🧠 Agent Skills

The secure, validated skill registry for professional AI coding agents

In an ecosystem where over 13% of marketplace skills contain critical vulnerabilities, Agent Skills stands apart as a hardened library of verified, tested, and safe capabilities. Extend Antigravity, Claude Code, Cursor, and more with absolute confidence.

https://tech-leads-club.github.io/agent-skills/

📖 Table of Contents

• ✨ What are Skills?
• 🛡️ Security & Trust
• 🤖 Supported Agents
• 🌟 Featured Skills
• 🚀 Quick Start
• ⚡ How It Works
• 🛠 For Contributors
• 📁 Project Structure
• 📝 Skill Structure
• 🔒 Security Scan
• 🔄 Release Process
• 🤝 Contributing
• 📄 License

✨ What are Skills?

Skills are packaged instructions and resources that extend AI agent capabilities. Think of them as plugins for your AI assistant — they teach your agent new workflows, patterns, and specialized knowledge.

packages/skills-catalog/skills/
  (category-name)/
    skill/
      SKILL.md          ← Main instructions
      templates/        ← File templates
      references/       ← On-demand documentation

🛡️ Security & Trust

Your environment's safety is our top priority. Unlike open marketplaces where 13.4% of skills contain critical issues, agent-skills is a managed, hardened library.

Vulnerability Mitigation

We directly address the threats identified in the Snyk 2026 Agent Threat Report:

Threat	Public Marketplaces	Agent Skills Guarantee
Malicious Payloads	Obfuscated code, binaries, or "black box" instructions	100% Open Source: No binaries, fully readable text/code. Every line is auditable.
Credential Theft	Skills silently exfiltrating env vars to remote servers	Static Analysis: CI/CD pipeline blocks skills with suspicious network calls or secret access.
Supply Chain Attacks	Authors pushing malicious updates to existing skills	Immutable Integrity: Lockfiles and content-hashing ensure code never changes without your explicit upgrade.
Prompt Injection	Hidden instructions to hijack agent behavior ("jailbreaks")	Human Curation: Every prompt is manually code-reviewed by maintainers for safety boundaries.

CLI Defense-in-Depth

The installer itself implements strict technical controls:

• Filesystem Isolation: Recursive path traversal protection preventing access outside target directories.
• Input Sanitization: Strict validation of skill names and paths to neutralize injection vectors.
• Symlink Guard: Safe handling of symbolic links to prevent aliasing attacks.
• Integrity Verification: Lockfile-based validation ensuring reproducible and authorized skill management.
• Automated Auditing: All skills undergo continuous security scanning with mcp-scan.

🤖 Supported Agents

Install skills to any of these AI coding agents:

Tier 1 (Popular)	Tier 2 (Rising)	Tier 3 (Enterprise)
Claude Code	Aider	Amazon Q
Cline	Antigravity	Augment
Cursor	Gemini CLI	Droid (Factory.ai)
GitHub Copilot	Kilo Code	OpenCode
Windsurf	Kiro	Sourcegraph Cody
	OpenAI Codex	Tabnine
	Roo Code
	TRAE

_{Missing your favorite agent? Open an issue and we'll add support!}

🌟 Featured Skills

A glimpse of what's available in our growing catalog:

Skill	Category	Description
tlc-spec-driven	Development	Project and feature planning with 4 phases: Specify → Design → Tasks → Implement. Creates atomic tasks with verification criteria and maintains persistent memory across sessions.
aws-advisor	Cloud	Expert AWS Cloud Advisor for architecture design, security review, and implementation guidance. Leverages AWS MCP tools for documentation-backed answers.
playwright-skill	Automation	Complete browser automation with Playwright. Test pages, fill forms, take screenshots, validate UX, and automate any browser task.
figma	Design	Fetch design context from Figma and translate nodes into production code. Design-to-code implementation with MCP integration.
security-best-practices	Security	Language and framework-specific security reviews. Detect vulnerabilities, generate reports, and suggest secure-by-default fixes.

