Skills to fill your gaps

project-development

This skill should be used for project-level decisions about LLM-powered systems: whether an LLM is the right primitive for the task at hand, the shape of a multi-stage batch or agent pipeline, token and cost estimation, choosing between single-agent and multi-agent at the project level, structured o

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/project-development ↗ · ⭐ Star the author

ck

Persistent per-project memory for Claude Code. Auto-loads project context on session start, tracks sessions with git activity, and writes to native memory. Commands run deterministic Node.js scripts — behavior is consistent across model versions.

Source: affaan-m/ECC/tree/main/skills/ck ↗ · ⭐ Star the author

gsd-add-tests

Generate tests for a completed phase based on UAT criteria and implementation

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ai-integration-phase

Generate an AI-SPEC.md design contract for phases that involve building AI systems.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-audit-fix

Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-audit-milestone

Audit milestone completion against original intent before archiving

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-audit-uat

Cross-phase audit of all outstanding UAT and verification items

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-autonomous

Run all remaining phases autonomously — discuss→plan→execute per phase

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-capture

Capture ideas, tasks, notes, and seeds to their destination

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-cleanup

Archive accumulated phase directories from completed milestones

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-code-review

Review source files changed during a phase for bugs, security issues, and code quality problems

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-complete-milestone

Archive completed milestone and prepare for next version

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-config

Configure GSD settings — workflow toggles, advanced knobs, integrations, and model profile

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-debug

Systematic debugging with persistent state across context resets

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-discuss-phase

Gather phase context through adaptive questioning before planning.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-docs-update

Generate or update project documentation verified against the codebase

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-eval-review

Audit an executed AI phase's evaluation coverage and produce an EVAL-REVIEW.md remediation plan.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-execute-phase

Execute all plans in a phase with wave-based parallelization

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-explore

Socratic ideation and idea routing — think through ideas before committing to plans

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-extract-learnings

Extract decisions, lessons, patterns, and surprises from completed phase artifacts

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-fast

Execute a trivial task inline — no subagents, no planning overhead

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-forensics

Post-mortem investigation for failed GSD workflows — diagnoses what went wrong.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-graphify

Build, query, and inspect the project knowledge graph in .planning/graphs/

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-health

Diagnose planning directory health and optionally repair issues

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-help

Show available GSD commands and usage guide

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-import

Ingest external plans with conflict detection against project decisions before writing anything.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-inbox

Triage and review open GitHub issues and PRs against project templates and contribution guidelines.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ingest-docs

Bootstrap or merge a .planning/ setup from existing ADRs, PRDs, SPECs, and docs in a repo.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-manager

Interactive command center for managing multiple phases from one terminal

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-map-codebase

Analyze codebase with parallel mapper agents to produce .planning/codebase/ documents

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-milestone-summary

Generate a comprehensive project summary from milestone artifacts for team onboarding and review

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-new-milestone

Start a new milestone cycle — update PROJECT.md and route to requirements

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-new-project

Initialize a new project with deep context gathering and PROJECT.md

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-context

codebase intelligence | map graphify docs learnings

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-ideate

exploration capture | explore sketch spike spec capture

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-manage

config workspace | workstreams thread update ship inbox

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-project

project lifecycle | milestones audits summary

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-review

quality gates | code review debug audit security eval ui

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ns-workflow

workflow | discuss plan execute verify phase progress

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-pause-work

Create context handoff when pausing work mid-phase

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-phase

CRUD for phases in ROADMAP.md — add, insert, remove, or edit phases

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-plan-phase

Create detailed phase plan (PLAN.md) with verification loop

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-plan-review-convergence

Cross-AI plan convergence loop — replan with review feedback until no HIGH concerns remain.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-pr-branch

Create a clean PR branch by filtering out .planning/ commits — ready for code review

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-profile-user

Generate developer behavioral profile and create Claude-discoverable artifacts

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-progress

Check progress, advance workflow, or dispatch freeform intent — the unified GSD situational command

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-quick

Execute a quick task with GSD guarantees (atomic commits, state tracking) but skip optional agents

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-resume-work

Resume work from previous session with full context restoration

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-review

Request cross-AI peer review of phase plans from external AI CLIs

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-review-backlog

Review and promote backlog items to active milestone

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-secure-phase

Retroactively verify threat mitigations for a completed phase

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-settings

Configure GSD workflow toggles and model profile

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ship

Create PR, run review, and prepare for merge after verification passes

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-sketch

Sketch UI/design ideas with throwaway HTML mockups, or propose what to sketch next (frontier mode)

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-spec-phase

Clarify WHAT a phase delivers with ambiguity scoring; produces a SPEC.md before discuss-phase.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-spike

Spike an idea through experiential exploration, or propose what to spike next (frontier mode)

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-stats

Display project statistics — phases, plans, requirements, git metrics, and timeline

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-thread

Manage persistent context threads for cross-session work

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ui-phase

Generate UI design contract (UI-SPEC.md) for frontend phases

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ui-review

Retroactive 6-pillar visual audit of implemented frontend code

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-ultraplan-phase

[BETA] Offload plan phase to Claude Code's ultraplan cloud; review in browser and import back.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-undo

Safe git revert. Roll back phase or plan commits using the phase manifest with dependency checks.

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-update

Update GSD to latest version with changelog display

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-validate-phase

Retroactively audit and fill Nyquist validation gaps for a completed phase

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-verify-work

Validate built features through conversational UAT

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-workspace

Manage GSD workspaces — create, list, or remove isolated workspace environments

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

gsd-workstreams

Manage parallel workstreams — list, create, switch, status, progress, complete, and resume

Source: gsd-build/get-shit-done ↗ · ⭐ Star the author

intent-driven-development

Turn ambiguous or high-impact product and engineering changes into scoped, verifiable acceptance criteria before or alongside implementation. Use when a user asks to clarify a feature, define acceptance criteria, de-risk a security/data/migration/integration change, prepare implementation requirements for another agent, or make a complex request testable. Do not trigger for trivial edits, straightforward fixes, active debugging, code review, or implementation requests whose acceptance conditions are already clear unless the user explicitly invokes this skill.

Source: affaan-m/ECC/tree/main/skills/intent-driven-development ↗ · ⭐ Star the author

jira-integration

Use this skill when retrieving Jira tickets, analyzing requirements, updating ticket status, adding comments, or transitioning issues. Provides Jira API patterns via MCP or direct REST calls.

Source: affaan-m/ECC/tree/main/skills/jira-integration ↗ · ⭐ Star the author

meeting-actions

회의록·녹취 텍스트를 붙여넣으면 결정사항·액션아이템(담당·기한)·미결 이슈로 정리합니다. "회의록 정리해줘" 같은 요청에 사용.

Source: x77xdavid-prog/checkup-skills ↗ · ⭐ Star the author

product-capability

Translate PRD intent, roadmap asks, or product discussions into an implementation-ready capability plan that exposes constraints, invariants, interfaces, and unresolved decisions before multi-service work starts. Use when the user needs an ECC-native PRD-to-SRS lane instead of vague planning prose.

Source: affaan-m/ECC/tree/main/skills/product-capability ↗ · ⭐ Star the author

product-lens

Use this skill to validate the "why" before building, run product diagnostics, and pressure-test product direction before the request becomes an implementation contract.

Source: affaan-m/ECC/tree/main/skills/product-lens ↗ · ⭐ Star the author

project-flow-ops

Operate execution flow across GitHub and Linear by triaging issues and pull requests, linking active work, and keeping GitHub public-facing while Linear remains the internal execution layer. Use when the user wants backlog control, PR triage, or GitHub-to-Linear coordination.

Source: affaan-m/ECC/tree/main/skills/project-flow-ops ↗ · ⭐ Star the author

to-tickets

Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker — edges as text in one file per ticket locally, or native blocking links on a real tracker.

Source: mattpocock/skills/tree/main/skills/engineering/to-tickets ↗ · ⭐ Star the author

triage

Move issues and external PRs through a state machine of triage roles — categorise, verify, grill if needed, and write agent-ready briefs.

Source: mattpocock/skills/tree/main/skills/engineering/triage ↗ · ⭐ Star the author

wayfinder

Plan a huge chunk of work — more than one agent session can hold — as a shared map of investigation tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.

Source: mattpocock/skills/tree/main/skills/engineering/wayfinder ↗ · ⭐ Star the author

ai-security

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

atlassian-admin

Atlassian Administrator for managing and organizing Atlassian products (Jira, Confluence, Bitbucket, Trello), users, permissions, security, integrations, system configuration, and org-wide governance. Use when asked to add users to Jira, change Confluence permissions, configure access control, updat

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

ciso-advisor

Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security programs, justifying security budget, selectin

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

cloud-security

Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

cpp-review

Comprehensive C++ code review for memory safety, modern C++ idioms, concurrency, and security. Invokes the cpp-reviewer agent.

cso

Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gat

Source: garrytan/gstack ↗ · ⭐ Star the author

defi-amm-security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

Source: affaan-m/ECC/tree/main/skills/defi-amm-security ↗ · ⭐ Star the author

dependency-auditor

Audit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

django-security

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

Source: affaan-m/ECC/tree/main/skills/django-security ↗ · ⭐ Star the author

docker-development

Docker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: user wants to optimize a Dockerfile, create or improve docker-compose configurations, implement multi-stage builds, audit

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

engineering-advanced-skills

Index of 37 advanced engineering agent skills for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Use when browsing or choosing among the POWERFUL-tier engineering skills: agent design, RAG, MCP servers, CI/CD, database design, observability, security auditing, changelog/release automation, reliab

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

engineering-skills

Index of the engineering-team skills bundle for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw, and 6 more tools. Architecture, frontend, backend, QA, DevOps, security, AI/ML, data engineering, Playwright, Stripe, AWS, MS365 (stdlib-only Python tools). Use when browsing or choosing among engineeri

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

fda-consultant-specialist

FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QMSR (21 CFR 820, which incorporates ISO 13485:2016 by reference since 2026-02-02; formerly QSR) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

flutter-review

Review Flutter/Dart code for idiomatic patterns, widget best practices, state management, performance, accessibility, and security. Invokes the flutter-reviewer agent.

github-ops

GitHub repository operations, automation, and management. Issue triage, PR management, CI/CD operations, release management, and security monitoring using the gh CLI. Use when the user wants to manage GitHub issues, PRs, CI status, releases, contributors, stale items, or any GitHub operational task

Source: affaan-m/ECC/tree/main/skills/github-ops ↗ · ⭐ Star the author

go-review

Comprehensive Go code review for idiomatic patterns, concurrency safety, error handling, and security. Invokes the go-reviewer agent.

google-workspace-cli

Google Workspace administration via the gws CLI (github.com/googleworkspace/cli). Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks. Run security audits and use local recipe templates and persona bundles. Use for Google Workspace admin, gws CLI setup, Gmail au

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

healthcare-phi-compliance

Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.

Source: affaan-m/ECC/tree/main/skills/healthcare-phi-compliance ↗ · ⭐ Star the author

helm-chart-builder

Helm chart development agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw — chart scaffolding, values design, template patterns, dependency management, security hardening, and chart testing. Use when: user wants to create or improve Helm charts, design values.yaml files, imp

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

hipaa-compliance

HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.

Source: affaan-m/ECC/tree/main/skills/hipaa-compliance ↗ · ⭐ Star the author

homelab-vlan-segmentation

Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.

Source: affaan-m/ECC/tree/main/skills/homelab-vlan-segmentation ↗ · ⭐ Star the author

homelab-wireguard-vpn

WireGuard VPN server setup, peer configuration, key generation, split tunneling vs full tunnel routing, and remote access to a home network from mobile and laptop clients.

Source: affaan-m/ECC/tree/main/skills/homelab-wireguard-vpn ↗ · ⭐ Star the author

incident-response

Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection. Covers SEV1-SEV4 classification, false positive filtering, incident taxonomy, and NIST SP 800-61 lifecycle.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

information-security-manager-iso27001

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an ISMS, running security risk assessments, implementing controls, pursuing ISO 27001 certification, preparing security audits, responding to security incidents, or verifying complianc

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

isms-audit-expert

Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support. Use when the user mentions ISO 27001, ISMS audit, Annex A controls, Statement of Applicability (SOA), gap analysis, nonconformity management, inte

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

kotlin-review

Comprehensive Kotlin code review for idiomatic patterns, null safety, coroutine safety, and security. Invokes the kotlin-reviewer agent.

laravel-security

Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.

Source: affaan-m/ECC/tree/main/skills/laravel-security ↗ · ⭐ Star the author

llm-trading-agent-security

Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling.

Source: affaan-m/ECC/tree/main/skills/llm-trading-agent-security ↗ · ⭐ Star the author

modernize-harden

Security vulnerability scan with a reviewable remediation patch — OWASP, CWE, CVE, secrets, injection

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

ms365-tenant-manager

Microsoft 365 tenant administration for Global Administrators. Automate M365 tenant setup, Office 365 admin tasks, Azure AD user management, Exchange Online configuration, Teams administration, and security policies. Generate PowerShell scripts for bulk operations, Conditional Access policies, licen

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

nodejs-keccak256

Prevent Ethereum hashing bugs in JavaScript and TypeScript. Node's sha3-256 is NIST SHA3, not Ethereum Keccak-256, and silently breaks selectors, signatures, storage slots, and address derivation.

Source: affaan-m/ECC/tree/main/skills/nodejs-keccak256 ↗ · ⭐ Star the author

perl-security

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

Source: affaan-m/ECC/tree/main/skills/perl-security ↗ · ⭐ Star the author

postgres-patterns

PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.

Source: affaan-m/ECC/tree/main/skills/postgres-patterns ↗ · ⭐ Star the author

pr-review-expert

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

python-review

Comprehensive Python code review for PEP 8 compliance, type hints, security, and Pythonic idioms. Invokes the python-reviewer agent.

quarkus-security

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

Source: affaan-m/ECC/tree/main/skills/quarkus-security ↗ · ⭐ Star the author

red-team

Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

rfp-responder

Use when an RFP, RFI, RFQ, security questionnaire, vendor questionnaire, or proposal request arrives and the team needs a structured response — parsing multi-section buyer-dictated requirements (MANDATORY vs WEIGHTED vs NICE-TO-HAVE), building a Shipley-method proof-point matrix mapping each require

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

security-auditor

Adversarial security reviewer — OWASP Top 10, CWE, dependency CVEs, secrets, injection. Use for security debt scanning and pre-modernization hardening.

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

security-bounty-hunter

Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.

Source: affaan-m/ECC/tree/main/skills/security-bounty-hunter ↗ · ⭐ Star the author

security-guidance

PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prev

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

security-pen-testing

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Source: affaan-m/ECC/tree/main/skills/security-review ↗ · ⭐ Star the author

security-scan

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Source: affaan-m/ECC/tree/main/skills/security-scan ↗ · ⭐ Star the author

senior-backend

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set u

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

senior-fullstack

Fullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with security and complexity scoring, and stack selection guidance. Use when the user asks to "scaffold a new project", "create a Next.js app", "set up FastAPI with React", "an

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

senior-secops

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automa

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

senior-security

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request needs routing to the right specialist skill (pen-testing, incident response, cloud posture, red team, AI security, threat hunting, secure code

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

ship-gate

Pre-production audit that scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues. Intercepts deploy commands and blocks until critical items pass. Stack-agnostic. Use for "run ship gate", "am I ready to ship", "pre-launch audit", "ca

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

skill-security-auditor

Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4)

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

Source: affaan-m/ECC/tree/main/skills/springboot-security ↗ · ⭐ Star the author

tech-stack-evaluator

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem viability.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

terraform-patterns

Terraform infrastructure-as-code agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Covers module design patterns, state management strategies, provider configuration, security hardening, policy-as-code with Sentinel/OPA, and CI/CD plan/apply workflows. Use when: user wants

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

vibesec

This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.

