Should you install that skill?

Independent verdicts on Claude Code and agent skills. We clone each repo, read the SKILL.md and every script it ships, and publish one verdict with its sources.

Authors can pay to be reviewed sooner. Paying moves the date, never the verdict.

All verdicts

Install with cautionfind-skills vercel-labs/skillsWhat vercel-labs' skill-discovery skill does, that it installs other skills via npx, safety notes, install command and alternatives.Installfrontend-design anthropics/skillsAnthropic's official design-guidance skill, no scripts, Apache-2.0 LICENSE.txt in folder, what it changes and who it's for.Install with cautionpdf anthropics/skillsAnthropic's PDF processing skill runs Python scripts for forms, merging and OCR, and its license is Proprietary — read before you redistribute.Install with cautionagent-browser vercel-labs/agent-browserPowerful Chrome automation for agents, npm install and logged-in sessions included. Powerful, useful, and not a casual install.Installgrill-me mattpocock/skillsA 5-line wrapper that invokes the substantive grilling skill. Install the pack, not the wrapper alone — no scripts, MIT, user-invoked only.Installcopywriting (marketingskills) coreyhaines31/marketingskillsCorey Haines' v2.3.2 marketing copy skill, instructions-only, MIT, diagnoses your brief before drafting. Best marketing pick in this batch.Install with cautionclaude-seo AgriciDaniel/claude-seoA huge 25-sub-skill, 19-agent SEO suite with its own Python runtime and Chromium. Capable, MIT, and heavy — install deliberately.Install with cautionbrainstorming (superpowers) obra/superpowersobra/superpowers' pre-build questioning skill, plus an optional local visual-companion server. Read the server part before you enable it.Installsecurity-review (Sentry) getsentry/skillsConfidence-based reporting, data-flow research before flagging, 17+ reference guides. The strong security skill in this batch.Redistributed copy — install the originalsecurity-review (davila7 templates) davila7/claude-code-templatesdavila7's cc-skill-security-review is 96% identical to affaan-m's original security-review (author field still affaan-m). Install the original instead.Install with cautionhyperframes heygen-com/hyperframesHeyGen's HTML-to-video skill is capable and Apache-2.0, but it drives an unpinned npx CLI with usage telemetry and optional paid cloud rendering.Install with cautionhyperframes-cli heygen-com/hyperframesA clear command map for HeyGen's video CLI, including cloud, Lambda and publish commands, plus default feedback reports to HeyGen.Installgrill-with-docs mattpocock/skillsA two-line wrapper that runs grilling plus domain-modeling, writing ADRs and a glossary into your repo. MIT, no scripts, user-invoked only.Installimprove-codebase-architecture mattpocock/skillsScans for shallow modules, writes a visual HTML report to your temp folder, then grills you on one refactor. MIT, no scripts.Installtdd mattpocock/skillsRed-green loop rules, agreed test seams and named anti-patterns like tautological tests. Instructions only, MIT, and it asks before testing anything.Installhandoff mattpocock/skillsA 940-byte skill that writes a session summary for the next agent to your temp folder, tells it to redact secrets and to link rather than copy. MIT.Installvercel-react-best-practices vercel-labs/agent-skills70 prioritised React and Next.js performance rules from Vercel, markdown only. One rule suggests adding an npm package — check it first.Install with cautionreddit-automation flowkit-labs/skillsDrafts disclosed Reddit replies with a human posting each one — but it is a byte-identical republish and a funnel to a paid service.Install with cautiondesign-mobile-apps designed-by-ai/skillsSleek's mobile design API skill, here as a mirror of the official repo. Needs a paid Sleek plan for real use and sends your brief to Sleek.Redistributed copy — install the originalai-video-generation 101-skills/superpowersA frozen August snapshot of inference.sh's skills under a superpowers name that is not obra's. Paid cloud models, curl-pipe-sh CLI. Use the original.Install with cautiongit-guardrails-claude-code mattpocock/skillsA 507-byte hook that blocks git push and reset --hard, but fails open without jq and misses git -C repo push. A seatbelt, not a boundary.Install with cautiontriage mattpocock/skillsLabels, briefs and closes issues through a clear state machine. User-invoked, MIT, but it runs external PR code to verify it — use a sandbox.Installprototype mattpocock/skillsBuilds a one-file HTML logic demo or switchable UI variants to answer one design question. No scripts, MIT, but it commits and comments on issues.Install with cautionhyperframes-registry heygen-com/hyperframesLocal search over 450 video blocks, but items install from main and load CDN scripts without integrity checks. Apache-2.0.Install with cautionmedia-use heygen-com/hyperframesOne command for music, voice, images and grades, with 45 scripts, account-linked telemetry and an instruction never to tell you prices. Set a credit limit.