Ranking

Claude Code Skills Ranking

Multi-dimensional scoring, updated weekly — find the best Skills to install

Last updated: 2026-10-09
Category
Sort by
#1
Matt Pocock TypeScript Skillsmattpocock/skills
by mattpocockCommunityAuditedMedium Risk

Oathe: https://oathe.ai/report/mattpocock/skills

TypeScript master skills: type inference, refactoring, best practices

74
/ 100
298.9k starsweekly growth +5.9k·HN 5Positive
199 Open Issues·79 Last 30d
Adoption25/25
Community6.7/20
Quality16/20
Security15/15
Credibility5/10
Ecosystem6.7/10
Coding

“Strong instructions and safety boundaries, but 37 generic engineering skills heavily overlap Shareuhack native planning, TDD, review, and debugging; do not adopt the pack wholesale.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
GitHubgrill-me skill hit 22k stars in 24 hours, reached GitHub Trending #1 globally — called the "npm moment" for Claude Code Skills
#2
Superpowersobra/superpowers
by obraCommunityAuditedMedium Risk

Oathe: https://oathe.ai/report/obra/superpowers

Comprehensive agentic dev skills: TDD, debugging, code review, planning

73
/ 100
302.7k starsweekly growth +2.7k·HN 9Positive
349 Open Issues·58 Last 30d
Adoption25/25
Community12/20
Quality8/20
Security15/15
Credibility5/10
Ecosystem8.3/10
CodingProductivity

“Instructions are strong, but subagent and Git authority is broad; use only in isolated, supervised development workflows.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
HN"I can't recommend this post strongly enough. The way Jesse is using these tools is wildly more ambitious than most other people." — simonw
HN"Brainstorming skill is great. It uses subagents to adversarially review its own spec/plan; that has caught several things I would've missed." — tao_oat
#3
Addy Osmani Agent Skillsaddyosmani/agent-skills
by addyosmaniCommunityAuditedMedium Risk

Oathe: https://oathe.ai/report/addyosmani/agent-skills

Web quality skills: performance, accessibility, code quality analysis

72
/ 100
109.1k starsweekly growth +2.0k·HN 2Positive
146 Open Issues·10 Last 30d
Adoption24.9/25
Community2.7/20
Quality16/20
Security15/15
Credibility5/10
Ecosystem8.3/10
CodingProductivity

“Quality and security guidance are strong, but planning, TDD, review, performance, accessibility, and Git workflows substantially overlap Shareuhack capabilities.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
Twitter"Google engineering practices as agent skills — organized into 19 skills & 7 commands for AI agents." — @bibryam
#4
Anthropic Official Skills Repoanthropics/skills
by AnthropicOfficialAuditedMedium Risk

ClawSecure: https://www.clawsecure.ai/report/919ad1e94278fcc3

Anthropic's official skills repo: creative, technical, enterprise, and document skills

68
/ 100
182.5k starsweekly growth +1.1k·HN 3Positive
1425 Open Issues·24 Last 30d
Adoption20.6/25
Community4/20
Quality8/20
Security15/15
Credibility10/10
Ecosystem10/10
CodingContentDesignProductivity

“Mature instructions and validation, but a broad document/browser subprocess surface and no root license or SECURITY.md.”

Tested on 2026-10-09
license metadata is missingroot SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
HN"I do think the big story here is how hyperfocused people got on MCP, when the actually-interesting thing is simply 'tool calls'." — tptacek
#5
Marketing Skillsmarketingskills
by coreyhaines31CommunityReviewedMedium Risk

Marketing skills: SEO copywriting, social media posts, marketing strategy

61
/ 100
55.7k starsweekly growth +792·HN 2
47 Open Issues·8 Last 30d
Adoption19/25
Community2.7/20
Quality16/20
Security10/15
Credibility5/10
Ecosystem8.3/10
WritingContent

“High-quality marketing instructions with no default publishing, but heavy overlap with Shareuhack content and growth skills.”

