AIFCC
記事一覧へ
claude-codeskillsecosystem-mapclaude-setup

500以上のリポジトリから発掘した1,116個のClaude Code Skills完全マップ【全リンク付き】

Mr. Buzzoni@polydao
23122
## 500以上のリポジトリから1,116個のClaude Code Skillsを発掘してきた【全リンク付き】 **1,116スキル / 500以上のリポジトリ / 200人以上の作者** ほとんどの人はClaude Codeを「高機能なオートコンプリート」として使っている。Skillsという機能の存在すら知らないまま。 私はこの1ヶ月を500以上のリポジトリと200人以上の作者を調べることに費やし、Claude Code Skillsエコシステム全体をマッピングした。 わかったこと:公式Anthropicからはじまり、Microsoft・Cloudflare・Sentry・数百人のコミュニティクリエイターまで、10カテゴリにわたる1,116個のユニークなスキル群。 これは現時点で存在するClaude Code Skillsエコシステムの最完全なマップだ。すべてがカテゴリ分けされ、リンクが貼られ、インストールできる状態になっている。 --- ## Part 1:Anthropic公式スキル Repo: github.com/anthropics/skills(121,000スター)— 17スキル収録 - **ドキュメント生成**: docx, pdf, pptx, xlsx - **開発**: frontend-design, webapp-testing, claude-api - **MCP & メタ**: mcp-builder, skill-creator - **エンタープライズ**: doc-coauthoring, brand-guidelines, internal-comms - **クリエイティブ**: algorithmic-art, canvas-design, theme-factory, web-artifacts-builder, slack-gif-creator --- ## Part 2:検証済みパートナースキル ### Sentry — 30スキル収録 Repo: github.com/getsentry/sentry-for-ai(2,500以上のスター) SDKスキル多数 ### Cloudflare — 16以上のスキル収録 Repo: github.com/cloudflare/skills(923スター) Workers, D1, R2, KV, Durable Objects, Agents SDK, Workflows, Queues, Pages ### Trail of Bits — 29スキル収録 Repo: github.com/trailofbits/skills(4,700以上のスター) static-analysis, variant-analysis, semgrep-rule-creator, semgrep-rule-variant-creator, insecure-defaults, differential-review, sharp-edges など ### Microsoft — 133スキル収録 Repo: github.com/MicrosoftDocs/Agent-Skills(495スター) - **.NET(25個)**: azure-ai-openai-dotnet, azure-cosmos-dotnet, azure-identity-dotnet, azure-search-dotnet, azure-servicebus-dotnet, m365-agents-dotnet など19個 - **Java(30個)**: azure-ai-contentsafety-java, azure-cosmos-java, azure-eventhub-java, azure-identity-java, azure-storage-java など25個 - **Python(40個以上)**: azure-ai-ml-py, azure-cosmos-py, azure-identity-py, azure-keyvault-py, azure-monitor-py, azure-search-py, fastapi-router-py, pydantic-models-py など32個 - **Rust(7個)**: azure-cosmos-rust, azure-eventhub-rust, azure-identity-rust など4個 - **TypeScript(22個)**: azure-ai-contentsafety-ts, azure-cosmos-ts, azure-identity-ts, azure-playwright-testing-ts など18個 - **コア(9個)**: cloud-solution-architect, copilot-sdk, entra-agent-id, frontend-design-review, github-issue-creator, mcp-builder, podcast-generation, skill-creator, continual-learning --- ## すでに使っているツールからのスキル ### HashiCorp Terraform: providers, testing, stacks, スタイルガイド, import, actions, refactor Repo: github.com/hashicorp/skills ### Firecrawl Webスクレイピング、検索、オンボーディング、インタラクティブビルド · 3,000以上のスター Repo: github.com/firecrawl/firecrawl-claude-plugin ### AWS Serverless, Amplify, データベース, マイグレーション, ロケーションサービス · 595スター Repo: github.com/awslabs/agent-plugins ### Azure MCP Server, Foundry MCP Repo: github.com/microsoft/azure-skills ### DigitalOcean App Platformデプロイ · 19スター Repo: github.com/digitalocean-labs/do-app-platform-skills ### Pulumi マイグレーション: Terraform → Pulumi, CDK, CloudFormation, ARM。ベストプラクティス, Automation API, ESC · 34スター Repo: github.com/pulumi/agent-skills ### Neon Postgres, クレーマブルDB, egressオプティマイザ · 52スター Repo: github.com/neondatabase-labs/ai-rules ### Supabase Postgresベストプラクティス Repo: github.com/supabase/agent-skills ### PlanetScale MySQLブランチング, クエリパフォーマンス, インデックス設計 Repo: github.com/planetscale/claude-plugin ### ClickHouse ベストプラクティス, chdb, アーキテクチャアドバイザー, クラウド/ローカルデプロイ Repo: github.com/clickhouse/clickhouse ### Remotion Reactによるプログラマティック動画制作 · 500スター Repo: github.com/remotion-dev/skills ### WordPress ブロック開発, テーマ, プラグイン, REST API, WP-CLI, パフォーマンス, PHPStan, Playground Repo: github.com/WordPress/wordpress ### OpenAI Figma(8個), Notion(4個), セキュリティ(3個), デプロイ, ゲーム, Sora, スピーチ, スライド Repo: github.com/openai ### Figma コードコネクト, デザインシステム, デザイン/ライブラリ生成, デザイン実装 Repo: github.com/figma ### Google Gemini Gemini API, Vertex AI, Live API, Interactions API Repo: github.com/google-gemini ### Stripe ベストプラクティス, アップグレードガイド Repo: github.com/stripe ### Better Auth 認証セットアップ, プロバイダー, メール/パスワード, 2FA, 組織 Repo: github.com/better-auth ### fal.ai 画像/動画/音声生成, 3D, リップシンク, 試着, アップスケール, リアルタイム, ワークフロー Repo: github.com/fal-ai-community ### Sanity ベストプラクティス, コンテンツモデリング, SEO, 実験 Repo: github.com/sanity-io ### Tinybird ベストプラクティス, CLI, Python SDK, TypeScript SDK Repo: github.com/tinybirdco ### CallStack(React Native) ベストプラクティス, GitHub連携, RNアップグレード Repo: github.com/callstackincubator ### Typefully X, LinkedIn, Threads, Bluesky, MastodonなどSNS向けコンテンツ Repo: github.com/typefully ### Replicate AIモデルの発見と実行 Repo: github.com/replicate ### Composio 1,000以上の外部アプリへの接続 Repo: github.com/composiohq ### Courier マルチチャネル通知 Repo: github.com/trycourier ### VoltAgent Repo: github.com/VoltAgent/awesome-agent-skills(16,400スター) create-voltagent, voltagent-best-practices, voltagent-core-reference, voltagent-docs-bundle --- ## Part 3:メガコレクション ### obra/superpowers — 20スキル収録 Repo: github.com/obra/superpowers(166,000スター) /test-driven-development, systematic-debugging, verification-before-completion, brainstorming, writing-plans, executing-plans, dispatching-parallel-agents, requesting-code-review, receiving-code-review, using-git-worktrees, finishing-a-development-branch, subagent-driven-development, writing-skills, using-superpowers, defense-in-depth ### alirezarezvani/claude-skills — 235スキル収録 Repo: https://github.com/alirezarezvani/claude-skills(12,000スター) - Engineering(37コア) - Marketing(44) - Product(16) - Regulatory(14) - C-Level