Browse Secure Claude Skills
Search verified agent skills and review security grades before installing · full A–Z index
- Neo4j Genai Plugin SkillUse Neo4j GenAI Plugin ai.text.* functions and procedures for in-CypherVotes: 0GitHub stars: 114
- Neo4j Gds SkillNeo4j Graph Data Science (GDS) embedded plugin via Python client or Cypher —Votes: 0GitHub stars: 114
- Neo4j Driver Python SkillNeo4j Python Driver v6 — driver lifecycle, execute_query, managed and explicitVotes: 0GitHub stars: 114
- Neo4j Driver Javascript SkillNeo4j JavaScript/TypeScript Driver v6 — driver lifecycle, executeQuery,Votes: 0GitHub stars: 114
- Neo4j Driver Java SkillNeo4j Java Driver v6 — driver lifecycle, Maven/Gradle setup, executableQuery,Votes: 0GitHub stars: 114
- Neo4j Driver Go SkillCovers the Neo4j Go Driver v6 — driver lifecycle, ExecuteQuery, managed andVotes: 0GitHub stars: 114
- Neo4j Driver Dotnet SkillNeo4j .NET Driver v6 — IDriver lifecycle, DI registration (singleton), ExecutableQueryVotes: 0GitHub stars: 114
- Neo4j Document Import SkillIngests unstructured and semi-structured documents into Neo4j as a knowledge graph.Votes: 0GitHub stars: 114
- Neo4j Cypher SkillGenerates, optimizes, and validates Cypher 25 queries for Neo4j 2025.x and 2026.x.Votes: 0GitHub stars: 114
- Neo4j Aura Graph Analytics SkillServerless Aura Graph Analytics (AGA) GDS Sessions — covers GdsSessions,Votes: 0GitHub stars: 114
- Neo4j Agent Memory SkillAuthoritative reference for the neo4j-agent-memory Python package — a graph-native memory system for AI agents built on Neo4j — and for the hosted service (NAMS) at memory.neo4jlabs.com. Use this skill whenever the user mentions neo4j-agent-memory, agent memory with Neo4j, context graphs, the POLE+O model, MemoryClient/MemorySettings, the memory MCP server, or any of the framework integrations (LangChain, PydanticAI, CrewAI, AWS Strands, Google ADK, Microsoft Agent Framework, OpenAI Agents, L...Votes: 0GitHub stars: 114
- Ts Module BoundariesMake each package in a TypeScript repo reachable only through its entry-point files, enforced by a dependency-linter check in CI and proven to bite with a deliberate bad import. Use when the decider asks for enforced module boundaries or deep modules, when a codebase-review boundaries-vs-reality finding is adopted for a TypeScript repo, or when code keeps importing past a package's entry points.Votes: 0GitHub stars: 40
- RetroRead a sample of one repo's past agent sessions, Claude Code and Codex, find the friction the agents hit, and return a short ranked list of fixes in plain words, each labeled and routed to whoever owns the fix. Use when the user asks for a retro or retrospective on agent work, asks what keeps going wrong in a repo's agent sessions, or names past sessions to mine for friction.Votes: 0GitHub stars: 40
- WdymDecode this session's agent output for the supervising user — prose conclusions, raw tool output (logs, diffs, stack traces, query results), or subagent reports — grounded in the session's own evidence. Trigger on self-directed comprehension or verification asks with no named audience: 'wdym', 'what do you mean', 'I don't follow', 'I don't understand', 'what just happened', 'what does this output mean', 'walk me through what you did', mid-task 'what is X', 'why this way', 'how did you verify'...Votes: 0GitHub stars: 8
- Tasks**Outcome** The audit method in [`../docs/research/R8-context-economy-for-coding-agents.md`](../docs/research/R8-context-economy-for-coding-agents.md) becomes something another project invokes rather than reads: a skill that runs the sixteen steps in two phases, walks the `F1`–`F5` checklist, and produces the two documents. **Packaging, not rewriting** — if it turns into a rewrite, the shaping rules failed and that is the finding.Votes: 0GitHub stars: 2
- HtmldeckBuild or critique a single-file HTML presentation that does not look generated — one .html that opens by double-clicking, renders with the network disabled, and carries real diagrams, progressive disclosure and considered typography. Use when the user asks for a presentation, slide deck, pitch deck, slides, or an HTML deck; when they want an existing deck reviewed, critiqued or scored; or when they point at a .html deck and ask for changes. Asks exactly two questions.Votes: 0GitHub stars: 2
- Upstream> **Handover record — sent 2026-08-14.** > **Route:** one issue on this project's own repository, > [`uchimata2/handoff-skill#75`](https://github.com/uchimata2/handoff-skill/issues/75). The body is > this document with its links made absolute; the rows are identical. > **The route is retired for anything found after 2026-08-15** ([T-164](../../tasks/T-164-retire-the-cross-repo-register-in-favour-of-a-branch.md)): > the next defect this project finds in the handoff skill arrives as a branch wi...Votes: 0GitHub stars: 2
- Feature ScoutCompetitor analysis, idea scouting and clone specs in the browser. Explores a web app or website — above all LOGGED-IN dashboards and tools: every menu, tab, form, dropdown and metric (view only, never trigger), reconstructs workflows and formulas, and delivers one of three results — a comparison with your own project (what we're missing, what to reuse, what's duplicate, what's weak, build plan), an idea report when you haven't built anything yet (adopt, do better, avoid, build in stages), or...Votes: 0GitHub stars: 2
- Secure By DefaultWrite authentication, database access, secret handling, payments, file uploads, and LLM endpoints securely by default. Use whenever adding or editing login or sessions, Supabase or Firebase queries, API routes or Server Actions, environment variables or API keys, Stripe or checkout code, upload handlers, CORS, redirects, or a route that calls an LLM, even when the user does not mention security.Votes: 0GitHub stars: 2
- Preflight AuditAudit an app for security holes before it ships, then fix them and prove the fix. Use when the user asks if the app is safe or ready to launch, wants a security review or pre-deploy check, pasted or exported an app from Lovable, Bolt, v0, Cursor or Claude Code, or asks to harden Supabase, Firebase, Stripe, auth, uploads, dependencies or API keys. Reads the whole project, no git history needed.Votes: 0GitHub stars: 2