Tested on 2026-10-09
root SECURITY.md is absent
#6
Karpathy LLM Coding Skillsforrestchang/andrej-karpathy-skills
by forrestchangCommunityAuditedMedium Risk

Oplane: https://www.oplane.io/blog/karpathy-skills-security-blind-spot

Andrej Karpathy's LLM coding principles and best practices

60
/ 100
221.6k starsweekly growth +1.5k·HN 6Positive
135 Open Issues
Adoption22.3/25
Community8/20
Quality8/20
Security15/15
Credibility5/10
Ecosystem1.7/10
Coding

“Concise and verifiable, but preserving existing style and avoiding adjacent fixes can suppress nearby security corrections, while the guidance overlaps native engineering rules.”

Tested on 2026-10-09
license metadata is missingroot SECURITY.md is absentindependent behavioral audit flags adjacent-vulnerability suppression
Community Voice
GitHubBased on Karpathy's Jan 26, 2026 X post on LLM coding pitfalls, organized into CLAUDE.md by Forrest Chang. Karpathy has not publicly endorsed this repo.
#7
Taste Skill — Anti-Slop FrontendLeonxlnx/taste-skill
by LeonxlnxCommunityAuditedMedium Risk

Oathe: https://oathe.ai/report/Leonxlnx/taste-skill

Anti-slop frontend skills: gives AI agents good taste and stops generic boring UI generation. Works with Claude Code, Cursor, Codex, Gemini CLI

59
/ 100
100.0k starsweekly growth +2.6k·Twitter 1Positive
2 Open Issues·35 Last 30d
Adoption25/25
Community1.3/20
Quality8/20
Security15/15
Credibility5/10
Ecosystem5/10

“Static risk is modest, but failure and verification contracts are weak and design overlap is high.”

Tested on 2026-10-09
root SECURITY.md is absent
#8
Academic Research SkillsImbad0202/academic-research-skills
by Imbad0202CommunityReviewedMedium Risk

Academic Research Skills for Claude Code: research → write → review → revise → finalize — full 10-stage academic pipeline

53
/ 100
53.2k starsweekly growth +925·HN 4Positive
37 Open Issues·45 Last 30d
Adoption19.6/25
Community5.3/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem5/10

“Rigorous research workflow, but auto permissions, external sources, and cross-model dependencies do not fit the existing content pipeline directly.”

Tested on 2026-10-09
license metadata is NOASSERTIONinstructions request or invoke Bash/subprocess access
#9
Open Design Skillsnexu-io/open-design
by nexu-ioCommunityReviewedMedium Risk

NLPM: https://nlpm.com/reports/nexu-io-open-design

Open-source design skill: rapid prototyping, design systems, component library generation

52
/ 100
102.9k starsweekly growth +1.5k
1226 Open Issues·30 Last 30d
Adoption22.4/25
Community0/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem6.7/10
Design

“Capable but too large and permission-heavy, with substantial overlap with existing design and Figma capabilities.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
#10
Understand Anything Code Knowledge GraphLum1104/Understand-Anything
by Lum1104CommunityReviewedMedium Risk

Turn any codebase into an interactive knowledge graph: multi-agent analysis pipeline, visual exploration, works with Claude Code, Codex, Cursor, Copilot, Gemini CLI

50
/ 100
87.3k starsweekly growth +787·HN 2Positive
330 Open Issues·19 Last 30d
Adoption18.9/25
Community2.7/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem5/10

“Knowledge-graph outputs are clear, but multiple agents, parsers, and local services add authority and operational burden.”

Tested on 2026-10-09
instructions request or invoke Bash/subprocess access
#11
Obsidian Knowledge Skillskepano/obsidian-skills
by kepanoCommunityReviewedMedium Risk

Skillstore: https://skillstore.io/skills/kepano-obsidian-bases/audits/8

Obsidian knowledge management: note organization, knowledge graphs, Markdown workflows

49
/ 100
49.8k starsweekly growth +231
74 Open Issues·4 Last 30d
Adoption16.1/25
Community0/20
Quality12/20
Security10/15
Credibility5/10
Ecosystem6.3/10
ContentProductivity

“Useful, verifiable Obsidian formats; isolate Defuddle network input and its global npm install.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
Twitter"I'm starting a set of Claude Skills for Obsidian... so far they're centered around helping Claude Code edit .md, .base, and .canvas files." — kepano (Obsidian CEO)
#12
Last30Days Multi-Platform Research Skillmvanhorn/last30days-skill
by mvanhornCommunityReviewedMedium Risk

Manifold Security: https://manifest.manifold.security/skills/skills.sh/mvanhorn/last30days-skill/last30days

AI agent skill that researches any topic across Reddit, X, YouTube, HN, Polymarket, and the web — then synthesizes a grounded summary

48
/ 100
64.9k starsweekly growth +461·HN 2Positive
24 Open Issues·8 Last 30d
Adoption17.3/25
Community2.7/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem5/10

“Research output and verification are clear, but cookies, API keys, and multi-source network input do not suit unattended operation.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
#13
Everything Claude Codeaffaan-m/everything-claude-code
by affaan-mCommunityReviewedMedium Risk

Agent harness performance optimization: skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond

48
/ 100
285.0k starsweekly growth +4.5k·HN 2Positive
244 Open Issues·16 Last 30d
Adoption25/25
Community2.7/20
Quality0/20
Security10/15
Credibility5/10
Ecosystem5/10

“Broad coverage without a consistent package-level contract; installer and hook authority do not fit Shareuhack cron.”

Not yet tested
instructions request or invoke Bash/subprocess access
#14
Planning with Filesplanning-with-files
by OthmanAdiCommunityAuditedMedium Risk

Oathe: https://oathe.ai/report/OthmanAdi/planning-with-files

Project planning aid: task decomposition, progress tracking, file-based planning

46
/ 100
27.6k starsweekly growth +86·HN 2
8 Open Issues·37 Last 30d
Adoption8.7/25
Community2.7/20
Quality8/20
Security15/15
Credibility5/10
Ecosystem6.7/10
Productivity

“Well specified, but global hooks and cross-session reads create sensitive-data and context risks.”

Tested on 2026-10-09
instructions request or invoke Bash/subprocess access
#15
Anthropic Document Skillsanthropics/skills
by AnthropicOfficialUnreviewedMedium Risk

Anthropic official document skills: PDF, Word, PowerPoint, Excel

43
/ 100
22.9k starsweekly growth +22·HN 49
94 Open Issues
Adoption7/25
Community20/20
Quality0/20
Security0/15
Credibility10/10
Ecosystem6.3/10
ContentProductivity

“The source path is stale, so the current document skills cannot be statically reviewed.”

Not yet tested
license metadata is NOASSERTIONroot SECURITY.md is absentpublic repository subpath is absent at the evaluated commit
Community Voice
HN"I'm more excited about this than I was about MCP. MCP was conceptually quite complicated. Skills are mainly just a formalization of the markdown plus CLI patterns that people have been using already." — simonw
#16
Anthropic Frontend Designanthropics/skills
by AnthropicOfficialUnreviewedMedium Risk

Anthropic official frontend design skill for rapid UI prototyping

43
/ 100
22.9k starsweekly growth +22·HN 49
94 Open Issues
Adoption7/25
Community20/20
Quality0/20
Security0/15
Credibility10/10
Ecosystem6.3/10
DesignCoding

“The source path is stale, so the current frontend skill cannot be statically reviewed.”

Not yet tested
license metadata is NOASSERTIONroot SECURITY.md is absentpublic repository subpath is absent at the evaluated commit
#17
UI/UX Pro Max Design Intelligence Skillnextlevelbuilder/ui-ux-pro-max-skill
by nextlevelbuilderCommunityUnreviewedHigh Risk

Oathe: https://oathe.ai/report/nextlevelbuilder/ui-ux-pro-max-skill

AI design intelligence skill: 50+ UI styles, 161 color palettes, 57 font pairings across 12 tech stacks. Works with Claude Code, Cursor, Windsurf

42
/ 100
138.1k starsweekly growth +1.8k·Positive
91 Open Issues·13 Last 30d
Adoption24.1/25
Community0/20
Quality8/20
Security0/15
Credibility5/10
Ecosystem5/10

“Instructions are structured, but current static review and published CVEs expose broad shell, network, home-directory, and installer risk; do not install pending further hardening.”

Tested on 2026-09-01Test data may be outdated
instructions request or invoke Bash/subprocess accessbundled settings allow Read(//home/**)setup executes an unpinned npm package with npx --yesCVE-2026-7595 and CVE-2026-7596 paths are patched at the evaluated commitpublished CVE-2026-7595 and CVE-2026-7596 affect historical releases
#18
Codegraph Code Knowledge Graphcolbymchenry/codegraph
by colbymchenryCommunityReviewedMedium Risk

Pre-indexed code knowledge graph for Claude Code, Codex, Gemini, Cursor — fewer tokens, fewer tool calls, 100% local

42
/ 100
74.6k starsweekly growth +341·HN 1Positive
597 Open Issues·10 Last 30d
Adoption16.7/25
Community1.3/20
Quality4/20
Security10/15
Credibility5/10
Ecosystem5/10

“The cross-platform local index is useful, but no matching end-user SKILL.md exists and installer/subprocess risk is high.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
#19
Anthropic MCP Builderanthropics/skills
by AnthropicOfficialUnreviewedMedium Risk

Anthropic official MCP server builder with best-practice scaffolding

42
/ 100
22.9k starsweekly growth +22·HN 49
94 Open Issues
Adoption7/25
Community20/20
Quality0/20
Security0/15
Credibility10/10
Ecosystem4.7/10
Coding

“The source path is stale, so the current MCP builder cannot be statically reviewed.”

Not yet tested
license metadata is NOASSERTIONroot SECURITY.md is absentpublic repository subpath is absent at the evaluated commit
#20
Caveman — Token Reduction SkillJuliusBrussee/caveman
by JuliusBrusseeCommunityUnreviewedHigh Risk

Oathe: https://oathe.ai/report/juliusbrussee/caveman

Claude Code skill that makes agent talk like caveman — cutting 65% of output tokens while keeping full technical accuracy

41
/ 100
113.9k starsweekly growth +1.3k·HN 1Positive
72 Open Issues·39 Last 30d
Adoption21.3/25
Community1.3/20
Quality8/20
Security0/15
Credibility5/10
Ecosystem5/10

“Instructions and rollback docs are detailed, but hooks, installers, default telemetry, credential-bearing proxy flows, and an unresolved high-risk scan issue make unattended use unsuitable.”

Tested on 2026-09-01Test data may be outdated
instructions request or invoke Bash/subprocess accessnetwork installer delegates to npxmanaged gateway carries prompts, responses, and provider credentialsanonymous CLI telemetry is opt-out for interactive runsopen high-risk exfiltration and path-traversal scanner issuemanaged gateway can carry prompts, responses, and provider credentials
#21
Harness — Agent Team Meta-Skillrevfactory/harness
by revfactoryCommunityReviewedMedium Risk

A meta-skill that designs domain-specific agent teams, defines specialized agents, and generates the skills they use

39
/ 100
9.2k starsweekly growth +48
3 Open Issues·5 Last 30d
Adoption3/25
Community0/20
Quality16/20
Security10/15
Credibility5/10
Ecosystem5/10

“Clear agent and skill output contracts, but tied to Claude teams/Opus and overlapping existing governance skills.”

