补足短板的 技能

project-development

This skill should be used for project-level decisions about LLM-powered systems: whether an LLM is the right primitive for the task at hand, the shape of a multi-stage batch or agent pipeline, token and cost estimation, choosing between single-agent and multi-agent at the project level, structured o

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/project-development ↗ · ⭐ 给作者加星

ck

Persistent per-project memory for Claude Code. Auto-loads project context on session start, tracks sessions with git activity, and writes to native memory. Commands run deterministic Node.js scripts — behavior is consistent across model versions.

来源: affaan-m/ECC/tree/main/skills/ck ↗ · ⭐ 给作者加星

gsd-add-tests

Generate tests for a completed phase based on UAT criteria and implementation

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ai-integration-phase

Generate an AI-SPEC.md design contract for phases that involve building AI systems.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-audit-fix

Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-audit-milestone

Audit milestone completion against original intent before archiving

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-audit-uat

Cross-phase audit of all outstanding UAT and verification items

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-autonomous

Run all remaining phases autonomously — discuss→plan→execute per phase

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-capture

Capture ideas, tasks, notes, and seeds to their destination

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-cleanup

Archive accumulated phase directories from completed milestones

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-code-review

Review source files changed during a phase for bugs, security issues, and code quality problems

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-complete-milestone

Archive completed milestone and prepare for next version

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-config

Configure GSD settings — workflow toggles, advanced knobs, integrations, and model profile

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-debug

Systematic debugging with persistent state across context resets

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-discuss-phase

Gather phase context through adaptive questioning before planning.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-docs-update

Generate or update project documentation verified against the codebase

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-eval-review

Audit an executed AI phase's evaluation coverage and produce an EVAL-REVIEW.md remediation plan.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-execute-phase

Execute all plans in a phase with wave-based parallelization

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-explore

Socratic ideation and idea routing — think through ideas before committing to plans

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-extract-learnings

Extract decisions, lessons, patterns, and surprises from completed phase artifacts

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-fast

Execute a trivial task inline — no subagents, no planning overhead

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-forensics

Post-mortem investigation for failed GSD workflows — diagnoses what went wrong.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-graphify

Build, query, and inspect the project knowledge graph in .planning/graphs/

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-health

Diagnose planning directory health and optionally repair issues

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-help

Show available GSD commands and usage guide

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-import

Ingest external plans with conflict detection against project decisions before writing anything.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-inbox

Triage and review open GitHub issues and PRs against project templates and contribution guidelines.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ingest-docs

Bootstrap or merge a .planning/ setup from existing ADRs, PRDs, SPECs, and docs in a repo.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-manager

Interactive command center for managing multiple phases from one terminal

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-map-codebase

Analyze codebase with parallel mapper agents to produce .planning/codebase/ documents

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-milestone-summary

Generate a comprehensive project summary from milestone artifacts for team onboarding and review

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-new-milestone

Start a new milestone cycle — update PROJECT.md and route to requirements

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-new-project

Initialize a new project with deep context gathering and PROJECT.md

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-context

codebase intelligence | map graphify docs learnings

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-ideate

exploration capture | explore sketch spike spec capture

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-manage

config workspace | workstreams thread update ship inbox

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-project

project lifecycle | milestones audits summary

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-review

quality gates | code review debug audit security eval ui

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ns-workflow

workflow | discuss plan execute verify phase progress

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-pause-work

Create context handoff when pausing work mid-phase

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-phase

CRUD for phases in ROADMAP.md — add, insert, remove, or edit phases

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-plan-phase

Create detailed phase plan (PLAN.md) with verification loop

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-plan-review-convergence

Cross-AI plan convergence loop — replan with review feedback until no HIGH concerns remain.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-pr-branch

Create a clean PR branch by filtering out .planning/ commits — ready for code review

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-profile-user

Generate developer behavioral profile and create Claude-discoverable artifacts

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-progress

Check progress, advance workflow, or dispatch freeform intent — the unified GSD situational command

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-quick

Execute a quick task with GSD guarantees (atomic commits, state tracking) but skip optional agents

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-resume-work

Resume work from previous session with full context restoration

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-review

Request cross-AI peer review of phase plans from external AI CLIs

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-review-backlog

Review and promote backlog items to active milestone

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-secure-phase

Retroactively verify threat mitigations for a completed phase

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-settings

Configure GSD workflow toggles and model profile

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ship

Create PR, run review, and prepare for merge after verification passes

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-sketch

Sketch UI/design ideas with throwaway HTML mockups, or propose what to sketch next (frontier mode)

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-spec-phase

Clarify WHAT a phase delivers with ambiguity scoring; produces a SPEC.md before discuss-phase.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-spike

Spike an idea through experiential exploration, or propose what to spike next (frontier mode)

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-stats

Display project statistics — phases, plans, requirements, git metrics, and timeline

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-thread

Manage persistent context threads for cross-session work

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ui-phase

Generate UI design contract (UI-SPEC.md) for frontend phases

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ui-review

Retroactive 6-pillar visual audit of implemented frontend code

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-ultraplan-phase

[BETA] Offload plan phase to Claude Code's ultraplan cloud; review in browser and import back.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-undo

Safe git revert. Roll back phase or plan commits using the phase manifest with dependency checks.

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-update

Update GSD to latest version with changelog display

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-validate-phase

Retroactively audit and fill Nyquist validation gaps for a completed phase

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-verify-work

Validate built features through conversational UAT

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-workspace

Manage GSD workspaces — create, list, or remove isolated workspace environments

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

gsd-workstreams

Manage parallel workstreams — list, create, switch, status, progress, complete, and resume

来源: gsd-build/get-shit-done ↗ · ⭐ 给作者加星

intent-driven-development

Turn ambiguous or high-impact product and engineering changes into scoped, verifiable acceptance criteria before or alongside implementation. Use when a user asks to clarify a feature, define acceptance criteria, de-risk a security/data/migration/integration change, prepare implementation requirements for another agent, or make a complex request testable. Do not trigger for trivial edits, straightforward fixes, active debugging, code review, or implementation requests whose acceptance conditions are already clear unless the user explicitly invokes this skill.

来源: affaan-m/ECC/tree/main/skills/intent-driven-development ↗ · ⭐ 给作者加星

jira-integration

Use this skill when retrieving Jira tickets, analyzing requirements, updating ticket status, adding comments, or transitioning issues. Provides Jira API patterns via MCP or direct REST calls.

来源: affaan-m/ECC/tree/main/skills/jira-integration ↗ · ⭐ 给作者加星

meeting-actions

회의록·녹취 텍스트를 붙여넣으면 결정사항·액션아이템(담당·기한)·미결 이슈로 정리합니다. "회의록 정리해줘" 같은 요청에 사용.

来源: x77xdavid-prog/checkup-skills ↗ · ⭐ 给作者加星

product-capability

Translate PRD intent, roadmap asks, or product discussions into an implementation-ready capability plan that exposes constraints, invariants, interfaces, and unresolved decisions before multi-service work starts. Use when the user needs an ECC-native PRD-to-SRS lane instead of vague planning prose.

来源: affaan-m/ECC/tree/main/skills/product-capability ↗ · ⭐ 给作者加星

product-lens

Use this skill to validate the "why" before building, run product diagnostics, and pressure-test product direction before the request becomes an implementation contract.

来源: affaan-m/ECC/tree/main/skills/product-lens ↗ · ⭐ 给作者加星

project-flow-ops

Operate execution flow across GitHub and Linear by triaging issues and pull requests, linking active work, and keeping GitHub public-facing while Linear remains the internal execution layer. Use when the user wants backlog control, PR triage, or GitHub-to-Linear coordination.

来源: affaan-m/ECC/tree/main/skills/project-flow-ops ↗ · ⭐ 给作者加星

to-tickets

Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the configured tracker — edges as text in one file per ticket locally, or native blocking links on a real tracker.

来源: mattpocock/skills/tree/main/skills/engineering/to-tickets ↗ · ⭐ 给作者加星

triage

Move issues and external PRs through a state machine of triage roles — categorise, verify, grill if needed, and write agent-ready briefs.

来源: mattpocock/skills/tree/main/skills/engineering/triage ↗ · ⭐ 给作者加星

wayfinder

Plan a huge chunk of work — more than one agent session can hold — as a shared map of investigation tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.

来源: mattpocock/skills/tree/main/skills/engineering/wayfinder ↗ · ⭐ 给作者加星

ai-security

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

atlassian-admin

Atlassian Administrator for managing and organizing Atlassian products (Jira, Confluence, Bitbucket, Trello), users, permissions, security, integrations, system configuration, and org-wide governance. Use when asked to add users to Jira, change Confluence permissions, configure access control, updat

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

ciso-advisor

Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security programs, justifying security budget, selectin

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

cloud-security

Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

cpp-review

Comprehensive C++ code review for memory safety, modern C++ idioms, concurrency, and security. Invokes the cpp-reviewer agent.

cso

Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gat

来源: garrytan/gstack ↗ · ⭐ 给作者加星

defi-amm-security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

来源: affaan-m/ECC/tree/main/skills/defi-amm-security ↗ · ⭐ 给作者加星

dependency-auditor

Audit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

django-security

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

来源: affaan-m/ECC/tree/main/skills/django-security ↗ · ⭐ 给作者加星

docker-development

Docker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: user wants to optimize a Dockerfile, create or improve docker-compose configurations, implement multi-stage builds, audit

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

engineering-advanced-skills

Index of 37 advanced engineering agent skills for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Use when browsing or choosing among the POWERFUL-tier engineering skills: agent design, RAG, MCP servers, CI/CD, database design, observability, security auditing, changelog/release automation, reliab

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

engineering-skills

Index of the engineering-team skills bundle for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw, and 6 more tools. Architecture, frontend, backend, QA, DevOps, security, AI/ML, data engineering, Playwright, Stripe, AWS, MS365 (stdlib-only Python tools). Use when browsing or choosing among engineeri

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

fda-consultant-specialist

FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QMSR (21 CFR 820, which incorporates ISO 13485:2016 by reference since 2026-02-02; formerly QSR) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

flutter-review

Review Flutter/Dart code for idiomatic patterns, widget best practices, state management, performance, accessibility, and security. Invokes the flutter-reviewer agent.

github-ops

GitHub repository operations, automation, and management. Issue triage, PR management, CI/CD operations, release management, and security monitoring using the gh CLI. Use when the user wants to manage GitHub issues, PRs, CI status, releases, contributors, stale items, or any GitHub operational task

来源: affaan-m/ECC/tree/main/skills/github-ops ↗ · ⭐ 给作者加星

go-review

Comprehensive Go code review for idiomatic patterns, concurrency safety, error handling, and security. Invokes the go-reviewer agent.

google-workspace-cli

Google Workspace administration via the gws CLI (github.com/googleworkspace/cli). Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks. Run security audits and use local recipe templates and persona bundles. Use for Google Workspace admin, gws CLI setup, Gmail au

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

healthcare-phi-compliance

Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors.

来源: affaan-m/ECC/tree/main/skills/healthcare-phi-compliance ↗ · ⭐ 给作者加星

helm-chart-builder

Helm chart development agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw — chart scaffolding, values design, template patterns, dependency management, security hardening, and chart testing. Use when: user wants to create or improve Helm charts, design values.yaml files, imp

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

hipaa-compliance

HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.

来源: affaan-m/ECC/tree/main/skills/hipaa-compliance ↗ · ⭐ 给作者加星

homelab-vlan-segmentation

Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.

来源: affaan-m/ECC/tree/main/skills/homelab-vlan-segmentation ↗ · ⭐ 给作者加星

homelab-wireguard-vpn

WireGuard VPN server setup, peer configuration, key generation, split tunneling vs full tunnel routing, and remote access to a home network from mobile and laptop clients.

来源: affaan-m/ECC/tree/main/skills/homelab-wireguard-vpn ↗ · ⭐ 给作者加星

incident-response

Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection. Covers SEV1-SEV4 classification, false positive filtering, incident taxonomy, and NIST SP 800-61 lifecycle.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

information-security-manager-iso27001

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use when designing an ISMS, running security risk assessments, implementing controls, pursuing ISO 27001 certification, preparing security audits, responding to security incidents, or verifying complianc

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

isms-audit-expert

Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support. Use when the user mentions ISO 27001, ISMS audit, Annex A controls, Statement of Applicability (SOA), gap analysis, nonconformity management, inte

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

kotlin-review

Comprehensive Kotlin code review for idiomatic patterns, null safety, coroutine safety, and security. Invokes the kotlin-reviewer agent.

laravel-security

Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.

来源: affaan-m/ECC/tree/main/skills/laravel-security ↗ · ⭐ 给作者加星

llm-trading-agent-security

Security patterns for autonomous trading agents with wallet or transaction authority. Covers prompt injection, spend limits, pre-send simulation, circuit breakers, MEV protection, and key handling.

来源: affaan-m/ECC/tree/main/skills/llm-trading-agent-security ↗ · ⭐ 给作者加星

modernize-harden

Security vulnerability scan with a reviewable remediation patch — OWASP, CWE, CVE, secrets, injection

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

ms365-tenant-manager

Microsoft 365 tenant administration for Global Administrators. Automate M365 tenant setup, Office 365 admin tasks, Azure AD user management, Exchange Online configuration, Teams administration, and security policies. Generate PowerShell scripts for bulk operations, Conditional Access policies, licen

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

nodejs-keccak256

Prevent Ethereum hashing bugs in JavaScript and TypeScript. Node's sha3-256 is NIST SHA3, not Ethereum Keccak-256, and silently breaks selectors, signatures, storage slots, and address derivation.

来源: affaan-m/ECC/tree/main/skills/nodejs-keccak256 ↗ · ⭐ 给作者加星

perl-security

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

来源: affaan-m/ECC/tree/main/skills/perl-security ↗ · ⭐ 给作者加星

postgres-patterns

PostgreSQL database patterns for query optimization, schema design, indexing, and security. Based on Supabase best practices.

来源: affaan-m/ECC/tree/main/skills/postgres-patterns ↗ · ⭐ 给作者加星

pr-review-expert

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

python-review

Comprehensive Python code review for PEP 8 compliance, type hints, security, and Pythonic idioms. Invokes the python-reviewer agent.

quarkus-security

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

来源: affaan-m/ECC/tree/main/skills/quarkus-security ↗ · ⭐ 给作者加星

red-team

Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

rfp-responder

Use when an RFP, RFI, RFQ, security questionnaire, vendor questionnaire, or proposal request arrives and the team needs a structured response — parsing multi-section buyer-dictated requirements (MANDATORY vs WEIGHTED vs NICE-TO-HAVE), building a Shipley-method proof-point matrix mapping each require

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

security-auditor

Adversarial security reviewer — OWASP Top 10, CWE, dependency CVEs, secrets, injection. Use for security debt scanning and pre-modernization hardening.

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

security-bounty-hunter

Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.

来源: affaan-m/ECC/tree/main/skills/security-bounty-hunter ↗ · ⭐ 给作者加星

security-guidance

PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prev

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

security-pen-testing

Use when the user asks to perform security audits, penetration testing, vulnerability scanning, OWASP Top 10 checks, or offensive security assessments. Covers static analysis, dependency scanning, secret detection, API security testing, and pen test report generation.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

来源: affaan-m/ECC/tree/main/skills/security-review ↗ · ⭐ 给作者加星

security-scan

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

来源: affaan-m/ECC/tree/main/skills/security-scan ↗ · ⭐ 给作者加星

senior-backend

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set u

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

senior-fullstack

Fullstack development toolkit with project scaffolding for Next.js, FastAPI, MERN, and Django stacks, code quality analysis with security and complexity scoring, and stack selection guidance. Use when the user asks to "scaffold a new project", "create a Next.js app", "set up FastAPI with React", "an