Source: x77xdavid-prog/checkup-skills ↗ · ⭐ Star the author

owasp-audit

Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, cryptographic failures, injection, insecure design, security misconfiguration, vulnerable components, authentication failures, data integrity, logging failures, SSRF. Use when the user mentions 'OWASP,' 'OWASP Top 10,' 'security audit,' 'security review,' 'secure code review,' 'code security review,' 'vulnerability audit,' 'find vulnerabilities,' 'appsec review,' 'application security audit,' 'check for security issues,' 'broken access control,' 'IDOR,' 'SQL injection,' 'XSS,' 'SSRF,' or wants to check their codebase for common security weaknesses.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

api-audit

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023). Use when the user mentions 'API security,' 'API audit,' 'BOLA,' 'broken object level authorization,' 'BFLA,' 'function-level authorization,' 'mass assignment,' 'API rate limiting,' 'GraphQL security,' 'REST security,' 'API authentication,' 'API authorization,' 'excessive data exposure,' or needs to review API endpoints for security weaknesses.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

cloud-audit

Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

container-audit

Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container security,' 'Docker security,' 'Dockerfile audit,' 'Kubernetes security,' 'K8s security,' 'pod security,' 'container hardening,' 'kubectl audit,' 'image scanning,' 'distroless,' 'rootless containers,' 'pod security policy,' 'pod security standards,' 'PSS,' 'network policy,' 'OPA Gatekeeper,' 'Kyverno,' 'runtime security,' or needs to review container or orchestration security.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

crypto-audit

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than owasp-audit A02. Use when the user mentions 'crypto review,' 'cryptography audit,' 'encryption review,' 'KDF,' 'PBKDF2,' 'Argon2,' 'bcrypt cost,' 'IV reuse,' 'nonce reuse,' 'AES mode,' 'AES-GCM,' 'AES-ECB,' 'signature verification,' 'TLS configuration,' 'cipher suites,' 'key rotation,' 'libsodium,' 'BoringSSL,' or 'is this crypto right.'

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

iam-audit

Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization (RBAC, ABAC, ReBAC), and federated identity. Use when the user mentions 'IAM,' 'identity,' 'access management,' 'least privilege,' 'role design,' 'SSO,' 'SAML,' 'OIDC,' 'OAuth,' 'JIT access,' 'just-in-time access,' 'break-glass,' 'service accounts,' 'RBAC,' 'ABAC,' 'privilege creep,' 'role explosion,' 'identity governance,' 'IAM strategy,' 'identity migration,' 'Okta,' 'Entra ID,' 'Azure AD,' 'Auth0,' 'Cognito,' or needs identity consultant-level guidance.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

mobile-audit

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance. Use when the user mentions 'mobile security,' 'iOS security,' 'Android security,' 'mobile audit,' 'mobile pentest,' 'MASVS,' 'MASTG,' 'certificate pinning,' 'jailbreak detection,' 'root detection,' 'deeplink,' 'URL scheme,' 'app transport security,' 'keychain,' 'keystore,' 'mobile reverse engineering,' or has a mobile app to review.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

pci-audit

Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determination (the single most-leveraged variable) plus the engineering-relevant requirements — Req 3 (storage of CHD), Req 4 (transmission), Req 6 (secure SDLC), Req 7-8 (access), Req 10 (logging), Req 11 (testing), Req 12 (program). Use when the user mentions 'PCI,' 'PCI DSS,' 'PCI DSS 4.0,' 'payment card,' 'cardholder data,' 'CHD,' 'PAN,' 'PCI scope,' 'PCI compliance,' 'SAQ,' 'AoC,' 'attestation of compliance,' 'tokenization,' 'P2PE,' 'network segmentation for PCI,' or audits any system that stores, processes, or transmits payment card data.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,' 'security program,' or needs to translate technical findings into governance language.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

ai-risk-management

Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation, robustness, transparency, accountability, third-party model risk, monitoring for drift, and AI incident response. Broader than prompt-injection (which is the security slice). Use when the user mentions 'AI risk,' 'AI governance,' 'NIST AI RMF,' 'AI compliance,' 'ML governance,' 'model risk management,' 'AI fairness,' 'AI bias,' 'algorithmic accountability,' 'AI Bill of Rights,' 'EU AI Act,' 'AI transparency,' 'model card,' 'AI red team,' 'AI safety,' 'responsible AI,' 'model drift,' 'concept drift,' 'AI monitoring,' 'AI incident,' or needs to assess or govern an AI / ML system.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

privacy-engineering

Implement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIPEDA. Covers data minimization, lawful basis, consent management, data subject access requests (DSARs — access, deletion, portability), data processing agreements, DPIA / TIA, breach notification timing, data classification, and the technical implementation of 'right to be forgotten' across backups, caches, analytics, and third parties. Use when the user mentions 'GDPR,' 'CCPA,' 'CPRA,' 'data privacy,' 'privacy engineering,' 'data subject access request,' 'DSAR,' 'right to deletion,' 'right to be forgotten,' 'data portability,' 'consent management,' 'cookie consent,' 'data minimization,' 'DPIA,' 'data protection impact assessment,' 'breach notification,' 'BAA,' 'DPA,' 'data processing agreement,' 'sub-processor,' 'cross-border data transfer,' 'SCCs,' or needs to implement or review privacy controls.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

soc-operations

Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow, MTTD / MTTR / fidelity KPIs, analyst tiering, and shift handoffs. Use when the user mentions 'SOC,' 'security operations,' 'SOC analyst,' 'alert triage workflow,' 'runbook,' 'escalation,' 'on-call,' 'SOC tiering,' 'tier 1 / tier 2,' 'MTTD,' 'MTTR,' 'alert fatigue,' 'alert tuning,' 'shift handoff,' 'SOAR,' or wants to design or improve a security operations team.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

threat-hunting

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet. ATT&CK-driven, hypothesis-based methodology. Use when the user mentions 'threat hunting,' 'proactive hunt,' 'TaHiTI,' 'PEAK framework,' 'MITRE ATT&CK hunt,' 'hypothesis-driven hunt,' 'hunt hypothesis,' 'living off the land,' 'LOLBins,' 'beaconing,' 'lateral movement detection,' 'data staging,' 'persistence hunting,' or wants to find threats that have evaded existing detections.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

finding-triage

Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive justification, or accepted-risk writeup. Use when the user mentions 'triage this finding,' 'is this a real vulnerability,' 'mitigation plan,' 'false positive,' 'accept this risk,' 'compensating controls,' 'risk justification,' 'security ticket,' 'CVSS this,' 'should we fix this,' 'disposition,' 'sign off on,' or has a single security finding and needs to decide what to do.

Source: briiirussell/cybersecurity-skills ↗ · ⭐ Star the author

supply-chain-audit

Supply chain security audit with SCA scanning (trivy/grype), SLSA compliance assessment, and SBOM generation (CycloneDX/SPDX)

Source: woohyun212/security-skill ↗ · ⭐ Star the author

isms-checklist

Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information)

Source: woohyun212/security-skill ↗ · ⭐ Star the author

siem-rule

Create and convert SIEM detection rules (Sigma/Splunk SPL/Elastic KQL/Sentinel KQL) from threat objectives, IOCs, or CVE reports

Source: woohyun212/security-skill ↗ · ⭐ Star the author

security-headers

Analyze HTTP security headers of a target URL and provide remediation advice

Source: woohyun212/security-skill ↗ · ⭐ Star the author

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

Source: transilienceai/communitytools ↗ · ⭐ Star the author

firewall-review

Claude-native firewall ruleset audit playbook — 17 vendor-agnostic detectors across FortiGate / PAN-OS / Cisco ASA·IOS / Azure NSG / AWS SG / iptables, with framework citations pinned to NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8.1, and HIPAA. Static analysis only; produces audit-grade evidence with source-file + byte-offset + quoted-rule per finding.

Source: transilienceai/communitytools ↗ · ⭐ Star the author

threat-modeling

Threat model, security audit, find vulnerabilities, check security of my app, risk assessment, penetration test prep, analyze attack surface, what could an attacker exploit. Use this skill whenever a user wants holistic security analysis of a codebase, application, or project. MUST be invoked instead of analyzing security yourself — it runs a specialized 8-phase STRIDE workflow producing professional deliverables you cannot generate alone: risk assessment reports, DFD diagrams, threat inventories, attack path validation, mitigation plans, and pentest plans. Trigger on: 威胁建模, 安全评估, 渗透测试, 安全分析, 安全审计, 安全检查, 风险评估. NOT for: fixing one specific bug, adding one security feature (rate limiting, CORS), writing tests, CI/CD setup, or debugging errors.

Source: fr33d3m0n/threat-modeling ↗ · ⭐ Star the author

agentguard

GoPlus AgentGuard — AI agent security guard. Run /agentguard checkup for a full security health check, scans all installed skills, checks credentials, permissions, and network exposure, then delivers an HTML report directly to you. Also use for scanning third-party code, blocking dangerous commands, preventing data leaks, evaluating action safety, and running daily security patrols.

Source: GoPlusSecurity/agentguard ↗ · ⭐ Star the author

iac-security

Guidance for securing Infrastructure-as-Code (Bicep, ARM, Terraform, and ACI/Container) pipelines on Azure — shift-left scanning, policy-as-code, secret hygiene, identity for pipelines, drift detection, and supply chain. Covers Microsoft Defender for Cloud DevOps Security (GitHub / Azure DevOps connectors), Microsoft Security DevOps (MSDO) extension, Bicep linter and template specs, Terraform best practices on Azure (state management, backend hardening, provider versions), Azure Policy as deploy-time and CI-time gate, GitOps with Flux/ArgoCD on AKS, secret scanning and dependency review, signed commits / artifact signing, OIDC federation for pipeline identity (no client secrets), and integration with Defender for Cloud posture. WHEN: IaC security, Bicep security, Terraform Azure security, Defender for Cloud DevOps Security, MSDO, Microsoft Security DevOps, shift-left Azure, policy as code, OIDC GitHub Actions Azure, secrets in IaC, drift detection, signed Bicep, supply chain Azure. DO NOT USE for Kubernetes admission control alone (use defender-for-containers), generic CI/CD design, or app-layer security.

Source: vinayaklatthe/microsoft-security-skills ↗ · ⭐ Star the author

security-architecture

Guidance for designing security architecture using Zero Trust, the Microsoft Cybersecurity Reference Architectures (MCRA), Cloud Adoption Framework Secure methodology, and Well-Architected Security pillar. Covers the six Zero Trust pillars, defense-in-depth, and reference architecture alignment. WHEN: security architecture, Zero Trust design, MCRA, defense in depth, security reference architecture, CAF secure methodology, Well-Architected security pillar, end-to-end security design, security strategy, target state. DO NOT USE for tactical product configuration (use the product-specific skill) or for SOC tooling design (use sentinel / unified-secops-platform).

Source: vinayaklatthe/microsoft-security-skills ↗ · ⭐ Star the author

agent-browser

Browser automation CLI for AI agents. Use when the user needs to inspect, test, or automate browser behavior: navigating pages, filling forms, clicking buttons, taking screenshots, extracting page data, testing web apps, dogfooding Open Design previews, QA, bug hunts, or reviewing app quality. Prefe

Source: vercel-labs/agent-browser ↗ · ⭐ Star the author

agent-designer

Use when the user asks to design a multi-agent system, pick an orchestration pattern (supervisor/swarm/pipeline), generate tool schemas for agents, or evaluate agent execution logs for cost, latency, and failure bottlenecks. Examples: 'design an agent architecture for research automation', 'generate

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

agent-harness

Turn any domain folder of skills into a bounded agentic loop: compile a goal into a verifiable task plan, execute tasks with the domain's own tools, verify every task with machine-run checks, retry with caps, escalate to a human when budgets exhaust, and refuse to close until everything is verified

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

agent-protocol

Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, and response formats. Use when C-suite agents need to query each other, coordinate cross-functional analysis, or run board meetings with multiple agent roles.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

ai-regression-testing

Regression testing strategies for AI-assisted development. Sandbox-mode API testing without database dependencies, automated bug-check workflows, and patterns to catch AI blind spots where the same model writes and reviews code.

Source: affaan-m/ECC/tree/main/skills/ai-regression-testing ↗ · ⭐ Star the author

api-design-reviewer

Comprehensive REST API design review with automated linting, breaking-change detection, and design scorecards. Catches inconsistent conventions, missing versioning, and design smells before APIs ship. Use when reviewing a PR that adds or changes API endpoints, auditing an existing API for v2 migrati

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

aside

Answer a quick side question without interrupting or losing context from the current task. Resume work automatically after answering.

atlassian-templates

Atlassian Template and Files Creator/Modifier expert for creating, modifying, and managing Jira and Confluence templates, blueprints, custom layouts, reusable components, and standardized content structures. Use when building org-wide templates, custom blueprints, page layouts, and automated content

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

automation-audit-ops

Evidence-first automation inventory and overlap audit workflow for ECC. Use when the user wants to know which jobs, hooks, connectors, MCP servers, or wrappers are live, broken, redundant, or missing before fixing anything.

Source: affaan-m/ECC/tree/main/skills/automation-audit-ops ↗ · ⭐ Star the author

autoresearch

Stateful single-mission improvement loop with strict evaluator contract, markdown decision logs, and max-runtime stop behavior

autoresearch-agent

Autonomous experiment loop that optimizes any file by a measurable metric. Inspired by Karpathy's autoresearch. The agent edits a target file, runs a fixed evaluation, keeps improvements (git commit), discards failures (git reset), and loops indefinitely. Use when: user wants to optimize code speed,

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

browser-automation

Use when the user asks to automate browser tasks, scrape websites, fill forms, capture screenshots, extract structured data from web pages, or build web automation workflows. NOT for testing — use playwright-pro for that.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

browser-qa

Use this skill to automate visual testing and UI interaction verification using browser automation after deploying features.

Source: affaan-m/ECC/tree/main/skills/browser-qa ↗ · ⭐ Star the author

cancel-ralph

Cancel active Ralph Loop

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

changelog-generator

Produce consistent, auditable release notes from Conventional Commits. Separates commit parsing, semantic-bump logic, and changelog rendering for automated releases with editorial control. Use when cutting a release, generating CHANGELOG.md from git history, computing the next semantic version from

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

chief-of-staff

C-suite orchestration layer. Routes founder questions to the right advisor role(s), triggers multi-role board meetings for complex decisions, synthesizes outputs, and tracks decisions. Every C-suite interaction starts here. Loads company context automatically. Use when a founder question needs routi

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

claude-automation-recommender

Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MCP servers). Use when user asks for automation recommendations, wants to optimize their Claude Code setup, mentions improving Claude Code workflows, asks how to first set up Claude Code for a project, or wa

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

claude-code-plugin-release

Automated semantic versioning and release workflow for Claude Code plugins. Handles version increments across package.json, marketplace.json, plugin.json manifests, build verification, git tagging, GitHub releases, and changelog generation. NPM publishing (so `npx claude-mem@X.Y.Z` resolves) is hand

Source: thedotmack/claude-mem ↗ · ⭐ Star the author

code-simplifier

Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by fol

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

continuous-learning

Automatically extract reusable patterns from Claude Code sessions and save them as learned skills for future use.

conversation-analyzer

Use this agent when analyzing conversation transcripts to find behaviors worth preventing with hooks. Typical triggers include the /hookify command being invoked without arguments, or the user explicitly asking to look back at the current conversation and surface mistakes that should be prevented in

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

customer-email-draft-threads

Draft-only Gmail customer support triage with per-draft Codex project threads. Use when the user asks to run the customer email automation, check unread/recent support emails, prepare Gmail draft replies, triage customer/person emails while skipping automated mail, or create agent/project threads fo

Source: MengTo/Skills ↗ · ⭐ Star the author

data-scraper-agent

Build a fully automated AI-powered data collection agent for any public source — job boards, prices, news, GitHub, sports, anything. Scrapes on a schedule, enriches data with a free LLM (Gemini Flash), stores results in Notion/Sheets/Supabase, and learns from user feedback. Runs 100% free on GitHub

Source: affaan-m/ECC/tree/main/skills/data-scraper-agent ↗ · ⭐ Star the author

decision-logger

Two-layer memory architecture for board meeting decisions. Manages raw transcripts (Layer 1) and approved decisions (Layer 2). Use when logging decisions after a board meeting, reviewing past decisions with /cs:decisions, or checking overdue action items with /cs:review. Invoked automatically by the

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

dexter-patterns

Coding patterns extracted from the dexter repo (TypeScript CLI AI agent for financial research). Use when adding tools, components, LLM providers, or working with the agent loop.

django-celery

Django + Celery async task patterns — configuration, task design, beat scheduling, retries, canvas workflows, monitoring, and testing. Use when adding background jobs, scheduled tasks, or async processing to a Django app.

Source: affaan-m/ECC/tree/main/skills/django-celery ↗ · ⭐ Star the author

email-ops

Evidence-first mailbox triage, drafting, send verification, and sent-mail-safe follow-up workflow for ECC. Use when the user wants to organize email, draft or send through the real mail surface, or prove what landed in Sent.

