agent-skills — security grade SAFE, quality 67/100

Security audit verdict: SAFE · quality 67/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by vercel-labs · Agent Tool · ★ 30.6k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is agent-skills safe to install? View the security audit →

About agent-skills

Agent Skills A collection of skills for AI coding agents. Skills are packaged instructions and scripts that extend agent capabilities. Skills follow the Agent Skills format. Available Skills react-best-practices React and Next.js performance optimization guidelines from Vercel Engineering. Contains 40+ rules across 8 categories, prioritized by impact. Use when: Writing new React components or Next.js pages Implementing data fetching (client or server-side) Reviewing code for performance issues Optimizing bundle size or load times Categories covered: Eliminating waterfalls (Critical) Bundle size optimization (Critical) Server-side performance (High) Client-side data fetching (Medium-High) Re-render optimization (Medium) Rendering performance (Medium) JavaScript micro-optimizations (Low-Medium) web-design-guidelines Review UI code for compliance with web interface best practices. Audits your code for 100+ rules covering accessibility, performance, and UX.

Quick Facts

Stars30,591
Forks2,726
LanguageJavaScript
CategoryAgent Tool
Quality Score66.7969308579913/100
Open Issues173
Last Updated2026-08-28
Created2025-12-08
Platformsnode
Est. Tokens~14k

Compatible Skills

These tools work well together with agent-skills for enhanced workflows:

agent-skills alternative? Top 4 similar tools

Looking for a agent-skills alternative? If you're comparing agent-skills with other agent tool tools, these 4 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • awesome-claude-code by hesreallyhim · ⭐ 54.5k

    A hand-picked collection of the finest of resources for the most awesome of agents, Claude Code, the undispute

  • open-saas by wasp-lang · ⭐ 15.8k

    A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, sl

  • notebooklm-skill by PleasePrompto · ⭐ 7.8k

    Use this skill to enable Claude Code to communicate directly with your Google NotebookLM notebooks. Query your

  • agent-skills by tech-leads-club · ⭐ 6.5k

    The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Curso

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular JavaScript Agent Tools

Frequently Asked Questions

What is agent-skills?

agent-skills is Vercel's official collection of agent skills. It is categorized as a Agent Tool with 30.6k GitHub stars.

What programming language is agent-skills written in?

agent-skills is primarily written in JavaScript.

How do I install or use agent-skills?

You can find installation instructions and usage details in the agent-skills GitHub repository at github.com/vercel-labs/agent-skills. The project has 30.6k stars and 2726 forks, indicating an active community.

What are the best alternatives to agent-skills?

The top alternatives to agent-skills on Agent Skills Hub include awesome-claude-code, open-saas, notebooklm-skill. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools