Gives developers ready-made guidance for building web apps and APIs, covering animated React components, authentication with JWT and OAuth, API design and contract testing, and changelog writing. Works inside Claude Code.
Claude Code
$ npx -y skills add secondsky/claude-skills --agent claude-code
Codex
$ npx skills add secondsky/claude-skills -a codex
Cursor
$ npx skills add secondsky/claude-skills -a cursor
Gemini CLI
$ npx skills add secondsky/claude-skills -a gemini-cli
GitHub Copilot
$ npx skills add secondsky/claude-skills -a github-copilot
OpenCode
$ npx skills add secondsky/claude-skills -a opencode
Windsurf
$ npx skills add secondsky/claude-skills -a windsurf
145 production-ready skills for Claude Code CLI
Version 3.9.0 | Last Updated: 2026-09-09
🔌 Platform / Harness Support
These plugins ship as Claude Code marketplace plugins (.claude-plugin/ manifests) and Codex CLI plugins (.codex-plugin/ manifests). Other harnesses consume the same skills via skills.sh — the cross-harness bridge.
| Harness | Marketplace support | How to install |
|---|---|---|
| Claude Code | ✅ Native (federated) | /plugin marketplace add secondsky/claude-skills, then /plugin install <name>@claude-skills |
| ZCode | ✅ Native (reads .claude-plugin/ manifests) | Add this repo as a marketplace in the ZCode GUI |
| Codex CLI | ✅ Native (federated) | codex plugin marketplace add secondsky/claude-skills, then /plugins in the Codex TUI |
| Cursor | ⚠️ Adaptation needed | Cursor has an official marketplace, but expects .cursor-plugin/plugin.json (UI "Add to Cursor") this repo does not generate yet. Use skills.sh. |
| opencode | ❌ No marketplace | npm plugins only (opencode.json plugin[]). Use skills.sh or vendor manually. |
| Gemini CLI | ❌ No marketplace | gemini extensions install <url> only. Use skills.sh or vendor manually. |
A curated collection of battle-tested skills for building modern web applications with Cloudflare, AI integrations, React, Tailwind, and more.
# Add the marketplace
/plugin marketplace add https://github.com/secondsky/claude-skills
# Install individual skills as needed
/plugin install cloudflare-d1@claude-skills
/plugin install tailwind-v4-shadcn@claude-skills
/plugin install gemini-cli@claude-skills
The authoritative catalog is .claude-plugin/marketplace.json, summarized in the category table below. A human-readable catalog is auto-generated in MARKETPLACE.md.
This repo generates .codex-plugin/ manifests and a .agents/plugins/marketplace.json for all 145 plugins, so Codex CLI can install them natively:
# Add the marketplace (from GitHub)
codex plugin marketplace add secondsky/claude-skills
# Browse and install plugins in the Codex TUI
# /plugins # opens the plugin browser
# Space # enable/disable a plugin
Skills are auto-discovered from each plugin's skills/ directory — the same SKILL.md files Claude Code uses. Claude-specific slash commands and subagents are not carried into Codex (use Codex's /import command for that).
skills.sh is an open agent-skills registry and npx skills CLI (maintained by Vercel) that auto-detects your coding agent — Claude Code, Cursor, Codex, Copilot, Cline, opencode, and 70+ others — and installs each skill into the correct directory for that harness. It is the universal cross-harness path for harnesses without a marketplace (opencode, Gemini CLI) or where this repo's manifest format isn't generated yet (Cursor).
# Install one skill (auto-detects your agent)
npx skills add secondsky/claude-skills --skill cloudflare-d1
# Install several specific skills
npx skills add secondsky/claude-skills --skill cloudflare-d1 --skill tailwind-v4-shadcn
# Try a skill once without installing (pipes its prompt to your agent)
npx skills use secondsky/claude-skills@cloudflare-d1 | claude
# Target a specific agent explicitly
npx skills add secondsky/claude-skills --skill cloudflare-d1 --agent codex
# List what's installed, search, update, remove
npx skills ls -g
npx skills find cloudflare
npx skills update cloudflare-d1
npx skills remove cloudflare-d1
Bulk install note:
npx skills add secondsky/claude-skills --allinstalls every discovered skill at once, but discovery walks skills.sh's standard container directories (skills/,.claude/skills/, …). This repo nests skills underplugins/<name>/skills/<skill>/, so--allmay not pick up everything in one pass — install the skills you need by name with--skill, or runnpx skills add secondsky/claude-skills -lto list what it finds.
skills.sh runs every published skill through three scanners (Gen Agent Trust Hub, Socket, Snyk) plus an LLM-based meta-analyzer, and publishes the results at skills.sh/audits. The LLM analysis stage has been publicly shown (Trail of Bits, June 2026) to both miss genuinely malicious skills and flag unfamiliar version pins (e.g. newest dependency versions) as suspicious false positives. Treat skills.sh warnings as advisory, not authoritative — and verify against this repo's own version pins before acting on a warning.