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

senior-secops

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE remediation plans, checks dependency vulnerabilities, creates security policies, enforces secure coding patterns, and automa

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

senior-security

Use when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request needs routing to the right specialist skill (pen-testing, incident response, cloud posture, red team, AI security, threat hunting, secure code

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

ship-gate

Pre-production audit that scans a codebase for security, database, deployment, code quality, AI/LLM, dependency, frontend, and observability issues. Intercepts deploy commands and blocks until critical items pass. Stack-agnostic. Use for "run ship gate", "am I ready to ship", "pre-launch audit", "ca

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

skill-security-auditor

Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4)

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

springboot-security

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

来源: affaan-m/ECC/tree/main/skills/springboot-security ↗ · ⭐ 给作者加星

tech-stack-evaluator

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem viability.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

terraform-patterns

Terraform infrastructure-as-code agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Covers module design patterns, state management strategies, provider configuration, security hardening, policy-as-code with Sentinel/OPA, and CI/CD plan/apply workflows. Use when: user wants

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

vibesec

This skill helps Claude write secure web applications. Use this when working on any web application or when a user requests a scan or audit to ensure security best practices are followed.

来源: x77xdavid-prog/checkup-skills ↗ · ⭐ 给作者加星

owasp-audit

Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, cryptographic failures, injection, insecure design, security misconfiguration, vulnerable components, authentication failures, data integrity, logging failures, SSRF. Use when the user mentions 'OWASP,' 'OWASP Top 10,' 'security audit,' 'security review,' 'secure code review,' 'code security review,' 'vulnerability audit,' 'find vulnerabilities,' 'appsec review,' 'application security audit,' 'check for security issues,' 'broken access control,' 'IDOR,' 'SQL injection,' 'XSS,' 'SSRF,' or wants to check their codebase for common security weaknesses.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

api-audit

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023). Use when the user mentions 'API security,' 'API audit,' 'BOLA,' 'broken object level authorization,' 'BFLA,' 'function-level authorization,' 'mass assignment,' 'API rate limiting,' 'GraphQL security,' 'REST security,' 'API authentication,' 'API authorization,' 'excessive data exposure,' or needs to review API endpoints for security weaknesses.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

cloud-audit

Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

container-audit

Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container security,' 'Docker security,' 'Dockerfile audit,' 'Kubernetes security,' 'K8s security,' 'pod security,' 'container hardening,' 'kubectl audit,' 'image scanning,' 'distroless,' 'rootless containers,' 'pod security policy,' 'pod security standards,' 'PSS,' 'network policy,' 'OPA Gatekeeper,' 'Kyverno,' 'runtime security,' or needs to review container or orchestration security.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

crypto-audit

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than owasp-audit A02. Use when the user mentions 'crypto review,' 'cryptography audit,' 'encryption review,' 'KDF,' 'PBKDF2,' 'Argon2,' 'bcrypt cost,' 'IV reuse,' 'nonce reuse,' 'AES mode,' 'AES-GCM,' 'AES-ECB,' 'signature verification,' 'TLS configuration,' 'cipher suites,' 'key rotation,' 'libsodium,' 'BoringSSL,' or 'is this crypto right.'

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

iam-audit

Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization (RBAC, ABAC, ReBAC), and federated identity. Use when the user mentions 'IAM,' 'identity,' 'access management,' 'least privilege,' 'role design,' 'SSO,' 'SAML,' 'OIDC,' 'OAuth,' 'JIT access,' 'just-in-time access,' 'break-glass,' 'service accounts,' 'RBAC,' 'ABAC,' 'privilege creep,' 'role explosion,' 'identity governance,' 'IAM strategy,' 'identity migration,' 'Okta,' 'Entra ID,' 'Azure AD,' 'Auth0,' 'Cognito,' or needs identity consultant-level guidance.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

