claude-skills is a large collection of reusable skills, commands, plugins, and supporting resources for coding agents across engineering, business, research, compliance, and productivity work. It is used by people who want agents such as Claude Code, Codex, Gemini CLI, or Cursor to follow specialized workflows. The catalogue contains selected skills and settings from the collection.
Borrowing it
Nothing to install: this file belongs to alirezarezvani/claude-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/alirezarezvani/claude-skills/main/CLAUDE.mdgit clone --depth 1 https://github.com/alirezarezvani/claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/alirezarezvani/claude-skills/claude-md)<a href="https://agentmods.dev/instructions/alirezarezvani/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/alirezarezvani/claude-skills/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/alirezarezvani/claude-skills/claude-md"><img src="https://agentmods.dev/badge/instructions/alirezarezvani/claude-skills/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.28805 | $0.28805 |
| Opus 5.5 | $0.11522 | $0.11522 |
| Sonnet 5.5 | $0.05761 | $0.05761 |
| Haiku 4.5 | $0.02881 | $0.02881 |
Grade B, and why
claude-skills CLAUDE.md scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- **23 deviations from upstream (6 cosmetic, 17 safety/hardening)**, found across ten rounds of adversarial code review rather than assumed safe from the surface docs. The **numbered list in `engineering/skillopt-sleep/R Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Current Scope:** 398 production-ready skills across 20 domains with 766 Python automation tools, 877 reference guides, 123 agents (cs-* + 7 personas), and 157 slash commands, distributed as 104 marketplace plugins. Hea Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
- **`engineering/security-guidance/`** (new, 5 files) — PreToolUse security reminder hook ported from David Dworken @ Anthropic (MIT). Preserves 9 upstream patterns verbatim (eval, pickle, dangerouslySetInnerHTML, innerH How it starts
The opening of the file, as written. The whole thing — 869 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
Project Purpose
This is a comprehensive skills library for Claude AI and Claude Code - reusable, production-ready skill packages that bundle domain expertise, best practices, analysis tools, and strategic frameworks. The repository provides modular skills that teams can download and use directly in their workflows.
Current Scope: 398 production-ready skills across 20 domains with 766 Python automation tools, 877 reference guides, 123 agents (cs-* + 7 personas), and 157 slash commands, distributed as 104 marketplace plugins. Headline counters are derived from the tree by scripts/derive_counters.py (run with --check to verify the docs still match). v2.11.2 (current) vendors engineering/skillopt-sleep/ — started as a verbatim, byte-for-byte copy of microsoft/SkillOpt's skillopt_sleep engine (stdlib-only, zero third-party deps) and its Claude Code plugin surface (skills/, hooks/, commands/, scripts/), then received 23 targeted patches after ten rounds of adversarial review (see engineering/skillopt-sleep/README.md's numbered "Deviations from upstream" list, the authoritative source — re-apply all 23 on re-vendor). Gives a local agent a nightly "sleep cycle": read-only harvest of past Claude Code session transcripts → mine recurring tasks → replay offline on the user's own API budget → consolidate into CLAUDE.md/SKILL.md edits behind a held-out validation gate → stage for review; nothing live changes until an explicit /skillopt-sleep adopt (which backs up first). Default mock backend spends no API budget. The heavier skillopt training package (benchmark-driven, needs numpy/openai/azure-* + hand-labeled train/val/test data per task) was deliberately not vendored — it optimizes one narrow, scoreable task at a time, which doesn't fit this repo's broad domain-expertise skills or its no-ML-in-scripts/no-test-framework conventions; skillopt_sleep mines its "benchmark" from real usage instead, which does fit. Attribution preserved in .claude-plugin/authoring-notes.json + LICENSE + README.md (MIT, © Microsoft Corporation / Yifan Yang), following the same verbatim-vendor pattern as loop-library/. Unreleased (post-v2.11.2, PR #961 merged) adds the agent-launcher/ top-level domain — a plugin re-implementation of Anthropic's launch-your-agent reference skill (Apache-2.0; independent, not a fork) for building Claude Managed Agents (CMA) in the user's own account. Every session starts with a goal (./my-agent/goal.json, surfaced by an opt-in AGENT_LAUNCHER_SESSION=1 SessionStart hook + /cs-goal); loop_compiler.py compiles that goal into a bounded grade→iterate loop (CMA user.define_outcome self-grading, max_iterations 1..20), a recurring POSIX-cron scheduled-deployment loop, or a single-pass interview→stage→launch workflow. 