Tested on 2026-10-09
root SECURITY.md is absent
#22
Trail of Bits Security Skillstrailofbits/skills
by trailofbitsCommunityAuditedMedium Risk

MrTechKing current-commit static audit: https://www.mrtechking.com/trail-of-bits-skills-github/

Trail of Bits security skills: vulnerability scanning, code analysis, threat modeling

39
/ 100
7.7k starsweekly growth +91·HN 1Positive
132 Open Issues·3 Last 30d
Adoption2.8/25
Community1.3/20
Quality8/20
Security15/15
Credibility5/10
Ecosystem6.7/10
Security

“Strong security instructions, but broad tooling and install authority make it unsuitable for unattended content cron use.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
Community Voice
Twitter"These 17 security Skills for Claude Code are really well-written. Decision trees agents can actually follow, authoritative sources with specific file paths, nested references for deeper context." — @koylanai
#23
Compound Engineering PluginEveryInc/compound-engineering-plugin
by EveryIncCommunityReviewedMedium Risk

Official Compound Engineering plugin for Claude Code, Codex, Cursor — knowledge compounds across sessions with brainstorm/plan/work/review/compound workflow

39
/ 100
25.6k starsweekly growth +86·HN 1Reddit 1Positive
112 Open Issues·30 Last 30d
Adoption8.1/25
Community2.7/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem5/10

“Mature workflows and verification, but GitHub publishing authority and overlap with the existing agent fleet are too broad.”

Tested on 2026-10-09
instructions request or invoke Bash/subprocess access
#24
Anthropic Cybersecurity Skillsmukul975/Anthropic-Cybersecurity-Skills
by mukul975CommunityReviewedMedium Risk

817 structured cybersecurity skills for AI agents — mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF, MITRE F3. 29 security domains, works with Claude Code and 20+ platforms

38
/ 100
34.8k starsweekly growth +257·Positive
63 Open Issues·3 Last 30d
Adoption11.7/25
Community0/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem3/10

“Structurally consistent, but operational security authority is too broad and lacks a package-wide authorization boundary.”

Tested on 2026-10-09
instructions request or invoke Bash/subprocess access
#25
Awesome Claude Skills (Composio)ComposioHQ/awesome-claude-skills
by ComposioHQCommunityReviewedMedium Risk

1000+ curated production-ready Claude Skills and Plugins for Claude Code, Codex, Cursor, Gemini CLI, and more

38
/ 100
77.5k starsweekly growth +350·HN 2Positive
1824 Open Issues·3 Last 30d
Adoption16.8/25
Community2.7/20
Quality0/20
Security10/15
Credibility5/10
Ecosystem3/10

“Large-scale remote automations lack consistent permission, failure, and rollback contracts; do not adopt directly.”

Not yet tested
license metadata is missingroot SECURITY.md is absentinstructions request or invoke Bash/subprocess access
#26
VoltAgent Awesome Agent SkillsVoltAgent/awesome-agent-skills
by VoltAgentCommunityReviewedMedium Risk

1000+ curated official and community agent skills from Anthropic, Vercel, Stripe, and more

37
/ 100
36.1k starsweekly growth +296·Positive
59 Open Issues·4 Last 30d
Adoption12.3/25
Community0/20
Quality0/20
Security10/15
Credibility5/10
Ecosystem10/10
CodingProductivityContentDesignSecurity

“This is an unpinned external link catalog, not a verifiable skill package.”

Not yet tested
root SECURITY.md is absent
Community Voice
HN"Haiku 4.5 with Skills (27.7%) beats Opus 4.5 without (22.0%). Curated Skills: +16.2pp average improvement." — xdotli (Agent Skills Benchmark)
#27
Godogen — Autonomous Game Dev Skillhtdt/godogen
by htdtCommunityReviewedMedium Risk

Autonomous game development for Godot, Bevy, and Babylon.js with Claude Code and Codex

32
/ 100
7.2k starsweekly growth +37·HN 1Positive
0 Open Issues·9 Last 30d
Adoption2.3/25
Community1.3/20
Quality8/20
Security10/15
Credibility5/10
Ecosystem5/10

“Detailed asset-generation contract, but paid APIs, engine subprocesses, and a publish script do not fit content-platform cron.”

