# External AI agent skills — freight-transport-dispatcher Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date. **Tiers:** `core` = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; `adjacent` = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package. _Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by `pipeline/p5_enrich_ai_skills.py` on 2026-07-14._ ## Source: anthropics/skills - Repository: [https://github.com/anthropics/skills](https://github.com/anthropics/skills) (commit `f6656c1`, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `docx` | adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | [source](https://github.com/anthropics/skills/tree/main/skills/docx) | | `pdf` | adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | [source](https://github.com/anthropics/skills/tree/main/skills/pdf) | ## Source: wshobson/agents - Repository: [https://github.com/wshobson/agents](https://github.com/wshobson/agents) (commit `6fd3247`, retrieved 2026-07-14) - License: MIT (c) Seth Hobson | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `file-conversion` | adjacent | Convert files between formats — PDF to Word, HEIC to JPG, MP4 to MP3, CSV to JSON, EPUB to MOBI, and 999 total routes across images, video, audio, documents, data, fonts, ebooks, and archives. Free via changethisfile.com, no API key or … | [source](https://github.com/wshobson/agents/tree/main/plugins/file-conversion/skills/file-conversion) | ## Source: a5c-ai/babysitter - Repository: [https://github.com/a5c-ai/babysitter](https://github.com/a5c-ai/babysitter) (commit `44a5d58b`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `translation-management` | core | Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/technical-documentation/skills/translation-management) | | `cross-dock-orchestrator` | core | Flow-through logistics process coordination skill to minimize storage time and accelerate product movement | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/cross-dock-orchestrator) | | `driver-scheduling-optimizer` | core | Automated driver assignment and hours of service compliance skill ensuring regulatory compliance and operational efficiency | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/driver-scheduling-optimizer) | | `production-coordination` | core | Coordinate all aspects of live performance production including scheduling, technical requirements, artist contracts, venue logistics, and show documentation | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/social-sciences-humanities/arts-culture/skills/production-coordination) | | `route-optimization-engine` | core | AI-powered route planning and optimization skill using advanced algorithms (VRP, TSP) to minimize transportation costs, reduce delivery times, and maximize vehicle utilization | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/route-optimization-engine) | | `shipment-visibility-tracker` | core | Real-time shipment monitoring and exception management skill with proactive alerting and customer communication | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/shipment-visibility-tracker) | | `supply-chain-visibility-integrator` | core | End-to-end supply chain visibility integration skill connecting systems and data sources | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/supply-chain-visibility-integrator) | | `supply-chain-visibility-platform` | core | End-to-end supply chain visibility skill providing real-time tracking and control tower capabilities | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/logistics/skills/supply-chain-visibility-platform) | | `cost-to-serve-analyzer` | core | Supply chain cost-to-serve analysis skill by customer, product, or channel | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/cost-to-serve-analyzer) | | `early-warning-monitor` | core | Continuous supplier and supply chain risk monitoring with automated alerts | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/early-warning-monitor) | | `supply-chain-simulation-engine` | core | Supply chain discrete-event simulation for scenario testing and optimization | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/domains/business/supply-chain/skills/supply-chain-simulation-engine) | | `Stakeholder Communication` | core | Generate stakeholder-specific communications and presentations for product updates | [source](https://github.com/a5c-ai/babysitter/tree/44a5d58b/library/specializations/product-management/skills/stakeholder-comms) | ## Source: affaan-m/everything-claude-code - Repository: [https://github.com/affaan-m/everything-claude-code](https://github.com/affaan-m/everything-claude-code) (commit `ed38744`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `carrier-relationship-management` | core | Codified expertise for managing carrier portfolios, negotiating freight rates, tracking carrier performance, allocating freight, and maintaining strategic carrier relationships. Informed by transportation managers with 15+ years … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/carrier-relationship-management) | | `google-workspace-ops` | core | Operate across Google Drive, Docs, Sheets, and Slides as one workflow surface for plans, trackers, decks, and shared documents. Use when the user needs to find, summarize, edit, migrate, or clean up Google Workspace assets without dropping … | [source](https://github.com/affaan-m/everything-claude-code/tree/ed38744/skills/google-workspace-ops) | ## Source: alirezarezvani/claude-skills - Repository: [https://github.com/alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills) (commit `0241f43`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `ceo-advisor` | core | Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing board presentations, managing investors, developing organizational culture, making … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/c-level-advisor/skills/ceo-advisor) | | `google-workspace-cli` | core | Google Workspace administration via the gws CLI (github.com/googleworkspace/cli). Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks. Run security audits and use local recipe templates and persona … | [source](https://github.com/alirezarezvani/claude-skills/tree/0241f43/engineering-team/google-workspace-cli/skills/google-workspace-cli) | ## Source: avelikiy/great_cto - Repository: [https://github.com/avelikiy/great_cto](https://github.com/avelikiy/great_cto) (commit `4fe1e39`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `vertical-logistics` | core | Domain knowledge for the logistics & supply-chain vertical (SMB shipping & inventory) so architect and pm don't spec naively. Covers the vocabulary (TMS vs WMS, multi-carrier rate shopping, dimensional weight, BOL/ASN, lot/batch, reorder … | [source](https://github.com/avelikiy/great_cto/tree/4fe1e39/skills/vertical-logistics) | ## Source: brycewang-stanford/Auto-Empirical-Research-Skills - Repository: [https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills) (commit `85bf545`, retrieved 2026-07-14) - License: CC-BY-4.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `create-talk` | core | Generate Beamer presentations for the sewage-house-prices project by dispatching the Storyteller agent (creator) and Discussant agent (critic). Supports 4 formats — job market, seminar, short, lightning. Derives all content from the paper. | [source](https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills/tree/85bf545/skills/41-sticerd-eee-sewage-econometrics-check/skills/create-talk) | ## Source: Chachamaru127/claude-code-harness - Repository: [https://github.com/Chachamaru127/claude-code-harness](https://github.com/Chachamaru127/claude-code-harness) (commit `9851b1a`, retrieved 2026-07-14) - License: custom (see upstream LICENSE) | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `harness-setup` | core | HAR: Project init, tool setup, agent config, memory setup, skill mirror sync. Trigger: setup, init, new project, CI/Codex setup, harness-mem, mirror. Do NOT load for: implementation, review, release, planning. | [source](https://github.com/Chachamaru127/claude-code-harness/tree/9851b1a/codex/.codex/skills/harness-setup) | ## Source: davepoon/buildwithclaude - Repository: [https://github.com/davepoon/buildwithclaude](https://github.com/davepoon/buildwithclaude) (commit `3c94e0c`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `googlesheets-automation` | core | Automate Google Sheets operations (read, write, format, filter, manage spreadsheets) via Rube MCP (Composio). Read/write data, manage tabs, apply formatting, and search rows programmatically. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/googlesheets-automation) | | `raffle-winner-picker` | core | Picks random winners from lists, spreadsheets, or Google Sheets for giveaways, raffles, and contests. Ensures fair, unbiased selection with transparency. | [source](https://github.com/davepoon/buildwithclaude/tree/3c94e0c/plugins/all-skills/skills/raffle-winner-picker) | ## Source: davila7/claude-code-templates - Repository: [https://github.com/davila7/claude-code-templates](https://github.com/davila7/claude-code-templates) (commit `fa79251`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `supply-chain-guard` | core | Detect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/security/supply-chain-guard) | | `raffle-winner-picker` | core | Picks random winners from lists, spreadsheets, or Google Sheets for giveaways, raffles, and contests. Ensures fair, unbiased selection with transparency. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/productivity/raffle-winner-picker) | | `vulnerability-scanner` | core | Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization. | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/security/vulnerability-scanner) | | `latex-posters` | core | Create professional research posters in LaTeX using beamerposter, tikzposter, or baposter. Support for conference presentations, academic posters, and scientific communication. Includes layout design, color schemes, multi-column formats, … | [source](https://github.com/davila7/claude-code-templates/tree/fa79251/cli-tool/components/skills/scientific/latex-posters) | ## Source: googleworkspace/cli - Repository: [https://github.com/googleworkspace/cli](https://github.com/googleworkspace/cli) (commit `a3768d0`, retrieved 2026-07-14) - License: Apache-2.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `recipe-create-expense-tracker` | core | Set up a Google Sheets spreadsheet for tracking expenses with headers and initial entries. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-create-expense-tracker) | | `recipe-log-deal-update` | core | Append a deal status update to a Google Sheets sales tracking spreadsheet. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-log-deal-update) | | `gws-sheets` | core | Google Sheets: Read and write spreadsheets. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/gws-sheets) | | `gws-sheets-append` | core | Google Sheets: Append a row to a spreadsheet. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/gws-sheets-append) | | `gws-sheets-read` | core | Google Sheets: Read values from a spreadsheet. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/gws-sheets-read) | | `recipe-backup-sheet-as-csv` | core | Export a Google Sheets spreadsheet as a CSV file for local backup or processing. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-backup-sheet-as-csv) | | `recipe-create-events-from-sheet` | core | Read event data from a Google Sheets spreadsheet and create Google Calendar entries for each row. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-create-events-from-sheet) | | `recipe-sync-contacts-to-sheet` | core | Export Google Contacts directory to a Google Sheets spreadsheet. | [source](https://github.com/googleworkspace/cli/tree/a3768d0/skills/recipe-sync-contacts-to-sheet) | ## Source: hoangsonww/Claude-Code-Agent-Monitor - Repository: [https://github.com/hoangsonww/Claude-Code-Agent-Monitor](https://github.com/hoangsonww/Claude-Code-Agent-Monitor) (commit `8f87ce1`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `fleet-runs` | core | Summarize Workflow-tool fleet runs from the Agent Monitor — these fleets emit no hooks and are ingested from on-disk run journals. List recent runs with status and agents-per-run, then drill into a single run's per-agent detail. Reconciles … | [source](https://github.com/hoangsonww/Claude-Code-Agent-Monitor/tree/8f87ce1/plugins/ccam-workflows/skills/fleet-runs) | ## Source: honeydew-ai/honeydew-ai-coding-agents-plugins - Repository: [https://github.com/honeydew-ai/honeydew-ai-coding-agents-plugins](https://github.com/honeydew-ai/honeydew-ai-coding-agents-plugins) (commit `f4066d2`, retrieved 2026-07-14) - License: Apache-2.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `context-item-creation` | core | Guides you through creating context items — instructions, skills, knowledge pointers, and memory events — that give the AI analyst persistent knowledge about your organization. Covers when to create each type, naming conventions, folder … | [source](https://github.com/honeydew-ai/honeydew-ai-coding-agents-plugins/tree/f4066d2/skills/context-item-creation) | ## Source: hypnguyen1209/offensive-claude - Repository: [https://github.com/hypnguyen1209/offensive-claude](https://github.com/hypnguyen1209/offensive-claude) (commit `4d62be7`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `cicd-supply-chain` | core | Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance | [source](https://github.com/hypnguyen1209/offensive-claude/tree/4d62be7/skills/cicd-supply-chain) | | `vulnerability-analysis` | core | Use when auditing source code for vulnerabilities — drive CodeQL/Semgrep/Joern to taint untrusted data source-to-sink across injection, memory safety, deserialization/prototype-pollution, secrets/crypto/authz/race, and supply-chain risks | [source](https://github.com/hypnguyen1209/offensive-claude/tree/4d62be7/skills/vulnerability-analysis) | ## Source: jeremylongshore/claude-code-plugins-plus-skills - Repository: [https://github.com/jeremylongshore/claude-code-plugins-plus-skills](https://github.com/jeremylongshore/claude-code-plugins-plus-skills) (commit `e112938a`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `flexport-prod-checklist` | core | Execute Flexport production deployment checklist for logistics integrations. Use when deploying shipment tracking, booking automation, or supply chain integrations to production with proper monitoring and rollback. Trigger: "flexport … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-prod-checklist) | | `flexport-core-workflow-a` | core | Execute Flexport primary workflow: shipment booking and purchase order management. Use when creating bookings, managing purchase orders, tracking freight, or building the core shipment lifecycle integration. Trigger: "flexport booking", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-core-workflow-a) | | `flexport-deploy-integration` | core | Deploy Flexport logistics integrations to Vercel, Fly.io, and Cloud Run. Use when deploying shipment tracking dashboards, webhook receivers, or supply chain automation services to production infrastructure. Trigger: "deploy flexport", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-deploy-integration) | | `flexport-data-handling` | core | Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-data-handling) | | `flexport-install-auth` | core | Install and configure Flexport API authentication with API keys or OAuth credentials. Use when setting up a new Flexport logistics integration, configuring bearer tokens, or initializing the Flexport REST API client for shipment and supply … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-install-auth) | | `flexport-webhooks-events` | core | Implement Flexport webhook event handling for shipment milestones, booking updates, purchase order events, and invoice notifications. Trigger: "flexport webhooks", "flexport events", "flexport milestones", "flexport shipment tracking … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-webhooks-events) | | `snowflake-load-scale` | core | Implement Snowflake load testing, warehouse scaling, and capacity planning. Use when testing query performance at scale, configuring multi-cluster warehouses, or planning capacity for production Snowflake workloads. Trigger with phrases … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/snowflake-pack/skills/snowflake-load-scale) | | `flexport-core-workflow-b` | core | Execute Flexport secondary workflow: commercial invoices, products catalog, and freight invoices. Use when managing commercial invoices for customs, maintaining product catalogs, or handling freight billing through the Flexport API. … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-core-workflow-b) | | `gamma-core-workflow-b` | core | Generate from templates, retrieve exports, and manage sharing via Gamma API. Use when creating content from template gammas, downloading PDF/PPTX/PNG exports, or configuring sharing and folder organization. Trigger: "gamma template", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/gamma-pack/skills/gamma-core-workflow-b) | | `apify-cost-tuning` | core | Optimize Apify platform costs through memory tuning, compute unit management, and proxy budgeting. Use when analyzing Apify billing, reducing Actor run costs, or implementing usage monitoring and budget alerts. Trigger: "apify cost", … | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/apify-pack/skills/apify-cost-tuning) | | `flexport-incident-runbook` | core | Execute Flexport incident response for API outages, webhook failures, and supply chain data sync issues with triage and mitigation steps. Trigger: "flexport incident", "flexport outage", "flexport down", "flexport emergency". | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-incident-runbook) | | `flexport-reference-architecture` | core | Implement Flexport reference architecture for supply chain integrations with best-practice project layout, service boundaries, and data flow. Trigger: "flexport architecture", "flexport project structure", "flexport system design". | [source](https://github.com/jeremylongshore/claude-code-plugins-plus-skills/tree/e112938a/plugins/saas-packs/flexport-pack/skills/flexport-reference-architecture) | ## Source: K-Dense-AI/claude-scientific-skills - Repository: [https://github.com/K-Dense-AI/claude-scientific-skills](https://github.com/K-Dense-AI/claude-scientific-skills) (commit `4d97e29`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `latex-posters` | core | Create professional research posters in LaTeX using beamerposter, tikzposter, or baposter. Support for conference presentations, academic posters, and scientific communication. Includes layout design, color schemes, multi-column formats, … | [source](https://github.com/K-Dense-AI/claude-scientific-skills/tree/4d97e29/skills/latex-posters) | ## Source: K-Dense-AI/scientific-agent-skills - Repository: [https://github.com/K-Dense-AI/scientific-agent-skills](https://github.com/K-Dense-AI/scientific-agent-skills) (commit `4d97e29`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `latex-posters` | core | Create professional research posters in LaTeX using beamerposter, tikzposter, or baposter. Support for conference presentations, academic posters, and scientific communication. Includes