Advisory(34) - Business(5) - Finance(4) ### wshobson/agents — 150スキル収録 Repo: github.com/wshobson/agents(33,900スター) ### mattpocock/skills — 17スキル収録 Repo: github.com/mattpocock/skills(16,500スター) tdd, triage-issue, request-refactor-plan, setup-pre-commit, git-guardrails, to-prd, improve-codebase-architecture など10個 ### NeoLabHQ/context-engineering-kit — 13プラグイン収録 Repo: github.com/NeoLabHQ/context-engineering-kit(833スター) tdd, sdd, code-review, reflexion, sadd, ddd, kaizen, git, customize-agent, docs, tech-stack, mcp, fpf ### jeffallan/claude-skills — 66スキル収録 Repo: github.com/Jeffallan/claude-skills(8,400スター) devops-engineer, sre-engineer, terraform-engineer, kubernetes-specialist, monitoring-expert, cloud-architect ### hamelsmu/evals-skills — 7スキル収録 Repo: github.com/hamelsmu/evals-skills(995スター)— LLM評価ベンチマーク用スキル ### forrestchang/karpathy-skills Repo: github.com/forrestchang/andrej-karpathy-skills(43,650スター)— AI-nativeな開発のためのAndrej Karpathyのコーディング哲学 --- ## Part 4:コア開発 ### メソドロジー - learn-claude-code by shareAI-lab(53,825スター)— Claude Codeオンボーディング - tdd by mattpocock(16,500スター)— TypeScriptファーストTDD - tdd-guide by alirezarezvani(12,000スター)— TDDメソドロジー - tdd, sdd, kaizen by NeoLabHQ(833スター)— アンチパターン付きTDD, スペック駆動開発, 継続的改善 ### コードレビュー & 品質 - requesting-code-review, receiving-code-review, subagent-driven-development by obra(160,000スターリポ) - code-review-graph by tirth8205(10,353スター)— 依存関係マッピング付きビジュアルコードレビュー - code-review-skill by awesome-skills — 多言語コードレビュー - reflexion by NeoLabHQ — コード改善のための自己内省 ### テスト - webapp-testing by Anthropic(121,000スターリポ)— Playwright E2Eテスト - playwright-pro by alirezarezvani — テスト生成, フレーキー修正, マイグレーション - playwright-skill by testdino — 5パック70以上のガイド - cypress-agent-skill by KahlilR23 — 25以上のCypressパターン - evals-skills by hamelsmu(995スター)— 7種のLLM評価スキル - outside-in-tdd by JoeGaebel — アウトサイドインTDD ### デバッグ - systematic-debugging, verification-before-completion by obra — 4フェーズ根本原因分析, 証拠検証 ### Git & オートメーション - using-git-worktrees, finishing-a-development-branch by obra — 並行ブランチ, マージガイダンス - pr-create-fetch by angakh — PR作成自動化 - git-guardrails, setup-pre-commit by mattpocock ### アーキテクチャ & プランニング - brainstorming, writing-plans, executing-plans by obra — ソクラテス式精緻化, 実装戦略 - graphify by safishamsi(27,462スター)— コードベース可視化 - monorepo-navigator by alirezarezvani — Turborepo/Nx/pnpm管理 ### アクセシビリティ - accessibility by addyosmani(16,400スターリポ)— WCAGコンプライアンス ### AI/MLエンジニアリング - rag-architect by alirezarezvani — RAGパイプライン構築 - self-improving-agent by alirezarezvani — 自動メモリキュレーション - llm-cost-optimizer by alirezarezvani — APIコスト最適化 ### その他のコア開発 上記カテゴリの残り約200スキルは、上記のメガコレクション(alirezarezvaniエンジニアリングティア, obra superpowers, mattpocock, NeoLabHQ, wshobson)と個別リポジトリから提供されている。 主なスキル名: qa-engineer, browser-automation, statistical-analyst, codebase-onboarding, runbook-generator, changelog-generator, llm-wiki, code-tour, demo-video, tech-stack, fpf, customize-agent --- ## Part 5:セキュリティ & コンプライアンス ### 専門ファーム - Trail of Bits Skills by Trail of Bits(4,700スター)— 29プラグイン(Part 2参照) - Ghost Security by Ghost Security — 7スキル: SAST, SCA, DAST, シークレット, レポーティング - Phoenix Security by Security-Phoenix-demo — CTIリサーチ, OpenGrepルール, NotebookLM ### コミュニティコレクション - Anthropic-Cybersecurity-Skills by mukul975(4,800スター)— 754スキル, 38ドメイン, MITRE/NISマッピング - awesome-claude-skills-security by Eyadkelleh — ペンテスト用7プラグイン ### OWASP & 標準 - www-project-agentic-skills-top-10 by OWASP — AIエージェントセキュリティリスク - claude-code-owasp by agamm(136スター)— OWASP Top 10:2025, ASVS 5.0, 20以上の言語 ### 個別セキュリティスキル - VibeSec-Skill by BehiSecc(785スター)— バグバウンティ: IDOR, XSS, SSRF, SQLi - clawsec by prompt-security(909スター)— ドリフト検出, CVEモニタリング - varlock-claude-skill by wrsmith108(16スター)— セキュアな環境変数管理 - ffuf_claude_skill by jthack(126スター)— Webファジング - sanitize by agentward-ai(2,900以上のスター)— PII編集, 15カテゴリ - security-bluebook-builder by SHADOWPR0 — セキュリティドキュメント生成 - ironclaw-agent-guard by IronClaw — プロンプトインジェクション検出 ### コンプライアンス - Claude-Skills-Governance-Risk-and-Compliance by Sushegaad — 12フレームワーク: ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, PCI DSS, DORA - AgentWard by agentward-ai(2,900以上のスター)— HIPAA, SOX, GDPR, PCI-DSS。1,500以上のテスト - claude-agentic-framework by dralgorhythm(69スター)— 安全フック付き67スキル - snyk-fix by snyk — 脆弱性自動修正 --- ## Part 6:DevOps & インフラ ### Terraform - terrashark by LukasNiessen(140スター)— LLMハルシネーションを排除したTerraform - terraform-engineer by jeffallan — AWS, Azure, GCP横断のシニアTerraform - terraform-aws by a-pavithraa — AWS Terraformモジュール - terraform-opentofu by lgbarn — マルチエージェントplan分析, ドリフト検出 ### Docker docker-development, docker — alirezarezvani/claude-skillsおよびwshobson/agents(Part 3)を参照 ### Kubernetes - kubernetes-skill by LukasNiessen(11スター)— 非推奨APIを排除したK8s - k8s-skills by foxj77(5スター)— 20スキル: Flux CD GitOps, Helm, cert-manager, Kyverno ### クラウド(公式) - awslabs/agent-plugins(595スター)— AWSデプロイ, サーバーレス, データベース - MicrosoftDocs/Agent-Skills(495スター)— Azure Functions, AKS, Storage, SQL - cloudflare/skills(923スター)— Workers, D1, R2, KV - do-app-platform-skills(19スター)— DigitalOcean ### データベース - neon-ai-rules by Neon(52スター)— サーバーレスPostgres - supabase/agent-skills by Supabase — Postgresベストプラクティス - planetscale-claude-plugin by PlanetScale — MySQLブランチング - clickhouse by ClickHouse — 6スキル ### CI/CD & IaC - pulumi-agent-skills by Pulumi(34スター)— マイグレーションとオーサリング - hello-ansible-skills by sigridjineth — 4種のAnsibleスキル - GitHub Actions, GitLab CI, Jenkins — wshobson/agents(Part 3)を参照 ### モニタリング - monitoring-expert, sre-engineer, devops-engineer by jeffallan — Prometheus, Grafana, DataDog, SLI/SLO - incident-runbook-templates, cloud-cost-optimization by wshobson — SEV1〜SEV4, FinOps --- ## Part 7:プロダクト & プロジェクト管理 - pm-skills by phuryn(10,300スター)— 100以上のスキル, 8プラグイン。