4,673 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
trailofbitstrailofbits/skills1
finance-skillshimself65/finance-skills1
wondelai-skillswondelai/skills1
claude-code-workflowsshinpr/claude-code-workflows1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceGet products ready for the EU Cyber Resilience Act (Regulation 2024/2847). Four deterministic stdlib scripts: a scope classifier that sorts a portfolio into default, important class I/II and critical (Annex III/IV), blocks conformity routes Article 32 does not allow, checks support periods and names the CSIRT for Article 14 reports; an Article 14 clock for the 24h/72h/14-day/one-month deadlines live since 11 September 2026; an Annex I/II/VII gap check before the EU declaration of conformity; and an SBOM floor check for CycloneDX and SPDX. Ships cs-cra-officer agent, /cs-cra-readiness and /cs-cra-report commands, 3 cited references and an Article 14 runbook.
Get medical device software through IEC 62304 and IEC 81001-5-1. Four deterministic stdlib scripts: a software safety classifier (62304 4.3 with A1 external controls and segregation) that also sets the FDA Basic/Enhanced documentation level and flags 524B cyber devices; a lifecycle gap check scoped by class, with IEC 81001-5-1 security activities; a SOUP register check with SBOM cross-check; and a trace matrix release gate. Ships cs-device-software-lead agent, /cs-medical-device-software and /cs-soup-review commands and 4 references with per-claim confidence levels.
A four-tier memory ladder for Claude Code where promotion is earned by recurrence, not asserted by confidence. L0 raw transcripts are never injected; L1 candidate atoms are gitignored and recalled on lexical relevance per prompt; L2 project context loads each session start; L3 stable persona is always loaded. L1 to L2 needs three distinct sessions spanning two distinct calendar days (a stated claim needs two; a verified claim is the only single-observation path); L2 to L3 needs two projects and thirty days. Two gates refuse rather than guess: a claim altered by the redaction pass never promotes on evidence alone, and a contradicted claim freezes until a human resolves it. Three hooks run the loop unattended and every one fails open. Nothing reaches a committed CLAUDE.md without an explicit human adopt. Ships 5 stdlib scripts, 3 hooks, a cs-memory-curator agent, /cs-memory, a JSON schema, and a 69-check validator. Concept from TencentCloud/TencentDB-Agent-Memory (MIT); no upstream code
Prove an agent, prompt, model or tool change did not make the agent worse. Three deterministic stdlib scripts: a trajectory checker that grades tool-call paths (strict / unordered / subset / superset match modes, argument matching, forbidden tools that block in every mode, call ceilings); a flake detector that classifies each case as stable or flaky from repeated trials and reports pass@k and pass^k with Wilson intervals; and a paired regression gate that averages trials per case, tests per-case differences with a t-based CI and an exact one-sided McNemar test, and blocks the merge on a significant drop, a critical-case regression, a dropped case, or a quarantine entry without owner and expiry. Ships cs-eval-gatekeeper agent, /cs-agent-evals and /cs-eval-gate commands, 3 references, and a CI job example.
Ship a new language without the usual breakage. Three deterministic stdlib scripts: a translation-file checker for JSON/ARB (i18next, ICU), .properties, .strings, Android strings.xml and gettext .po that blocks on missing keys, renamed placeholders, ICU syntax errors, plural/select without other, zero branches that never match and plural categories the target locale needs, from the embedded Unicode CLDR 49 table (ru few/many, ar six forms); a hardcoded-string scanner for React, Vue, Svelte and HTML that flags text and user-facing attributes outside t(), concatenated translations, locale-less toLocaleString and '$' + amount; and a pseudo-locale generator (en-XA accented and expanded, ar-XB right-to-left) that keeps placeholders and ICU syntax intact. Ships cs-i18n-engineer agent, /cs-i18n-check and /cs-pseudo-locale commands and 3 cited references.
Turn a tangled working tree into a clean, reviewable commit series. Three deterministic stdlib scripts over git: a series planner that groups changes into commits in build-safe order (manifest with lockfile, pure moves, formatting, each module's change with its tests, docs, CI), holds back .env and key files, and flags mixed formatting and moves whose callers would break; a secret gate that scans staged or pushed lines for provider tokens, high-entropy secrets, sensitive files and conflict markers and blocks before the commit exists, with redacted output and reasoned waivers; and a message linter that blocks vague subjects, missing why on large changes and pending fixup commits, matching the repo's own convention. Ships pre-commit, commit-msg and pre-push hooks, cs-commit-craft agent, /cs-commit-craft and /cs-commit-check commands and 3 cited references.
