Skip to content

Browse Secure Claude Skills

Search verified agent skills and review security grades before installing · full A–Z index

Visual PrAPosts a concise visual outline as a GitHub pull request comment. Use only when the user explicitly asks for visual-pr.developmentgobashVotes: 0GitHub stars: 123
Job ReportsADelivers reports that background jobs leave in an inbox folder, and says when an expected report is missingdevelopmentVotes: 0GitHub stars: 10
Writing ShapeAWriting, exploit: shape raw material into an article, paragraph by paragraph.developmentgoapiVotes: 0GitHub stars: 382
Samson FactoryACoordinator-only native Codex issue-to-develop workflow. Specialists use only their assigned role and task.developmentpythonrustVotes: 0GitHub stars: 382
Ask SonnerAGuide to Sonner, the React toast library — install and wire up the Toaster, pick the right toast() call, promise and loading toasts, updating, dismissing and persisting toasts, styling, theming and icons, positioning and multiple toasters. Use when working with Sonner or troubleshooting it — toasts that don't appear, appear twice, lose their styles, ignore Tailwind classes, sit behind a modal, or don't follow dark mode.developmentgoshellVotes: 0GitHub stars: 382
Comprehension LadderA[UDS] Turn one hard-to-follow AI output into easier forms: controlled text, a Mermaid diagram, a single-file HTML explainer. All forms come from one shared outline, so the form changes and the facts do not. Use when: an AI explanation, spec or code walk-through is too dense to judge, a non-specialist must approve something from it, you want a diagram or an offline explainer page of it. Not for: writing new content or adding analysis — this skill only re-forms a text that exists; generating do...developmentrustgoVotes: 0GitHub stars: 76
Comprehension LadderA[UDS] 把一段难懂的 AI 输出换成较好懂的形式：受控文字、Mermaid 图、单文件 HTML 解说页。所有形式都来自同一份大纲，所以形式会变，事实不会变。 Use when: AI 的说明、规格或代码解说太密、读的人看不出该不该核准；非专业的人必须靠它做核准；想要它的图或离线解说页。 Not for: 写新内容或加新分析——本技能只把既有的文字换形式；从源代码产生文档——请用 /docgen；为专家读者缩短文字——直接改写即可。 Keywords: comprehension ladder, explainer, controlled language, Mermaid, HTML explainer, outline, plain language, understand AI output, 理解阶梯, 受控语言, 流程图, 解说页, 换形式不换事实.developmentdocumentationVotes: 0GitHub stars: 76
Comprehension LadderA[UDS] 把一段難懂的 AI 輸出換成較好懂的形式：受控文字、Mermaid 圖、單檔 HTML 解說頁。所有形式都來自同一份大綱，所以形式會變，事實不會變。 Use when: AI 的說明、規格或程式碼解說太密、讀的人看不出該不該核准；非專業的人必須靠它做核准；想要它的圖或離線解說頁。 Not for: 寫新內容或加新分析——本技能只把既有的文字換形式；從原始碼產生文件——請用 /docgen；為專家讀者縮短文字——直接改寫即可。 Keywords: comprehension ladder, explainer, controlled language, Mermaid, HTML explainer, outline, plain language, understand AI output, 理解階梯, 受控語言, 流程圖, 解說頁, 換形式不換事實.developmentdocumentationVotes: 0GitHub stars: 76
Short RaceAMake a short vertical (9:16) video that races two AI models on the same prompt in lpm, side by side: Run in duplicates puts each model in its own copy of the project, shown as side-by-side columns, the same prompt sent to both, the real finish times on the pane headers, then both results live in lpm's browser. Default prompt: a giraffe flying a one-seat plane as animated HTML. Models in, 1080x1920 MP4 + cover + post caption out. Use when the user asks for a TikTok, Reel or Short that compares...developmentrustgoVotes: 0GitHub stars: 152
Short PublishAPost a finished vertical lesson from ~/Movies/lpm-lessons/tiktok/<slug>/ to YouTube Shorts (LPM channel, through Chrome) and TikTok (@lpm06557, from the user's iPhone through iPhone Mirroring) in parallel: the MP4, the caption and hashtags from post.txt, the headline cover, each platform's settings, then both links logged and the title listed in SHORTS.md. Use when the user asks to upload, publish or post a short, vertical, TikTok or YouTube Shorts video, to one platform or both.developmentgonodeVotes: 0GitHub stars: 152
