MCP CheckClaude skills for Linux
97 public Claude skills touch on Linux. These 50 are the closest fit, best-known sources first. Each links to its folder; copy it into ~/.claude/skills/ to use it.
arch linux triage
Triage and resolve Arch Linux issues with pacman, systemd, and rolling-release best practices.
github/awesome-copilot★ 41kMITFolder:
arch-linux-triagecentos linux triage
Triage and resolve CentOS issues using RHEL-compatible tooling, SELinux-aware practices, and firewalld.
github/awesome-copilot★ 41kMITFolder:
centos-linux-triagedebian linux triage
Triage and resolve Debian Linux issues with apt, systemd, and AppArmor-aware guidance.
github/awesome-copilot★ 41kMITFolder:
debian-linux-triageoffensive linux privesc
Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface from a low-privilege shell to root: SUID/SGID binary abuse via GTFOBins, Linux capabilities exploitation (cap_setuid, cap_dac_override,…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-linux-privesclinux privilege escalation
This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege…
zebbern/claude-code-guide★ 4.7kMITFolder:
linux-privilege-escalationlinux shell scripting
This skill should be used when the user asks to "create bash scripts", "automate Linux tasks", "monitor system resources", "backup files", "manage users", or "write production shell scripts". It provides ready-to-use shell script templates for system…
zebbern/claude-code-guide★ 4.7kMITFolder:
linux-shell-scriptinglinux administration
System administration for Linux servers. Manage packages, services, and system configuration. Use when administering Linux systems.
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
linux-administrationlinux hardening
Apply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features. Use when hardening Linux systems for production or meeting security compliance requirements.
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
linux-hardeningadministering linux
Manage Linux systems covering systemd services, process management, filesystems, networking, performance tuning, and troubleshooting. Use when deploying applications, optimizing server performance, diagnosing production issues, or managing users and…
ancoleman/ai-design-components★ 525MITFolder:
administering-linuxprivesc linux
Use when escalating privileges on a Linux host — SUID/SGID & GTFOBins, sudo LPE (CVE-2025-32462/32463), capabilities & LD_PRELOAD, kernel LPE (CVE-2024-1086, Dirty Pipe, GameOver(lay)), service misconfig (PwnKit, Looney Tunables), container/namespace escape
hypnguyen1209/offensive-claude★ 403MITFolder:
privesc-linuxalibabacloud ecs linux os troubleshooting
Troubleshoot an Alibaba Cloud ECS Linux OS. Use when a user needs to diagnose a specified ECS Linux instance, such as instance stuck in Starting, boot stuck, SSH/VNC/Workbench login failure, network issues, disk/FS issues, performance anomalies, suspected…
aliyun/alibabacloud-ecs-troubleshoot-skills★ 147Apache-2.0Folder:
alibabacloud-ecs-linux-os-troubleshootinganalyzing persistence mechanisms in linux
Detect and analyze Linux persistence mechanisms including crontab entries,
adriannoes/awesome-agentic-ai★ 89MITFolder:
analyzing-persistence-mechanisms-in-linuxanalyzing linux audit logs for intrusion
'Uses the Linux Audit framework (auditd) with ausearch and aureport utilities
adriannoes/awesome-agentic-ai★ 89MITFolder:
analyzing-linux-audit-logs-for-intrusionlinux
Linux administration and networking diagnostics — DNS, load balancing, VPCs, kernel tuning, and connectivity troubleshooting.
nitinjain999/platform-skills★ 71Apache-2.0Folder:
linuxbash linux
Bash/Linux terminal patterns. Critical commands, piping, error handling, scripting. Use when working on macOS or Linux systems.
aicodedecode/awesome-muse-skills★ 42MITFolder:
bash-linuxembedded linux login debug
Use when logging into, connecting to, or preparing to debug an embedded Linux device
easyzoom/aix-skills★ 38MITFolder:
embedded-linux-login-debuglinuxdo
Read LINUX DO forum content via Discourse JSON API + Chrome Cookie auth. Actions: check login, latest topics, top/trending, full-text search, read topic details, browse categories. Keywords: linuxdo, linux.do, l站, 帖子, 搜索, 最新, 热门, 分类, discourse, forum.
codingSamss/all-my-ai-needs★ 14No licence statedFolder:
linuxdoarch linux
Administer Arch Linux, CachyOS, EndeavourOS, and Manjaro: pacman, AUR, upgrades, boot, GPU, and desktop issues.
iuliandita/skills★ 10MITFolder:
arch-linuxkali linux
Administer Kali Linux: packages, metapackages, rolling upgrades, live USB persistence, and NetHunter.
iuliandita/skills★ 10MITFolder:
kali-linuxaegisops ai
Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.
sickn33/agentic-awesome-skills★ 49kMITFolder:
aegisops-airwkv architecture
RNN+Transformer hybrid with O(n) inference. Linear time, infinite context, no KV cache. Train like GPT (parallel), infer like RNN (sequential). Linux Foundation AI project. Production at Windows, Office, NeMo. RWKV-7 (March 2025). Models up to 14B parameters.
Orchestra-Research/AI-Research-SKILLs★ 14kMITFolder:
rwkvoffensive container escape
Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-container-escapeoffensive anti forensics
Anti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log clearing on Windows (wevtutil, Clear-EventLog, ETW provider patching) and Linux (journal truncation, utmp/wtmp binary editing, syslog…
SnailSploit/Claude-Red★ 9.8kMITFolder:
offensive-anti-forensicsweb to app
网页开发工程师当需要将任意网页URL封装为独立桌面客户端时，使用此技能可一键生成体积仅约5MB的跨平台（Win/Mac/Linux）原生应用安装包。支持自定义图标与高级配置，助你快速交付轻量级桌面端产品。
anbeime/skill★ 8.9kNo licence statedFolder:
web-to-appdeepchat data import
Help developers build third-party tools that import, inspect, migrate, or analyze DeepChat data. Use when Codex needs to work with DeepChat provider configuration, model configuration, MCP/app settings, sessions, messages, legacy chat data, `agent.db`,…
ThinkInAIXYZ/deepchat★ 6.4kApache-2.0Folder:
deepchat-data-importdotnet trace collect
Guide developers through capturing diagnostic artifacts to diagnose production .NET performance issues. Use when the user needs help choosing diagnostic tools, collecting performance data, or understanding tool trade-offs across different environments…
dotnet/skills★ 5.8kMITFolder:
dotnet-trace-collectgodot export
Export and build a Godot 4.7 project for distribution: install export templates, define export presets (Windows/macOS/Linux/Web/Android), run headless command-line exports for CI, and handle web (HTML5) COOP/COEP and dedicated-server/headless builds. Use…
gamedev-skills/awesome-gamedev-agent-skills★ 5.6kApache-2.0Folder:
godot-exportitch publish
Publish and update a game on itch.io: create the project page and upload builds with the butler CLI (butler push) to named channels. Use for itch.io publishing, butler push, channel naming for Windows/macOS/Linux/HTML5, versioning uploads, or shipping a…
gamedev-skills/awesome-gamedev-agent-skills★ 5.6kApache-2.0Folder:
itch-publishprivilege escalation methods
This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on…
zebbern/claude-code-guide★ 4.7kMITFolder:
privilege-escalation-methodsrunning github actions efficiently
Cut GitHub Actions minutes and wall-clock time without losing coverage — the OS billing multiplier (macOS 10x / Windows 2x / Linux 1x), trigger hygiene that stops push+pull_request double-firing, concurrency that cancels superseded runs, dependency caching…
kajisho5/ffmpeg-skill★ 3.9kMITFolder:
github-actionscdf orchestration preflight
Set up missing Linux prerequisites and audit whether a Cosmos Data Factory (CDF) Orchestration checkout and its Kubernetes or OSMO environment are ready to install the controller and run every packaged DAG. Use for prerequisite, pre-setup, Kubernetes, GPU,…
NVIDIA/skills★ 3.8kApache-2.0Folder:
cdf-orchestration-preflightctf pwn
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows,…
ljagiello/ctf-skills★ 3.6kMITFolder:
ctf-pwnpython appservice deploy
Deploy Python (Flask/Django/FastAPI) code to Azure App Service Linux. WHEN: \"Flask App Service\", \"Django App Service\", \"FastAPI App Service\", \"deploy Python to App Service\". DO NOT USE FOR: Container Apps, Functions, non-Python,…
microsoft/azure-skills★ 1.6kMITFolder:
python-appservice-deployagentdock user guide
当用户询问 AgentDock 是什么、如何使用、配置在哪里、不同平台或安装方式怎样修改配置并生效、如何重启或验证配置、如何发现并配置 Codex/Claude/Grok 等 Coding Agent 的 ACP，以及常见运行问题时使用；覆盖 macOS Desktop、Windows Desktop、Linux 服务、Docker 和直接运行二进制，不用于源码开发与贡献流程。
uvwt/agentdock★ 1.3kApache-2.0Folder:
agentdock-user-guidescenario godot performance export
Use when a Godot game stutters, drops frames, hitches when entering new areas, overheats a phone, or must ship: profiling and Performance monitors, CPU or GPU bound, draw calls, MultiMesh, occlusion culling, LOD, shader compilation hitches, export to…
scenario-labs/skills★ 1.2kMITFolder:
scenario-godot-performance-exportperformance tuning
Optimize Linux system performance. Configure kernel parameters, analyze bottlenecks, and tune resources. Use when improving system performance.
BagelHole/DevOps-Security-Agent-Skills★ 1.2kMITFolder:
performance-tuningnemoclaw setup
Install and configure NVIDIA NemoClaw (sandboxed OpenClaw agent platform) on Linux. Handles cloudflared tunnels, Docker cgroup fixes, OpenShell, sandbox creation, remote access via Cloudflare Tunnel, and known bug workarounds. Use whenever the user…
jezweb/claude-skills★ 1.1kMITFolder:
nemoclaw-setuptriton sageattention
Install Triton + SageAttention to accelerate ComfyUI (the sageattn attention_mode and inductor torch.compile used by WanVideoWrapper / many video graphs). Windows-first (triton-windows + woct0rdho prebuilt SageAttention wheels matched to torch/CUDA/python…
artokun/comfyui-mcp★ 879MITFolder:
triton-sageattentionc drive cleaner
Windows C盘清理和磁盘空间管理。当用户说C盘满了、磁盘空间不足、清理临时文件/缓存/回收站/系统日志、查找大文件、分析磁盘占用时使用。仅适用于 Windows 环境。不用于：macOS/Linux 磁盘清理、卸载软件（引导用户走系统卸载）、清理用户个人文件（只报告位置，删除决定权在用户）。
staruhub/ClaudeSkills★ 731MITFolder:
Geek-skills-c-drive-cleanerdesktop principles
Desktop-specific UX principles - hover states, pointer precision, keyboard shortcuts, multi-window, focus management. Covers macOS, Windows, Linux, web desktop.
