Files
resource-manager/references/ai-skills.md
2026-08-15 12:23:45 +02:00

37 KiB

External AI agent skills — resource-manager

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: wshobson/agents

Skill Tier What it adds Upstream
team-collaboration-dx-optimizer (agent) adjacent Developer Experience specialist. Improves tooling, setup, and workflows. Use PROACTIVELY when setting up new projects, after team feedback, or when development friction is noticed. source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
context-engineering core Context window monitoring and budget management. Keeps orchestrator at 15-30% context usage while subagents get full 200k tokens. Provides warnings at thresholds, context-aware summarization triggers, and wave-level budget planning. source
inventory-optimizer core Inventory management optimization skill with safety stock calculation, reorder point determination, and ABC analysis source
fifo-lifo-controller core Automated inventory rotation management skill ensuring proper product flow based on expiration, production, or receipt dates source
dock-scheduling-coordinator core Automated dock appointment scheduling skill with inbound flow optimization and receiving efficiency management source
last-mile-delivery-optimizer core Final delivery leg optimization skill including dynamic scheduling, time-window management, and delivery confirmation source
vector-memory core HNSW vector search for pattern similarity retrieval and knowledge graph maintenance with PageRank scoring, community detection, and 3-tier memory management. source
throughput-accountant core TOC financial metrics skill for throughput, inventory, and operating expense analysis with decision support source
contingency-plan-builder core Business continuity and contingency plan development skill for supply chain resilience source
cost-to-serve-analyzer core Supply chain cost-to-serve analysis skill by customer, product, or channel source
early-warning-monitor core Continuous supplier and supply chain risk monitoring with automated alerts source
master-data-quality-manager core Supply chain master data quality monitoring and improvement skill source
supply-chain-visibility-platform core End-to-end supply chain visibility skill providing real-time tracking and control tower capabilities source

Source: aaron-he-zhu/aaron-marketing-skills

Skill Tier What it adds Upstream
memory-management core Use when the user asks to "remember project context", review saved findings, initialize runtime memory, archive stale work, reconcile notes, or erase a subject; manages authorized HOT/WARM/COLD working memory across all disciplines while … source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
quality-nonconformance core Codified expertise for quality control, non-conformance investigation, root cause analysis, corrective action, and supplier quality management in regulated manufacturing. Informed by quality engineers with 15+ years experience across FDA, … source
inventory-demand-planning core 在庫管理、需要予測、補充戦略、およびサプライチェーン最適化。 Codified expertise for demand forecasting, safety stock optimization, replenishment planning, and promotional lift estimation at multi-location retailers. Informed by demand planners with 15+ years experience … source

Source: AgriciDaniel/claude-ads

Skill Tier What it adds Upstream
ads-google core Audit Google Ads measurement, Search, Shopping, Performance Max, Demand Gen, YouTube-linked inventory, keywords and search terms, negative-keyword generation or review, creative assets, bidding, budgets, settings, and policy. Use for … source

Source: ahacker-1/cre-agent-skills

Skill Tier What it adds Upstream
cre-office core CRE Office analysis suite - 8 specialist skills for U.S. office acquisitions, refinancings, lease-up, tenant credit, TI/LC underwriting, financing fit, and investment committee memo writing. source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
compliance-readiness core /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … source
process-mapper core Use when a BizOps lead, COO, or process-improvement owner needs to document an end-to-end business process (procurement, employee onboarding, incident handoff, customer-onboarding, claims adjudication) in BPMN-style notation, measure cycle … source

Source: avelikiy/great_cto

Skill Tier What it adds Upstream
vertical-logistics core Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … source

Source: backnotprop/plannotator

Skill Tier What it adds Upstream
review-renovate core Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with … source
update-deps core Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping. Defers risky packages to ~/.supply-chain/notes/. source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
hud core Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings source

Source: davepoon/buildwithclaude

Skill Tier What it adds Upstream
google-calendar-automation core Automate Google Calendar events, scheduling, availability checks, and attendee management via Rube MCP (Composio). Create events, find free slots, manage attendees, and list calendars programmatically. source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
benchling-integration core Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation. source
vulnerability-scanner core Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. source
supply-chain-guard core Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations. source
Excel Analysis core Analyze Excel spreadsheets, create pivot tables, generate charts, and perform data analysis. Use when analyzing Excel files, spreadsheets, tabular data, or .xlsx files. source
code-review-excellence core Transform code reviews from gatekeeping to knowledge sharing through constructive feedback, systematic analysis, and collaborative improvement. source

Source: hypnguyen1209/offensive-claude

Skill Tier What it adds Upstream
vulnerability-analysis core Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks source
cicd-supply-chain core Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance source

