cli-tool skills

574 tagged cli-tool, measured the same way as everything else here.

Browse within: cloudflare-workers 112curl 112ai-skills 102anthropic-skills 102ai-coding-assistant 86devtools 58code-scanning 57dependency-scanning 57malware-detection 57context-management 48ai-developer-tools 46codex-cli 44agent-orchestration 40ai-toolkit 36

harness-engineering

97

guanyang/open-agent-hub

Skill Claude CodeCodex

This skill should be used when designing autonomous agent harnesses: research loops, evaluation scaffolds, locked and editable surfaces, durable logs, novelty gates, pruning, rollback, PR preparation, and human approval boundaries.

not rated 960 yesterday A 47 tokens MIT

hosted-agents

98

guanyang/open-agent-hub

Skill Claude CodeCodex

This skill should be used when designing hosted or background agent infrastructure: sandboxed execution, remote coding environments, warm pools, session persistence, multiplayer collaboration, self-spawning agents, or Modal-style sandboxes.

not rated 960 yesterday A 46 tokens MIT

agent-teams

99

christopherlouet/claude-base

Skill Claude CodeCodex

Multi-agent team orchestration with native Agent Teams. Trigger when the user wants to launch a team of agents, coordinate parallel work with inter-agent communication, or use swarm mode.

not rated 5 today A 39 tokens MIT

api-mocking

100

christopherlouet/claude-base

Skill Claude CodeCodex

API mock configuration for tests. Trigger when the user wants to mock APIs, use MSW, or test without a backend.

not rated 5 today A 29 tokens MIT

data-pipeline

101

christopherlouet/claude-base

Skill Claude CodeCodex

ETL/ELT pipeline design. Trigger when the user wants to create data flows, transformations, or orchestration.

not rated 5 today A 28 tokens MIT

mex-inbox

102

mex-memory/mex

Skill Claude CodeCodex

Prepare and manage governed MEX Inbox proposals for durable Spec-family knowledge. Use when the user clearly asks to capture, create, save, or draft a MEX product Spec, requirement, constraint, acceptance criterion, or durable product-spec decision for team review, or explicitly invokes /mex-inbox or $mex-inbox. Do…

not rated 1.5k today A 116 tokens MIT

mex-relay

103

mex-memory/mex

Skill Claude CodeCodex

Prepare and manage durable MEX team handoffs. Use when the user asks to hand work to a person or team, prepare an end-of-session handoff, save what the next engineer needs, create a MEX Relay, take or close a Relay, or explicitly invokes /mex-relay or $mex-relay. Treat Relay as a memory and context baton, not chat…

not rated 1.5k today A 107 tokens MIT

gmgn-dev-score

104

GMGNAI/gmgn-skills

Skill Claude CodeCodex

Decide whether a token creator's NEXT launch is safe to buy. Scores a dev address 0-100 on two separate axes — CONDUCT (will he dump on you at open) and POWER (has he ever actually built anything big) — from his full launch history and every trade he made in his own coins, then returns a buy / don't-buy call with a…

not rated 500 today A 529 tokens MIT

owasp-security

105

NOMARJ/sigil

Skill Claude CodeCodex

Comprehensive OWASP security knowledge base and automation framework for the Enclave AI platform. Provides specialized security expertise for air-gap environments, OWASP Top 10 compliance, and enterprise security requirements.

not rated 5 today A 0 tokens Apache-2.0

differential-review

106

NOMARJ/sigil

Skill Claude CodeCodex

Security-focused differential code review analyzing git diffs in context of the broader codebase. Part of the Nomark Method Layer 2 security verification. Use whenever reviewing a PR, preparing to merge, or someone asks for a 'security review of this diff', 'review these changes for security', or 'is this PR safe to…

not rated 5 today A 72 tokens Apache-2.0

fp-check

107

NOMARJ/sigil

Skill Claude CodeCodex

Mandatory false positive gate review for security findings. Part of the Nomark Method Layer 2 verification. Use after security scans produce findings, when triaging vulnerability reports, or when someone asks 'is this a real issue', 'false positive check', 'triage these findings'.

