The open registry for AI Agent Skills

Discover, save, and install thousands of safety-reviewed skills for AI agents, all from one place. What are skills?

set up the CLI npm i -g skillmds

skills_indexed:
908,131
verified_publishers:
1,623
agents:
60+

works_with:

Official Agent Skills

Latest Agent Skills

trailofbits
Trailmark Variant Neighborhood
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.
7k bundle
trailofbits
Writing Lean Proofs
Writes and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions. Use when proving theorems in Lean, formalizing mathematics or specifications in Lean 4, defining new types or definitions in a Lean library, reviewing Lean proofs for readability and maintainability, refactoring long tactic proofs into lemmas, filling in sorry placeholders in a Lean development, setting up CI or linters for a Lean project, diagnosing slow proofs or maxHeartbeats timeouts, or writing custom tactics, macros, or linters.
7k bundle
trailofbits
Trailmark Finding Triage
Performs graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evidence. Use when deciding whether one candidate issue is reachable, prioritizing a finding before PoC work, preparing evidence for exploit validation, or checking whether a static-analysis result is actionable.
7k bundle
trailofbits
Trailmark Review Gate
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks. Use when reviewing a PR, branch, remediation commit, or release diff where graph-level security regressions should be checked before merge.
7k bundle
trailofbits
Slicing Code Context
Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent. Use when offloading function-, class-, caller-, callee-, call-path-, entrypoint-, or line-focused code tasks to constrained or locally hosted models without exposing the full repository.
7k bundle
trailofbits
Open Sourcing
This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch. Provides a release-readiness workflow covering secrets hygiene, licensing, documentation, CI, and language-specific packaging.
7k bundle
trailofbits
Github Triage
Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming, or reviewing a repository's open issues and PRs.
7k bundle
trailofbits
Code Improver
Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent. Keeps a cross-round findings ledger, escalates when fixes stop converging, and guards scope mechanically. Use when asked to 'improve this code until review passes', 'run an improvement loop with <reviewer>', or to iterate review-and-fix with a specific reviewer. For skills prefer the skill-improver entry; for a branch prefer pr-improver.
7k
View all

Frequently asked questions

What is an Agent Skill?

An Agent Skill is a reusable instruction file that teaches an AI agent to do one task well, such as reviewing code or extracting PDF tables. It ships as a SKILL.md file: YAML frontmatter plus Markdown instructions. The agent loads it automatically when a request matches, and the same file works across Claude Code, Cursor, Codex, and 60+ other agents.

Where can I download skills for Claude Code and other AI agents?

SkillMD (skillmd.com) is a free, open registry of thousands of AI agent skills. Search by task, category, or agent, then install with one CLI command (npx skillmds@latest add owner/name), through the hosted MCP server, or by copying the SKILL.md file directly. Every public skill passes an automated safety review before it is listed.

Do skills work across different agents and IDEs?

Yes. SKILL.md is an open standard, so the same skill works across Claude Code, Claude.ai, Codex, Cursor, Gemini, Antigravity and more. Each tool just reads the file from its skills directory. See skillmd.com/agents for per-agent install paths.

Are skills safe to install?

Treat them like any code you add to your workflow. Every skill on SkillMD shows capability flags (executes scripts, makes network calls, reads secrets, or docs-only), and SkillMD never runs a skill's scripts for you. Review the SKILL.md before installing, especially for unverified authors.

Do AI agent skills cost anything?

No. SkillMD is 100% free: searching, saving, installing, and publishing skills all cost nothing, and skills remain under their authors' original licenses.