layout design, color schemes, multi-column formats, … | [source](https://github.com/K-Dense-AI/scientific-agent-skills/tree/4d97e29/skills/latex-posters) | ## Source: microsoft/skills - Repository: [https://github.com/microsoft/skills](https://github.com/microsoft/skills) (commit `dc543aa`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `azure-mgmt-apicenter-py` | core | Azure API Center Management SDK for Python. Use for managing API inventory, metadata, and governance across your organization. Triggers: "azure-mgmt-apicenter", "ApiCenterMgmtClient", "API Center", "API inventory", "API governance". | [source](https://github.com/microsoft/skills/tree/dc543aa/.github/plugins/azure-sdk-python/skills/azure-mgmt-apicenter-py) | ## Source: mohitagw15856/pm-claude-skills - Repository: [https://github.com/mohitagw15856/pm-claude-skills](https://github.com/mohitagw15856/pm-claude-skills) (commit `876fa30`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `logistics-incident-report` | core | Write up a supply chain disruption — port delay, carrier failure, customs hold, or in-transit damage — as a decision-ready incident report. Use when asked to document a shipment delay, write up a logistics failure, report a customs hold, … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-supplychain/skills/logistics-incident-report) | | `bom-cost-review` | core | Review a bill of materials for cost, risk, and supply exposure — cost rollup, top-10 cost drivers, single-source and EOL risk, MOQ vs forecast mismatch, cost-down candidates, and tariff/logistics sensitivity. Use when asked to review a … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-hardware/skills/bom-cost-review) | | `sop-meeting-prep` | core | Prepare an S&OP cycle readout that surfaces the demand-supply gaps and forces the three decisions the meeting must make. Use when asked to prep an S&OP meeting, build the executive S&OP deck, summarize demand vs supply for the monthly … | [source](https://github.com/mohitagw15856/pm-claude-skills/tree/876fa30/plugins/pm-supplychain/skills/sop-meeting-prep) | ## Source: mukul975/Anthropic-Cybersecurity-Skills - Repository: [https://github.com/mukul975/Anthropic-Cybersecurity-Skills](https://github.com/mukul975/Anthropic-Cybersecurity-Skills) (commit `673da1f`, retrieved 2026-07-14) - License: Apache-2.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `analyzing-macro-malware-in-office-documents` | core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-macro-malware-in-office-documents) | | `verifying-build-provenance-with-slsa-sigstore` | core | Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/verifying-build-provenance-with-slsa-sigstore) | | `analyzing-sbom-for-supply-chain-vulnerabilities` | core | Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-sbom-for-supply-chain-vulnerabilities) | | `analyzing-supply-chain-malware-artifacts` | core | Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/analyzing-supply-chain-malware-artifacts) | | `hunting-for-supply-chain-compromise` | core | Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/hunting-for-supply-chain-compromise) | | `implementing-code-signing-for-artifacts` | core | This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-code-signing-for-artifacts) | | `implementing-supply-chain-security-with-in-toto` | core | Implement software supply chain integrity verification for container builds using the in-toto framework to create cryptographically signed attestations across CI/CD pipeline steps. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/implementing-supply-chain-security-with-in-toto) | | `performing-supply-chain-attack-simulation` | core | Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-supply-chain-attack-simulation) | | `managing-third-party-vendor-risk` | core | Build and run a third-party / vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM and NIST CSF 2.0 GV.SC: inventory and tier vendors by risk, send the right due-diligence questionnaire (SIG, CAIQ), review evidence (SOC … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/managing-third-party-vendor-risk) | | `performing-thick-client-application-penetration-test` | core | Conduct a thick client application penetration test to identify insecure local storage, hardcoded credentials, DLL hijacking, memory manipulation, and insecure API communication in desktop applications using dnSpy, Procmon, and Burp Suite. | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-thick-client-application-penetration-test) | | `detecting-supply-chain-attacks-in-ci-cd` | core | Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/detecting-supply-chain-attacks-in-ci-cd) | | `performing-api-inventory-and-discovery` | core | Performs API inventory and discovery to identify all API endpoints in an organization''s environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS … | [source](https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/673da1f/skills/performing-api-inventory-and-discovery) | ## Source: muratcankoylan/Agent-Skills-for-Context-Engineering - Repository: [https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering) (commit `c578e85`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `memory-systems` | core | This skill should be used for persistent semantic memory in agent systems: cross-session knowledge retention, entity tracking, temporal validity, graph or vector retrieval, memory consolidation, and memory benchmark selection. Route … | [source](https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering/tree/c578e85/skills/memory-systems) | ## Source: nexscope-ai/eCommerce-Skills - Repository: [https://github.com/nexscope-ai/eCommerce-Skills](https://github.com/nexscope-ai/eCommerce-Skills) (commit `56f3288`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `supply-chain-optimization-shopify` | core | Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV analysis, 3PL cost optimization, and ad spend benchmarks. No API key required for … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-shopify) | | `supply-chain-optimization-tiktok` | core | Supply Chain Bottleneck Analyzer for TikTok Shop sellers. Diagnose cash flow, inventory turnover, affiliate commissions, and return rates. Includes FBT cost analysis, influencer payout optimization, and viral product lifecycle management. … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-tiktok) | | `supply-chain-optimization-walmart` | core | Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers. Diagnose cash flow, inventory, WFS costs, and referral fees. Includes comparison with Amazon FBA, lower storage fee optimization, and Walmart Connect ad spend analysis. No … | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-walmart) | | `supply-chain-optimization-amazon-lite` | core | Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation | [source](https://github.com/nexscope-ai/eCommerce-Skills/tree/56f3288/supply-chain-optimization/supply-chain-optimization-amazon) | ## Source: rohitg00/skillkit - Repository: [https://github.com/rohitg00/skillkit](https://github.com/rohitg00/skillkit) (commit `d2e5c34`, retrieved 2026-07-14) - License: Apache-2.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `handoff-protocols` | core | Manages work transitions between team members or agents by creating structured handoff documents, summarizing project status, documenting key decisions, blockers, and open questions, and generating onboarding briefs. Use when someone needs … | [source](https://github.com/rohitg00/skillkit/tree/d2e5c34/packages/core/src/methodology/packs/collaboration/handoff-protocols) | ## Source: samber/cc-skills-golang - Repository: [https://github.com/samber/cc-skills-golang](https://github.com/samber/cc-skills-golang) (commit `4881c01`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `golang-security` | core | Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … | [source](https://github.com/samber/cc-skills-golang/tree/4881c01/skills/golang-security) | ## Source: sanjay3290/ai-skills - Repository: [https://github.com/sanjay3290/ai-skills](https://github.com/sanjay3290/ai-skills) (commit `3619692`, retrieved 2026-07-14) - License: Apache-2.0 | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `google-sheets` | core | Read and write Google Sheets spreadsheets - get content, update cells, append rows, fetch specific ranges, search for spreadsheets, and view metadata. Use when user asks to: read a spreadsheet, update cells, add data to Google Sheets, find … | [source](https://github.com/sanjay3290/ai-skills/tree/3619692/skills/google-sheets) | ## Source: secondsky/claude-skills - Repository: [https://github.com/secondsky/claude-skills](https://github.com/secondsky/claude-skills) (commit `c4889f6`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `dependency-upgrade` | core | Secure dependency upgrades with supply chain protection, cooldowns, and staged rollout. Use when upgrading deps, configuring security policies, or preventing supply chain attacks. | [source](https://github.com/secondsky/claude-skills/tree/c4889f6/plugins/dependency-upgrade/skills/dependency-upgrade) | ## Source: vibeeval/vibecosystem - Repository: [https://github.com/vibeeval/vibecosystem](https://github.com/vibeeval/vibecosystem) (commit `cea9462`, retrieved 2026-07-14) - License: MIT | Skill | Tier | What it adds | Upstream | |---|---|---|---| | `memory-palace` | core | Hierarchical memory organization for multi-session context retention. Wings (projects) > Rooms (domains) > Drawers (decisions). Semantic search across all memories with zero cloud dependency. | [source](https://github.com/vibeeval/vibecosystem/tree/cea9462/skills/memory-palace) |