not rated 5 today A 58 tokens Apache-2.0

insecure-defaults

108

NOMARJ/sigil

Skill Claude CodeCodex

Detect insecure default configurations, hardcoded credentials, fail-open security patterns, and dangerous defaults in code and config files. Part of the Nomark Method Layer 1 security scanning. Use whenever code is committed, config files change, or someone says 'check for secrets', 'credential scan', 'security…

not rated 5 today A 76 tokens Apache-2.0

second-opinion

109

NOMARJ/sigil

Skill Claude CodeCodex

Multi-model independent security review — routes code to a second LLM for review without sharing the primary model's analysis. Part of the Nomark Method Layer 3 verification. Use for security-critical changes (auth, payment, PII, crypto, infra), when someone asks for 'second opinion', 'independent review'…

not rated 5 today A 85 tokens Apache-2.0

sharp-edges

110

NOMARJ/sigil

Skill Claude CodeCodex

Identify error-prone APIs, dangerous configurations, and footgun designs in code. Part of the Nomark Method Layer 1 security scanning. Use whenever reviewing code for safety, someone asks 'is this code safe', 'dangerous patterns', 'footgun check', or when analyzing code that uses complex or risky APIs.

not rated 5 today A 68 tokens Apache-2.0

supply-chain-audit

111

NOMARJ/sigil

Skill Claude CodeCodex

Audit the supply-chain threat landscape of project dependencies. Part of the Nomark Method Layer 1 security scanning. Use whenever dependency files change (package.json, requirements.txt, go.mod, Cargo.toml), someone adds a new dependency, or someone asks 'are our dependencies safe', 'dependency audit', 'supply chain…

not rated 5 today A 72 tokens Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when working with Conductor's context-driven development methodology, managing project context artifacts, or understanding the relationship between product.md, tech-stack.md, and workflow.md files.

not rated 5 today A 40 tokens Apache-2.0

track-management

113

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when creating, managing, or working with Conductor tracks - the logical work units for features, bugs, and refactors. Applies to spec.md, plan.md, and track lifecycle operations.

not rated 5 today A 44 tokens Apache-2.0

workflow-patterns

114

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.

not rated 5 today A 35 tokens Apache-2.0

devops-teams

115

NOMARJ/sigil

Skill Claude CodeCodex

Skill for orchestrating Claude Code agent teams on DevOps tasks with NOMARK discipline.

not rated 5 today A 0 tokens Apache-2.0

fix-finding

116

NOMARJ/sigil

Skill Claude CodeCodex

Analyze a Sigil scan finding and propose a code fix with explanation.

not rated 5 today A 17 tokens Apache-2.0

generate-policy

117

NOMARJ/sigil

Skill Claude CodeCodex

Generate a Sigil sandbox policy YAML from scan results for secure agent execution.

not rated 5 today A 17 tokens Apache-2.0

review-quarantine

118

NOMARJ/sigil

Skill Claude CodeCodex

Review items in Sigil quarantine and help decide whether to approve or reject them. Use when scan results are available or when managing quarantined code.

not rated 5 today A 33 tokens Apache-2.0

scan-file

119

NOMARJ/sigil

Skill Claude CodeCodex

Scan a specific file or code selection for security threats using Sigil. Use when reviewing a single script, config, skill manifest, or MCP server file before running or installing it. Trigger phrases (English): 'is this safe to install', 'scan this skill', 'vet this MCP server', 'check this package before…

not rated 5 today A 108 tokens Apache-2.0

scan-package

120

NOMARJ/sigil

Skill Claude CodeCodex

Scan a pip or npm package before installation using Sigil. Use when installing dependencies, adding new packages, or when package behavior seems suspicious. Auto-invoke before pip install or npm install commands. Trigger phrases (English): 'is this safe to install', 'check this package before installing', 'scan this…

not rated 5 today A 114 tokens Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: