Agent skills that run powershell, in plugin format
A skill is a Markdown file that tells a coding agent how to do one job. We parse every one we can find — the frontmatter, the outline, the languages in its code blocks — so you can look for the one that fits instead of reading through a repository to find out.
69,865 skills from 9,574 repositories, last read 11 September 2026.
Skills declare what they need inconsistently: 58.8% name the languages they run, 11.2% list the tools they ask for, and 4.6% give themselves a category. Filtering narrows to the ones that said so, never to the ones that are.
- portless-ops0xDarkMatter/claude-mods
- process-compose-ops0xDarkMatter/claude-mods
- screenshot0xDarkMatter/claude-mods
- supply-chain-defense0xDarkMatter/claude-mods
- windows-ops0xDarkMatter/claude-mods
- binary-re:tool-setup2389-research/binary-re
- sonarqube686f6c61/alfred-dev
- to-prdAlemTuzlak/skills
- plan-to-ticketsAnastasiyaW/codex-claude-code-config
- identity-fabricAp6pack/outrider-recon
- web-surfaceAp6pack/outrider-recon
- maintaining-windows-healthCodeAlive-AI/ai-driven-development
- tia-pythonCzarnak/totally-integrated-claude
- tia-doctorCzarnak/totally-integrated-claude
- image-to-psdDSY-Xueai/image2editable
- literature-searcherDianel555/DSkills
- horizun-pbi-setupHorizunGroup/horizun-pbi-mcp
- stockbit-authINo-xious/stockbit-mcp
- maa-pipeline-graphKhazixW2/Everything-Maa
- maa-pipeline-history-auditKhazixW2/Everything-Maa
- maa-pipeline-testingKhazixW2/Everything-Maa
- claude-code-masteryMCKRUZ/claude-code-mastery
- Blue Team Defense & HardeningMasriyan/Claude-Code-CyberSecurity-Skill
- dotnet-techne-inspectMetalnib/dotnet-episteme-skills
- dotnet-techne-synopsisMetalnib/dotnet-episteme-skills
- planning-with-filesOthmanAdi/planning-with-files
- browseScino/fstack
- msp-skills-conciergeServosity/msp-skills
- abnormalServosity/msp-skills
- acronisServosity/msp-skills
- action1Servosity/msp-skills
- afiServosity/msp-skills
- appdirectServosity/msp-skills
- ateraServosity/msp-skills
- autotaskServosity/msp-skills
- auvikServosity/msp-skills
- avananServosity/msp-skills
- aws-billingServosity/msp-skills
- axcientServosity/msp-skills
- betterstackServosity/msp-skills
- blumiraServosity/msp-skills
- cippServosity/msp-skills
- connectwise-automateServosity/msp-skills
- connectwise-controlServosity/msp-skills
- connectwise-manageServosity/msp-skills
- corkServosity/msp-skills
- coveServosity/msp-skills
- crowdstrikeServosity/msp-skills
- datto-bcdrServosity/msp-skills
- datto-rmmServosity/msp-skills
- domotzServosity/msp-skills
- gradientServosity/msp-skills
- halopsaServosity/msp-skills
- hubspotServosity/msp-skills
- huduServosity/msp-skills
- huntressServosity/msp-skills
- immybotServosity/msp-skills
- itglueServosity/msp-skills
- kaseya-bmsServosity/msp-skills
- knowbe4Servosity/msp-skills
- levelioServosity/msp-skills
- liongardServosity/msp-skills
- maxioServosity/msp-skills
- microsoft-graphServosity/msp-skills
- mspbotsServosity/msp-skills
- n-centralServosity/msp-skills
- nerdioServosity/msp-skills
- ninjaoneServosity/msp-skills
- pagerdutyServosity/msp-skills
- pandadocServosity/msp-skills
- pax8Servosity/msp-skills
- pipedriveServosity/msp-skills
- proofpointServosity/msp-skills
- quickbooksServosity/msp-skills
- resourceguruServosity/msp-skills
- rewstServosity/msp-skills
- rocketcyberServosity/msp-skills
- rootlyServosity/msp-skills
- runzeroServosity/msp-skills
- salesbuildrServosity/msp-skills
- sentineloneServosity/msp-skills
- servosityServosity/msp-skills
- sherwebServosity/msp-skills
- skykickServosity/msp-skills
- superopsServosity/msp-skills
- syncroServosity/msp-skills
- tactical-rmmServosity/msp-skills
- threatlockerServosity/msp-skills
- unifi-networkServosity/msp-skills
- veeamServosity/msp-skills
- wordpressServosity/msp-skills
