Skills-hub Blog
Top 10 AI coding skills every developer needs in 2026
Ten skills that earn back the 30-second install in the first hour you use them. Curated from real install counts on skills-hub.ai, weighted by how often experienced teams reach for them.
How this list was picked
Three filters: install count on skills-hub.ai, applicability across stacks (no framework-specific skills here — those deserve their own lists), and whether the skill changes the model's behavior in a way you can feel within a single session. We're after high-leverage, low-config wins.
The list
Turns the agent into a competent reviewer instead of a yes-machine. Catches missing error paths, flags risky refactors, asks the questions a senior engineer would ask before approving.
$ npx @skills-hub-ai/cli install addyosmani-code-review-and-qualityForces the red-green-refactor loop. The agent writes the failing test first, then the implementation, instead of producing untested code that 'should work.'
$ npx @skills-hub-ai/cli install addyosmani-test-driven-developmentCheap insurance against the security bugs AI agents most love to ship — missing auth checks, raw SQL, unbounded queries, leaky errors. Keeps the threat model in context.
$ npx @skills-hub-ai/cli install addyosmani-security-and-hardening04.common-owasp
OWASP Top 10 awareness baked into the edit loop. Pairs naturally with security-and-hardening — one is mindset, the other is a checklist.
$ npx @skills-hub-ai/cli install multi-language-standards-common-owaspWrites ADRs in the Michael Nygard format and keeps READMEs honest as the code changes. The fastest fix for 'why does this exist?' tribal knowledge loss.
$ npx @skills-hub-ai/cli install addyosmani-documentation-and-adrsPre-deploy checklist. Migrations applied, feature flags wired, rollback plan known, no commit at 5pm Friday. Saves a weekend roughly once a quarter.
$ npx @skills-hub-ai/cli install addyosmani-shipping-and-launchReal UI conventions — accessibility, responsiveness, focus management, loading and error states. Stops the agent from shipping a button without an aria-label.
$ npx @skills-hub-ai/cli install addyosmani-frontend-ui-engineeringKeeps the agent grounded in actual repo source instead of inventing APIs. Reads before it writes; cites the file it's referencing in its plan.
$ npx @skills-hub-ai/cli install addyosmani-source-driven-developmentDrives the agent to verify UI changes in a real browser via DevTools — console errors, network panel, layout — before declaring done.
$ npx @skills-hub-ai/cli install addyosmani-browser-testing-with-devtoolsWhen you eventually need a custom MCP server (and you will), this is the shortest path from idea to running tool. Pairs well with build-mcpb for packaging.
$ npx @skills-hub-ai/cli install claude-plugins-official-build-mcp-server
Install all ten in one go
You can paste this into your shell from any project root. The CLI de-duplicates installs, writes each skill to .claude/skills/, and pins them in .skills.json so your team gets the same set.
npx @skills-hub-ai/cli install \
addyosmani-code-review-and-quality \
addyosmani-test-driven-development \
addyosmani-security-and-hardening \
multi-language-standards-common-owasp \
addyosmani-documentation-and-adrs \
addyosmani-shipping-and-launch \
addyosmani-frontend-ui-engineering \
addyosmani-source-driven-development \
addyosmani-browser-testing-with-devtools \
claude-plugins-official-build-mcp-serverHonorable mentions
Stack-specific skills that didn't fit the general-purpose top ten, but earn their place if they touch your stack:
- render-web-services — if you deploy on Render.
- qdrant-hybrid-search — for teams running vector search in Qdrant.
- nx-workspace — for Nx-based monorepos.
- build-mcpb — packaging MCP servers into a distributable bundle.
- excalidraw — for hand-drawn architecture diagrams that survive code review.
How to actually use them
A few habits that make these skills pay off:
- Commit
.skills.json. It's the lockfile. Without it, teammates drift. - Ask for the work the skill describes. Skills activate by description match — saying "review this PR" pulls in the review skill; "I made some changes" probably won't.
- Re-run installs after pulling main.
npx @skills-hub-ai/cli install(no slug) reads the lockfile and syncs missing or out-of-date skills. - Trim what you don't use. Every skill in the registry costs tokens at the description level. Ten well-chosen beats thirty "in case I need it."