openai

pdf

Use it when:: You're creating or reviewing a PDF where layout and visuals matter.
It does:: Builds PDFs with reportlab, extracts text with pdfplumber or pypdf, and renders pages to PNG with Poppler to look at them.

tool local cli official pdf documents python

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 13.7K; top 38%
Weekly Downloads: 146; bottom 27%

security-best-practices

Use it when:: You explicitly ask for secure-by-default code, a security review or a security report on a Python, JavaScript/TypeScript or Go project.
It does:: Identifies every language and framework in scope, frontend and backend, and reads the skill's matching security guides before it writes or reviews.

workflow local none official security code-review python javascript typescript go

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 12.1K; top 41%
Weekly Downloads: 426; top 46%

gh-fix-ci

Use it when:: A pull request's GitHub Actions checks are failing and you want them diagnosed and fixed.
It does:: Checks gh is logged in, finds the PR for the current branch or the one you name, and pulls the failing runs' logs with a bundled Python script.

workflow local cli official ci debugging github

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 11.8K; top 41%
Weekly Downloads: 150; bottom 28%

playwright

Use it when:: The agent needs a real browser from the terminal: open pages, fill forms, extract data, take screenshots or debug a UI flow.
It does:: Runs Playwright's command-line tool through a bundled wrapper that calls it with npx, so no global install is needed.

tool remote cli browser official browser-automation scraping playwright

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 9.2K; bottom 47%
Weekly Downloads: 319; bottom 50%

security-threat-model

Use it when:: You explicitly ask to threat model a codebase or path, or to list its abuse paths.
It does:: Maps components, data flows, trust boundaries, assets and entry points from evidence in the repo, then ranks threats by likelihood and impact.

workflow local none official security architecture

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 8.8K; bottom 44%
Weekly Downloads: 283; bottom 48%

figma-implement-design

Use it when:: You have a link to a Figma frame or component and want it built in your codebase to match the design.
It does:: Fetches the node's design context, a screenshot and its assets through the Figma MCP server, then rewrites Figma's React and Tailwind output in your project's conventions.

workflow local mcp account official implementation design-system verification figma

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 7K; bottom 34%
Weekly Downloads: 114; bottom 22%

screenshot

Use it when:: You ask for a desktop screenshot, or the agent needs to see an app that no browser or Figma tool can capture.
It does:: Runs a Python helper on macOS and Linux, or a PowerShell one on Windows, to capture the full screen, an app's windows, the active window or a region.

tool local cli official computer-use image verification

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 6.3K; bottom 30%
Weekly Downloads: 81; bottom 16%

imagegen

Use it when:: A project needs a raster asset, new or edited: a photo, illustration, texture, sprite, mockup or transparent cutout.
It does:: Decides between a new image and an edit, labels each input image's role, rewrites your prompt as a labelled spec, generates, inspects and changes one thing at a time.

workflow local account official image ai-generation openai codex

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 6.1K; bottom 28%
Weekly Downloads: 207; bottom 40%

jupyter-notebook

Use it when:: You want a new .ipynb notebook, or rough notes, a script or a messy notebook turned into one that others can read and re-run.
It does:: Picks an experiment or a tutorial layout, scaffolds the file from a bundled template with a Python script, then fills it with small cells, each explained in Markdown.

workflow local cli official research documents jupyter python

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 5.9K; bottom 24%
Weekly Downloads: 106; bottom 21%

playwright-interactive

Use it when:: The agent is building a local web or Electron app in Codex and should check its own work in a real browser before calling it done.
It does:: Keeps Playwright's browser, page and Electron handles alive in a js_repl kernel, reloading for renderer changes and relaunching for main-process ones.

workflow local cli browser official testing verification browser-automation playwright electron codex

Age: 8 months
Stars: 28.6K; #57
Total Downloads: 5.7K; bottom 21%
Weekly Downloads: 82; bottom 16%

skill-creator

Use it when:: You want to write a new skill for Codex or update one you have.
It does:: Asks for concrete examples of use, plans the scripts, references and assets they call for, scaffolds the folder with init_skill.py and checks it with quick_validate.py.

workflow local none official skill-authoring codex

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 5.1K; bottom 4%
Weekly Downloads: 89; bottom 18%

gh-address-comments

Use it when:: Reviewers have left comments on the open pull request for your current branch and you want them worked through.
It does:: Checks gh is logged in, runs a bundled Python script that prints every comment and review thread, then numbers them with what each fix would take.

workflow local cli official code-review github

Age: 9 months
Stars: 28.6K; #57
Total Downloads: 5K; bottom 2%
Weekly Downloads: 96; bottom 19%

skills Skill collection