SOTA Skills

State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.

by martinholovsky 8 GitHub stars CC-BY-4.0 Updated Jul 30, 2026
SOTA Skills skill by martinholovsky
Social preview for martinholovsky/SOTA-skills

Overview

SOTA Skills is an open-source security skill for Claude Code, published by martinholovsky. Its author describes it as: “State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.”. The project has 8 stars on GitHub and is available under the CC-BY-4.0 license. Add it to your setup with `git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills`.

Best for

Installation

Add SOTA Skills to your agent with:

git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills

Review a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.

Supported agents

License

SOTA Skills is published under the CC-BY-4.0 license.

Strengths

  • Clear CC-BY-4.0 license — safe to read and adapt within its terms
  • Works with Claude Code
  • Actively maintained — repository updated in the last 90 days

Things to check

  • Limited adoption so far — evaluate before depending on it

Author

martinholovsky 1 skill in the catalog · GitHub profile ↗

Topics

Need a skill like this, tailored to your team?Build a custom skill →

Frequently asked questions

What does SOTA Skills do?
State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
How do I install SOTA Skills?
Run git clone https://github.com/martinholovsky/SOTA-skills ~/.claude/skills/SOTA-skills in your agent, then reload your skills. Review the source at https://github.com/martinholovsky/SOTA-skills before installing.
Is SOTA Skills free to use?
Yes. SOTA Skills is free and open source under the CC-BY-4.0 license, so you can read, run, and adapt it within that license's terms.
Which agents does SOTA Skills work with?
SOTA Skills lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

↑ Growing Claude CodeCodexCursor+3
39k GitHub stars MIT Updated Aug 24, 2026 Free

Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.

🔥 TrendingActive Claude Code
143k GitHub stars MIT Updated Sep 14, 2026 Free

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Claude Code
3.2k GitHub stars Other Updated Jul 27, 2026 Free

Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries, naming issues, and architectural concerns, then produces a structured review report with prioritized, actionable feedback. Use when reviewing pull requests, conducting code quality audits, identifying refactoring opportunities, or checking for security issues. Invoke for PR reviews, code quality checks, refactoring suggestions, review code, code quality. Complements specialized skills (security-reviewer, test-master) by providing broad-scope review across correctness, performance, maintainability, and test coverage in a single pass.

Claude Code
11k GitHub stars MIT Updated Aug 7, 2026 Free

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

Claude CodeCodexCursor+1
25k GitHub stars MIT Updated Aug 17, 2026 Free