Roll Claude Code out to a team with guardrails you can check. Four deterministic stdlib scripts: a settings linter that reads shared, local, user and managed settings together (array merge, deny-ask-allow order) and blocks blanket shell allows, pre-approved destructive commands and committed credentials; an MCP and plugin inventory that blocks anything missing from your approved list or holding a literal secret, and flags unpinned or plain-http servers; a CLAUDE.md layering audit that resolves every layer and @import and flags broken imports, contradictions, secrets and resident size; and a privacy-safe adoption tracker that turns local session files into counts only and classifies the rollout as PILOT, SPREADING, EMBEDDED or STALLED. Ships cs-claude-code-rollout agent, /cs-claude-rollout and /cs-claude-settings-lint commands, 3 references, a baseline managed-settings policy and a four-phase rollout plan.
Run a faster, provable month-end close. Three deterministic stdlib scripts: a close calendar planner that orders tasks by dependency, finds the critical path and slack, maps WD+n deadlines to dates and blocks on missing owners, missing or self-review of key controls and a critical path past the target workday; a reconciliation matcher that matches GL to bank or sub-ledger by reference then amount and date, builds the proof, ages reconciling items and blocks on any unexplained difference or preparer-as-reviewer; and a flux analyzer that applies your materiality rule and refuses material fluctuations explained with boilerplate or without a quantified driver. Ships cs-close-controller agent, /cs-month-end-close and /cs-flux-review commands, 3 references citing COSO 2013 and PCAOB AS 2201 / AS 2305 / SAPA 11, and a reconciliation sign-off template.
Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.
External API data — sentiment via Adanos, Fintel short-interest/ownership intelligence, Hormuz Strait monitoring, TradingView via a bundled headless MCP server or the desktop reader, and Hyperliquid perp/spot reader.
Code quality and software design skills including Clean Code (Robert C. Martin), Refactoring patterns (Martin Fowler), A Philosophy of Software Design (John Ousterhout), The Pragmatic Programmer (Hunt & Thomas), Domain-Driven Design (Eric Evans), Working Effectively with Legacy Code (Michael Feathers), and Google's Developer Documentation Style Guide (technical-documentation)
The Chinese exams and early-career pack: the civil service essay (申论) and structured interview (结构化面试), postgraduate entrance exam planning (考研), the thesis proposal (开题报告) and GB/T 7714 references, tech company interview drills (大厂技术面试), campus recruitment (校招 and 三方协议) and state-owned enterprise interviews (国企面试), in Chinese
Operate AI agents and LLM features in production: prompt regression suites, model migration plans, context-engineering reviews, agent incident postmortems, and observability specs — plus the pm-ai evaluation and cost skills they build on.
QA & testing skills: Test Case Writer, Bug Report, Exploratory Test Charter, Regression Test Plan, QA Release Sign-off, and API Test Plan. Find bugs early and ship with evidence, not vibes.
Planning & strategy skills: OKR Builder, Feature Prioritisation (RICE/MoSCoW/Kano/ICE), Roadmap Presentation, Pricing Strategy, RICE + Impact Matrix, Roadmap Narrative.
Marketing & GTM skills: Go-To-Market Planner, Content Calendar, Competitor Teardown, Email Campaign, SEO Content Brief, Media Pitch, Social Media Strategy, Product Positioning Doc. Build positioning docs, messaging frameworks, content pillars, social strategies with KPIs, launch campaigns, and journalist pitches.
Business, strategy & C-suite skills: Investor Update, Board Deck Narrative, Board Pre-Read, Decision Memo, Strategy Memo, Capital Allocation, Job Application. Drive decisions with crisp memos, run board meetings on pre-reads, allocate budget by return × strategic fit, and articulate a real strategy with explicit non-goals.
Lightweight skills for users with existing workflows - coding best practices, testing principles, and design guidelines without recipe workflows or agents
Two-loop skill pipeline for Claude Code. Inner loop (plan-interview, intent-framed-agent, session-context, context-surfing, verify-gate, self-healing, simplify-and-harden) catches failures in-session — including active runtime recovery via self-healing when a command, test, build, helper, env, or external service fails mid-task. Outer loop (learning-aggregator, self-improvement, eval-creator, pre-flight-check) captures recurring patterns, promotes them to CLAUDE.md as permanent rules with human approval, and turns failures into regression tests. The harness gets stronger with every cycle.
Interactive debugging, developer experience optimization, and smart debugging workflows
