ShipSafe · Skills

Agent Skills, source reviewed

A skill is a folder with a SKILL.md file that teaches your coding agent a job. Claude Code, Cursor and Codex all read them. Anyone can publish one, and some include scripts that run on your machine. These 30 are from public repos, and we read every file before listing them.

Last reviewed 2026-10-25. How we review · How to install · Suggest a skill

Documents and spreadsheets

docx

Create and edit Word documents, including tracked changes and comments.

For: Anyone producing contracts, reports or letters as .docx.
Source: anthropics/skills
License: Proprietary (source-available)
Last commit: 2026-07-16
Repo stars: 183,546
Our review: Local Python helpers. Calls LibreOffice (soffice) through subprocess and may compile a small local socket shim with gcc so LibreOffice runs in sandboxes. No network calls, no credential access. Read the license: use is limited.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/docx ~/.claude/skills/docx

pdf

Read, fill, merge, split and create PDFs.

For: People handling forms, invoices and scanned documents.
Source: anthropics/skills
License: Proprietary (source-available)
Last commit: 2026-02-06
Repo stars: 183,546
Our review: Local Python scripts using common PDF libraries. No subprocess, no network calls. Proprietary license.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/pdf ~/.claude/skills/pdf

xlsx

Build and edit spreadsheets with working formulas and formatting.

For: Founders keeping finances, pricing models or trackers in Excel.
Source: anthropics/skills
License: Proprietary (source-available)
Last commit: 2026-07-16
Repo stars: 183,546
Our review: recalc.py runs LibreOffice through subprocess to recalculate formulas. No network calls. Proprietary license.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/xlsx ~/.claude/skills/xlsx

pptx

Create and edit PowerPoint decks from layouts and templates.

For: Anyone making pitch or sales decks.
Source: anthropics/skills
License: Proprietary (source-available)
Last commit: 2026-07-16
Repo stars: 183,546
Our review: thumbnail.py runs soffice and pdftoppm through subprocess to render previews. No network calls. Proprietary license.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/pptx ~/.claude/skills/pptx

doc-coauthoring

A structured workflow for writing specs, proposals and docs with the agent.

For: People writing longer documents in rounds.
Source: anthropics/skills
License: No license file in folder
Last commit: 2025-12-04
Repo stars: 183,546
Our review: Markdown instructions only. No scripts, no network calls. Note: the folder has no license file, so reuse terms are unclear.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/doc-coauthoring ~/.claude/skills/doc-coauthoring

Design and frontend

frontend-design

Pushes the agent away from generic-looking UI toward a deliberate visual direction.

For: Builders whose AI-made apps all look the same.
Source: anthropics/skills
License: Apache-2.0
Last commit: 2026-09-03
Repo stars: 183,546
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/frontend-design ~/.claude/skills/frontend-design

canvas-design

Make posters and static visuals as PNG or PDF from a design brief.

For: People who need simple graphics without a design tool.
Source: anthropics/skills
License: Apache-2.0
Last commit: 2026-04-20
Repo stars: 183,546
Our review: Instructions plus bundled font files. No scripts, no network calls.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/canvas-design ~/.claude/skills/canvas-design

theme-factory

Apply one of ten ready colour and font themes to slides, docs or pages.

For: Anyone who wants consistent styling quickly.
Source: anthropics/skills
License: Apache-2.0
Last commit: 2026-04-20
Repo stars: 183,546
Our review: Theme files and instructions. No scripts, no network calls.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/theme-factory ~/.claude/skills/theme-factory

web-design-guidelines

Reviews UI code against Vercel's web interface guidelines.

For: Developers who want an accessibility and UX pass on their pages.
Source: vercel-labs/agent-skills
License: MIT (stated in README; no LICENSE file)
Last commit: 2026-01-16
Repo stars: 32,964
Our review: Instructions only, but it tells the agent to fetch its rules at run time from raw.githubusercontent.com (vercel-labs/web-interface-guidelines), so what it does can change after you install it.

git clone --depth 1 https://github.com/vercel-labs/agent-skills.git /tmp/sk && cp -r /tmp/sk/skills/web-design-guidelines ~/.claude/skills/web-design-guidelines

Writing and marketing

copywriting

Write homepage, landing page and feature copy.

For: Founders writing their own site copy.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-15
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/copywriting ~/.claude/skills/copywriting

copy-editing

Edit existing marketing copy for clarity and persuasion in several passes.

For: Anyone polishing a page they already wrote.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-15
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/copy-editing ~/.claude/skills/copy-editing

seo-audit

Audit a site for technical and on-page SEO problems.

