Search skills/

Awesome Claude Skills (Composio) Claude skills

A curated list of Claude skills plus hundreds of templated app-automation skills that run through Composio's hosted Rube MCP.

ComposioHQ/awesome-claude-skills 864 skills Productivity & notesSkill & agent tooling
Our verdict Recommended with caveats

Useful as a discovery list, but the bundled skills are boilerplate wrappers that depend on Composio's hosted service, and the repo has no detected license file.

1/5 Depth expertise shipped ! Security Broad access 41d Maintenance Updated 1 mo ago 78K Adoption stars ? License no clear license

What Awesome Claude Skills (Composio) does

This repo is two things at once. The README is an 'awesome' list of roughly 180 links to Claude skills, plugins and tools by many authors, grouped by topic, with a short blurb each. Most of those entries point to other repositories, so the quality varies and you need to review each target separately.

The folders in the repo are the second part. A handful are standalone skills (artifacts-builder with two shell scripts that scaffold and bundle a React and Tailwind artifact, brand-guidelines, canvas-design, changelog-generator, competitive-ads-extractor), averaging a few KB each. The bulk, according to the file metrics, is a large composio-skills directory of near-identical wrappers named like ably-automation or accelo-automation. Each is about 3 KB and tells the agent to call Composio's Rube MCP (RUBE_SEARCH_TOOLS, RUBE_MANAGE_CONNECTIONS) to discover tools for one SaaS app, check that the connection is active, then run the tools. The connect-apps plugin in the README walks you through pasting a Composio API key so Claude can act in 1,000-plus apps. Without Composio's service the wrapper skills do nothing, since they hold no logic of their own.

Good for

  • Browsing a long list of community Claude skills to find candidates
  • Teams that already use Composio and want skills pointing at its toolkits
  • Borrowing the artifacts-builder scripts for packaging single-file React artifacts

Not for

  • Installing the whole repo (most skills are thin vendor wrappers)
  • Anyone unwilling to route app data and OAuth connections through Composio's hosted MCP

What's inside depth 1/5

About 864 skill folders averaging 3.4 KB each, nearly all templated Composio wrappers with no references or tests; only artifacts-builder has scripts.

Skills
864
Reference docs
0
Scripts
2
Tests / evals
0
Templates
0
Avg SKILL.md
3.4 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

  • Composio account and API key
  • Rube MCP (https://rube.app/mcp) connected to the agent for the composio-skills folder
  • OAuth connections to each third-party app you automate
  • pnpm and Node for artifacts-builder
  • Telemetry: none found in the repo files, but the wrapper skills send tool calls and app data to Composio's Rube MCP by design.

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

  • Loads instructions from a server at run timeEach of the 34 Composio wrapper skills has the agent call RUBE_SEARCH_TOOLS on the third-party Rube MCP server (https://rube.app/mcp) before every task and use the returned schemas, 'recommended execution plans' and 'known pitfalls', so the working instructions come from a remote service at runtime.composio-skills/-21risk-automation/SKILL.md:28

A curated list of skills plus a bundle of Composio 'automation' wrapper skills that all route through the third-party Rube MCP at rube.app, which supplies tool schemas and execution plans at runtime and holds your app OAuth connections. The only scripts are two artifacts-builder bash scripts that scaffold a React/Vite project, install npm packages and unpack a bundled shadcn archive we could not inspect. The snapshot covers only part of the repository.

Worth knowing

  • Makes network requestsWrapper skills require you to add https://rube.app/mcp (Composio) as an MCP server and authorize per-app OAuth connections through RUBE_MANAGE_CONNECTIONS; tool calls and app data for the connected service (CRM, analytics, email, etc.) pass through Composio.composio-skills/-21risk-automation/SKILL.md:22
  • Installs packages or toolsinit-artifact.sh runs npm install -g pnpm if missing, pnpm create vite and installs many npm packages (Vite latest on Node 20+, tailwind 3.4.1, Radix UI, etc.); bundle-artifact.sh runs pnpm add -D parcel ... html-inline in the project.artifacts-builder/scripts/init-artifact.sh:29
  • Runs remote code at an unpinned versionUses pnpm create vite and vite@latest (Node 20+) without version pins, plus unpinned parcel/html-inline devDependencies in bundle-artifact.sh.artifacts-builder/scripts/init-artifact.sh:47
  • Contains compiled binariesinit-artifact.sh extracts artifacts-builder/scripts/shadcn-components.tar.gz into the new project; the archive is a binary we do not hold and could not inspect.artifacts-builder/scripts/shadcn-components.tar.gz

What we checked

The repository (1142 files) on Oct 29, 2026. Not a full review: 1014 of 1142 files were not downloaded (large repository; we reviewed the skill folders); it contains compiled binaries or archives we cannot read; it relies on code outside the repository: 1,014 of 1,142 repo files are not in our snapshot (most composio-skills wrappers, CONTRIBUTING.md, workflows, marketplace.json); artifacts-builder/scripts/shadcn-components.tar.gz (binary archive extracted into generated projects); Composio Rube MCP service (https://rube.app/mcp) and the third-party tools linked from the README list (e.g. Chrome Relay, OpenWeb).

NVIDIA SkillSpector static scan: 6 pattern hits (Agent Snooping 2, YARA Match 1, MCP Rug Pull 1, Rogue Agent 1, Excessive Agency 1). The 'info stealer' YARA hit is a README list entry describing a third-party Chrome bridge tool, not code in this repo; the other hits are an unpinned npx skills mention and README structure.

A review, not a certification. Skills change after we check them — read the files before installing.

License

README badge says Apache-2.0, but GitHub reports no detected license file; confirm before reuse.

Can it run unattended?

Not really. The wrapper skills are generic tool-discovery instructions with no loop, stop conditions or verification, and they depend on an external hosted service.

Alternatives to Awesome Claude Skills (Composio)

Agentic Awesome Skills (AAS)

sickn33/agentic-awesome-skills

A catalog of roughly 2,900 community SKILL.md playbooks, with a local CLI, MCP server and plugin bundles for searching and installing them.

With caveats Check first Depth 3/5

Awesome GitHub Copilot

github/awesome-copilot

GitHub's community-contributed library of 466 skills plus agents, instructions, hooks and plugins for Copilot, installable per plugin from a marketplace.

With caveats Check first Depth 3/5

Anthropic Agent Skills

anthropics/skills

Anthropic's reference skills repo: 20 skills including document tools (docx, pptx, xlsx, pdf), frontend-design, skill-creator and mcp-builder.

Recommended Check first Depth 4/5

Best Agent Skills (Linkly)

LinklyAI/best-skills

A one-skill pack plus daily-updated CSV rankings of the top 100 agent skills, merged from skills.sh, ClawHub, Tencent SkillHub and social mentions.

With caveats Check first Depth 2/5

FAQ

What is awesome-claude-skills by Composio?

It is a large GitHub list of Claude skills and tools, maintained by Composio, plus a folder of Composio-generated skills that automate individual SaaS apps through its Rube MCP. The list part links to skills by many other authors.

How do I install the Composio connect-apps plugin?

The README says to run claude --plugin-dir ./connect-apps-plugin, then /connect-apps:setup and paste a Composio API key, then restart Claude Code. You need a Composio account for the key.

Are the Composio skills free?

The repo files are free to read and copy, but the wrapper skills only work through Composio's service, which needs an account and an API key. The README mentions a free key; check Composio's current plans for limits.

Is awesome-claude-skills safe to install?

The files we reviewed contain instructions, not hidden code, and the scanner hits were README text. The caution is that the wrapper skills route your app data and OAuth connections through a third-party hosted MCP, and linked list entries are unreviewed.

Sources: GitHub repository (stars, license, file tree, last push Sep 18, 2026). Review based on the README and SKILL.md files as published.