The largest curated, production-ready library of Claude Code Skills. Install in one command. Use anywhere Claude runs.
What are Skills? β’ Install β’ Skills Catalog β’ Build Your Own
Claude Skills are reusable instructions + scripts that extend what Claude Code can do. They are auto-discovered, lazy-loaded, and composable. Think of them as plugins for your AI agent.
A skill is a folder with:
SKILL.mdβ frontmatter (name, description, triggers) + instructions- Optional helper scripts/templates
- Optional reference files
When the user's request matches a skill's triggers, Claude loads it and follows its instructions.
There are skills scattered everywhere β gists, blogs, private repos. This is the canonical, curated, tested collection.
- β All skills follow the same standards (clean frontmatter, real triggers, no LLM-fluff)
- β Production-ready β used in real engineering workflows
- β One-line install for the whole bundle or per-skill
- β Open for contributions with a strict review checklist
curl -fsSL https://raw.githubusercontent.com/kasimmj/claude-skills-mega/main/scripts/install.sh | bash./scripts/install.sh security-auditgit clone https://github.com/kasimmj/claude-skills-mega
cp -r claude-skills-mega/skills/<name> ~/.claude/skills/| Skill | Trigger phrase | What it does |
|---|---|---|
π‘οΈ security-audit |
"audit security", "find vulns" | OWASP-style security scan of the current diff or repo |
ποΈ db-migrate |
"create migration", "alter table" | Safe SQL migration generator with up/down + rollback checks |
π api-mock |
"mock this API", "create stub" | Generates an Express/FastAPI mock server from an OpenAPI spec |
π i18n-translate |
"translate strings", "add Arabic" | Extracts and translates UI strings across locale files |
π license-check |
"check licenses", "scan deps" | Inventories all dependency licenses; flags incompatible ones |
π changelog-gen |
"generate changelog", "release notes" | Builds a clean CHANGELOG from conventional commits |
π― More coming. See ROADMAP.md for the full pipeline.
Every skill is a folder containing a SKILL.md with frontmatter:
---
name: security-audit
description: Run an OWASP-style security audit on changed files or the whole repo
triggers:
- "audit security"
- "find vulnerabilities"
- "check for OWASP"
license: MIT
author: Kasim Mohammed
---
# Security Audit
When invoked, you should:
1. Identify the scope (current diff vs full repo)
2. Scan for the OWASP Top 10 patterns: ...The frontmatter is parsed by Claude Code to register the skill. The body is the instructions Claude follows when the skill activates.
./scripts/scaffold.sh my-new-skill
# Creates skills/my-new-skill/SKILL.md with a starter templateThen run the linter:
./scripts/lint.sh skills/my-new-skillIf it passes, open a PR β see CONTRIBUTING.md for the review checklist.
We reject low-effort skills. To be merged, your skill must:
- Solve a real, repeatable problem (not "make code better")
- Have specific triggers (5+ unambiguous phrases)
- Be lazy-loaded (no eager file reads unless triggered)
- Include at least one example in the body
- Pass the linter (
./scripts/lint.sh) - Document failure modes (when NOT to use)
- Be tested manually before submission
MIT Β© 2026 Kasim Mohammed + contributors.
Individual skills may carry their own license β see SKILL.md.