For: Small sites with no SEO person.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-15
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/seo-audit ~/.claude/skills/seo-audit

ai-seo

Improve how a site shows up in AI search answers and citations.

For: Sites that want to be cited by ChatGPT, Perplexity and AI Overviews.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-19
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls. It suggests running a third-party npx tool (is-agentic); that is optional and runs only if you approve it.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/ai-seo ~/.claude/skills/ai-seo

cro

Reviews a landing, pricing or signup page for why it is not converting and suggests specific changes and tests.

For: Indie builders with traffic but few signups or sales.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-08
Repo stars: 56,394
Our review: Markdown only: the skill, reference files and evals. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/cro ~/.claude/skills/cro

Running a small business

pricing

Work through pricing, packaging and tiers for a product.

For: Founders setting or changing prices.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-10
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/pricing ~/.claude/skills/pricing

launch

Plan a product or feature launch across channels.

For: Solo founders shipping something new.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-07
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/launch ~/.claude/skills/launch

customer-research

Plan interviews and turn customer feedback into findings.

For: Anyone validating an idea or a feature.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-02
Repo stars: 56,394
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/customer-research ~/.claude/skills/customer-research

Research and planning

competitor-profiling

Build structured profiles of competitors from their sites and search data.

For: Founders sizing up a market.
Source: coreyhaines31/marketingskills
License: MIT
Last commit: 2026-10-15
Repo stars: 56,394
Our review: Markdown only, but it expects Firecrawl and DataForSEO MCP tools, which are paid third-party services that need your own accounts.

git clone --depth 1 https://github.com/coreyhaines31/marketingskills.git /tmp/sk && cp -r /tmp/sk/skills/competitor-profiling ~/.claude/skills/competitor-profiling

writing-plans

Turn a spec into a step-by-step implementation plan before coding.

For: People who use agents for larger features.
Source: obra/superpowers
License: MIT
Last commit: 2026-09-25
Repo stars: 304,687
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/obra/superpowers.git /tmp/sk && cp -r /tmp/sk/skills/writing-plans ~/.claude/skills/writing-plans

Coding habits

requesting-code-review

Sends your finished change to a fresh reviewer subagent with only the diff and the requirements, then sorts feedback into must-fix and later.

For: Solo builders with no one else to review their code before it ships.
Source: obra/superpowers
License: MIT
Last commit: 2026-10-10
Repo stars: 304,687
Our review: Two Markdown files: the skill and a reviewer prompt template. Runs git rev-parse to get commit SHAs. No scripts of its own, no network calls.

git clone --depth 1 https://github.com/obra/superpowers.git /tmp/sk && cp -r /tmp/sk/skills/requesting-code-review ~/.claude/skills/requesting-code-review

systematic-debugging

Find the root cause of a bug before changing code.

For: Anyone stuck in fix-and-retry loops with an agent.
Source: obra/superpowers
License: MIT
Last commit: 2026-10-09
Repo stars: 304,687
Our review: Instructions plus find-polluter.sh, a shell script that bisects your test suite by running your tests. No network calls.

git clone --depth 1 https://github.com/obra/superpowers.git /tmp/sk && cp -r /tmp/sk/skills/systematic-debugging ~/.claude/skills/systematic-debugging

test-driven-development

Write the failing test first, then the code.

For: Developers who want agents to prove changes work.
Source: obra/superpowers
License: MIT
Last commit: 2026-09-18
Repo stars: 304,687
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/obra/superpowers.git /tmp/sk && cp -r /tmp/sk/skills/test-driven-development ~/.claude/skills/test-driven-development

verification-before-completion

Makes the agent run checks before it claims a task is done.

For: Anyone tired of "fixed" bugs that are not fixed.
Source: obra/superpowers
License: MIT
Last commit: 2026-07-23
Repo stars: 304,687
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/obra/superpowers.git /tmp/sk && cp -r /tmp/sk/skills/verification-before-completion ~/.claude/skills/verification-before-completion

webapp-testing

Drive a local web app with Playwright to check it works.

For: Builders checking their app in a real browser.
Source: anthropics/skills
License: Apache-2.0
Last commit: 2026-04-20
Repo stars: 183,546
Our review: with_server.py starts your dev server through subprocess and waits on localhost ports. Playwright scripts run locally. No other network calls.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/webapp-testing ~/.claude/skills/webapp-testing

react-best-practices

70 React and Next.js performance rules from Vercel.

For: React and Next.js developers.
Source: vercel-labs/agent-skills
License: MIT (stated in README; no LICENSE file)
Last commit: 2026-04-14
Repo stars: 32,964
Our review: Rule files in Markdown. No scripts, no network calls.

git clone --depth 1 https://github.com/vercel-labs/agent-skills.git /tmp/sk && cp -r /tmp/sk/skills/react-best-practices ~/.claude/skills/react-best-practices

supabase-postgres-best-practices

Postgres query, index, schema and security guidance from Supabase.

