` | core | Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … | [source](https://github.com/ruvnet/ruflo/tree/73914bd/.agents/skills/hooks-automation) |

## Source: samber/cc-skills-golang

- Repository: [https://github.com/samber/cc-skills-golang](https://github.com/samber/cc-skills-golang) (commit `4881c01`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `golang-dependency-management` | core | Dependency management strategies for Golang projects — go.mod management, installing/upgrading packages, Minimal Version Selection, vulnerability scanning, outdated dependency tracking, binary size analysis, Dependabot/Renovate setup, … | [source](https://github.com/samber/cc-skills-golang/tree/4881c01/skills/golang-dependency-management) |
| `golang-security` | core | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | [source](https://github.com/samber/cc-skills-golang/tree/4881c01/skills/golang-security) |

## Source: vibeeval/vibecosystem

- Repository: [https://github.com/vibeeval/vibecosystem](https://github.com/vibeeval/vibecosystem) (commit `cea9462`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `compliance-patterns` | core | GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance. | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/compliance-patterns) |
| `gdpr-compliance` | core | GDPR compliance - data subject rights, lawful basis, DPIA, privacy by design, breach notification, consent management, cross-border transfers, PII masking | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/gdpr-compliance) |
| `kvkk-compliance` | core | KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification. | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/kvkk-compliance) |
| `brand-identity` | core | Voice framework, visual identity standards, color palette management, typography specs, brand consistency | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/brand-identity) |

## Source: zebbern/claude-code-guide

- Repository: [https://github.com/zebbern/claude-code-guide](https://github.com/zebbern/claude-code-guide) (commit `d2c5280`, retrieved 2026-07-14)
- License: MIT

| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
| `regulatory-audit-generator` | core | Builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising/data laws. Outputs a structured checklist with check items, legal basis, risk levels, and actionable recommendations. Triggered by requests like \"run … | [source](https://github.com/zebbern/claude-code-guide/tree/d2c5280/skills/regulatory-audit-generator) |