Files
night-auditor/references/ai-skills.md
2026-08-14 19:14:19 +02:00

39 KiB

External AI agent skills — night-auditor

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source
xlsx adjacent Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.g., adding columns, computing formulas, … source

Source: wshobson/agents

Skill Tier What it adds Upstream
file-conversion adjacent Convert files between formats — PDF to Word, HEIC to JPG, MP4 to MP3, CSV to JSON, EPUB to MOBI, and 999 total routes across images, video, audio, documents, data, fonts, ebooks, and archives. Free via changethisfile.com, no API key or … source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
translation-management core Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. source
linker-script core GNU linker script generation and optimization for embedded systems. Expert skill for memory layout definition, section placement, multi-image linking, and memory protection configuration. source
queuing-analyzer core Queuing theory analysis skill for analytical evaluation of waiting line systems. source
three-statement-model-builder core Integrated three-statement financial model builder linking income statement, balance sheet, and cash flow statement with circular reference handling source
financial-dashboard-generator core Automated financial dashboard and KPI visualization skill with executive reporting capabilities source
embedded-docs adjacent Embedded firmware documentation generation and maintenance using Doxygen and related tools. Expert skill for API documentation, hardware interface documentation, memory maps, and integration with documentation systems. source
growing-outside-in-systems adjacent Drive feature development using Outside-In TDD with Hexagonal Architecture. Design emerges through inline code, in-memory fakes, interface extraction, and deferred I/O. Use when building features, writing tests, or structuring backend … source
rlhf-systems adjacent Human-feedback-driven model optimization — preference data collection, reward modeling, policy updates, and alignment evaluation. source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
agentic-os core Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. source
content-engine core Create platform-native content systems for X, LinkedIn, TikTok, YouTube, newsletters, and repurposed multi-platform campaigns. Use when the user wants social posts, threads, scripts, content calendars, or one source asset adapted cleanly … source
mle-workflow adjacent Production machine-learning engineering workflow for data contracts, reproducible training, model evaluation, deployment, monitoring, and rollback. Use when building, reviewing, or hardening ML systems beyond one-off notebooks. source

Source: awrshift/claude-memory-kit

Skill Tier What it adds Upstream
close-day core End-of-day audit ritual — auto-detect missed working days (commits with no daily file) and backfill them, synthesize today into a daily log, audit patterns against MEMORY.md and existing concepts/rules, propose promotions verbally, write … source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
system-profile adjacent Profile a target (script, process, GPU, memory, interconnect) using external tools and code instrumentation. Produces structured performance reports with actionable recommendations. Use when user says "profile", "benchmark", "bottleneck", … source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
lint-and-validate core Automatic quality control, linting, and static analysis procedures. Use after every code modification to ensure syntax correctness and project standards. Triggers onKeywords: lint, format, check, validate, types, static analysis. source
ai-agents-architect core Expert in designing and building autonomous AI agents. Masters tool use, memory systems, planning strategies, and multi-agent orchestration. Use when: build agent, AI agent, autonomous agent, tool use, function calling. source
gcc core Git Context Controller (GCC) - Manages agent memory as a versioned file system under .GCC/. This skill should be used when working on multi-step projects that benefit from structured memory persistence, milestone tracking, branching for … source
deadline-prep core Generate a structured demo outline from your session's change log and git history. Reads .claude/critical_log_changes.csv and git log to produce presentation-ready talking points for end-of-day demos, standups, or delivery deadlines. source
it-operations adjacent Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … source
langsmith-observability adjacent LLM observability platform for tracing, evaluation, and monitoring. Use when debugging LLM applications, evaluating model outputs against datasets, monitoring production systems, or building systematic testing pipelines for AI applications. source
phoenix-observability adjacent Open-source AI observability platform for LLM tracing, evaluation, and monitoring. Use when debugging LLM applications with detailed traces, running evaluations on datasets, or monitoring production AI systems with real-time insights. source

