AGENT SKILLS · MISSION KIT
Useful agent skills ranked by real adoption
Browse verified skills from public repositories. Compare what each skill does, package contents, install activity, and source evidence before adding it to your agent.
- CATALOG SCOPE
- VERIFIED
- skills
- 23,007
- repositories
- 3551
- last synced
- Nov 4, 2026
heyimcarlostypescript-best-practices
TypeScript type-system, trust-boundary, and module-contract practices. Use when designing, writing, refactoring, or reviewing TypeScript or TSX. When the code uses Effect, also use the effect skill.
- 1h installs
- 1
- GitHub stars
- 0
- Updated
- Aug 24
heyimcarlosunslop
Cut AI tells from any writing. Must always apply.
- 1h installs
- 1
- GitHub stars
- 0
- Updated
- Aug 24
heyimcarloswizard
Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
- 1h installs
- 1
- GitHub stars
- 0
- Updated
- Aug 24
pgscullyprivacy-compliance
Review, audit and draft privacy and data-protection compliance artefacts across jurisdictions - the Australian Privacy Act 1988 and its 13 Australian Privacy Principles, the EU GDPR, the EU AI Act and the EU Data Act, and the California CCPA and its regulations. Use when handling personal or sensitive data, designing collection, storage, sharing, retention or deletion; auditing requirements, designs, code or documentation at any lifecycle stage; creating privacy policies, notices or consent flow
- 1h installs
- 1
- GitHub stars
- 0
- Updated
- Sep 25
yeachan-heoagent-doc-discipline
Writing-time discipline for documents agents consume (the five surfaces, specs, tickets, .omc/skills/) — every rule checkable and carrying a why, steps before reference, one meaning in one home, no restating what the environment already says. Mandatory at drydock seed generation and the launch C5 sediment pass; opt-in for any other agent-facing doc edit. The companion of minimal-code-discipline: that one disciplines code, this one disciplines papers.
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoarchitecture-survey
Periodic architecture survey — walks the module graph and reports ranked deepening candidates (shallow modules, hypothetical seams, logic behind the wrong seam). Survey, not rescue: it finds candidates and hands them to the captain; it never refactors on its own.
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heodiagram
Use the smallest visual when prose must carry structure—control flow, call depth, module ownership, or change shape: pseudocode, call tree, component/file tree, Mermaid diagram, or diff. Skip it when prose already answers the question.
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heodrydock
Lay the keel of the shipyard harness in any repo — the 4-pillar shared environment (Context, Rules, Tools, Standards) across 5 surfaces (CLAUDE.md, skills, design-system, mcp/cli, shared context) so that every human and agent inherits the same design language and anyone can ship. Run once per repo; re-run with --check to audit drift.
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoexecute
Carry an approved task through to working, verified code
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heominimal-prose-discipline
Writing-time discipline for the prose an agent speaks to a human (replies, reports, pointers): a protected core never rewritten (code, commands, paths, errors, negators, numbers), filler dies, no narration, auto-clarity where terse misleads
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoomc-plan
Strategic planning with optional interview workflow
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoomc-review
Evaluate finished work for defects, risk, and simplification before it ships
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoproject-session-manager
Worktree-first dev environment manager for issues, PRs, and features with optional tmux sessions
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoremember
Review reusable project knowledge and decide what belongs in project memory, notepad, or durable docs
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoskillify
Turn a repeatable workflow from the current session into a reusable OMC skill draft
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heotrace
Evidence-driven tracing lane that orchestrates competing tracer hypotheses in Claude built-in team mode
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heoultragoal
Durable multi-goal workflow that persists plan/ledger artifacts under .omc/ultragoal and prints Claude /goal handoff text for the active session
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
yeachan-heowiki
LLM Wiki — persistent markdown knowledge base that compounds across sessions (Karpathy model)
- 1h installs
- 1
- GitHub stars
- 39.4K
- Updated
- Sep 27
mukul975auditing-cloud-with-cis-benchmarks
Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and ScoutSuite, interpreting failed controls, and tracking remediation for continuous compliance. Use when conducting a cloud security audit, validating CIS benchmark compliance (CIS v5 AWS, v4 Azure, v4 GCP), or setting up continuous cloud compliance monitoring.
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31
mukul975detecting-azure-lateral-movement
Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31
mukul975detecting-azure-storage-account-misconfigurations
Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions, using the azure-mgmt-storage Python SDK to generate a risk-scored report. Use when assessing an Azure subscription's storage accounts for misconfiguration, building cloud security posture checks, or investigating a suspected data exposure via public blob access.
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31
mukul975detecting-beaconing-patterns-with-zeek
'Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data. '
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31
mukul975implementing-azure-defender-for-cloud
'Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers, SQL, storage, and Key Vault, using Azure Policy for evaluation, Log Analytics for telemetry, Azure Arc for hybrid coverage, and Logic Apps for automated response. Use for Azure security monitoring, adaptive remediation, or regulatory compliance assessment; not for non-Azure-only protection or identity defense (Defender for Identity). '
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31
mukul975implementing-threat-intelligence-lifecycle-management
Build out a full CTI program around the six-phase threat intelligence lifecycle (direction, collection, processing, analysis, dissemination, feedback), including defining intelligence requirements, building a collection pipeline, normalizing data, and tracking dissemination feedback. Use when standing up or maturing a threat intelligence program, defining intelligence requirements, or designing collection-to-dissemination workflows for a CTI team.
- 1h installs
- 1
- GitHub stars
- 33.4K
- Updated
- Aug 31