- xeroServosity/msp-skills
- zammadServosity/msp-skills
- housecleanSethGammon/Citadel
- planning-with-filesTaoidle/plan-cascade
- test-hooksTobiiNT/ClaudeTracker
- lit-reviewZachariah9420/lit-review-skill
- generating-python-installeraffaan-m/ECC
- alibabacloud-agent-toolkit-installaliyun/alibabacloud-agent-toolkit
- new-skill-creatorallemaar/open-skills
- sw-doanton-abyzov/specweave
- sw-handoffanton-abyzov/specweave
- sw-taskanton-abyzov/specweave
- excalidraw-mcpanton-abyzov/vskill
- ui-ux-pro-maxavelikiy/great_cto
- onesource-mcp-setupblockparty-global/1s-mcp
- wechatchengmarc/wechat-to-ai
- dashi-pptchuspeeism/dashi-ppt-skill
- ctxctxrs/ctx
- setupdzisner/roo-mcp
- Azure CLI-hardenedfaberlens/hardened-skills
- hubspot-hardenedfaberlens/hardened-skills
- ingestfjwood69/mori
- webapp-selenium-testingfugazi/test-automation-skills-agents
- investigating-phishing-email-incidentgalyarderlabs/galyarder-framework
- recovering-from-ransomware-attackgalyarderlabs/galyarder-framework
- securitygalyarderlabs/galyarder-framework
- planning-with-filesguanyang/open-agent-hub
- ui-ux-pro-maxguanyang/open-agent-hub
- setuphugoguerrap/crypto-claude-desk
- automation-script-automation-expertkhalilbenaz/claude-skills-collection
- security-soc-analyst-guidekhalilbenaz/claude-skills-collection
- security-zero-trust-architectkhalilbenaz/claude-skills-collection
- ui-ux-pro-maxkomluk/scaffolding
- windows-vm-detection-post-wmicmaxrave-dev/kotlin-footguns
- ui-ux-pro-maxmelandlabs/openloomi
- azure-quotasmicrosoft/azure-skills
- entra-agent-idmicrosoft/azure-skills
- dataechomohocp/dataecho
- implementing-device-posture-assessment-in-zero-trustmukul975/Anthropic-Cybersecurity-Skills
- implementing-application-whitelisting-with-applockermukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-dns-with-nextdnsmukul975/Anthropic-Cybersecurity-Skills
- implementing-rapid7-insightvm-for-scanningmukul975/Anthropic-Cybersecurity-Skills
- performing-service-account-credential-rotationmukul975/Anthropic-Cybersecurity-Skills
- securing-azure-with-microsoft-defendermukul975/Anthropic-Cybersecurity-Skills
- exploiting-kerberoasting-with-impacketmukul975/Anthropic-Cybersecurity-Skills
- performing-thick-client-application-penetration-testmukul975/Anthropic-Cybersecurity-Skills
- recovering-from-ransomware-attackmukul975/Anthropic-Cybersecurity-Skills
- hardening-windows-endpoint-with-cis-benchmarkmukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-incident-containment-proceduresmukul975/Anthropic-Cybersecurity-Skills
- performing-credential-access-with-lazagnemukul975/Anthropic-Cybersecurity-Skills
- performing-endpoint-vulnerability-remediationmukul975/Anthropic-Cybersecurity-Skills
- detecting-oauth-token-theftmukul975/Anthropic-Cybersecurity-Skills
- investigating-phishing-email-incidentmukul975/Anthropic-Cybersecurity-Skills
- performing-active-directory-bloodhound-analysismukul975/Anthropic-Cybersecurity-Skills
- auditing-entra-id-with-aadinternalsmukul975/Anthropic-Cybersecurity-Skills
- exploiting-active-directory-certificate-services-esc1mukul975/Anthropic-Cybersecurity-Skills
- implementing-delinea-secret-server-for-pammukul975/Anthropic-Cybersecurity-Skills
- detecting-ntlm-relay-with-event-correlationmukul975/Anthropic-Cybersecurity-Skills
- building-cloud-siem-with-sentinelmukul975/Anthropic-Cybersecurity-Skills
- parsing-artifacts-with-eric-zimmerman-toolsmukul975/Anthropic-Cybersecurity-Skills
- implementing-honeypot-for-ransomware-detectionmukul975/Anthropic-Cybersecurity-Skills
- detecting-secure-boot-bypassmukul975/Anthropic-Cybersecurity-Skills
- building-soc-playbook-for-ransomwaremukul975/Anthropic-Cybersecurity-Skills
- detecting-living-off-the-land-attacksmukul975/Anthropic-Cybersecurity-Skills
- performing-endpoint-forensics-investigationmukul975/Anthropic-Cybersecurity-Skills
