AGENT SKILLS · ÉQUIPEMENT DE MISSION

Des Agent Skills utiles classés selon leur usage réel

Comparez les Skills vérifiés par fonction, contenu, installations et fiabilité de la source avant de les ajouter.

PÉRIMÈTRE
VÉRIFIÉ
Skills
21 086
dépôts
3226
dernière synchronisation
22 oct. 2026
21 086 Skills
huangchihhungleo
Communauté

claude-real-video-for-agents

Install and use crv (claude-real-video) — a tool that lets any AI agent watch videos by extracting scene-aware keyframes, deduplicating them, and transcribing audio. Use when the user shares a video URL or file and wants it analyzed, summarized, or discussed.

installations
2
GitHub Stars
2,2 k
Mis à jour
1 oct.
tinyfish-io
Communauté

use-tinyfish

Use TinyFish for web search, fetching URLs, reading pages, current information, source-backed answers, research, docs, pricing/product pages, extraction, scraping, and browser automation. Use whenever the user asks to search, find, look up, research, compare, get information from the web, summarize a URL, fetch page content, or automate a website.

installations
2
GitHub Stars
2,2 k
Mis à jour
1 oct.
owasp
Communauté

security-guidance

Security-first development guidance based on OWASP ASVS (Application Security Verification Standard). Use this skill automatically when planning or implementing any code that touches user input, authentication, data persistence, network communication, file I/O, cryptography, or access control. This skill ensures all generated code adheres to industry-standard security practices with explicit references to applied guidance.

installations
2
GitHub Stars
184
Mis à jour
25 sept.
huaweicloud
Communauté

huawei-cloud-skill-creator

1. Six-phase pipeline for creating Huawei Cloud skills — Socratic requirements gathering, CLI→SDK→API research, MD generation, test preparation, detailed testing, and final cleanup & compliance check 2. Phase-chained dependency: each phase builds on the previous phase's output, no phase may be skipped 3. Supports CLI, SDK, and REST API execution modes with automatic fallback detection 4. Generates complete skill directory structure with SKILL.md, references/, scripts/, templates/ 5. Validates ag

installations
2
GitHub Stars
52
Mis à jour
30 sept.
huaweicloud
Communauté

huawei-cloud-skill-tester

End-to-end functional testing framework for Huawei Cloud skills — three-tier pipeline covering single-skill unit testing, multi-skill orchestration, and end-to-end full flow testing. Each phase produces structured JSON output with chain verification. Supports skill installation validation, functional analysis, CLI→SDK→API feasibility research, test case generation, real-environment execution with resource lifecycle, resource cleanup, multi-skill scenario orchestration, trigger-conflict detection

installations
2
GitHub Stars
52
Mis à jour
30 sept.
mui
Communauté

material-ui-theming

Guides Material UI theming and design tokens (createTheme, ThemeProvider, palette, colorSchemes, cssVariables, theme.vars, dark mode, TypeScript augmentation). Use when building or extending a theme, toggling light/dark, or aligning tokens across an app.

installations
2
GitHub Stars
99,1 k
Mis à jour
5 oct.
aws
Officiel

agents-build

Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments, or resource removal. Triggers: "add memory", "remember across sessions", "call agent from app", "invoke agent from code", "agent auth", "streaming", "VPC", "VPC connectivity", "can't reach from VPC", "multi-agent", "A2A", "A2A auth", "orchestrator not delegating", "specialist not called", "migrate Bedrock Agent", "migration issue", "change model", "browse

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

agents-get-started

Use when a developer wants to create a new agent project or get started with AgentCore. Handles framework selection, project scaffolding, first deploy, and first invocation. Triggers on: "build an agent", "create an agent", "get started", "new project", "agentcore create", "which framework", "Strands vs LangGraph", "hello world agent", "first agent", "create MCP server", "host MCP server", "agentcore dev", "dev server", "what port", "local development". Not for adding capabilities to existing pr

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

agents-optimize

Use when measuring or improving agent quality and performance — set up evaluators, online monitoring, CI/CD quality gates, observability, or cost optimization. Triggers on: "evaluate my agent", "add evaluator", "measure quality", "quality gate", "run evals", "agent too slow", "why is it slow", "reduce latency", "set up observability", "CloudWatch dashboard", "how much does my agent cost", "cost optimization", "logs not showing up", "logs missing", "spans not found", "eval failing", "eval error",

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

analyzing-release-readiness

- Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness, and potential rollback issues before merging. Trigger words include release readiness, analyze PR, analyze MR, review PR, risk analysis, pre-merge, safe to ship, ready to merge, ready to commit, any risks, before merging, validate changes, release management.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

aws-secrets-manager

Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords. Prevents AI agents from directly fetching secret values and teaches runtime dynamic references with asm-exec so plaintext never enters the LLM context window.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

chatting-with-aws-devops-agent

- Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency questions, and quick diagnostics — anything that needs a 5-30 second answer rather than a 5-8 minute deep investigation. Trigger words include cost, optimize, review, architecture, topology, what runbooks, show me, compare, audit, what if.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

coordinating-multi-space-devops-agent

Coordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and synthesize, or compare findings across accounts. Use whenever the user has more than one AgentSpace configured, mentions multiple AWS accounts, or asks something like "check both prod and staging", "compare across accounts", or "ask the knowledge space".

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

diff-scanning-with-aws-security-agent

Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

investigating-incidents-with-aws-devops-agent

Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug", "alarm fired", "service down". Polls and streams progress, then surfaces recommendations.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

pentesting-with-aws-security-agent

Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the managed Security Agent service, and returns verified runtime findings. Use when the user asks to pentest, run a penetration test, test their app's attack surface, find runtime vulnerabilities, register or verify a target domain, or check pentest status / findings.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

remediating-with-aws-security-agent

- Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did the security scan find", remediating or triaging security risks, or wants to start fixing reported vulnerabilities — even if they don't name the service explicitly. Trigger it for phrases like "get my security findings",

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

running-release-tests

- Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for regressions, or test API endpoints. Trigger words include run tests, UAT, test my app, test profile, UI test, API test, automated testing, regression test, QA, end-to-end test, run the QA agent.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
aws
Officiel

setup-security-agent

Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up security agent", "configure security scanner", "is security agent configured", or on first-time use before any scan or pentest.

installations
2
GitHub Stars
2,8 k
Mis à jour
5 oct.
yaklang
Communauté

binary-protection-bypass

- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFYSOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

installations
2
GitHub Stars
2,4 k
Mis à jour
13 sept.
yaklang
Communauté

dns-rebinding-attacks

- DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.

installations
2
GitHub Stars
2,4 k
Mis à jour
13 sept.
yaklang
Communauté

graphql-and-hidden-parameters

- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hidden parameters, schema abuse, and GraphQL authorization gaps.

installations
2
GitHub Stars
2,4 k
Mis à jour
13 sept.
yaklang
Communauté

heap-exploitation

- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

installations
2
GitHub Stars
2,4 k
Mis à jour
13 sept.
yaklang
Communauté

http-host-header-attacks

- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generating URLs, routing requests, or access control — enabling password reset poisoning, web cache poisoning, SSRF via routing, and virtual host bypass.

installations
2
GitHub Stars
2,4 k
Mis à jour
13 sept.