Source: indranilbanerjee/digital-marketing-pro

Skill Tier What it adds Upstream
qbr-plan core Prepare a Quarterly Business Review. Use when: building QBR presentations, client performance reviews, or strategy updates. source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
volt-recon core Firmware reconnaissance for takeover — inventory the MCU, peripherals, RTOS, protocols, OTA, power management, and assess code quality with risk flags. Use when asked to "understand this firmware", "device inventory", or "embedded … source
apify-cost-tuning core Optimize Apify platform costs through memory tuning, compute unit management, and proxy budgeting. Use when analyzing Apify billing, reducing Actor run costs, or implementing usage monitoring and budget alerts. Trigger: "apify cost", … source
warden-recon core Security reconnaissance — full inventory of secrets management, IAM, dependencies, auth, encryption, audit logging, and compliance gaps. Use when asked about "security posture", "how secure is this", or "security assessment". source
webflow-core-workflow-b core Execute Webflow secondary workflows \u2014 Sites management, Pages API,\ \ Forms submissions,\nEcommerce (products/orders/inventory), and Custom Code via\ \ the Data API v2.\nUse when managing sites, reading pages, handling form data,\ \ … source
snowflake-cost-tuning core Optimize Snowflake costs with resource monitors, warehouse auto-suspend, right-sizing, and credit consumption analysis. Use when analyzing Snowflake billing, reducing credit consumption, or implementing cost controls and budget alerts. … source
flexport-reference-architecture core Implement Flexport reference architecture for supply chain integrations with best-practice project layout, service boundaries, and data flow. Trigger: "flexport architecture", "flexport project structure", "flexport system design". source
flexport-deploy-integration core Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … source
flexport-prod-checklist core Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … source
flexport-incident-runbook core Execute Flexport incident response for API outages, webhook failures, and supply chain data sync issues with triage and mitigation steps. Trigger: "flexport incident", "flexport outage", "flexport down", "flexport emergency". source
warden core Security engineer — IAM, secrets, threat modeling, hardening, auth, and supply chain security. source
excel-variance-analyzer core Analyze budget vs actual variances in Excel with drill-down and root cause analysis. Use when performing variance analysis or explaining budget differences. Trigger with phrases like ''excel variance'', ''analyze budget variance'', … source

Source: microsoft/skills

Skill Tier What it adds Upstream
azure-mgmt-apicenter-dotnet core Azure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. … source
azure-mgmt-apicenter-py core Azure API Center Management SDK for Python. Use for managing API inventory, metadata, and governance across your organization. Triggers: "azure-mgmt-apicenter", "ApiCenterMgmtClient", "API Center", "API inventory", "API governance". source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
logistics-incident-report core Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report. Use when asked to document a shipment delay, write up a logistics failure, report a customs hold, … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
managing-third-party-vendor-risk core Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … source
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
analyzing-sbom-for-supply-chain-vulnerabilities core Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … source
analyzing-supply-chain-malware-artifacts core Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. source
detecting-supply-chain-attacks-in-ci-cd core Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for … source
hunting-for-supply-chain-compromise core Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. source
implementing-code-signing-for-artifacts core This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … source
implementing-supply-chain-security-with-in-toto core Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps. source
performing-supply-chain-attack-simulation core Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning … source
securing-github-actions-workflows core This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from … source
verifying-build-provenance-with-slsa-sigstore core Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain. source
conducting-memory-forensics-with-volatility core Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection, network connections, and credential theft from RAM dumps captured during incident response. Covers memory acquisition, … source

Source: nexscope-ai/eCommerce-Skills

Skill Tier What it adds Upstream
supply-chain-optimization-tiktok core Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … source
tiktok-shop-inventory core Inventory management for TikTok Shop — demand forecasting, viral stock planning, FBT optimization source
shopify-inventory-management core Multi-location inventory — transfers, low stock alerts, demand forecasting, safety stock, ABC analysis source
ecommerce-returns-management core Optimize e-commerce returns process and reduce return rates. Returns policy design, reverse logistics, root cause analysis, and customer retention through better returns experience. source
supply-chain-optimization-shopify core Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … source
supply-chain-optimization-walmart core Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … source
supply-chain-optimization-amazon-lite core Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation source
warehouse-optimization core E-commerce warehouse and inventory optimization advisor. Analyzes inventory health, calculates safety stock and reorder points, performs ABC analysis, evaluates fulfillment costs, and provides actionable recommendations for improving … source

Source: pedrohcgs/claude-code-my-workflow

Skill Tier What it adds Upstream
coauthor-brief core Generate a co-author / collaborator handoff brief for a multi-author, multi-machine project — summarizing what changed since the last brief (git delta), the current state of each artifact (manuscript, analysis, slides), open questions, how … source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
content-strategy core Develop a content strategy covering editorial positioning, content pillars, formats, calendar, governance, and topical authority planning. Use this skill whenever the user wants to plan a content program, define content pillars, build an … source

Source: secondsky/claude-skills

Skill Tier What it adds Upstream
dependency-upgrade core Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
cis-controls core Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, … source
ism core Expert Australian Information Security Manual (ISM) advisor for government entities and their supply chains. Use for ISM control selection, gap analysis, system authorisation, IRAP assessment preparation, security documentation, and ASD … source
nzism core Expert New Zealand Information Security Manual (NZISM) advisor for NZ government agencies and their supply chains. Use for NZISM control guidance, gap analysis, agency security obligations, classification framework (Unclassified through … source

Source: trailofbits/skills

Skill Tier What it adds Upstream
supply-chain-risk-auditor core Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements. source

Source: wanshuiyin/Auto-claude-code-research-in-sleep

Skill Tier What it adds Upstream
system-profile core Profile a target (script, process, GPU, memory, interconnect) for performance analysis. Use when user says "profile", "benchmark", "bottleneck", or wants performance analysis. source

Source: WenyuChiou/agent-collab-skills

Skill Tier What it adds Upstream
agent-context-budget core Use when multi-agent work risks context overflow, memory growth, noisy logs, oversized handoffs, cross-session continuation, or parallel Codex and Gemini execution. source

Source: zebbern/claude-code-guide

Skill Tier What it adds Upstream
regression-modeler core Run regression analysis (OLS or logistic) on uploaded CSV/Excel data, generating coefficients, R², p-values, VIF, and plain-language interpretation. Triggered by requests for regression modeling, fitting data, testing significance, … source