- mapping-attack-paths-with-bloodhound-cemukul975/Anthropic-Cybersecurity-Skills
- implementing-passwordless-auth-with-microsoft-entramukul975/Anthropic-Cybersecurity-Skills
- performing-purple-team-atomic-testingmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-defense-evasion-via-timestompingmukul975/Anthropic-Cybersecurity-Skills
- conducting-full-scope-red-team-engagementmukul975/Anthropic-Cybersecurity-Skills
- analyzing-mft-for-deleted-file-recoverymukul975/Anthropic-Cybersecurity-Skills
- performing-active-directory-vulnerability-assessmentmukul975/Anthropic-Cybersecurity-Skills
- implementing-usb-device-control-policymukul975/Anthropic-Cybersecurity-Skills
- auditing-azure-active-directory-configurationmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-network-accessmukul975/Anthropic-Cybersecurity-Skills
- implementing-anti-ransomware-group-policymukul975/Anthropic-Cybersecurity-Skills
- performing-authenticated-vulnerability-scanmukul975/Anthropic-Cybersecurity-Skills
- exploiting-constrained-delegation-abusemukul975/Anthropic-Cybersecurity-Skills
- conducting-internal-reconnaissance-with-bloodhound-cemukul975/Anthropic-Cybersecurity-Skills
- implementing-ransomware-backup-strategymukul975/Anthropic-Cybersecurity-Skills
- hunting-for-persistence-via-wmi-subscriptionsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-lnk-file-and-jump-list-artifactsmukul975/Anthropic-Cybersecurity-Skills
- implementing-memory-protection-with-dep-aslrmukul975/Anthropic-Cybersecurity-Skills
- performing-purple-team-exercisemukul975/Anthropic-Cybersecurity-Skills
- performing-cloud-storage-forensic-acquisitionmukul975/Anthropic-Cybersecurity-Skills
- detecting-fileless-attacks-on-endpointsmukul975/Anthropic-Cybersecurity-Skills
- implementing-data-loss-prevention-with-microsoft-purviewmukul975/Anthropic-Cybersecurity-Skills
- attacking-oauth-with-device-code-phishingmukul975/Anthropic-Cybersecurity-Skills
- conducting-cloud-incident-responsemukul975/Anthropic-Cybersecurity-Skills
- deploying-active-directory-honeytokensmukul975/Anthropic-Cybersecurity-Skills
- detecting-azure-service-principal-abusemukul975/Anthropic-Cybersecurity-Skills
- deploying-honeytokens-and-canarytokensmukul975/Anthropic-Cybersecurity-Skills
- deploying-edr-agent-with-crowdstrikemukul975/Anthropic-Cybersecurity-Skills
- performing-ssl-tls-inspection-configurationmukul975/Anthropic-Cybersecurity-Skills
- implementing-disk-encryption-with-bitlockermukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-amcache-artifactsmukul975/Anthropic-Cybersecurity-Skills
- analyzing-windows-shellbag-artifactsmukul975/Anthropic-Cybersecurity-Skills
- hunting-for-dcom-lateral-movementmukul975/Anthropic-Cybersecurity-Skills
- conducting-domain-persistence-with-dcsyncmukul975/Anthropic-Cybersecurity-Skills
- conducting-phishing-incident-responsemukul975/Anthropic-Cybersecurity-Skills
- configuring-windows-event-logging-for-detectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-cloud-dlp-for-data-protectionmukul975/Anthropic-Cybersecurity-Skills
- abusing-dpapi-for-credential-accessmukul975/Anthropic-Cybersecurity-Skills
- implementing-ransomware-kill-switch-detectionmukul975/Anthropic-Cybersecurity-Skills
- implementing-zero-trust-for-saas-applicationsmukul975/Anthropic-Cybersecurity-Skills
- performing-windows-artifact-analysis-with-eric-zimmerman-toolsmukul975/Anthropic-Cybersecurity-Skills
- securing-historian-server-in-ot-environmentmukul975/Anthropic-Cybersecurity-Skills
- configuring-windows-defender-advanced-settingsmukul975/Anthropic-Cybersecurity-Skills
- performing-lateral-movement-with-wmiexecmukul975/Anthropic-Cybersecurity-Skills
The whole corpus is one call away through the search API, or ask a question of it on the index itself.