/discover, /strategy, /write-prd - Product-Manager-Skills by deanpeters(3,600スター)— 47のPMスキル + 6つのワークフロー - product-manager〜project-templates — alirezarezvani/claude-skills(Part 3)に全収録。プロダクト・UX・PM・Atlassianドメイン合計85スキル --- ## Part 8:マーケティング & グロース ### SEO & GEO - seo-geo-claude-skills by aaron-he-zhu(1,100スター)— 20スキル, 14のMCP連携 - claude-seo by AgriciDaniel — 19サブスキル, 12サブエージェント - aso-skills by Eronred(938スター)— 6カテゴリ25種のASOスキル ### マーケティングコレクション - marketingskills by coreyhaines31 — 7カテゴリ36スキル - founder-skills by ognjengt(125スター)— 20スキル: コピーライティング, CRO, バイラルフック - alirezarezvaniの全マーケティングスキル — Part 3参照(44スキル) --- ## Part 9:ビジネス & ファイナンス - charlie-cfo-skill by EveryInc(195スター)— ブートストラップCFO - openaccountants by openaccountants(26スター)— 371の税務スキル, 134カ国対応 - finance-assistant-skill by googlarz — 個人ファイナンス, 11モード - canadian-finance-planner by cjpatten — カナダのRRSP/TFSA/FHSA - awesome-legal-skills by lawvable(248スター)— 雇用, コーポレート, メソドロジー - ai-legal-claude by zubair-trabzada — 14スキル, 5エージェント。契約, NDA, GDPR - claude-legal-skill by evolsb — CUADリスク検出, レッドライン - C-Level Advisory(34), Regulatory(14), Business Growth(5), Finance(4)— alirezarezvani/claude-skills(Part 3)に全収録 --- ## Part 10:デザイン & クリエイティブ ### 動画 - video-use by browser-use — AI動画編集 - ndemo by splitbrain — TTSによるナレーション付きデモ動画 - claude-code-video-toolkit by digitalsamba — Remotion, ElevenLabs, ffmpeg - remotion by Remotion(500スター)— ReactによるプログラマティックなビデオCreation ### 3D & グラフィクス - render by mfranzon — テキストから3Dモデル生成, Three.jsビューアー - procedural-clouds-threejs by CK42BB — Three.jsによるVolumetricレイマーチングクラウド - sparkjs-skill by shi3z — Three.jsによる3D Gaussian Splatレンダリング - fal-3d by fal.ai — テキスト/画像から3Dモデル生成 ### デザインシステム - awesome-design-md by VoltAgent — 55以上のブランドデザインシステム(Apple, Stripe, Vercel, Spotify, Figma) - resume-skills by Paramchoudhary — 履歴書の生成と最適化 - creative-director-skill by smixs — クリエイティブディレクションとブランド開発 ### ゲーム開発 - Unity-Skills by Besty0728 — 543スキル。Unity用セミオートとフルオートモード - GodotPrompter by jame581(28以上のスキル)— Godot 4.x: ゲームプレイ, UI, マルチプレイヤー, レンダリング, ビルド/デプロイ - godogen by htdt — 説明文からGodotプロジェクト一式を生成。850以上のAPIドキュメント --- ## Part 11:データ & リサーチ(83スキル) ### 科学研究 - scientific-agent-skills by K-Dense-AI(18,900スター)— 133スキル。がんゲノミクス, 薬物ターゲット結合, 分子動力学, 78以上のデータベース - AI-research-SKILLs by Orchestra-Research(87スキル)— 文献調査, 実験実行, 論文執筆。115,000行 - Awesome-Scientific-Skills by InternScience — PubMed, RDKit, 科学的ライティング向けオープンコレクション - paper-writing-skill by SNL-UCSB — 5段階パイプライン: ブレインストーミング → ドラフト0 → 評価 → 執筆 → 圧縮 - Research-Paper-Writing-Skills by Master-cai — アブストラクト, 序論, 手法, 実験, 結論 - academic-research-skills by Imbad0202 — 論文の読書・執筆・レビュー。認知フレームワーク - econ-writing-skill by hanlulong — 50人以上の著名経済学者のガイドに基づく経済学論文 - academic-paper-skills by lishix520 — ストラテジスト + コンポーザーの2スキルシステム ### データエンジニアリング - data-engineer by alirezarezvani — データパイプライン, ETL, ウェアハウス設計 - database-designer by alirezarezvani — スキーマアナライザー, ERD生成, インデックスオプティマイザー - database-schema-designer by alirezarezvani — 要件からマイグレーション・型・シードデータ・RLSまで - migration-architect by alirezarezvani — マイグレーションプランナー, 互換性チェッカー - duckdb-skills by DuckDB — DuckDB分析パターン ### ドキュメントインテリジェンス - nutrient-agent-skill by PSPDFKit-labs — 40以上のエージェント。変換, OCR(20以上の言語), 編集, 署名, フォーム。97以上の形式 - kreuzberg by kreuzberg-dev — Rustコアのドキュメントインテリジェンス。97以上の形式, 248プログラミング言語, OCR - claude-office-skills by claude-office-skills — スマートOCR, ドキュメントパーサー, レイアウトアナライザー, テーブル抽出 --- ## Part 12:オートメーション & プロダクティビティ(84スキル) ### ワークフロー自動化 - dispatching-parallel-agents by obra — コンテキスト分離を伴う並行サブエージェントワークフロー - mcp-server-builder by alirezarezvani — OpenAPI仕様からMCPサーバーを構築 - browser-automation by alirezarezvani — Webブラウザ自動化パターン - n8n-skills by czlonkowski — n8nワークフロー自動化 ### 連携 & ツール - firecrawl-skills by Firecrawl(3,000以上のスター)— Webスクレイピング, 検索, 抽出, ブラウザ自動化 - qdrant-skills by Qdrant — ベクターデータベースパターン - gsap-skills by GreenSock — アニメーションライブラリパターン ### プロダクティビティ - cc-switch by farion1231(45,418スター)— マルチプロジェクトワークフロー向けコンテキスト管理 - wonda by degausai — AIプロダクティビティアシスタント - beautiful-prose by SHADOWPR0 — 美しい文章の生成 - humanizer by blader — コンテンツのヒューマナイズ - tweetclaw by Xquik-dev — Twitter/Xコンテンツ制作 - x-article-publisher by wshuyi — Xへの記事パブリッシング - email-marketing-bible by CosmoBlk — メールマーケティング総合ガイド - ai-marketing-skills by BrianRWagner — AIを活用したマーケティング自動化 - advertising-skills by realkimbarrett — 広告: アバター, オファー, ヘッドライン - whatsapp-integrate / whatsapp-automate by gokapso — WhatsApp連携と自動化 --- ## Part 13:専門ドメイン(38スキル) ### 教育 - claude-education-skills by GarethManning — 14の教育ドメインにわたる100以上のスキル - deeptutor-claude-skill by ndpvt-web — 知識グラフを活用したグラフ強化RAGチュータリング - moodle-mcq by danielcregg — GIFT/XML/Aiken形式のMoodleクイズ生成 - codebase-to-course by zarazhangrui — コードベースをインタラクティブHTMLコースに変換 - tutor-skills by RoundTable02 — インタラクティブクイズ付きStudyVault生成 ### ホームオートメーション - claude-homelab by jmagar — 18スキル: Plex, Radarr, Sonarr, Tailscale, ZFS - homeassistant-claude-kit by dcb — Reactダッシュボード付きHome Assistantセットアップ ### トラベル & 系譜 - travel-hacking-toolkit by borski — ポイント, マイル, アワード航空券の最適化 - genealogy-research by sliday — GPSメソドロジー, 15カ国, 歴史文書 - claude-family-history-research-skill by emaynard — GPSとEvidence Explained引用メソドロジー ### ヘルス & フィットネス - agilefitness by coachmanjeet — フィットネス: ワークアウト設計, 栄養, 食事計画 ### ニッチなプログラミング言語 - swiftui-agent-skill by Paul Hudson (twostraws) — SwiftUI, SwiftData, Swift Concurrency, Swift Testing - swift-development by hmohamed01 — Swift iOS/macOS(Appleの最新ドキュメントを動的取得) - swift-unit-test-instructions by jeremieb — Swift/SwiftUI/UIKitテストフレームワーク - rust-skills by actionbook — メタ問題駆動知識インデックスによるRust - rust-dev-skill by onsails — 厳格なRust FAIL FAST。