Claude Code Skills in 2026: The Complete Guide to Finding, Installing, and Using Agent Skills
Claude Code Skills are the fastest way to supercharge your AI coding workflow. Instead of writing the same prompts over and over, you install a skill once and Claude Code invokes it when relevant — automatically or on demand.But with 300,000+ skills across 10+ marketplaces, where do you start? This guide covers everything: what skills are, how they work under the hood, where to find quality ones, and how to build your workflow around them.
What Is a Claude Code Skill?
A skill is a self-contained instruction package that teaches Claude Code how to perform a specific task. Think of it as a mini-plugin — but instead of compiled code, it's a structured Markdown file (SKILL.md) with:
- YAML frontmatter: name, description, allowed tools
- Workflow instructions: step-by-step guidance in natural language
- Tool permissions: which tools the skill can invoke (bash, read, write, etc.)
- Metadata: version, author, tags, compatible models
When you install a skill, Claude Code adds it to its knowledge base. The next time you ask for something relevant, Claude automatically applies the skill's workflow.
Skill vs MCP Server vs Custom Instruction
| Feature | Skill | MCP Server | Custom Instruction |
|---------|-------|------------|-------------------|
| Format | SKILL.md | HTTP/stdio server | System prompt |
| Install | npx skills add | Config JSON | Copy/paste |
| Tool access | Declared in frontmatter | Server-defined | N/A |
| Sharing | Git repo / marketplace | NPM / Docker | Text |
| Dynamic data | No (static instructions) | Yes (API calls) | No |
| Best for | Reusable workflows | External API integration | Personal preferences |
Rule of thumb: Use skills for repeatable workflows. Use MCP servers when you need live data. Use custom instructions for personal style preferences.How to Install a Skill
Method 1: From a Marketplace (Recommended)
Browse a marketplace like AGI Store, find a skill, and copy the install command:
``bash
npx skills add agistore/skill-name
`
This downloads the
SKILL.md file and registers it with Claude Code.
Method 2: From GitHub
Any public GitHub repo with a
SKILL.md at the root is installable:
`bash
npx skills add github-user/repo-name
`
Method 3: Local Development
Create a
SKILL.md in your project root:
`yaml
name: my-custom-workflow
description: Does X when Y happens
allowed-tools: [read, write, bash]
My Custom Workflow
When to use
- Condition A
- Condition B
Steps
1. Read the file at path X
2. Run
command Y
3. Write output to path Z
`
Then register it locally:
`bash
npx skills add ./my-custom-workflow
`
Verify Installation
List installed skills:
`bash
npx skills list
`
You should see your skill in the list with its status and version.
Finding Quality Skills: 5 Sources Ranked
1. AGI Store (Recommended for Quality)
Curated, security-reviewed, bilingual (EN/ZH). Every skill is vetted before listing. Smaller catalog but higher signal-to-noise ratio. Free and paid skills with built-in licensing.
2. LobeHub Skills Marketplace
Largest catalog: ~300,000 skills. Great for discovery but quality varies wildly. Use the rating system and check download counts before installing.
3. GitHub Awesome Lists
Human-curated collections. awesome-claude-skills (59K+ stars) and awesome-agent-skills (21K+ stars) are hand-picked and regularly updated.
4. skills.sh CLI
Command-line discovery. Run npx skills find "keyword" to search across multiple registries from the terminal. Good for quickly checking what's available.
5. ClawHub
OpenClaw ecosystem. ~8,400 skills with a focus on OpenClaw compatibility. Smaller but well-organized.
Red Flags When Evaluating Skills
Before installing any skill, check for:
- Vague descriptions: "Helps with development" — skip it. Good skills name specific workflows.
- No allowed-tools list: Means the skill hasn't declared its tool requirements.
- Excessive permissions: A markdown formatter shouldn't need
bash access.
- No version history: Indicates an unmaintained skill.
- Suspicious bash commands: Read the
SKILL.md before installing — it's just a text file.
5 Skills Every Claude Code User Should Install
1. Code Review Checklist
Automates pre-commit review: checks for SQL injection, missing error handling, hardcoded secrets, and framework-specific anti-patterns.
2. Test Generator
Given a function signature + description, generates pytest/jest/vitest test cases with edge cases, mocks, and fixtures.
3. Database Migration Helper
Generates migration files from schema diffs, adds rollback scripts, and checks for breaking changes (renamed columns, dropped tables).
4. API Documentation Generator
Scans route handlers and generates OpenAPI specs, Postman collections, and Markdown docs with request/response examples.
5. Security Audit Scanner
Scans your codebase for OWASP Top 10 vulnerabilities, leaked credentials, and dependency CVEs. Generates a prioritized fix list.
All five are available on AGI Store with install instructions and compatibility notes.
Advanced: Chaining Skills
Skills can be chained — the output of one skill becomes the input for the next. This is where the real productivity gains happen.
Example chain for a new feature:
`
1. spec-writer → generates spec from user story
2. db-schema-generator → creates migration from spec
3. api-scaffolder → generates route handlers from schema
4. test-generator → writes tests from spec + routes
5. code-review → reviews the entire PR
`
Each skill runs independently. Claude Code orchestrates the handoffs. A workflow that used to take 4 hours becomes 20 minutes of review.
AGI Store's "链式" (Chain) feature lets you browse and compose chains visually.
Security: The 5-Point Checklist
Before installing any skill, run through these five checks:
1. Read the SKILL.md: It's a text file. Open it on GitHub. Look for shell commands you don't understand.
2. Check allowed-tools: Does this skill really need
bash + write + network? Most skills only need read.
3. Verify the source: Who wrote it? When was it last updated? Is the repo active?
4. Test in isolation: Install one skill at a time. Run a simple task. Check the output.
5. Pin versions: Use
npx skills add repo@v1.2.0 instead of @latest` for production workflows.
For a deeper dive, read our 5-Point Security Checklist.
The Bottom Line
Claude Code Skills turn AI from a smart autocomplete into a delegation engine. The difference between "I use Claude Code" and "Claude Code does my work" is skills.
Start with one skill. See what it changes. Then build your stack.
Next step: Browse AGI Store → pick one skill → install it in 10 seconds → run your next task.