LessonAMake a narrated lesson video about lpm from the real desktop app, recorded on a pristine data directory. Title and optional narration text in, MP4 with OpenAI voice out, audio in sync with the clicks. Use when the user asks for a video lesson, tutorial, screencast, or YouTube video about lpm.developmentshellnodeVotes: 0GitHub stars: 152
Lesson PublishAPublish a finished lesson MP4 from ~/Movies/lpm-lessons/<slug>/ to the lpm YouTube channel through Chrome (YouTube Studio): search-optimized title and description with chapters, tags, category, the title-card thumbnail, Public, then added to the lesson playlist. Use when the user asks to upload, publish or post a lesson video to YouTube. Vertical videos from ~/Movies/lpm-lessons/tiktok/ go to YouTube Shorts through short-publish instead.developmentgonodeVotes: 0GitHub stars: 152
DigestAMake an explanation easy for Zalo to digest. Text always comes first, in STE-lite (80% of ASD-STE100, checked by ste-lint.py). At most ONE extra goes with it, chosen by pick-format.py and never by asking him. The extra is an exact boxes-and-arrows diagram PNG (flow, sequence, compare, map) or a self-contained interactive HTML page. Use when you explain a system, a report, a plan or a result to Zalo, or he asks to "break this down", "make this easier to digest", "diagram this" or "show it as a...developmentpythonrustVotes: 0GitHub stars: 2
Video EditingACut, normalize, caption, and inspect short-form video and audio with ffmpeg, or analyze a reel from its actual media. Use when a clip, recording, or reel URL is supplied and the deliverable is an edit or an analysis of the footage. Writing captions or posts needs no skill.developmentgoVotes: 0GitHub stars: 29
Codex PetABuild or repair a Codex pet sprite atlas with the deterministic assembly and QA pipeline. Use only for Codex pet assets; general image or media work needs no skill.developmentVotes: 0GitHub stars: 29
Architecture DesignADefine Module responsibilities, Interfaces, Function allocation, state authority, realization and derived ARs. Compose appropriate 4+1 views for integrated design review.developmentgosqlVotes: 0GitHub stars: 3
Secret SerializationAFinds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump, NamedTuple, JavaScript JSON.stringify and util.inspect, structured logs, tracing spans, and error reports. Use when asked to "check for secret serialization", "credential in repr", "repr=False audit", "secret in spans", "token in logs", or when a change adds a credential field to a dataclass, model, or config object, or adds code that stri...developmentjavascripttypescriptVotes: 0GitHub stars: 1,037
TasksA**Outcome** The audit method in [`../docs/research/R8-context-economy-for-coding-agents.md`](../docs/research/R8-context-economy-for-coding-agents.md) becomes something another project invokes rather than reads: a skill that runs the sixteen steps in two phases, walks the `F1`–`F5` checklist, and produces the two documents. **Packaging, not rewriting** — if it turns into a rewrite, the shaping rules failed and that is the finding.developmentrustgoVotes: 0GitHub stars: 2
UpstreamA> **Handover record — sent 2026-08-14.** > **Route:** one issue on this project's own repository, > [`uchimata2/handoff-skill#75`](https://github.com/uchimata2/handoff-skill/issues/75). The body is > this document with its links made absolute; the rows are identical. > **The route is retired for anything found after 2026-08-15** ([T-164](../../tasks/T-164-retire-the-cross-repo-register-in-favour-of-a-branch.md)): > the next defect this project finds in the handoff skill arrives as a branch wi...developmentgoshellVotes: 0GitHub stars: 2
Preflight AuditAAudit an app for security holes before it ships, then fix them and prove the fix. Use when the user asks if the app is safe or ready to launch, wants a security review or pre-deploy check, pasted or exported an app from Lovable, Bolt, v0, Cursor or Claude Code, or asks to harden Supabase, Firebase, Stripe, auth, uploads, dependencies or API keys. Reads the whole project, no git history needed.developmentpythonrustVotes: 0GitHub stars: 2