Source: giuseppe-trisciuoglio/developer-kit

Skill Tier What it adds Upstream
memory-md-management adjacent Provides comprehensive memory file management capabilities including auditing, quality assessment, and targeted improvements for files such as CLAUDE.md. Use when user asks to check, audit, update, improve, fix, maintain, or validate … source

Source: gooseworks-ai/goose-skills

Skill Tier What it adds Upstream
ad-angle-miner core Mine the highest-converting ad angles from customer reviews, Reddit complaints, support tickets, and competitor ads. Extracts actual pain language, competitor weaknesses, and outcome phrases that real buyers use. Outputs a ranked angle … source

Source: heshengtao/super-agent-party

Skill Tier What it adds Upstream
officeCLI adjacent Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents. source

Source: jabrena/plinth

Skill Tier What it adds Upstream
804-regulations-eu-nis2 adjacent Use when reviewing, designing, or modifying Java enterprise systems that may support essential or important entities, critical-sector services, managed service providers, supply-chain dependencies, or cybersecurity incident escalation … source

Source: jeffallan/claude-skills

Skill Tier What it adds Upstream
sre-engineer adjacent Defines service level objectives, creates error budget policies, designs incident response procedures, develops capacity models, and produces monitoring configurations and automation scripts for production systems. Use when defining … source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
navan-core-workflow-b core Manage Navan expense reporting, transaction data, and ERP synchronization. Use when building expense pipelines, automating approval workflows, or syncing transactions to accounting systems. Trigger with "navan expense management", "navan … source
fondo-prod-checklist core Execute Fondo production readiness checklist for year-end tax filing, R&D credit claims, and board-ready financial reporting. Trigger: "fondo production", "fondo tax filing ready", "fondo year-end checklist". source
fondo-ci-integration core Automate financial reporting workflows that complement Fondo with CI/CD pipelines for expense tracking, budget alerts, and financial data validation. Trigger: "fondo CI", "fondo automation", "fondo financial alerts". source
fondo-core-workflow-a core Execute Fondo primary workflow: monthly bookkeeping close and financial reporting. Use when managing month-end close, reviewing financial statements, or preparing for board meetings and fundraising. Trigger: "fondo bookkeeping", "fondo … source
fondo-reference-architecture core Reference architecture for startup financial operations using Fondo as the bookkeeping backbone with complementary tools for banking, payroll, and reporting. Trigger: "fondo architecture", "startup finance stack", "fondo integration … source
fondo-debug-bundle core Collect diagnostic information for Fondo support including integration status, transaction discrepancies, and financial data reconciliation issues. Trigger: "fondo debug", "fondo support", "fondo diagnostic", "fondo reconciliation". source
podium-rate-limit-survival core Survive the rate-limit failure modes that crater production Podium integrations — cascading 429s that burn the daily quota by lunch, ignored Retry-After hints, silent daily-quota breaches, per-endpoint budget exhaustion, end-of-day … source
twinmind-reference-architecture adjacent Production architecture for meeting AI systems using TwinMind: transcription pipeline, memory vault, action item workflow, and calendar integration. Use when implementing reference architecture, or managing TwinMind meeting AI operations. … source
memorystore-config adjacent Configure memorystore config operations. Auto-activating skill for GCP Skills. Triggers on: memorystore config, memorystore config Part of the GCP Skills skill category. Use when configuring systems or services. Trigger with phrases like … source
stackblitz-rate-limits adjacent WebContainer resource limits: memory, CPU, file system size, process count. Use when working with WebContainers or StackBlitz SDK. Trigger: "webcontainer limits". source