Source: affaan-m/ECC/tree/main/skills/email-ops ↗ · ⭐ Star the author

email-sequence

When the user wants to create or optimize an email sequence, drip campaign, automated email flow, or lifecycle email program. Also use when the user mentions "email sequence," "drip campaign," "nurture sequence," "onboarding emails," "welcome sequence," "re-engagement emails," "email automation," or

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

emails

When the user wants to create or optimize an email sequence, drip campaign, automated email flow, or lifecycle email program. Also use when the user mentions "email sequence," "drip campaign," "nurture sequence," "onboarding emails," "welcome sequence," "re-engagement emails," "email automation," "l

Source: coreyhaines31/marketingskills ↗ · ⭐ Star the author

figma-code-connect-components

Connect Figma design components to code components using Code Connect so design-system updates flow into the codebase automatically.

Source: openai/skills ↗ · ⭐ Star the author

gateguard

Fact-forcing gate that blocks Edit/Write/Bash (including MultiEdit) and demands concrete investigation (importers, data schemas, user instruction) before allowing the action. Measurably improves output quality by +2.25 points vs ungated agents.

Source: affaan-m/ECC/tree/main/skills/gateguard ↗ · ⭐ Star the author

gdpr-dsgvo-expert

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests with Art. 12(3) one-month deadlines. Use when running GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, or data subj

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

git-teacher-review

Automated review request workflow — handles branch creation, commit, push, and PR creation as one step. Hides Git branch jargon from users and presents it as "a safe workspace to show your teammates." Korean triggers: "PR 만들어줘", "검토 요청", "리뷰 요청", "수정 제안", "팀원한테 보여주고 싶어", "확인 요청". English triggers: "

Source: fivetaku/gptaku_plugins ↗ · ⭐ Star the author

help

Explain Ralph Loop plugin and available commands

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

hook-development

This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse,

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

hookify

Create hooks to prevent unwanted behaviors from conversation analysis or explicit instructions

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

hookify-configure

Enable or disable hookify rules interactively

hookify-help

Get help with the hookify system

hookify-list

List all configured hookify rules

hookify-rules

This skill should be used when the user asks to create a hookify rule, write a hook rule, configure hookify, add a hookify rule, or needs guidance on hookify rule syntax and patterns.

Source: affaan-m/ECC/tree/main/skills/hookify-rules ↗ · ⭐ Star the author

image-batch

폴더 안 이미지 수십·수백 장을 원본을 보존하며 한 번에 리사이즈·형식 변환·이름 변경·용량 압축합니다. "사진 전부 줄여줘", "이미지 일괄 변환해줘" 같은 요청에 사용.

Source: x77xdavid-prog/checkup-skills ↗ · ⭐ Star the author

interview-system-designer

This skill should be used when the user asks to "design interview processes", "create hiring pipelines", "calibrate interview loops", "generate interview questions", "design competency matrices", "analyze interviewer bias", "create scoring rubrics", "build question banks", or "optimize hiring system

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

ios-fix

Autonomous iOS bug fixer. Takes a bug found by /ios-qa, reads the source, writes the fix, rebuilds, redeploys, and verifies the fix on the real device. Closes the loop: find bug → fix bug → confirm fix — zero human intervention. Captures the pre-bug state snapshot as a regression test fixture, so th

Source: garrytan/gstack ↗ · ⭐ Star the author

ios-qa

Live-device iOS QA for SwiftUI apps. Connects to a real iPhone via USB CoreDevice IPv6 tunnel, reads Swift source to understand every screen, then runs a vision-driven agent loop: screenshot → analyze → decide → act → verify → repeat. All interaction happens via HTTP to an embedded StateServer in th

Source: garrytan/gstack ↗ · ⭐ Star the author

jira-expert

Atlassian Jira expert for creating and managing projects, planning, product discovery, JQL queries, workflows, custom fields, automation, reporting, and all Jira features. Use when setting up or configuring Jira projects, writing JQL and advanced searches, creating dashboards, designing workflows, o

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

korea-public-data

Use when integrating Korean public/government data APIs — 공공데이터포털(data.go.kr), 온비드(공매), 법원경매, LH 분양·임대, HIRA 병원정보, 청약홈(applyhome), DART 전자공시, 국토부 실거래가. Covers 인증키 함정, XML/JSON, rate limit, 페이징, 좌표계 변환, SQLite 캐싱+cron 갱신. Triggers: 공공데이터, 온비드, 경매 데이터, HIRA, 청약홈, 실거래가, data.go.kr, 공매, LH.

Source: x77xdavid-prog/checkup-skills ↗ · ⭐ Star the author

kubernetes-operator

Use when building a Kubernetes Operator — custom controllers that reconcile CRD state. Triggers on "build an operator", "CRD design", "reconcile loop", "controller-runtime", "kubebuilder", "operator-sdk", "metacontroller", "KOPF", "operator capability levels", or "custom resource". Ships CRD validat

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

list

List all configured hookify rules

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

local-build-reminder

Remind the user to rebuild OMC after editing TypeScript when running from a local fork. Triggered automatically by the AI whenever it notices it (or the user) just changed a src/**/*.ts file in an OMC dev install.

loop

Start an autonomous experiment loop with user-selected interval (10min, 1h, daily, weekly, monthly). Uses CronCreate for scheduling. Use when the user runs /ar:loop or asks to run an autoresearch experiment continuously on a schedule.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

loop-library

Discover, find, compare, audit, repair, adapt, and design repeatable AI-agent loops with explicit triggers, actions, verification, stopping conditions, guardrails, and handoffs. Use when a user asks to analyze a codebase for potential loops, mine coding-thread history for work done more than once, t

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

marquee-loop

Apply seamless infinite marquee loops using duplicated items.

Source: MengTo/Skills ↗ · ⭐ Star the author

mdr-745-specialist

EU MDR 2017/745 compliance specialist for medical device classification, technical documentation, clinical evidence, and post-market surveillance. Covers Annex VIII classification rules, Annex II/III technical files, Annex XIV clinical evaluation, Art. 86 PSUR schedules, and EUDAMED integration. Use

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

messages-ops

Evidence-first live messaging workflow for ECC. Use when the user wants to read texts or DMs, recover a recent one-time code, inspect a thread before replying, or prove which message source was actually checked.

Source: affaan-m/ECC/tree/main/skills/messages-ops ↗ · ⭐ Star the author

meta-ads-mcp

Use when automating Meta (Facebook / Instagram) advertising programmatically — via an MCP server or the Meta Marketing API. Campaign / ad set / ad creation, custom & lookalike audiences, Conversions API (CAPI), insights & ROAS reporting, automated rules. Covers 메타 광고 자동화, 페이스북/인스타 광고 API. Note: requ

Source: x77xdavid-prog/checkup-skills ↗ · ⭐ Star the author

named-persona-adversarial-review

Code review through the lens of real engineers' documented philosophies (Torvalds, Thompson, Carmack, Kent Beck, Jobs, Cagan). Complements abstract-role adversarial review with named, sourced perspectives. Use when automated review findings feel generic, when a PR has architectural or UX impact, or

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

netmiko-ssh-automation

Safe Python Netmiko patterns for read-only collection, bounded batch SSH, TextFSM parsing, guarded config changes, timeouts, and network automation error handling.

Source: affaan-m/ECC/tree/main/skills/netmiko-ssh-automation ↗ · ⭐ Star the author

notebooklm

Browser automation skill for controlling Google's NotebookLM. Use when the user wants anything done in NotebookLM (e.g., 'open NotebookLM', 'check my [name] notebook', 'ask my notebook about X', 'add [source] to NotebookLM', 'generate a Video Overview from my notebook', 'use NotebookLM Studio'). Han

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

optimize-web-animations

Profile, audit, and optimize frontend page performance with emphasis on animation work, memory-leak risks, long-session slowdowns, CSS animations, canvas/WebGL requestAnimationFrame loops, marquees, skeletons, GSAP/Three/Matter effects, timers, listeners, and observers. Use when the user asks to mak

Source: MengTo/Skills ↗ · ⭐ Star the author

playwright

Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via `playwright-cli` or the bundled wrapper script.

Source: MengTo/Skills ↗ · ⭐ Star the author

playwright-pro

Production-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test migration, CI/CD testing, or test suites. Generate tests, fix flaky failures, migrate from Cypress/Selenium, sync with TestRail, run on BrowserSt

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

post-mortem

/cs:post-mortem <decision> — Honest retrospective on an executed decision, scored against original assumptions and dissent. Closes the strategic sprint loop. Use when a decision hits its 90-day review checkpoint or its kill criteria trigger — e.g. scoring last quarter's pricing change against its pr

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

production-scheduling

Codified expertise for production scheduling, job sequencing, line balancing, changeover optimization, and bottleneck resolution in discrete and batch manufacturing. Informed by production schedulers with 15+ years experience. Includes TOC/drum-buffer-rope, SMED, OEE analysis, disruption response frameworks, and ERP/MES interaction patterns. Use when scheduling production, resolving bottlenecks, optimizing changeovers, responding to disruptions, or balancing manufacturing lines.

Source: affaan-m/ECC/tree/main/skills/production-scheduling ↗ · ⭐ Star the author

prp-implement

Execute an implementation plan with rigorous validation loops

qa-only

Report-only QA testing. Systematically tests a web application and produces a structured report with health score, screenshots, and repro steps — but never fixes anything. Use when asked to "just report bugs", "qa report only", or "test but don't fix". For the full test-fix-verify loop, use /qa inst

Source: garrytan/gstack ↗ · ⭐ Star the author

ralph

Self-referential loop until task completion with configurable verification reviewer

ralph-loop

Start Ralph Loop in current session

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

referrals

When the user wants to create, optimize, or analyze a referral program, affiliate program, or word-of-mouth strategy. Also use when the user mentions 'referral,' 'affiliate,' 'ambassador,' 'word of mouth,' 'viral loop,' 'refer a friend,' 'partner program,' 'referral incentive,' 'how to get referrals

Source: coreyhaines31/marketingskills ↗ · ⭐ Star the author

revops

When the user wants help with revenue operations, lead lifecycle management, or marketing-to-sales handoff processes. Also use when the user mentions 'RevOps,' 'revenue operations,' 'lead scoring,' 'lead routing,' 'MQL,' 'SQL,' 'pipeline stages,' 'deal desk,' 'CRM automation,' 'marketing-to-sales ha

Source: coreyhaines31/marketingskills ↗ · ⭐ Star the author

santa-loop

Adversarial dual-review convergence loop — two independent model reviewers must both approve before code ships.

scrape

Pull data from a web page. First call on a new intent prototypes the flow via $B primitives and returns JSON. Subsequent calls on a matching intent route to a codified browser-skill and return in ~200ms. Read-only — for mutating flows (form fills, clicks, submissions), use /automate. Use when asked

Source: garrytan/gstack ↗ · ⭐ Star the author

senior-devops

Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting up pipelines, deploying applications, managing infrastructure, implementi

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

setup-deploy

Configure deployment settings for /land-and-deploy. Detects your deploy platform (Fly.io, Render, Vercel, Netlify, Heroku, GitHub Actions, custom), production URL, health check endpoints, and deploy status commands. Writes the configuration to CLAUDE.md so all future deploys are automatic. Use when:

Source: garrytan/gstack ↗ · ⭐ Star the author

shadcn-ui

Build UI components with shadcn/ui. Pairs with the Stitch design loop to ship structured, accessible components quickly.

sms

When the user wants to plan, build, or optimize SMS or MMS marketing — including welcome flows, abandoned cart texts, post-purchase, win-back, promotional sends, or transactional/auth SMS. Also use when the user mentions "SMS marketing," "text message campaigns," "SMS sequence," "SMS automation," "a

Source: coreyhaines31/marketingskills ↗ · ⭐ Star the author

social

When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms, or wants to do social listening and engagement triage. Also use when the user mentions 'LinkedIn post,' 'Twitter thread,' 'social media,' 'conte

Source: coreyhaines31/marketingskills ↗ · ⭐ Star the author

social-content

When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms. Also use when the user mentions 'LinkedIn post,' 'Twitter thread,' 'social media,' 'content calendar,' 'social scheduling,' 'engagement,' or 'vi

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

social-publisher

Agent-driven scheduling and publishing of social media posts across 13 platforms via SocialClaw. Use when the user wants to publish to X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Reddit, WordPress, or Pinterest — or when managing campaigns, uploading media, or monitoring post delivery status.

Source: affaan-m/ECC/tree/main/skills/social-publisher ↗ · ⭐ Star the author

stitch-loop

Iterative design-to-code feedback loop. Critique → adjust → ship cycle for tightening visual fidelity between brief and built UI.

unified-notifications-ops

Operate notifications as one ECC-native workflow across GitHub, Linear, desktop alerts, hooks, and connected communication surfaces. Use when the real problem is alert routing, deduplication, escalation, or inbox collapse.

Source: affaan-m/ECC/tree/main/skills/unified-notifications-ops ↗ · ⭐ Star the author

venice-audio-music

Music generation queueing, retrieval, and completion endpoints via Venice.ai. Suited for jingles, background loops, and prototype scoring.

Source: veniceai/skills ↗ · ⭐ Star the author

verification-loop

A comprehensive verification system for Claude Code sessions.

Source: affaan-m/ECC/tree/main/skills/verification-loop ↗ · ⭐ Star the author

workflow-builder

Design and write deterministic multi-agent workflow scripts (.js files in .claude/workflows/) for Claude Code's Workflow tool. Use when a user wants to build, create, author, scaffold, or run a custom Claude Code workflow, orchestrate sub-agents (fan-out, pipeline, loop, judge-panel), or automate a

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

writing-hookify-rules

This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

x-bookmark-quote-posts

Check a user's latest X/Twitter bookmarks and turn recent saved posts into source-backed quote-post drafts. Use when asked to review X bookmarks, create quote posts from bookmarks, refresh a bookmark quote queue, run a bookmark quote automation, or write first-person quote posts from X sources.

Source: MengTo/Skills ↗ · ⭐ Star the author

youtube-clipper

YouTube clip generation and editing with automated workflows — pull source video, slice highlights, add captions, and export.

zero-hallucination-coder

Runs a disciplined Discuss -> Map -> Decompose -> Execute -> Verify loop that grounds code in verified structure — no invented APIs, no assumed imports, no placeholder code — with a lazy-senior-dev YAGNI ladder that deletes unnecessary code before it is written. Use when a coding task is high-stakes

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

8-bit-orbit-video-template

Hyperframes-based video template for retro pixel deck motion design. Use when users want a high-fidelity, multi-scene HTML-to-video composition with advanced transitions, interactive preview controls, and ready-to-render default style.

bdi-mental-states

This skill should be used when modeling agent mental states with BDI concepts: beliefs, desires, intentions, RDF-to-belief transformations, rational agency traces, cognitive agents, BDI ontologies, and neuro-symbolic AI integration.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/bdi-mental-states ↗ · ⭐ Star the author

context-compression

This skill should be used when long-running agent sessions need context compression, structured summarization, compaction, token-per-task optimization, or durable handoff summaries that preserve decisions, files, risks, and next actions.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-compression ↗ · ⭐ Star the author

context-fundamentals

This skill should be used to explain or reason about the foundational concepts of context engineering: what context is, the anatomy of a context window, how attention mechanics work, the U-shaped attention curve, why context quality matters more than quantity, and the mental models needed to interpr

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-fundamentals ↗ · ⭐ Star the author

context-optimization

This skill should be used for improving context efficiency: context budgeting, observation masking, prefix or KV-cache strategy, partitioning, token-cost reduction, retrieval scoping, and extending effective context capacity without lowering answer quality.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-optimization ↗ · ⭐ Star the author

filesystem-context

This skill should be used when agent work needs file-backed context: durable scratchpads, tool-output offloading, just-in-time discovery, cross-agent handoff files, filesystem memory, or cleanup policies for context stored outside the prompt.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/filesystem-context ↗ · ⭐ Star the author

harness-engineering

This skill should be used when designing autonomous agent harnesses: research loops, evaluation scaffolds, locked and editable surfaces, durable logs, novelty gates, pruning, rollback, PR preparation, and human approval boundaries.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/harness-engineering ↗ · ⭐ Star the author

latent-briefing

This skill should be used when the user asks to "share memory between agents", "KV cache compaction for multi-agent", "orchestrator worker context", "latent briefing", "reduce worker tokens", "cross-agent memory without summarization", or discusses Attention Matching compaction, recursive language m

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/latent-briefing ↗ · ⭐ Star the author

long-horizon-prompting

This skill should be used when writing, enhancing, or evaluating the launch prompt for a long-running autonomous agent or a parallel multi-agent orchestration attacking a hard problem: pseudo-formal task briefs that define terms and an exact success predicate linguistically, enumerate non-counting o

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/long-horizon-prompting ↗ · ⭐ Star the author

memory-systems

This skill should be used for persistent semantic memory in agent systems: cross-session knowledge retention, entity tracking, temporal validity, graph or vector retrieval, memory consolidation, and memory benchmark selection. Route file-backed scratchpads to filesystem-context, handoff summaries to

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/memory-systems ↗ · ⭐ Star the author

multi-agent-patterns

This skill should be used when designing multi-agent systems that need context isolation, supervisor or swarm coordination, explicit handoffs, parallel execution, or a decision on whether multiple agents are justified.