Tested on 2026-10-09
root SECURITY.md is absentinstructions request or invoke Bash/subprocess access
#28
Claude Code Skills (alirezarezvani)alirezarezvani/claude-skills
by alirezarezvaniCommunityUnreviewedHigh Risk

NLPM: https://github.com/xiaolai/nlpm/blob/main/auditor/audits/alirezarezvani-claude-skills.md

337+ production-ready Claude Code skills and agent plugins covering engineering, marketing, compliance, C-level advisory for 12 AI coding tools

31
/ 100
28.5k starsweekly growth +215·HN 4Positive
36 Open Issues·10 Last 30d
Adoption9.6/25
Community5.3/20
Quality8/20
Security0/15
Credibility5/10
Ecosystem3/10

“Instruction structure is generally strong, but user-controlled commands still reach shell=True paths; keep unreviewed until those high-risk execution paths are contained.”

Tested on 2026-08-13Test data may be outdated
instructions request or invoke Bash/subprocess accessuser-controlled commands reach subprocess.run with shell=True
#29
Antigravity Awesome Skillssickn33/antigravity-awesome-skills
by sickn33CommunityUnreviewedHigh Risk

Installable library of 1,500+ agentic skills for Claude Code, Cursor, Codex CLI, Gemini CLI, and more. Includes NPX installer, bundles, workflows, and official/community skill collections.

28
/ 100
48.2k starsweekly growth +496·HN 1Positive
9 Open Issues·3 Last 30d
Adoption16.9/25
Community1.3/20
Quality0/20
Security0/15
Credibility5/10
Ecosystem5/10

“High-risk aggregate: inconsistent content plus permission-bypass and broad execution instructions.”

Not yet tested
instructions request or invoke Bash/subprocess accessdocuments --dangerously-skip-permissions in an installable skill
#30
Awesome Claude Skills (BehiSecc)BehiSecc/awesome-claude-skills
by BehiSeccCommunityReviewedMedium Risk

Curated list of Claude Skills across 11 categories: documents, dev tools, data, research, writing, learning, media, health, security, and more

23
/ 100
10.3k starsweekly growth +25·HN 1
460 Open Issues·1 Last 30d
Adoption3.2/25
Community1.3/20
Quality0/20
Security10/15
Credibility5/10
Ecosystem3/10

“An external skill link list without source pinning, security checks, or a verifiable execution contract.”

Not yet tested
license metadata is missingroot SECURITY.md is absent
#31
Awesome Claude Skills (travisvn)travisvn/awesome-claude-skills
by travisvnCommunityReviewedMedium Risk

Curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows — particularly Claude Code

20
/ 100
15.5k starsweekly growth +59
876 Open Issues·2 Last 30d
Adoption4.9/25
Community0/20
Quality0/20
Security10/15
Credibility5/10
Ecosystem0/10

“An external link list only, with no executable or verifiable skill contract.”

Not yet tested
license metadata is missingroot SECURITY.md is absent

FAQ

How are Claude Code Skills ranked?

We score across 6 factors: Adoption (GitHub Stars + weekly growth), Community (HN, Reddit, Twitter multi-platform signals), Quality (hands-on testing), Security (audit status + risk analysis), Credibility (official vs community), and Ecosystem (category breadth + maintenance).

What is the difference between community and official skills?

Official skills are maintained by the official team; community skills come from open-source authors and vary in quality and risk. “Official” does not automatically mean independently security-audited—use each record’s review status, evidence, and requested permissions.

How often is the ranking updated?

GitHub data (stars, forks, last push date) is updated weekly via API. Quality scores and security status are updated manually when we re-test. Skills not tested in over 45 days show a staleness warning.

How do I install Claude Code Skills?

Run the /install-skill command in your Claude Code terminal with the GitHub URL. See our complete Skills guide for detailed steps.

Rankings are generated automatically from public data, updated weekly. All third-party skills are not developed by Shareuhack. Review requested permissions before installing any skill. Rankings are for reference only — use at your own risk.