Source: Leonxlnx/taste-skill

Skill Tier What it adds Upstream
brandkit adjacent Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
voice-of-customer-program core Stand up a Voice of Customer (VoC) program that turns feedback into action. Use when asked to build a VoC program, design a customer feedback loop, consolidate feedback sources, or set up a closed-loop feedback process. Produces a VoC … source
voice-agent-design core Design a voice AI agent for phone or in-app conversations — call flows, interruption handling, escalation to humans, and the metrics that catch a bad voice experience. Use when asked to design a voice agent, automate a phone line, spec an … source
dispute-letter core Write a letter to dispute an incorrect charge, bill, or record. Use when asked to dispute a credit-card charge, contest a bill or invoice, challenge a credit-report error, or formally dispute a fee. Produces a clear dispute letter — what's … source
help-center-article core Write a help-center / knowledge-base article that actually resolves the issue and deflects tickets. Use when asked to write a help doc, KB article, FAQ entry, how-to, or support documentation. Produces a findable, skimmable article — … source
oncall-runbook adjacent Write an on-call runbook for a service — covering alert definitions, escalation paths, common incident responses, and on-call handoff procedures. Use when asked to write an on-call guide, create alert runbooks, document escalation … source
vendor-evaluation adjacent Create a structured vendor evaluation framework for any procurement decision. Use when asked to evaluate vendors, compare suppliers, run an RFP scoring process, or assess a software or service provider. Produces a weighted scorecard, … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
implementing-ticketing-system-for-incidents core Implements an integrated incident ticketing system connecting SIEM alerts to ServiceNow, Jira, or TheHive for structured incident tracking, SLA management, escalation workflows, and compliance documentation. Use when SOC teams need … source
detecting-t1003-credential-dumping-with-edr core Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation. source
detecting-privilege-escalation-in-kubernetes-pods core Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies. source
implementing-cloud-trail-log-analysis core Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and … source
performing-privilege-escalation-assessment adjacent Performs privilege escalation assessments on compromised Linux and Windows systems to identify paths from low-privilege access to root or SYSTEM-level control. The tester enumerates misconfigurations, vulnerable services, kernel exploits, … source
detecting-rootkit-activity adjacent Detects rootkit presence on compromised systems by identifying hidden processes, hooked system calls, modified kernel structures, hidden files, and covert network connections using memory forensics, cross-view detection, and integrity … source
analyzing-linux-kernel-rootkits adjacent Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, … source
auditing-kubernetes-rbac-privilege-escalation adjacent Find over-permissive RBAC roles and service-account token abuse paths in Kubernetes using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess during authorized cluster security reviews. source
detecting-azure-service-principal-abuse adjacent Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments. source
performing-gcp-penetration-testing-with-gcpbucketbrute adjacent Perform GCP security testing using GCPBucketBrute for storage bucket enumeration, gcloud IAM privilege escalation path analysis, and service account permission auditing source
analyzing-memory-dumps-with-volatility adjacent Analyzes RAM memory dumps from compromised systems using the Volatility framework to identify malicious processes, injected code, network connections, loaded modules, and extracted credentials. Supports Windows, Linux, and macOS memory … source

Source: muratcankoylan/Agent-Skills-for-Context-Engineering

Skill Tier What it adds Upstream
evaluation core This skill should be used when building agent evaluation systems: deterministic checks, regression suites, multi-dimensional rubrics, quality gates, production monitoring, baseline comparison, and outcome measurement for agent pipelines. source
memory-systems adjacent This skill should be used for persistent semantic memory in agent systems: cross-session knowledge retention, entity tracking, temporal validity, graph or vector retrieval, memory consolidation, and memory benchmark selection. Route … source

Source: nexscope-ai/eCommerce-Skills

Skill Tier What it adds Upstream
tiktok-shop-customer-service core Customer service on TikTok Shop — response time, dispute resolution, auto-replies, buyer satisfaction source

Source: nexu-io/open-design

Skill Tier What it adds Upstream
brandkit adjacent Premium brand-kit image generation skill for creating high-end brand-guidelines boards, logo systems, identity decks, and visual-world presentations. Trained for minimalist, cinematic, editorial, dark-tech, luxury, cultural, security, … source