AThevon/genjutsu★ 703Licence: see repoFolder:
desktop-principlestestdriver:machine setup
Configure Linux and Windows sandboxes, persist machines between runs, and install custom software
testdriverai/testdriverai★ 463No licence statedFolder:
testdriver-machine-setupapple container
Apple's open-source `container` CLI to build, run, and manage OCI/Linux containers as lightweight per-container VMs on Apple-silicon macOS — no Docker daemon required. Use when the user mentions the `container` CLI, "apple container", running or building…
sanjay3290/ai-skills★ 447Apache-2.0Folder:
apple-containerodevio
Take a Flutter project to an iPhone or the App Store with Odevio - build, sign and publish iOS apps from Windows, Linux or macOS with no Mac and no Xcode. Handles Apple setup, certificates, provisioning profiles, code signing, the .ipa, TestFlight, App…
Odevio/Odevio-CLI★ 423MITFolder:
skillcomputer repair skill
Use this skill when a user asks to diagnose, repair, clean up, recover, migrate, configure, secure, or maintain a Windows, macOS, or Linux computer. It covers system drives, app or data migration to another drive, slow or unstable machines, storage, apps,…
88lin/computer-repair-skill★ 414AGPL-3.0Folder:
computer-repair-skillexploit development
Use when turning a memory-corruption bug into a working PoC — stack/ROP, glibc heap & FSOP, format strings, browser/JIT type confusion & UAF, Linux/Windows kernel LPE against ASLR/DEP/CFG/CET/V8-Sandbox
hypnguyen1209/offensive-claude★ 403MITFolder:
exploit-developmentdaily brief
Operational knowledge for the daily-brief digest pipeline (this project). RSS/API fetchers, pluggable LLM enrichment (default claude CLI on Max; also anthropic/openai/deepseek/minimax API), trading section, HTML rendering, cross-platform scheduler…
leiting-eric/DailyBrief★ 383MITFolder:
daily-briefportal relay
Set up and run a public Portal relay on any Linux host with a public IP — Docker Compose deployment, embedded authoritative DNS with one-time NS delegation, optional TCP/UDP lease ports for game hosting, and registration in the public relay pool. Use when…
gosuda/portal-tunnel★ 292MITFolder:
portal-relaypersistence surface assessment
Measures local Windows and Linux endpoint persistence exposure from supplied evidence by deriving consumer, authority, lifecycle, prevention, context, telemetry, and coverage state. Use when auditing durable-execution risk without creating, activating,…
zero-lab-ai/skills★ 284Apache-2.0Folder:
persistence-surface-assessmentmemory forensics triage
Triages supplied Windows, Linux, or other volatile-memory images while preserving acquisition provenance, image integrity, process and region evidence, network and object correlations, extracted-artifact custody, timeline limits, and claim confidence. Use…
zero-lab-ai/skills★ 284Apache-2.0Folder:
memory-forensics-triagelateral movement map
Maps lateral movement candidates and multi-hop routes across Windows, Linux, network, DevOps, and cloud environments while separating transport reachability, authentication material, destination rights, authorization, execution proof, resulting access,…
zero-lab-ai/skills★ 284Apache-2.0Folder:
lateral-movement-map
Claude skills for Linux: what people ask
What's the best Claude skill for Linux?
There are 97 of them, spread over 69 repositories on GitHub. Named for it and most starred: arch linux triage (github/awesome-copilot, ★ 41k), centos linux triage (github/awesome-copilot, ★ 41k) and debian linux triage (github/awesome-copilot, ★ 41k). Stars rate the repository a skill sits in, not the skill.
How do I install a Claude skill for Linux?
For Linux, take the arch-linux-triage folder from github/awesome-copilot (the folder that holds SKILL.md) into ~/.claude/skills/ to use it in every Claude Code project, or into .claude/skills/ for one project. In the Claude apps, zip that folder and upload it as a custom skill in settings.
Are all these Linux skills in English?
No: 4 of those listed, such as linuxdo and web to app, are written mainly in Chinese, Japanese, Korean or Russian rather than English, though the Linux task is the same. Claude can follow them either way, but read them before you install.
Should I use a skill or an MCP server for Linux?
A skill teaches Claude a way of working; an MCP server gives it new tools, like access to Linux itself. We list 46 MCP servers for Linux if you need the connection.
Are these Linux skills official?
No. None of the 97 Linux skills comes from Anthropic's own skills repository, so all of them are community-made across 69 repositories.
Can I use these Linux skills at work?
Of the 50 Linux skills listed here, 45 sit in repositories under an open licence such as MIT or Apache 2.0, and 3, such as linuxdo and web to app, state no licence at all, which legally means you may not reuse them. Check the licence file before you copy one into company work.
More topics: every “Claude skills for…” page.