Claude Skills Vault — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Claude Skills Vault (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Preview
A curated collection of skills, commands, and MCP servers for Claude Code.
# Install the CLI globally or use npx
npx claude-skills-vault@latest list # Browse all available skills (always up to date)
npx claude-skills-vault install brainstorm # Install a specific skill
npx claude-skills-vault search react # Search by keyword
npx claude-skills-vault info owasp-security # View skill detailsTip: append@latestto any command (e.g.npx claude-skills-vault@latest list) to bypass the npx cache and always run the newest version of the CLI and skill catalog.
# Install multiple skills at once
npx claude-skills-vault install brainstorm owasp-security github-cli
# Install all skills and commands
npx claude-skills-vault install --all
# Install only skills or only commands
npx claude-skills-vault install --skills
npx claude-skills-vault install --commands
# Preview without installing
npx claude-skills-vault install brainstorm --dry-run
# Overwrite existing skills
npx claude-skills-vault install brainstorm --forceSkills are downloaded directly from this repository into your project's .claude/skills/ directory. No git clone required.
Skills are downloaded snapshots — they don't auto-update. To pull the newest version, re-install with --force, using @latest so npx also fetches the newest CLI and catalog.
# Update a single skill to the latest version
npx claude-skills-vault@latest install brainstorm --force
# Update several skills at once
npx claude-skills-vault@latest install brainstorm owasp-security github-cli --force
# Update every installed skill and command
npx claude-skills-vault@latest install --all --force
# Update only skills, or only commands
npx claude-skills-vault@latest install --skills --force
npx claude-skills-vault@latest install --commands --force
# Preview what would change first
npx claude-skills-vault@latest install --all --force --dry-run--force overwrites the existing files in .claude/skills/, so any local edits to a skill are replaced. Use --dry-run first if you want to review changes before applying them.
list/search shows fewer items than expectedThe CLI fetches the catalog from the manifest matching the version of the CLI you're currently running, not automatically the newest one. If npx (or a global install) is serving a cached, older copy of the CLI, it resolves an older manifest — one that can predate skills, commands, or MCP servers added since.
Fix, in order:
npx claude-skills-vault@latest list. It bypasses npx's local cache and forces resolution of the newest published CLI + catalog.npx claude-skills-vault@latest --version — compare it against the latest release. If your everyday npx claude-skills-vault ... (no @latest) reports an older version, that's the stale copy npx keeps reusing.npm install -g claude-skills-vault@latest (or npm update -g claude-skills-vault).npx clear-npx-cache (npm ≥ 7) or manually rm -rf ~/.npm/_npx.install <name> fails with "not found in vault"Same root cause as above — re-run with npx claude-skills-vault@latest install <name> before assuming the item doesn't exist. Then double check the exact name in SKILLS.md, COMMANDS.md, or MCP-SERVERS.md (names are case-insensitive but must match exactly, e.g. owasp-security, not owasp).
| Category | Count | Browse the full list |
|---|---|---|
| 🛠 Skills | 59 | SKILLS.md — dev, security, testing, frontend, backend, mobile, AI, databases, automation, SEO |
| ⌨️ Commands | 12 | COMMANDS.md — git workflow, PR & release, feature planning, DevOps |
| 🔌 MCP Servers | 34 configs + 100+ catalog | MCP-SERVERS.md — databases, cloud, observability, payments, AI & more |
Jump straight to what you need — no searching required.
59 installable skills, each with a description and a copy-paste install command.
npx claude-skills-vault@latest list # browse all (always latest)
npx claude-skills-vault search <keyword> # find by topic
npx claude-skills-vault install <name> # install one12 slash commands — each row lists its /invocation and a per-command install command.
How to connect Claude to external tools, plus a source-linked catalog of 100+ servers (official vendors + maintained GitHub projects), each with an exact install command.
Setup: Three ways to add a server · Official plugin marketplace · Reference servers · Build your own (SDKs) · Command cheatsheet
Browse servers by category: Databases & data · Search & vector · Cloud & deployment · DevOps, CI/CD & IaC · Observability & monitoring · Payments & fintech · CRM, support & sales · E-commerce & CMS · Productivity, docs & storage · Communication & automation · Web search & scraping · AI, browser & dev tools
git clone https://github.com/georgekhananaev/claude-skills-vault.git
cp -r claude-skills-vault/.claude your-project/Contributions are welcome! Feel free to submit pull requests with new skills, commands, or MCP servers.
Created by George Khananaev
Skills sourced from ComposioHQ: document-skills (xlsx, docx, pptx, pdf), project-change-log, skill-creator, mcp-builder
Skills contributed by garesuta (PR #4, PR #5): react-best-practices, next-cache-components, next-upgrade, senior-backend, multi-agent-patterns, parallel-agents, vercel-react-native-skills
Skills contributed by palakorn-moonholidays (PR #6): owasp-security, color-accessibility-audit
See CHANGELOG.md for version history and release notes.
MIT License - See NOTICE for attribution guidelines.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.