Source: Orchestra-Research/AI-research-SKILLs

Skill Tier What it adds Upstream
langsmith-observability adjacent LLM observability platform for tracing, evaluation, and monitoring. Use when debugging LLM applications, evaluating model outputs against datasets, monitoring production systems, or building systematic testing pipelines for AI applications. source
phoenix-observability adjacent Open-source AI observability platform for LLM tracing, evaluation, and monitoring. Use when debugging LLM applications with detailed traces, running evaluations on datasets, or monitoring production AI systems with real-time insights. source

Source: parcadei/Continuous-Claude-v3

Skill Tier What it adds Upstream
mot adjacent System health check (MOT) for skills, agents, hooks, and memory source

Source: pedrohcgs/claude-code-my-workflow

Skill Tier What it adds Upstream
promote-memory core Review candidate [LEARN] entries in .claude/state/personal-memory.md (gitignored) and run them through a five-critic council in parallel: generality, staleness, redundancy, evidence, format. Majority vote (3+ of 5) promotes the entry … source

Source: raintree-technology/apple-hig-skills

Skill Tier What it adds Upstream
hig-components-dialogs core Apple HIG guidance for presentation components including alerts, action sheets, popovers, sheets, and digit entry views. Use this skill when the user says "should I use an alert or a sheet," "how do I show a confirmation dialog," "when … source

Source: rockscy/solo-skills

Skill Tier What it adds Upstream
changelog-from-commits core Generate a user-facing CHANGELOG entry from raw git log output. Use when the user is preparing a release, says "what changed since last version", asks to write release notes, or wants to summarize a batch of commits for end users. source

Source: ruvnet/claude-code-flow

Skill Tier What it adds Upstream
cost-health core Composite CI gate — runs cost-budget-check + cost-burn + cost-anomaly + cost-projection in parallel and surfaces a single combined health status with max exit code. The operationally-useful entry point — one shell-out covers all four alert … source
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source
V3 Memory Unification adjacent Unify 6+ memory systems into AgentDB with HNSW indexing for 150x-12,500x search improvements. Implements ADR-006 (Unified Memory Service) and ADR-009 (Hybrid Memory Backend). source

Source: ruvnet/ruflo

Skill Tier What it adds Upstream
cost-health core Composite CI gate — runs cost-budget-check + cost-burn + cost-anomaly + cost-projection in parallel and surfaces a single combined health status with max exit code. The operationally-useful entry point — one shell-out covers all four alert … source
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source
V3 Memory Unification adjacent Unify 6+ memory systems into AgentDB with HNSW indexing for 150x-12,500x search improvements. Implements ADR-006 (Unified Memory Service) and ADR-009 (Hybrid Memory Backend). source

Source: vibeeval/vibecosystem

Skill Tier What it adds Upstream
mot adjacent System health check (MOT) for skills, agents, hooks, and memory source

Source: wanshuiyin/Auto-claude-code-research-in-sleep

Skill Tier What it adds Upstream
system-profile adjacent Profile a target (script, process, GPU, memory, interconnect) for performance analysis. Use when user says "profile", "benchmark", "bottleneck", or wants performance analysis. source

Source: WenyuChiou/agent-collab-skills

Skill Tier What it adds Upstream
agent-acceptance-gate adjacent Use when a multi-agent round needs a pre-merge gate, pre-commit check, verification before push, or a PASS/FAIL decision after reconciliation. source

Source: zechenzhangAGI/AI-research-SKILLs

Skill Tier What it adds Upstream
langsmith-observability adjacent LLM observability platform for tracing, evaluation, and monitoring. Use when debugging LLM applications, evaluating model outputs against datasets, monitoring production systems, or building systematic testing pipelines for AI applications. source
phoenix-observability adjacent Open-source AI observability platform for LLM tracing, evaluation, and monitoring. Use when debugging LLM applications with detailed traces, running evaluations on datasets, or monitoring production AI systems with real-time insights. source

Source: zxkane/aws-skills

Skill Tier What it adds Upstream
aws-cost-operations core AWS cost optimization, monitoring, and operational excellence expert. Use when analyzing AWS bills, estimating costs, setting up CloudWatch alarms, querying logs, auditing CloudTrail activity, or assessing security posture. Essential when … source