This repository contains 145 production-tested skills for Claude Code, each focused on a specific technology or capability.
Individual Skills: Each skill is a standalone unit with:
SKILL.md - Core knowledge and guidanceInstallation Options:
/plugin install <name>@claude-skillsnpx skills add secondsky/claude-skills --skill <name> (see Installing with skills.sh)Each skill is individually installable. Install only the skills you need.
Full Catalog: The authoritative list is .claude-plugin/marketplace.json; a human-readable version is generated in MARKETPLACE.md.
| Category | Skills | Examples |
|---|---|---|
| tooling | 27 | turborepo, plan-interview, code-review, tech-debt, humanize-writing |
| frontend | 26 | nuxt-v4, nuxt-v5, tailwind-v4-shadcn, tanstack-query, nuxt-studio, maz-ui, threejs |
| cloudflare | 21 | cloudflare-d1, cloudflare-workers-ai, cloudflare-agents |
| api | 16 | api-design-principles, graphql-implementation |
| ai | 7 | gemini-cli, ml-model-training, tanstack-ai |
| web | 10 | hono-routing, firecrawl-scraper, web-performance |
| security | 6 | csrf-protection, xss-prevention, cybersecurity |
| mobile | 5 | react-native-app, react-native-skills |
| woocommerce | 4 | woocommerce-backend-dev |
| testing | 4 | vitest-testing, playwright-testing |
| design | 4 | design-review, design-system-creation |
| auth | 4 | better-auth |
| architecture | 3 | microservices-patterns, architecture-patterns |
| data | 2 | recommendation-engine, recommendation-system |
| cms | 2 | hugo, wordpress-plugin-core |
| database | 1 | drizzle-orm-d1 |
| seo | 2 | seo-optimizer, seo-keyword-cluster-builder |
| documentation | 1 | technical-specification |
Claude Code automatically checks ~/.claude/skills/ for relevant skills before planning tasks:
User: "Set up a Cloudflare Worker with D1 database"
↓
Claude: [Checks skills automatically]
↓
Claude: "Found cloudflare-d1 skills.
These prevent 12 documented errors. Use them?"
↓
User: "Yes"
↓
Result: Production-ready setup, zero errors, ~65% token savings
Note: Due to token limits, not all skills may be visible at once. See ⚠️ Important: Token Limits below.
Each plugin is a directory under plugins/<plugin-name>/ containing one or more skills:
plugins/[plugin-name]/
├── .claude-plugin/
│ └── plugin.json # Plugin manifest (marketplace metadata)
├── README.md
├── skills/
│ └── [skill-name]/
│ ├── SKILL.md # Core knowledge and guidance
│ ├── templates/ # Ready-to-copy templates
│ ├── scripts/ # Helper utilities
│ └── references/ # Extended documentation
└── (optional) agents/, commands/, hooks/
Writing Quality:
Plugin Additions:
Skill Overhauls:
.check(), z.xor, z.file, z.json, new format validators), and added a 12-rule best-practices rulebookOffensive Security (new category):
csrf-protection, xss-prevention, vulnerability-scanning, security-headers-configuration, defense-in-depth-validation) for remediation. Integrates 20 Aradotso dev-security skills across 5 grouped reference docs.Supply Chain Security (cross-cutting):
Full-Stack Frameworks:
Infrastructure:
Plugin Enhancements:
Stars on GitHub
View @secondsky’s profileGives AI coding assistants SAP development knowledge for ABAP, CDS views, RAP, SAP AI Core, and API documentation and policy checks, so they write SAP code with less guesswork.
@secondskyA development methodology for coding agents that makes the agent brainstorm before building, follow plans, run parallel work and finish branches in a disciplined way. You get fewer skipped steps and more consistent results from your coding assistant.
@obraHelps you take a change from a rough idea or bug report through to a tested, reviewed result, with each step handled by a focused skill. Its skills cover pinning down domain terms, designing module interfaces, diagnosing hard bugs, and reviewing changes against your repo's coding standards.
@mattpocockGives your coding agent a planning, testing and review routine to follow on every task. It plans before building, checks changes with tests, has a fresh reviewer look for regressions, and saves repeated wins as reusable skills.
@affaan-mDeveloper tools for working on the React codebase itself. Provides skills for extracting error messages, managing and debugging feature flags across release channels, running Flow type checks, and fixing lint and formatting issues before committing.
@facebookInstall it with the command on its page. It includes aceternity-ui, api-authentication, api-changelog-versioning. Its skills do not fire on their own yet. Free and open source.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it