For: Apps on Supabase or Postgres.
Source: supabase/agent-skills
License: MIT
Last commit: 2026-07-30
Repo stars: 2,925
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/supabase/agent-skills.git /tmp/sk && cp -r /tmp/sk/skills/supabase-postgres-best-practices ~/.claude/skills/supabase-postgres-best-practices

Security reviews

supply-chain-risk-auditor

Check your dependencies for known vulnerabilities and risky packages.

For: Anyone shipping an app with npm or Python dependencies.
Source: trailofbits/skills
License: CC-BY-SA-4.0
Last commit: 2026-09-16
Repo stars: 7,791
Our review: Makes network calls by design to OSV, npm, PyPI, the Go proxy, deps.dev, the GitHub API and OpenSSF Scorecard. If the GitHub CLI is logged in it reads that token and sends it only to api.github.com. Runs pip-audit with flags that avoid running package code.

git clone --depth 1 https://github.com/trailofbits/skills.git /tmp/sk && cp -r /tmp/sk/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor ~/.claude/skills/supply-chain-risk-auditor

sharp-edges

Spot APIs and configs that are easy to misuse in dangerous ways.

For: Developers reviewing their own code for footguns.
Source: trailofbits/skills
License: CC-BY-SA-4.0
Last commit: 2026-09-16
Repo stars: 7,791
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/trailofbits/skills.git /tmp/sk && cp -r /tmp/sk/plugins/sharp-edges/skills/sharp-edges ~/.claude/skills/sharp-edges

agentic-actions-auditor

Audit GitHub Actions workflows that run AI agents for injection risks.

For: Repos using Claude, Codex or Gemini in CI.
Source: trailofbits/skills
License: CC-BY-SA-4.0
Last commit: 2026-09-16
Repo stars: 7,791
Our review: Markdown instructions only. No scripts, no network calls.

git clone --depth 1 https://github.com/trailofbits/skills.git /tmp/sk && cp -r /tmp/sk/plugins/agentic-actions-auditor/skills/agentic-actions-auditor ~/.claude/skills/agentic-actions-auditor

Building skills

skill-creator

Write, test and improve your own skills.

For: Anyone writing a SKILL.md.
Source: anthropics/skills
License: Apache-2.0
Last commit: 2026-04-20
Repo stars: 183,546
Our review: Eval scripts run claude -p through subprocess using your existing Claude Code login. The review viewer is a local page that loads Google Fonts and SheetJS from a CDN (pinned with an integrity hash) and posts feedback only to a local server. Uses lsof to free its port.

git clone --depth 1 https://github.com/anthropics/skills.git /tmp/sk && cp -r /tmp/sk/skills/skill-creator ~/.claude/skills/skill-creator

How we review

We only list skills from public repos whose URL loads, and we link to the folder, not a copy.
We read every file in the skill folder: SKILL.md, references and scripts. We look for network calls, subprocess and shell use, reads of tokens or credentials, obfuscated code and instructions that tell the agent to fetch and follow remote content.
Network calls and scripts are not automatic rejections. Where a skill has them, the note says what they do so you can decide.
We reject anything with hidden or surprise network calls, credential access beyond what the job needs, or code we cannot read.
Stars, licenses and last-commit dates are read from GitHub on the review date. We have not run every skill; a review is a read of the source, not a test.
Skills change after we read them. Check the commit history before you install, or pin to a commit.

Not listed

brand-guidelines (anthropics/skills): Swapped out on 2026-10-25: it ships Anthropic's own brand, so you must rewrite it before it helps your product.
internal-comms (anthropics/skills): Swapped out on 2026-10-25: templates for company status reports and newsletters, rarely needed by a solo builder or small shop.
brainstorming (obra/superpowers): Its optional visual companion runs a local server whose page loads a remote logo from primeradiant.com, which the code describes as telemetry. It is on by default unless you set an environment variable. Not malicious, but we only list skills with no surprise network calls.

How to install

Copy the skill folder into one of these places. The agent loads it when a task matches the skill description.

Claude Code: ~/.claude/skills/<name>/ for you, or .claude/skills/<name>/ in a project.
Cursor and Codex: ~/.agents/skills/<name>/ or .agents/skills/<name>/ in a project. Cursor also reads ~/.cursor/skills/.
The copy commands on this page target Claude Code; change the destination for other agents. Delete /tmp/sk between installs from different repos.

Skills follow the open Agent Skills format.

Sponsor this page: get in touch.