6 skills (orchestrator context: fork + interview + stage-launch + grade-iterate + run-without-you + wrap-up), 18 stdlib-only deterministic scaffolder tools (NO network/API calls — live launches emitted as BYOK curl that never prints the key), 4 agents, 8 /cs-* commands, opt-in hooks, 5 shared references, 4 assets; validators enforce CMA limits (≤20 skills/session, ≤8 memory stores, depth-1 multiagent, max_iterations ≤20, ≤1000 deployments/org). Distinct from engineering/agent-harness (generic bounded loop over any domain) and engineering/write-a-skill (authors Claude Code skills, not CMAs). Unreleased (post-v2.11.2) ships the productivity coverage expansion — public audit record audit/productivity-2026-07/ (all 7 legacy skills scored, 24/24 scripts smoke-tested, coverage map vs the personal-productivity canon) + 3 gap-filling plugins, each with a cs-* agent, /cs-* commands, 3 stdlib scripts and 3 cited references: weekly-review (GTD loop; review-gate refuses COMPLETE while a mandatory GET CURRENT step is missing), deep-work (time-block planner refusing >4h deep demand, shallow-work budget auditor, focus-session logger), meetings (MEET/ASYNC/NOT-READY cost gate, outcome-required agenda builder, action-item extractor with ORPHAN/NO-DUE flags). Unreleased (post-v2.11.1) added productivity/fable-goal — converts a rambling description of a desired outcome into one polished, copy-paste /goal prompt for a fresh autonomous session (ported from duncan-buildroom/freeskills). v2.11.1 (complete) upgrades product-team/ and project-management/ into agent-harness domains: both prose routers rebuilt as context: fork orchestrators with deterministic goal routers (exit-code route/ask/refuse), a Jira MCP snapshot bridge (Kanban-Guide-2025 flow metrics + seeded Monte Carlo forecasts, verified end-to-end into velocity_analyzer), a delegation-governance loop gate (human owner / reviewer / machine-checkable acceptance / close refusal), a Torres continuous-discovery cadence tracker + Opportunity Solution Tree linter, cs-pm-orchestrator + cs-product-orchestrator agents, and /cs-pm|grill-pm|pm-loop + /cs-product|grill-product|product-loop commands — plus the public audit record audit/pm-product-agentic-2026-07/ (AR-rubric scores for all 26 skills, research-backed improvement fields, executable verification criteria). v2.9.0 (complete) added the research-ops/ top-level domain — enterprise Research Operations (orchestrator + clinical-research + research-finance + market-research + product-research), the managed counterpart to the academic research/ domain, with context: fork orchestration and a Matt Pocock "Forcing-question library" in every SKILL.md plus /cs-grill-research-ops. v2.8.0 (complete) added 2 new top-level domains — business-operations/ (7 internal-ops skills: orchestrator + process-mapper + vendor-management + capacity-planner + internal-comms + knowledge-ops + procurement-optimizer) and commercial/ (8 per-deal-economics skills: orchestrator + pricing-strategist + deal-desk + partnerships-architect + channel-economics + commercial-policy + rfp-responder + commercial-forecaster) — with orchestrator skills using context: fork for chaining, Matt Pocock docs-anchored "Forcing-question library" in every SKILL.md, plus /cs-grill-bizops and /cs-grill-commercial. v2.8.2 adds a productivity-shaped handoff skill (sibling to engineering/handoff) inspired by Matt Pocock — first-run setup with configurable save location, redaction linter, SessionStart + SessionEnd hooks, fidelity self-check, --refresh flag. v2.8.1 upgraded the engineering role-skills (senior-fullstack / senior-frontend / senior-backend) with karpathy-coder + Matt Pocock decision engines + per-role forcing questions. v2.7.3 ports alirezarezvani/aeo-box — AEO (Answer Engine Optimization) skill into marketing-skill/ + security-guidance PreToolUse hook into engineering/. v2.7.0 added 13 Path-B skills across 3 top-level domains (productivity, marketing, research). v2.6.0 added 4 Matt Pocock-derived productivity skills.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 869 lines · 28,805 tokens per session scan B 83c553d6d260
claude-skills CLAUDE.md is an instructions file published in the GitHub repository alirezarezvani/claude-skills (28,607 stars, last pushed yesterday), licensed MIT. It adds 28,805 tokens to every session, about $0.1152 per session on Opus 5.5. A static security scan graded it B with 3 findings (asks for root, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-24.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
deepseek-harness AGENTS.md
AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).