Edition 2024 - claude-code_rails-upgrade-skill by ombulabs — Railsのバージョン2.3〜8.1へのアップグレード - claude-code_dual-boot-skill by ombulabs — デュアルブート依存環境 - layered-rails-skills by palkan — レイヤードRailsアーキテクチャコマンド - threejs-skills by cloudai-x (pinkforest) — 10スキル: 基礎, ジオメトリ, マテリアル, シェーダー ### メタ & ディレクトリ - awesome-agent-skills by VoltAgent(16,400スター)— 公式チーム + コミュニティから1,000以上のスキルをキュレーション - awesome-claude-skills by travisvn — Claude Skills & リソースのキュレーションリスト - claude-code-skill-factory by alirezarezvani — プロダクション品質スキル構築ツールキット。5種のファクトリー --- ## 付録A:トラストスコア方法論 これらのスキルをいち早く導入し、ワークフローに組み込んだ人々は、後から知る人より複利的な優位性を得る。新しいツールが登場したときは、いつもそういうものだ。 この記事はエコシステムの成長に合わせて更新される。 --- ## 付録B:セキュリティ上の考慮事項 **文書化されたCVE(2026年4月時点でいずれもパッチ適用済み)** - CVE-2025-49596(CVSS 9.4、MCP Inspector経由のRCE) - CVE-2025-59536(CVSS 8.7、MCPコンセントバイパス経由のRCE) - CVE-2025-54795(CVSS 8.7、コマンドインジェクション) - CVE-2025-54794(CVSS 7.7、パス制限バイパス) - CVE-2025-64755(CVSS High、sedパースバイパス) - CVE-2025-52882(CVSS High、WebSocketオリジン検証) - CVE-2025-53109(CVSS High、ファイルシステムシンリンクバイパス) - CVE-2025-53110(CVSS High、パストラバーサル) - CVE-2026-21852(CVSS 5.3、APIキー漏洩) **セキュリティベストプラクティス** 1. 検証済みパブリッシャーの公式スキルを優先する 2. インストール前にSKILL.mdを読む 3. 標準ライブラリのみを使用するスキルを優先する 4. 試験的なスキルはサンドボックス環境で使用する 5. セキュリティアドバイザリを購読する 6. セキュリティ重視のスキルを定期的に実行する
原文を表示 / Show original
Mr. Buzzoni @polydao I FOUND 1,116 CLAUDE CODE SKILLS FROM 500+ REPOS SO YOU DON'T HAVE TO. [ALL LINKS] 3 60 438 400K 1,116 skills from 500+ repositories, 200+ authors Most people use Claude Code like a fancy autocomplete They don't know Skills exist I spent the last month going through 500+ repositories and 200+ authors to map the entire Claude Code Skills ecosystem. What I found: 1,116 unique skills across 10 categories - from official Anthropic to Microsoft, Cloudflare, Sentry, and hundreds of community creators This is the most complete map of the Claude Code Skills ecosystem that exists right now Everything is categorized, linked, and ready to install Part 1: Official Anthropic Skills Repo: github.com/anthropics/skills (121,000 stars) - 17 skills inside Document Generation: docx, pdf, pptx, xlsx Development: frontend-design, webapp-testing, claude-api MCP & Meta: mcp-builder, skill-creator Enterprise: doc-coauthoring, brand-guidelines, internal-comms Creative: algorithmic-art, canvas-design, theme-factory, web-artifacts-builder, slack-gif-creator Part 2: Verified Partner Skills Sentry - 30 skills inside Repo: github.com/getsentry/sentry-for-ai (2,500+ stars) SDK skills: Cloudflare - 16+ skills inside Repo: github.com/cloudflare/skills (923 stars) Workers, D1, R2, KV, Durable Objects, Agents SDK, Workflows, Queues, Pages Trail of Bits - 29 skills inside Repo: github.com/trailofbits/skills (4,700+ stars) static-analysis, variant-analysis, semgrep-rule-creator, semgrep-rule-variant-creator, insecure-defaults, differential-review, sharp-edges etc Microsoft - 133 skills inside Repo: github.com/MicrosoftDocs/Agent-Skills (495 stars) .NET (25): azure-ai-openai-dotnet, azure-cosmos-dotnet, azure-identity-dotnet, azure-search-dotnet, azure-servicebus-dotnet, m365-agents-dotnet, and 19 more Java (30): azure-ai-contentsafety-java, azure-cosmos-java, azure-eventhub-java, azure-identity-java, azure-storage-java, and 25 more Python (40+): azure-ai-ml-py, azure-cosmos-py, azure-identity-py, azure-keyvault-py, azure-monitor-py, azure-search-py, fastapi-router-py, pydantic-models-py, and 32 more Rust (7): azure-cosmos-rust, azure-eventhub-rust, azure-identity-rust, and 4 more TypeScript (22): azure-ai-contentsafety-ts, azure-cosmos-ts, azure-identity-ts, azure-playwright-testing-ts, and 18 more Core (9): cloud-solution-architect, copilot-sdk, entra-agent-id, frontend-design-review, github-issue-creator, mcp-builder, podcast-generation, skill-creator, continual-learning Skills From the Tools You Already Use HashiCorp Terraform: providers, testing, stacks, style guide, import, actions, refactor Repo: github.com/hashicorp/skills Firecrawl Web scraping, search, onboarding, interactive builds · 3,000+ stars Repo: github.com/firecrawl/firecrawl-claude-plugin AWS Serverless, Amplify, databases, migrations, location service · 595 stars Repo: github.com/awslabs/agent-plugins Azure MCP Server, Foundry MCP Repo: github.com/microsoft/azure-skills DigitalOcean App Platform deployment · 19 stars Repo: github.com/digitalocean-labs/do-app-platform-skills Pulumi Миграция: Terraform → Pulumi, CDK, CloudFormation, ARM. Best practices, automation API, ESC · 34 stars Repo: github.com/pulumi/agent-skills Neon Postgres, claimable DB, egress optimizer · 52 stars Repo: github.com/neondatabase-labs/ai-rules Supabase Postgres best practices Repo: github.com/supabase/agent-skills PlanetScale MySQL branching, query performance, index design Repo: github.com/planetscale/claude-plugin ClickHouse Best practices, chdb, architecture advisor, cloud/local deploy Repo: github.com/clickhouse/clickhouse Remotion Programmatic video creation with React · 500 stars Repo: github.com/remotion-dev/skills WordPress Block dev, themes, plugins, REST API, WP-CLI, performance, PHPStan, Playground Repo: github.com/WordPress/wordpress OpenAI Figma (8), Notion (4), security (3), deployment, games, Sora, speech, slides Repo: github.com/openai Figma Code connect, design system, generate design/library, implement design Repo: github.com/figma Google Gemini Gemini API, Vertex AI, Live API, Interactions API Repo: github.com/google-gemini Stripe Best practices, upgrade guide Repo: github.com/stripe Better Auth Auth setup, providers, email/password, 2FA, organizations Repo: github.com/better-auth fal.ai Image/video/audio gen, 3D, lip sync, tryon, upscale, realtime, workflow Repo: github.com/fal-ai-community Sanity Best practices, content modeling, SEO, experimentation Repo: github.com/sanity-io Tinybird Best practices, CLI, Python SDK, TypeScript SDK Repo: github.com/tinybirdco CallStack (React Native) Best practices, GitHub integration, upgrading RN Repo: github.com/callstackincubator Typefully - social media content for X, LinkedIn, Threads, Bluesky, Mastodon Repo: github.com/typefully Replicate - discover and run AI models Repo: github.com/replicate Composio - connect to 1,000+ external apps Repo: github.com/composiohq Courier - multi-channel notifications Repo: github.com/trycourier VoltAgent Repo: github.com/VoltAgent/awesome-agent-skills (16,400 stars) create-voltagent, voltagent-best-practices, voltagent-core-reference, voltagent-docs-bundle Part 3: Mega Collections obra/superpowers - 20 skills inside Repo: github.com/obra/superpowers (166,000 stars) /test-driven-development, systematic-debugging, verification-before-completion, brainstorming, writing-plans, executing-plans, dispatching-parallel-agents, requesting-code-review, receiving-code-review, using-git-worktrees, finishing-a-development-branch, subagent-driven-development, writing-skills, using-superpowers, defense-in-depth alirezarezvani/claude-skills - 235 skills inside Repo: https://github.com/alirezarezvani/claude-skills (12,000 stars) Engineering (37 core) Marketing (44) Product (16) Regulatory (14) C-Level Advisory (34) Business (5) Finance (4) wshobson/agents - 150 skills inside Repo: github.com/wshobson/agents (33,900 stars) mattpocock/skills - 17 skills inside Repo: github.com/mattpocock/skills (16,500 stars) tdd, triage-issue, request-refactor-plan, setup-pre-commit, git-guardrails, to-prd, improve-codebase-architecture, and 10 more Mr. Buzzoni @polydao · Apr 16 Claude Code will grill you with 40+ questions before writing a single line of code > it's called /grill-me - 3 sentences long. most impactful skill I use instead of jumping straight to code - it walks every branch of your design tree until there's zero ambiguity > every Show more Quote Mr. Buzzoni @polydao · Apr 15 Article Top 67 Claude Skills That Turn a $20 Subscription Into a Full Dev Team - (Full Links) Most people use Claude like a $20 autocomplete They type. They get an answer. They move on > They have no idea Claude can run an entire dev team - architect, reviewer, debugger, docs writer - all at... 21 141 1.5K 213K NeoLabHQ/context-engineering-kit - 13 plugins inside Repo: github.com/NeoLabHQ/context-engineering-kit (833 stars) tdd, sdd, code-review, reflexion, sadd, ddd, kaizen, git, customize-agent, docs, tech-stack, mcp, fpf jeffallan/claude-skills - 66 skills inside Repo: github.com/Jeffallan/claude-skills (8,400 stars) devops-engineer, sre-engineer, terraform-engineer, kubernetes-specialist, monitoring-expert, cloud-architect hamelsmu/evals-skills - 7 skills inside Repo: github.com/hamelsmu/evals-skills (995 stars) - LLM evaluation skills for benchmarking forrestchang/karpathy-skills - skills inside Repo: github.com/forrestchang/andrej-karpathy-skills (43,650 stars) - Andrej Karpathy coding philosophy for AI-native development Part 4: Core Development Methodologies learn-claude-code by shareAI-lab (53,825 stars) - Claude Code onboarding tdd by mattpocock (16,500 stars repo) - TypeScript-first TDD tdd-guide by alirezarezvani (12,000 stars repo) - TDD methodology tdd, sdd, kaizen by NeoLabHQ (833 stars repo) - TDD with anti-patterns, spec-driven dev, continuous improvement Code Review & Quality requesting-code-review, receiving-code-review, subagent-driven-development by obra (160,000 stars repo) code-review-graph by tirth8205 (10,353 stars) - Visual code review with dependency mapping code-review-skill by awesome-skills - Multi-language code review reflexion by NeoLabHQ - Self-reflection for code improvement Testing webapp-testing by Anthropic (121,000 stars repo) - Playwright E2E testing playwright-pro by alirezarezvani - Test generation, flaky fix, migration playwright-skill by testdino - 70+ guides in 5 packs cypress-agent-skill by KahlilR23 - 25+ Cypress patterns evals-skills by hamelsmu (995 stars) - 7 LLM evaluation skills outside-in-tdd by JoeGaebel - Outside-in TDD Debugging systematic-debugging, verification-before-completion by obra - 4-phase root cause, evidence verification Git & Automation using-git-worktrees, finishing-a-development-branch by obra - Parallel branches, merge guidance pr-create-fetch by angakh - PR creation automation git-guardrails, setup-pre-commit by mattpocock Architecture & Planning