Agent Skills
Instruction packs that give your AI agent know-how — some work anywhere, some only with the tool they came with.
✦ Standalone skills3,373
Self-contained. Install one into any project and it works on its own — no other software needed.
🧰 Tool add-ons952
Come bundled with a specific tool and only work together with it — they teach your agent how to operate that tool.
✓ Official
48 companiesPublished by the companies themselves — pick one to see everything they ship.
openai5 skills
anthropics10 skills
google-gemini17 skills
microsoft92 skills
github8 skills
facebook4 skills
react1 skill
coinbase6 skills
stripe7 skills
shopify2 skills
cloudflare11 skills
vercel22 skills
vercel-labs63 skills
supabase4 skills
huggingface6 skills
pytorch2 skills
flutter3 skills
DataDog11 skills
getsentry89 skills
brave2 skills
googleworkspace95 skills
google-labs-code3 skills
genkit-ai9 skills
expo2 skills
n8n-io21 skills
sveltejs3 skills
nuxt1 skill
shadcn-ui2 skills
bitwarden2 skills
automattic14 skills
larksuite35 skills
browserbase1 skill
browser-use9 skills
apify2 skills
clickhouse8 skills
neondatabase11 skills
upstash10 skills
posthog165 skills
langfuse2 skills
resend3 skills
sanity-io24 skills
streamlit4 skills
remotion-dev3 skills
tldraw7 skills
apollographql1 skill
mastra-ai28 skills
triggerdotdev1 skill
mcp-use4 skillsposthog
3 tool add-ons
security-audit
★ 35,336by posthog
Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings. Use when the user asks to "audit", "security-audit", "find vulnerabilities", "check for IDOR/SSRF/XSS/injection", or wants a security review of a file, directory, branch diff, or PR. Covers access control, injection, auth/secrets, sensitive data, business logic, web boundary, and AI agent/LLM trifecta risks. Produces calibrated findings with data flow, exploit request, fix, and confiden
🧰 Not standalone — use together with posthog/posthog
signals-scout-csp-violations
★ 35,336by posthog
Signals scout for Content Security Policy violation reports. Watches `$csp_violation` events for blocked-URL clusters, per-directive bursts, post-deploy regressions, and suspicious third-party domains, and files each validated cluster as a report in the inbox.
🧰 Not standalone — use together with posthog/posthog
react-doctor
★ 35,336by posthog
Diagnose and fix React codebase health issues. Use when reviewing React code, fixing performance problems, auditing security, or improving code quality.
🧰 Not standalone — use together with posthog/posthog