# Verified Skill

> Verified Skill (verified-skill.com) is a registry of agent skills for Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI and other AI coding agents. Each skill page shows the skill's security scan results, trust tier and source before you install it. Skills install with the open-source vskill CLI: `npx vskill@latest install <owner>/<repo>/<skill>`.

## Browse

- [Claude Code skills](https://verified-skill.com/claude-code-skills): the most trusted skills across all categories
- [Full registry](https://verified-skill.com/skills): search and filter every public skill
- [Publishers](https://verified-skill.com/publishers)

## Categories

- [Coding skills](https://verified-skill.com/claude-code-skills/development)
- [Testing skills](https://verified-skill.com/claude-code-skills/testing)
- [DevOps skills](https://verified-skill.com/claude-code-skills/devops)
- [Security skills](https://verified-skill.com/claude-code-skills/security)
- [Data skills](https://verified-skill.com/claude-code-skills/data)
- [Design skills](https://verified-skill.com/claude-code-skills/design)
- [Docs skills](https://verified-skill.com/claude-code-skills/documentation)
- [Marketing skills](https://verified-skill.com/claude-code-skills/marketing)
- [AI/ML skills](https://verified-skill.com/claude-code-skills/ai-ml)
- [Productivity skills](https://verified-skill.com/claude-code-skills/productivity)
- [Infra skills](https://verified-skill.com/claude-code-skills/infrastructure)
- [Monitoring skills](https://verified-skill.com/claude-code-skills/monitoring)
- [Analytics skills](https://verified-skill.com/claude-code-skills/analytics)
- [Media skills](https://verified-skill.com/claude-code-skills/media)
- [Integration skills](https://verified-skill.com/claude-code-skills/integration)

## How verification works

- [Methodology](https://verified-skill.com/methodology)
- [Trust center](https://verified-skill.com/trust)
- [Security guidelines for skill authors](https://verified-skill.com/docs/security-guidelines)
- [Blocklist](https://verified-skill.com/blocklist)

## Research

- [State of WebMCP security, October 2026](https://verified-skill.com/insights/webmcp-security-2026-10): headless scan of 600 sites (548 expected to use WebMCP, 52 controls); tool counts per cohort, confirmation-hint gaps, Shopify reported separately. Aggregate data only: [JSON](https://verified-skill.com/api/v1/insights/webmcp)
- [php2shell check (CVE-2026-109618, CVE-2026-109619)](https://verified-skill.com/check/php2shell): who is affected, fixed PHP versions (8.5.12, 8.4.27, 8.3.36, 8.2.35, 8.6.0RC4), stopgaps, a public header check ([API](https://verified-skill.com/api/v1/check/php2shell?url=https://example.com)) and the php2shell-check skill

## Tools

- [vskill CLI docs](https://verified-skill.com/docs)
- [Skill Studio](https://verified-skill.com/studio)
- [SpecWeave](https://spec-weave.com): keeps AI coding work in git so you can switch between Claude Code, Codex and other agents mid-task