Trail of Bits Security Skills
Trail of Bits publishes a set of skills for security research, vulnerability detection and audit workflows.
- Workflow
Trail of Bits · 7,898 stars
Workflow
Workflow for Claude Code by NVIDIA, listed in awesome-claude-code under Security.
Checked 2026-10-31
uv tool install git+https://github.com/NVIDIA/skillspector.gitCommands come from the project's own docs or registry entry. Check them against the source before you run them.
Loading poll...
SkillSpector is a security scanner for agent skills from NVIDIA. Its description says it looks for vulnerabilities, malicious patterns, prompt injection, data exfiltration and supply chain risk in Claude Code, Codex and MCP skills before you install them. It is Apache 2.0 licensed with 23.5 thousand stars, and the README places it inside NVIDIA's verified skills pipeline. The quick install is uv tool install git+https://github.com/NVIDIA/skillspector.git, and a claude mcp add line is given for using it as an MCP server. The README carries a notice that setup downloads further open source packages, so read their licences. We would use a scanner like this as one check among several, since pattern matching cannot prove a skill is safe. Its value is catching the obvious cases cheaply, such as a skill that pipes a remote script into a shell. Last push 30 October 2026, and we have not run it.
Trail of Bits publishes a set of skills for security research, vulnerability detection and audit workflows.
Trail of Bits · 7,898 stars
Claude Code Action runs Claude inside GitHub workflows, so it can respond to pull requests and issues.
Anthropic · 9,721 stars
The official plugin directory is an Anthropic-managed repository of Claude Code plugins, described as a directory of high quality plugins.
Anthropic · 45,440 stars
Plannotator lets you annotate and review an agent's plans and code diffs in a visual page, share them with a team, and send the feedback back to the agent in one click.
backnotprop · 9,786 stars
Checked 2026-10-31
Checked 2026-10-31
Checked 2026-10-31
Checked 2026-10-31
Checked 2026-10-31
Tried it with one of these? Vote below: works for me, or not.
Run this command: uv tool install git+https://github.com/NVIDIA/skillspector.git. The install box on this page has the command for each agent it works with.
It is published under the Apache 2.0 licence.
It is maintained by NVIDIA. The code is at github.com/NVIDIA/SkillSpector.
Loading poll...
Loading reviews…
Only members can review this page. Sign in
Everything Claude Code, shortened to ECC, calls itself an agent harness performance optimization system and bundles skills, memory, security checks and research-first development habits.
Affaan Mustafa · 293,389 stars
gstack is Garry Tan's published Claude Code setup, described in the repository as 23 opinionated tools that act as CEO, designer, engineering manager, release manager, docs engineer and QA.
Garry Tan · 138,322 stars
Diagram Design is a skill for producing editorial-style diagrams as self-contained HTML and SVG, with 45 diagram types according to its description.
Cathryn Lavery · 63,253 stars
Scientific Agent Skills, listed here as Claude Scientific Skills, is a library of 177 ready-made skills plus more than 100 scientific databases, covering biology, chemistry, medicine and drug discovery, according to its README.
K-Dense · 55,403 stars
SuperClaude is a configuration framework for Claude Code that adds specialised commands, cognitive personas and development methodologies.
SuperClaude-Org · 23,916 stars
Claude Obsidian turns an Obsidian vault into a knowledge base that Claude Code maintains.
Agrici Daniel · 16,008 stars
The all-in-one WordPress community stack
Also ours: wbcomdesigns.comvapvarun.combrndle.com