brainstorming, writing-plans, executing-plans by obra - Socratic refinement, implementation strategies graphify by safishamsi (27,462 stars) - Codebase visualization monorepo-navigator by alirezarezvani - Turborepo/Nx/pnpm management Accessibility accessibility by addyosmani (16,400 stars repo) - WCAG compliance AI/ML Engineering rag-architect by alirezarezvani - RAG pipeline builder self-improving-agent by alirezarezvani - Auto-memory curation llm-cost-optimizer by alirezarezvani - API cost optimization Additional Core Dev The remaining ~200 skills in this category come from the mega collections above (alirezarezvani engineering tier, obra superpowers, mattpocock, NeoLabHQ, wshobson) and individual repos. Key names: qa-engineer, browser-automation, statistical-analyst, codebase-onboarding, runbook-generator, changelog-generator, llm-wiki, code-tour, demo-video, tech-stack, fpf, customize-agent Part 5: Security & Compliance Professional Firms Trail of Bits Skills by Trail of Bits (4,700 stars) - 29 plugins. See Part 2. Ghost Security by Ghost Security - 7 skills: SAST, SCA, DAST, secrets, reporting Phoenix Security by Security-Phoenix-demo - CTI research, OpenGrep rules, NotebookLM Community Collections Anthropic-Cybersecurity-Skills by mukul975 (4,800 stars) - 754 skills, 38 domains, MITRE/NIST mapped awesome-claude-skills-security by Eyadkelleh - 7 plugins for pentesting OWASP & Standards www-project-agentic-skills-top-10 by OWASP - AI agent security risks claude-code-owasp by agamm (136 stars) - OWASP Top 10:2025, ASVS 5.0, 20+ languages Individual Security Skills VibeSec-Skill by BehiSecc (785 stars) - Bug bounty: IDOR, XSS, SSRF, SQLi clawsec by prompt-security (909 stars) - Drift detection, CVE monitoring varlock-claude-skill by wrsmith108 (16 stars) - Secure env var management ffuf_claude_skill by jthack (126 stars) - Web fuzzing sanitize by agentward-ai (2,900+ stars repo) - PII redaction, 15 categories security-bluebook-builder by SHADOWPR0 - Security documentation ironclaw-agent-guard by IronClaw - Prompt injection detection Compliance Claude-Skills-Governance-Risk-and-Compliance by Sushegaad - 12 frameworks: ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, PCI DSS, DORA AgentWard by agentward-ai (2,900+ stars) - HIPAA, SOX, GDPR, PCI-DSS. 1,500+ tests claude-agentic-framework by dralgorhythm (69 stars) - 67 skills with safety hooks snyk-fix by snyk - Automated vulnerability remediation Part 6: DevOps & Infrastructure Terraform terrashark by LukasNiessen (140 stars) - Terraform eliminating LLM hallucinations terraform-engineer by jeffallan - Senior Terraform across AWS, Azure, GCP terraform-aws by a-pavithraa - AWS Terraform modules terraform-opentofu by lgbarn - Multi-agent plan analysis, drift detection Docker docker-development, docker - See alirezarezvani/claude-skills and wshobson/agents in Part 3 Kubernetes kubernetes-skill by LukasNiessen (11 stars) - K8s eliminating deprecated APIs k8s-skills by foxj77 (5 stars) - 20 skills: Flux CD GitOps, Helm, cert-manager, Kyverno Cloud (Official) awslabs/agent-plugins (595 stars) - AWS deploy, serverless, databases MicrosoftDocs/Agent-Skills (495 stars) - Azure Functions, AKS, Storage, SQL cloudflare/skills (923 stars) - Workers, D1, R2, KV do-app-platform-skills (19 stars) - DigitalOcean Databases neon-ai-rules by Neon (52 stars) - Serverless Postgres supabase/agent-skills by Supabase - Postgres best practices planetscale-claude-plugin by PlanetScale - MySQL branching clickhouse by ClickHouse - 6 skills CI/CD & IaC pulumi-agent-skills by Pulumi (34 stars) - Migration and authoring hello-ansible-skills by sigridjineth - 4 Ansible skills GitHub Actions, GitLab CI, Jenkins - See wshobson/agents in Part 3 Monitoring monitoring-expert, sre-engineer, devops-engineer by jeffallan - Prometheus, Grafana, DataDog, SLI/SLO incident-runbook-templates, cloud-cost-optimization by wshobson - SEV1-SEV4, FinOps Part 7: Product & Project Management pm-skills by phuryn (10,300 stars) - 100+ skills, 8 plugins. /discover, /strategy, /write-prd Product-Manager-Skills by deanpeters (3,600 stars) - 47 PM skills + 6 workflows product-manager through project-templates - All in alirezarezvani/claude-skills (Part 3). 85 skills total across product, UX, PM, and Atlassian domains Part 8: Marketing & Growth SEO & GEO seo-geo-claude-skills by aaron-he-zhu (1,100 stars) - 20 skills, 14 MCP integrations claude-seo by AgriciDaniel - 19 sub-skills, 12 subagents aso-skills by Eronred (938 stars) - 25 ASO skills across 6 categories Marketing Collections marketingskills by coreyhaines31 - 36 skills across 7 categories founder-skills by ognjengt (125 stars) - 20 skills: copywriting, CRO, viral hooks All alirezarezvani marketing skills - See Part 3 (44 skills) Part 9: Business & Finance charlie-cfo-skill by EveryInc (195 stars) - Bootstrapped CFO openaccountants by openaccountants (26 stars) - 371 tax skills, 134 countries finance-assistant-skill by googlarz - Personal finance, 11 modes canadian-finance-planner by cjpatten - Canadian RRSP/TFSA/FHSA awesome-legal-skills by lawvable (248 stars) - Employment, corporate, methodology ai-legal-claude by zubair-trabzada - 14 skills, 5 agents. Contracts, NDA, GDPR claude-legal-skill by evolsb - CUAD risk detection, redlines C-Level Advisory (34), Regulatory (14), Business Growth (5), Finance (4) - All in alirezarezvani/claude-skills (Part 3) Part 10: Design & Creative Video video-use by browser-use - AI video editing ndemo by splitbrain - Narrated demo videos with TTS claude-code-video-toolkit by digitalsamba - Remotion, ElevenLabs, ffmpeg remotion by Remotion (500 stars) - Programmatic video with React 3D & Graphics render by mfranzon - 3D models from text, Three.js viewer procedural-clouds-threejs by CK42BB - Volumetric clouds sparkjs-skill by shi3z - 3D Gaussian Splat rendering Game Dev Unity-Skills by Besty0728 - 543 skills for Unity GodotPrompter by jame581 - 28+ Godot 4.x skills godogen by htdt - Complete Godot projects from descriptions Design awesome-design-md by VoltAgent - 55+ brand design systems resume-skills by Paramchoudhary - Resume generation creative-director-skill by smixs - Creative direction Part 11: Data & Research scientific-agent-skills by K-Dense-AI (18,900 stars) - 133 skills. Genomics, drug binding, molecular dynamics AI-research-SKILLs by Orchestra-Research - 87 skills, 115K lines paper-writing-skill by SNL-UCSB - Five-stage pipeline econ-writing-skill by hanlulong - Economics papers from 50+ guides Awesome-Scientific-Skills by InternScience - Open collection Research-Paper-Writing-Skills by Master-cai - Abstract through Conclusion academic-research-skills by Imbad0202 - Cognitive framework approach academic-paper-skills by lishix520 - Strategist + Composer database-designer, migration-architect - See alirezarezvani/claude-skills (Part 3) nutrient-agent-skill by PSPDFKit-labs - 40+ agents, OCR, 97+ formats kreuzberg by kreuzberg-dev - Rust-core, 97+ formats, 248 languages claude-office-skills by claude-office-skills - OCR, Doc Parser, Layout Analyzer Part 12: Automation & Productivity cc-switch by farion1231 (45,418 stars) - Context management n8n-skills by czlonkowski - n8n workflow automation firecrawl-claude-plugin by Firecrawl (3,000+ stars) - Web scraping, search, extraction qdrant-skills by Qdrant - Vector database patterns gsap-skills by GreenSock - Animation library wonda by degausai - AI productivity beautiful-prose by SHADOWPR0 - Prose generation humanizer by blader - Content humanization tweetclaw by Xquik-dev - Twitter/X content x-article-publisher by wshuyi - Article publishing email-marketing-bible by CosmoBlk - Email marketing guide ai-marketing-skills by BrianRWagner - Marketing automation advertising-skills by realkimbarrett - Avatars, offers, headlines whatsapp-integrate, whatsapp-automate by gokapso - WhatsApp integration Part 13: Specialized Domains Education claude-education-skills by GarethManning - 100+ skills across 14 educational domains deeptutor-claude-skill by ndpvt-web - Graph-enhanced RAG tutoring with knowledge graphs moodle-mcq by danielcregg - Moodle quiz generation in GIFT/XML/Aiken formats codebase-to-course by zarazhangrui - Turn codebases into interactive HTML courses tutor-skills by RoundTable02 - StudyVault generation with interactive quizzes Home Automation claude-homelab by jmagar - 18 skills: Plex, Radarr, Sonarr, Tailscale, ZFS homeassistant-claude-kit by dcb - Home Assistant setup with React dashboard Travel & Genealogy travel-hacking-toolkit by borski - Points, miles, award flights optimization genealogy-research by sliday - GPS methodology, 15 countries, historical documents claude-family-history-research-skill by emaynard - GPS and Evidence Explained citation methodology Health & Fitness agilefitness by coachmanjeet - Fitness: workout design, nutrition, meal planning Niche Programming Languages swiftui-agent-skill by Paul Hudson (twostraws) - SwiftUI, SwiftData, Swift Concurrency, Swift Testing swift-development by hmohamed01 - Swift iOS/macOS with live Apple docs fetching swift-unit-test-instructions by jeremieb - Swift/SwiftUI/UIKit testing framework rust-skills by actionbook - Rust with Meta-Problem-Driven Knowledge Indexing rust-dev-skill by onsails - Strict Rust FAIL FAST. Edition 2024 claude-code_rails-upgrade-skill by ombulabs - Rails upgrades from 2.3 to 8.1 claude-code_dual-boot-skill by ombulabs - Dual-boot dependency environments layered-rails-skills by palkan - Layered Rails architecture commands threejs-skills by cloudai-x (pinkforest) - 10 skills: fundamentals, geometry, materials, shaders Meta & Directories awesome-agent-skills by VoltAgent (16,400 stars) - 1,000+ curated skills from official teams + community awesome-claude-skills by travisvn - Curated list of Claude skills and resources claude-code-skill-factory by alirezarezvani - Toolkit for building production-ready skills. 5 factories Appendix A: Trust Score Methodology The people who install these now and build their workflows around them will have a compounding advantage over everyone who finds out later. That's always how it works with new tooling This article will be updated as the ecosystem grows If this was useful: ♡ Like this article - it helps more people find it ↺ Repost - someone in your feed needs this right now ☆ Bookmark - you'll want to come back when you need a specific skill Follow me @polydao for weekly deep dives on Claude Code, Skills, MCP, and AI tooling procedural-clouds-threejs by CK42BB - Volumetric raymarching clouds in Three.js sparkjs-skill by shi3z - 3D Gaussian Splat rendering with Three.js fal-3d by fal.ai - Generate 3D models from text/images Design Systems awesome-design-md by VoltAgent - 55+ brand design systems (Apple, Stripe, Vercel, Spotify, Figma) resume-skills by Paramchoudhary - Resume generation and optimization creative-director-skill by smixs - Creative direction and brand development Game Development Unity-Skills by Besty0728 - 543 skills. Semi-auto and full-auto modes for Unity GodotPrompter by jame581 (28+ skills) - Godot 4.x: gameplay, UI, multiplayer, rendering, build/deploy godogen by htdt - Complete Godot projects from descriptions. 850+ API docs Part 11: Data & Research (83 skills) Scientific Research scientific-agent-skills by K-Dense-AI (18,900 stars) - 133 skills. Cancer genomics, drug-target binding, molecular dynamics, 78+ databases AI-research-SKILLs by Orchestra-Research (87 skills) - Literature survey, experiment execution, paper writing. 115K lines Awesome-Scientific-Skills by InternScience - Open collection for PubMed, RDKit, scientific writing paper-writing-skill by SNL-UCSB - Five-stage pipeline: Brainstorm -> Draft 0 -> Evaluate -> Write -> Compress Research-Paper-Writing-Skills by Master-cai - Abstract, Introduction, Method, Experiments, Conclusion academic-research-skills by Imbad0202 - Reading, writing, reviewing papers. Cognitive framework econ-writing-skill by hanlulong - Economics papers from 50+ leading economists' guides academic-paper-skills by lishix520 - Strategist + Composer two-skill system Data Engineering data-engineer by alirezarezvani - Data pipelines, ETL, warehouse design database-designer by alirezarezvani - Schema analyzer, ERD generation, index optimizer database-schema-designer by alirezarezvani - Requirements to migrations, types, seed data, RLS migration-architect by alirezarezvani - Migration planner, compatibility checker duckdb-skills by DuckDB - DuckDB analytics patterns Document Intelligence nutrient-agent-skill by PSPDFKit-labs - 40+ agents. Convert, OCR (20+ languages), redact, sign, forms. 97+ formats kreuzberg by kreuzberg-dev - Rust-core document intelligence. 97+ formats, 248 programming languages, OCR claude-office-skills by claude-office-skills - Smart OCR, Doc Parser, Layout Analyzer, Table Extractor Part 12: Automation & Productivity (84 skills) Workflow Automation dispatching-parallel-agents by obra - Concurrent subagent workflows with context isolation mcp-server-builder by alirezarezvani - MCP servers from OpenAPI specs browser-automation by alirezarezvani - Web browser automation patterns n8n-skills by czlonkowski - n8n workflow automation Integrations & Tools firecrawl-skills by Firecrawl (3,000+ stars) - Web scraping, search, extraction, browser automation qdrant-skills by Qdrant - Vector database patterns gsap-skills by GreenSock - Animation library patterns Productivity cc-switch by farion1231 (45,418 stars) - Context management for multi-project workflows wonda by degausai - AI productivity assistant beautiful-prose by SHADOWPR0 - Beautiful prose generation humanizer by blader - Content humanization tweetclaw by Xquik-dev - Twitter/X content creation x-article-publisher by wshuyi - Article publishing for X email-marketing-bible by CosmoBlk - Email marketing comprehensive guide ai-marketing-skills by BrianRWagner - AI-powered marketing automation advertising-skills by realkimbarrett - Advertising: avatars, offers, headlines whatsapp-integrate and whatsapp-automate by gokapso - WhatsApp integration and automation Part 13: Specialized Domains (38 skills) Scoring formula: FINAL SCORE = BASE TIER SCORE + SUM(BONUSES) + SUM(PENALTIES), capped at 10, floored at 0. Base tier scores: Tier 1 (Official/Enterprise or 5,000+ stars) = 7.0. Tier 2 (Verified Community, 1,000-5,000 stars) = 5.0. Tier 3 (Emerging, under 1,000 stars) = 3.0. Tier 4 (Experimental) = 1.0. Bonuses (up to +5): Recent commits under 1 month (+2), under 3 months (+1), Python stdlib only (+1), multi-tool compatibility (+1), comprehensive README (+1), test coverage (+1). Penalties: No README (-1), known security flags (-2), no activity over 6 months (-1), over 12 months (-2), single contributor (-0.5), fork without attribution (-1), eval/exec usage (-1.5), hardcoded secrets (-2), unvalidated network calls (-1), prompt injection patterns (-2). Score interpretation: 9-10 = EXCEPTIONAL. 7-8 = HIGH TRUST. 5-6 = MODERATE. 3-4 = LOW. 0-2 = UNTRUSTED. Under 0 = REJECT. Appendix B: Security Considerations Documented CVEs (all patched as of April 2026): CVE-2025-49596 (CVSS 9.4, RCE via MCP Inspector), CVE-2025-59536 (CVSS 8.7, RCE via MCP consent bypass), CVE-2025-54795 (CVSS 8.7, command injection), CVE-2025-54794 (CVSS 7.7, path restriction bypass), CVE-2025-64755 (CVSS High, sed parsing bypass), CVE-2025-52882 (CVSS High, WebSocket origin validation), CVE-2025-53109 (CVSS High, filesystem symlink bypass), CVE-2025-53110 (CVSS High, path traversal), CVE-2026-21852 (CVSS 5.3, API key exfiltration). Security best practices: 1) Prefer official skills from verified publishers. 2) Read SKILL.md before installing. 3) Favor stdlib-only skills. 4) Use sandboxed environments for experimental skills. 5) Subscribe to security advisories. 6) Run security-focused skills regularly. Want to publish your own Article? Upgrade to Premium 8:49 PM · Apr 24, 2026 · 400.2K Views 3 60 438 1.9K

AIFCC — AI Fluent CxO Club

読み書きそろばん、AI。経営者が AI を自分で動かせるようになるコミュニティ。

500以上のリポジトリから発掘した1,116個のClaude Code Skills完全マップ【全リンク付き】 | AIFCC