skill-scanner · skill-scanner verified and signed

Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret expo

· SkillTotal website read, tools not yet checked

Free static scanner for MCP servers, agent skills and npm/PyPI packages. Finds prompt injection, tool poisoning and exfiltration with file:line evidence.

· SkillsSafe website read, tools not yet checked

Free security scanner for AI agent skills. Scan any SKILL.md, MCP config, or system_prompt for credential theft, data exfiltration, and prompt injection. Supports OpenClaw, Claude Code, Cursor, Codex. No signup required.

security-review · security-review verified and signed

AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for

create-skill · create-skill verified and signed

Scaffolds new agent skills for the dotnet/skills repository. Use when creating a new skill, generating SKILL.md files, writing a skill description that the runtime will actually route to, or setting up skill directory structures. Handles frontmatter generation, section templates, and validation guid

skill-creator · skill-creator verified and signed

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.

workflows-doctor · workflows-doctor verified and signed

Diagnose Zapier Workflows skill and SDK CLI compatibility. Use when a workflow skill asks for a compatibility check, when SDK commands or flags are missing, when a workflow skill may be stale, or when updating workflow skills after an SDK CLI change.

rssSkillList · Cloudflare API verified and signed

List Threat Signals skills

mongodb-natural-language-querying · mongodb-natural-language-querying verified and signed

Generate read-only MongoDB queries (find) or aggregation pipelines using natural language, with collection schema context and sample documents. Use this skill whenever the user asks to write, create, or generate MongoDB queries, wants to filter/query/aggregate data in MongoDB, asks "how do I query..

get_skill · implementation-skills found in code, not yet checked

The full guidance for one skill, by name. Use list_skills first to pick the name.