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/multi-agent-patterns ↗ · ⭐ Star the author

self-improvement-loops

This skill should be used when the harness, scaffold, workflow, or optimizer itself is the optimization target: recursive self-improvement (RSI) loops, meta-harnesses, self-improving harnesses that mine their own failures and propose bounded edits, evolutionary or population-based search over agent

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/self-improvement-loops ↗ · ⭐ Star the author

tool-design

This skill should be used for the tool-interface layer of an agent system specifically: writing tool descriptions agents can route on, designing tool schemas and response formats, naming conventions, actionable error recovery messages, MCP server design, tool-set consolidation, and deciding when to

Source: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/tool-design ↗ · ⭐ Star the author

agent-creator

Use this agent when the user asks to "create an agent", "generate an agent", "build a new agent", "make me an agent that...", or describes agent functionality they need. Trigger when user wants to create autonomous agents for plugins. Examples:

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

agent-decision-receipts

Mint a tamper-evident, post-quantum-signed receipt for a consequential agent action (deploy, delete, pay, grant-access, model decision) so it can be verified later from the certificate alone. Use when an autonomous agent takes a side-effecting action that may need to be proven later, or when satisfy

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

agent-development

This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

agent-harness-construction

Design and optimize AI agent action spaces, tool definitions, and observation formatting for higher completion rates.

Source: affaan-m/ECC/tree/main/skills/agent-harness-construction ↗ · ⭐ Star the author

agent-sdk-verifier-py

Use this agent to verify that a Python Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a Python Agent SDK app has been created or modified.

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

agent-sdk-verifier-ts

Use this agent to verify that a TypeScript Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a TypeScript Agent SDK app has been created or modified.

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

agent-sort

Legacy slash-entry shim for the agent-sort skill. Prefer the skill directly.

agent-workflow-designer

Design production-grade multi-agent workflows with clear pattern choice (sequential, parallel, hierarchical), handoff contracts, failure handling, and cost/context controls. Use when architecting a multi-step agent pipeline, choosing between single-agent vs multi-agent approaches, or refactoring an

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

agenthub

Multi-agent collaboration plugin that spawns N parallel subagents competing on the same task via git worktree isolation. Agents work independently, results are evaluated by metric or LLM judge, and the best branch is merged. Use when: user wants multiple approaches tried in parallel — code optimizat

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

agentic-engineering

Operate as an agentic engineer using eval-first execution, decomposition, and cost-aware model routing.

Source: affaan-m/ECC/tree/main/skills/agentic-engineering ↗ · ⭐ Star the author

agentic-os

Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases.

Source: affaan-m/ECC/tree/main/skills/agentic-os ↗ · ⭐ Star the author

ai-first-engineering

Engineering operating model for teams where AI agents generate a large share of implementation output.

Source: affaan-m/ECC/tree/main/skills/ai-first-engineering ↗ · ⭐ Star the author

ai-slop-cleaner

Clean AI-generated code slop with a regression-safe, deletion-first workflow and optional reviewer-only mode

andreessen

Marc Andreessen-mode decision and productivity skill. A blunt, market-first operator that pressure-tests ideas, ventures, features, and career bets through Andreessen's actual frameworks — market dominates team and product; the only milestone that matters is product/market fit; bias to build over de

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

apple-hig

Apple Human Interface Guidelines as 14 agent skills covering platforms, foundations, components, patterns, inputs, and technologies for iOS, macOS, visionOS, watchOS, and tvOS.

arquiteto-de-empresa

Company Architect: builds a business from scratch as an OKF (Open Knowledge Format) bundle — a tree of version-controllable .md files with frontmatter type, links forming a graph, and reserved index.md/log.md, readable by humans and agents. Guides the founder through a 12-phase interview (foundation

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

artifacts-builder

Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui).

Source: ComposioHQ/awesome-claude-skills ↗ · ⭐ Star the author

ask-matt

Ask which skill or flow fits your situation. A router over the skills in this repo.

Source: mattpocock/skills/tree/main/skills/engineering/ask-matt ↗ · ⭐ Star the author

aura-asset-images

Use when you need high-quality stock-style images from Aura Assets (aura.build/assets) similar to Unsplash for design mockups and marketing: backgrounds, abstract wallpapers, architecture, portraits, and headshots. Includes a workflow for searching by tag on aura.build/assets and returns 5 real imag

Source: MengTo/Skills ↗ · ⭐ Star the author

autonomous-agent-harness

Transform Claude Code into a fully autonomous agent system with persistent memory, scheduled operations, computer use, and task queuing. Replaces standalone agent frameworks (Hermes, AutoGPT) by leveraging Claude Code's native crons, dispatch, MCP tools, and memory. Use when the user wants continuous autonomous operation, scheduled tasks, or a self-directing agent loop.

Source: affaan-m/ECC/tree/main/skills/autonomous-agent-harness ↗ · ⭐ Star the author

autonomous-loops

Patterns and architectures for autonomous Claude Code loops — from simple sequential pipelines to RFC-driven multi-agent DAG systems.

Source: affaan-m/ECC/tree/main/skills/autonomous-loops ↗ · ⭐ Star the author

autopilot

Full autonomous execution from idea to working code

autoplan

Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with auto-decisions using 6 decision principles. Surfaces taste decisions (close approaches, borderline scope, codex disagreements) at a final approval gate. One command, fully reviewed

Source: garrytan/gstack ↗ · ⭐ Star the author

aws-solution-architect

Design AWS architectures for startups using serverless patterns and IaC templates. Use when asked to design serverless architecture, create CloudFormation templates, optimize AWS costs, set up CI/CD pipelines, or migrate to AWS. Covers Lambda, API Gateway, DynamoDB, ECS, Aurora, and cost optimizatio

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

azure-cloud-architect

Design Azure architectures for startups and enterprises. Use when asked to design Azure infrastructure, create Bicep/ARM templates, optimize Azure costs, set up Azure DevOps pipelines, or migrate to Azure. Covers AKS, App Service, Azure Functions, Cosmos DB, and cost optimization.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

blueprint

Turn a one-line objective into a step-by-step construction plan for multi-session, multi-agent engineering projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review gate, dependency graph, parallel step detection, anti-pattern catalog, a

Source: affaan-m/ECC/tree/main/skills/blueprint ↗ · ⭐ Star the author

board

Read, write, and browse the AgentHub message board for agent coordination. Use when the user runs /hub:board or asks to post, read, or inspect coordination messages between competing AgentHub agents.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

board-meeting

Multi-agent board meeting protocol for strategic decisions. Runs a structured 6-phase deliberation: context loading, independent C-suite contributions (isolated, no cross-pollination), critic analysis, synthesis, founder review, and decision extraction. Use when the user invokes /cs:boardroom, calls

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

boardroom

/cs:boardroom <brief> — 6-phase multi-role deliberation across the C-suite with Phase 2 isolation, critic pre-screen, and synthesis. Outputs a board memo. Use when a decision spans multiple executive domains — e.g. a pricing change touching finance, positioning, and product, or a raise-vs-cut runway

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

brief

/cs:brief <topic> — Generate a one-page strategy brief from an office-hours intake. First step in the strategic sprint pipeline. Use when a strategic question needs to be framed before boardroom deliberation — e.g. locking options, assumptions, and success criteria for a pricing change or a market-e

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

business-growth-skills

Router/index for the 4 business & growth skills bundled in this plugin: customer-success-manager (health scoring, churn risk, expansion), sales-engineer (RFP analysis, competitive matrices, PoC planning), revenue-operations (pipeline, forecast accuracy, GTM efficiency), and contract-and-proposal-wri