→ Browse all skills

---

🚀 Quick Start

Install Skills in Your Project

npx @tech-leads-club/agent-skills

This launches an interactive wizard:

1. Choose Action — "Install skills" or "Update installed skills"
2. Browse & Select — Filter by category or search
3. Choose agents — Pick target agents (Cursor, Claude Code, etc.)
4. Installation method — Copy (recommended) or Symlink
5. Scope — Global (user home) or Local (project only)

Each step shows a ← Back option to return and revise your choices.

CLI Options

Note: You can use either npx @tech-leads-club/agent-skills or install globally and use agent-skills directly.

# Interactive mode (default)
npx @tech-leads-club/agent-skills
# or: agent-skills (if installed globally)

# List available skills
agent-skills list
agent-skills ls        # Alias

# Install one skill
agent-skills install -s tlc-spec-driven

# Install multiple skills at once
agent-skills install -s aws-advisor coding-guidelines docs-writer

# Install to specific agents
agent-skills install -s my-skill -a cursor claude-code

# Install multiple skills to multiple agents
agent-skills install -s aws-advisor nx-workspace -a cursor windsurf cline

# Install globally (to ~/.gemini, ~/.claude, etc.)
agent-skills install -s my-skill -g

# Use symlink instead of copy
agent-skills install -s my-skill --symlink

# Force re-download (bypass cache)
agent-skills install -s my-skill --force

# Update a specific skill
agent-skills update -s my-skill

# Update all installed skills
agent-skills update

# Remove one skill
agent-skills remove -s my-skill

# Remove multiple skills at once
agent-skills remove -s skill1 skill2 skill3
agent-skills rm -s my-skill    # Alias

# Remove from specific agents
agent-skills remove -s my-skill -a cursor windsurf

# Force removal (bypass lockfile check)
agent-skills remove -s my-skill --force

# Manage cache
agent-skills cache --clear           # Clear all cache
agent-skills cache --clear-registry  # Clear only registry
agent-skills cache --path            # Show cache location

# View audit log
agent-skills audit                   # Show recent operations
agent-skills audit -n 20             # Show last 20 entries
agent-skills audit --path            # Show audit log location

# Show contributors and credits
agent-skills credits

# Show help
agent-skills --help

Global Installation (Optional)

npm install -g @tech-leads-club/agent-skills
agent-skills  # Use 'agent-skills' instead of 'npx @tech-leads-club/agent-skills'

⚡ How It Works

The CLI fetches skills on-demand from our CDN:

1. Browse — The CLI fetches the skills catalog (~45KB)
2. Select — You choose the skills you need
3. Download — Selected skills are downloaded and cached locally
4. Install — Skills are installed to your agent's configuration

Caching

Downloaded skills are cached in ~/.cache/agent-skills/ for offline use.

# Clear the cache
rm -rf ~/.cache/agent-skills

🤝 Contributing

We welcome contributions! Please see our CONTRIBUTING.md file for detailed guidelines on how to set up your local environment, create new skills, contribute to the marketplace, and follow our release processes.

🛡️ Content & Authorship

This repository is a collection of curated skills intended to benefit the community. We deeply respect the intellectual property and wishes of all creators.

If you are the author of any content included here and would like it removed or updated, please open an issue or contact the maintainers.

📄 License and Attribution

• Software Engine: The application source code (CLI, scripts, tools) is licensed under the MIT License.
• Tech Leads Club Skills: Unless otherwise stated, all skill files (SKILL.md) authored by the repository maintainers are licensed under the Creative Commons Attribution 4.0 International License (CC-BY-4.0).
• Third-Party Skills: Some skills included in this catalog are created by the community or original authors. These skills retain their original licenses and copyrights. Please check the individual SKILL.md files for specific licensing and author attribution.

If you use our skills catalog, you must provide attribution to Tech Leads Club, regardless of how it is used.

⭐ Star History

---

_{Built with ❤️ by the Tech Leads Club community}