TL;DR
There are thousands of Claude Code skills now, and most of them are thin, generic, or unsafe to run. These ten made it through a simple filter: do they solve a real pain, save real time, and come from a source worth trusting? Each one does. Skills run as code in your environment, so every pick here is from Anthropic, Vercel, Trail of Bits, or a maintainer with a public track record.
How to install any of these
Most of these install with a single command using the skills installer. The pattern is the same each time: point it at the repo and name the skill you want. The exact command is listed under each one below. You can also paste the GitHub link into Claude Code and say 'install this for me' and it will read the repo and set it up.
Find and build skills
The entry point to the whole ecosystem. Ask Claude to find a skill for whatever you need - 'find me a skill for code review' - and it searches the registry, previews, and installs without you leaving the terminal. Install this one first.
bashnpx skills add https://github.com/vercel-labs/skills --skill find-skills -a claude-codeEvery workflow you repeat by hand is a skill waiting to be built. Describe what you want in plain English; skill-creator asks a few questions, writes the SKILL.md, tests it, and saves it. No code. The meta-tool that turns a repeated task into a permanent one-word command.
bashnpx skills add https://github.com/anthropics/skills --skill skill-creatorDesign that does not look generic
Every AI-built UI looks the same - white background, blue buttons, no personality. This skill forces Claude to commit to a real visual direction (color, type, mood) before it writes a single line of code, so the output looks like a designer made it.
bashnpx skills add https://github.com/anthropics/skills --skill frontend-design -a claude-codeLoads a large ruleset on accessibility, performance, and UI best practice, then audits your code against all of it automatically - missing alt text, poor contrast, layout and performance issues - and hands you a fixable list.
bashnpx skills add vercel-labs/agent-skills --skill web-design-guidelines -a claude-codeThink before it builds
Claude's default is to charge straight into execution. This skill inserts a structured thinking phase first - constraints, edge cases, alternatives, failure modes - before any code is written. Five minutes of hard questions upfront means noticeably fewer revision rounds after.
bashnpx skills add https://github.com/obra/superpowers --skill brainstorming -a claude-codeRead documents and your vault
Claude cannot natively read most document formats. These skills add full parsing - extract, summarize, flag key clauses - in the terminal. A 40-page contract becomes a clean summary of every termination clause and liability cap in under a minute.
bashnpx skills add https://github.com/anthropics/skills --skill pdf
npx skills add https://github.com/anthropics/skills --skill docxBuilt by the head of Obsidian. Claude writes generic Markdown that breaks inside a vault; this teaches it Obsidian's actual syntax - internal links, Bases, Canvas - so notes, queries, and layouts work first try. Add it as a plugin marketplace inside your vault.
bash/plugin marketplace add kepano/obsidian-skillsResearch the open web
Pulls tweets, threads, and timelines from the terminal so Claude can research a topic, user, or thread on X and summarize sentiment and repeated pain points. Requires Bun and an X_BEARER_TOKEN environment variable.
bashmkdir -p .claude/skills && cd .claude/skills
git clone https://github.com/rohunvora/x-research-skill.git x-researchReddit blocks AI agent requests. This skill routes around it by handing the request to the Gemini CLI, which has live web access, then passes the result back to Claude - so you can pull real threads and summarize the recurring complaints. Requires the Gemini CLI installed and authenticated.
bashnpx skills add https://github.com/ykdojo/claude-code-tips --skill reddit-fetchShip secure code
From one of the most respected security research firms there is. Brings static analysis and vulnerability detection into your workflow - invoke it before shipping an auth module and Claude flags injection surfaces and timing attacks with remediation, before a single user touches the code.
bash/plugin marketplace add trailofbits/skills
/plugin menuBefore you install anything
When you go looking for more, stick to trustworthy registries and curated lists rather than random publishers with no context. The skills.sh registry and the community 'awesome-claude-code' and 'awesome-claude-skills' lists are good starting points - but read the repo before you run it, every time.
Common questions
How do I install one of these skills?
Most install with one command using the skills installer - the exact line is under each skill above. A couple (obsidian-skills, trailofbits) install as plugin marketplaces, and a couple need a prerequisite like Bun or the Gemini CLI, noted in their description. You can also paste the GitHub link into Claude Code and ask it to install the skill for you.
Are these skills safe to run?
These specific ones are, because they come from Anthropic, Vercel, Trail of Bits, or maintainers with public track records. Skills in general are not automatically safe - they run as code in your environment. Never install one that has no readable public repo, and treat skills the way you treat npm packages: verify the source first.
How is this different from your other free skills list?
The other list (10 Free Claude Code Skills Worth Installing) is a different set focused on cutting tokens, mapping code, and doing design work. This one is the trust-first cut - official and reputable sources, plus the document, research, and security tooling that list does not cover. Install from both; they barely overlap.
Do I need to be a developer to use these?
No. Installing is one command, and using a skill is just asking Claude to do the thing it adds. find-skills, frontend-design, brainstorming, and the document skills are especially friendly to non-technical builders. The X and Reddit ones need a one-time setup of a token or the Gemini CLI.
What is the difference between a skill and a plugin?
A skill is a packaged workflow (a SKILL.md) Claude runs on command. A plugin marketplace is a way to install a whole bundle of skills at once - obsidian-skills and trailofbits ship that way. Both extend what Claude can do; the install path is just slightly different.
Where do I find more skills worth trusting?
The skills.sh registry and the community 'awesome-claude-code' and 'awesome-claude-skills' lists are the maintained, trustworthy starting points. Use find-skills to search them from inside Claude Code, and read any repo before installing it.
Want a vetted library of skills ready to install?
Get the other 2 in the skills stack - free, with 5,000+ builders.
Join the Club