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

c-level-agents

Founder-mode executive team. 13 cs-* C-suite agents (CFO, CMO, CRO, CPO, COO, CHRO, CISO, GC, CDO, CAIO, CCO, VPE, Chief of Staff) and 21 /cs:* slash commands for forcing-question office hours, multi-role boardroom deliberation, strategic sprint pipeline, and meta routing. Use when the founder needs

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

c-level-skills

Index and router for the C-level advisory bundle: 33 skills covering 14 C-suite roles, orchestration, cross-cutting capabilities, and culture. Use when exploring what the c-level-advisor bundle contains, deciding which advisor skill fits a question, or finding the entry points (cs-onboard interview,

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

campaign-analytics

Analyzes campaign performance with multi-touch attribution, funnel conversion analysis, and ROI calculation for marketing optimization. Use when analyzing marketing campaigns, ad performance, attribution models, conversion rates, or calculating marketing ROI, ROAS, CPA, and campaign metrics across c

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

cancel

Cancel any active OMC mode (autopilot, ralph, ultrawork, ultraqa, swarm, ultrapilot, pipeline, team)

cavecrew

Decision guide for delegating to caveman-style subagents. Tells the main thread WHEN to spawn `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit), or `cavecrew-reviewer` (diff review) instead of doing the work inline or using vanilla `Explore`. Subagent output is caveman-compressed so the tool-result injected back into main context is ~60% smaller — main context lasts longer across long sessions. Trigger: "delegate to subagent", "use cavecrew", "spawn investigator/builder/reviewer", "save context", "compressed agent output".

Source: JuliusBrussee/caveman/tree/main/skills/cavecrew ↗ · ⭐ Star the author

caveman

Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less toke

Source: x77xdavid-prog/ponytail ↗ · ⭐ Star the author

caveman-commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

Source: JuliusBrussee/caveman/tree/main/skills/caveman-commit ↗ · ⭐ Star the author

caveman-compress

Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as FILE.original.md. Trigger: /caveman-compress FILEPATH or "compress memory file"

Source: JuliusBrussee/caveman/tree/main/skills/caveman-compress ↗ · ⭐ Star the author

ccg

Claude-Codex-Gemini tri-model orchestration via /ask codex + /ask gemini, then Claude synthesizes results

cco-review

/cs:cco-review <plan> — Retention-obsessed Chief Customer Officer interrogation of any plan that touches customer retention, segmentation, CS team sizing, or CS team hiring. Use when gross retention is slipping, before approving CSM headcount, or when deciding which customer segments to keep or fire

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

cdo-review

/cs:cdo-review <plan> — Decision-driven Chief Data Officer interrogation of any plan that touches training data, data architecture, data productization, or data team hiring. Use when validating training-data rights before model work, choosing warehouse vs lakehouse vs mesh, or valuing data assets fo

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

chief-ai-officer-advisor

Chief AI Officer advisory for startups: model build-vs-buy decisions (API vs fine-tune vs in-house), AI risk classification under EU AI Act + US state patchwork, AI cost economics (API-to-self-hosted breakeven), and AI team org evolution. Use when deciding whether to call an API or fine-tune, classi

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

chief-customer-officer-advisor

Chief Customer Officer advisory for startups: retention decomposition (gross retention vs NRR honesty, churn root-cause taxonomy), customer segmentation strategy (differential investment across tiers + ICP fit scoring), CS team coverage model (pooled vs named CSM thresholds + ratio math), and CS tea

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

chief-data-officer-advisor

Chief Data Officer advisory for startups: AI training data rights and consent provenance, data product strategy (warehouse vs lakehouse vs mesh, build-vs-buy), B2B customer-data-as-asset valuation and M&A readiness, data team org evolution. Use when deciding whether to train models on customer data,

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

chro-advisor

People leadership for scaling companies. Hiring strategy, compensation design, org structure, culture, and retention. Use when building hiring plans, designing comp frameworks, restructuring teams, managing performance, building culture, or when user mentions CHRO, HR, people strategy, talent, headc

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

ci-cd-pipeline-builder

Generate pragmatic CI/CD pipelines from detected project stack signals — fast baseline generation, repeatable checks, environment-aware deployment stages. Use when setting up CI for a new project, refactoring existing pipelines, or standardizing deployment workflows across multiple repos.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

claude-api

Anthropic Claude API patterns for Python and TypeScript. Covers Messages API, streaming, tool use, vision, extended thinking, batches, prompt caching, and Claude Agent SDK. Use when building applications with the Claude API or Anthropic SDKs.

Source: anthropics/skills ↗ · ⭐ Star the author

claude-devfleet

Orchestrate multi-agent coding tasks via Claude DevFleet — plan projects, dispatch parallel agents in isolated worktrees, monitor progress, and read structured reports.

Source: affaan-m/ECC/tree/main/skills/claude-devfleet ↗ · ⭐ Star the author

cmo-advisor

Marketing leadership for scaling companies. Brand positioning, growth model design, marketing budget allocation, and marketing org design. Use when designing brand strategy, selecting growth models (PLG vs sales-led vs community-led), allocating marketing budgets, building marketing teams, or when u

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

code-reviewer

Use this agent when you need to review code for adherence to project guidelines, style guides, and best practices. This agent should be used proactively after writing or modifying code, especially before committing changes or creating pull requests. It will check for style violations, potential issu

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

code-to-prd

Reverse-engineer any codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, state management, API integrations, and user interactions to produce business-readable documentation detailed enough for engineers or AI agents to fully reconstruct every page and endpoint

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

codebase-design

Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.

Source: mattpocock/skills/tree/main/skills/engineering/codebase-design ↗ · ⭐ Star the author

comment-analyzer

Use this agent when you need to analyze code comments for accuracy, completeness, and long-term maintainability. This includes (1) after generating large documentation comments or docstrings, (2) before finalizing a pull request that adds or modifies comments, (3) when reviewing existing comments fo

Source: anthropics/claude-plugins-official ↗ · ⭐ Star the author

commercial-forecaster

Use when building a quarterly bookings forecast, ARR projection, pipeline forecast, NRR projection, or commit/best-case/pipe-only board number — especially when the CRO needs to walk the board through funnel math + cohort ARR + per-stage conversion assumptions without the theatre of a single undefen

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

compliance-os

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across multiple frameworks. Four decisions: (1) Given a company profile, which of the 12 supported frameworks app

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

compliance-readiness

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification stage 1.

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

content-production

Full content production pipeline — takes a topic from blank page to published-ready piece. Use when you need to execute content: write a blog post, article, or guide end-to-end. Triggers: 'write a post about', 'draft an article', 'create content for', 'help me write', 'I need a blog post'. NOT for c

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

context-budget

Audits Claude Code context window consumption across agents, skills, MCP servers, and rules. Identifies bloat, redundant components, and produces prioritized token-savings recommendations.

Source: affaan-m/ECC/tree/main/skills/context-budget ↗ · ⭐ Star the author

continuous-agent-loop

Patterns for continuous autonomous agent loops with quality gates, evals, and recovery controls.

Source: affaan-m/ECC/tree/main/skills/continuous-agent-loop ↗ · ⭐ Star the author

continuous-learning-v2

Instinct-based learning system that observes sessions via hooks, creates atomic instincts with confidence scoring, and evolves them into skills/commands/agents. v2.1 adds project-scoped instincts to prevent cross-project contamination.

Source: affaan-m/ECC/tree/main/skills/continuous-learning-v2 ↗ · ⭐ Star the author

coo-advisor

Operations leadership for scaling companies. Process design, OKR execution, operational cadence, and scaling playbooks. Use when designing operations, setting up OKRs, building processes, scaling teams, analyzing bottlenecks, planning operational cadence, or when user mentions COO, operations, proce

Source: alirezarezvani/claude-skills ↗ · ⭐ Star the author

cost-aware-llm-pipeline

Cost optimization patterns for LLM API usage — model routing by task complexity, budget tracking, retry logic, and prompt caching.

Source: affaan-m/ECC/tree/main/skills/cost-aware-llm-pipeline ↗ · ⭐ Star the author

cost-tracking

Track and report Claude Code token usage, spending, and budgets from the local ECC cost-tracker metrics log. Use when the user asks about costs, spending, usage, tokens, budgets, or cost breakdowns by model, session, or date.

Source: affaan-m/ECC/tree/main/skills/cost-tracking ↗ · ⭐ Star the author