mobile-audit

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance. Use when the user mentions 'mobile security,' 'iOS security,' 'Android security,' 'mobile audit,' 'mobile pentest,' 'MASVS,' 'MASTG,' 'certificate pinning,' 'jailbreak detection,' 'root detection,' 'deeplink,' 'URL scheme,' 'app transport security,' 'keychain,' 'keystore,' 'mobile reverse engineering,' or has a mobile app to review.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

pci-audit

Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determination (the single most-leveraged variable) plus the engineering-relevant requirements — Req 3 (storage of CHD), Req 4 (transmission), Req 6 (secure SDLC), Req 7-8 (access), Req 10 (logging), Req 11 (testing), Req 12 (program). Use when the user mentions 'PCI,' 'PCI DSS,' 'PCI DSS 4.0,' 'payment card,' 'cardholder data,' 'CHD,' 'PAN,' 'PCI scope,' 'PCI compliance,' 'SAQ,' 'AoC,' 'attestation of compliance,' 'tokenization,' 'P2PE,' 'network segmentation for PCI,' or audits any system that stores, processes, or transmits payment card data.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,' 'security program,' or needs to translate technical findings into governance language.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

ai-risk-management

Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation, robustness, transparency, accountability, third-party model risk, monitoring for drift, and AI incident response. Broader than prompt-injection (which is the security slice). Use when the user mentions 'AI risk,' 'AI governance,' 'NIST AI RMF,' 'AI compliance,' 'ML governance,' 'model risk management,' 'AI fairness,' 'AI bias,' 'algorithmic accountability,' 'AI Bill of Rights,' 'EU AI Act,' 'AI transparency,' 'model card,' 'AI red team,' 'AI safety,' 'responsible AI,' 'model drift,' 'concept drift,' 'AI monitoring,' 'AI incident,' or needs to assess or govern an AI / ML system.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

privacy-engineering

Implement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIPEDA. Covers data minimization, lawful basis, consent management, data subject access requests (DSARs — access, deletion, portability), data processing agreements, DPIA / TIA, breach notification timing, data classification, and the technical implementation of 'right to be forgotten' across backups, caches, analytics, and third parties. Use when the user mentions 'GDPR,' 'CCPA,' 'CPRA,' 'data privacy,' 'privacy engineering,' 'data subject access request,' 'DSAR,' 'right to deletion,' 'right to be forgotten,' 'data portability,' 'consent management,' 'cookie consent,' 'data minimization,' 'DPIA,' 'data protection impact assessment,' 'breach notification,' 'BAA,' 'DPA,' 'data processing agreement,' 'sub-processor,' 'cross-border data transfer,' 'SCCs,' or needs to implement or review privacy controls.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

soc-operations

Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow, MTTD / MTTR / fidelity KPIs, analyst tiering, and shift handoffs. Use when the user mentions 'SOC,' 'security operations,' 'SOC analyst,' 'alert triage workflow,' 'runbook,' 'escalation,' 'on-call,' 'SOC tiering,' 'tier 1 / tier 2,' 'MTTD,' 'MTTR,' 'alert fatigue,' 'alert tuning,' 'shift handoff,' 'SOAR,' or wants to design or improve a security operations team.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

threat-hunting

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet. ATT&CK-driven, hypothesis-based methodology. Use when the user mentions 'threat hunting,' 'proactive hunt,' 'TaHiTI,' 'PEAK framework,' 'MITRE ATT&CK hunt,' 'hypothesis-driven hunt,' 'hunt hypothesis,' 'living off the land,' 'LOLBins,' 'beaconing,' 'lateral movement detection,' 'data staging,' 'persistence hunting,' or wants to find threats that have evaded existing detections.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

finding-triage

Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive justification, or accepted-risk writeup. Use when the user mentions 'triage this finding,' 'is this a real vulnerability,' 'mitigation plan,' 'false positive,' 'accept this risk,' 'compensating controls,' 'risk justification,' 'security ticket,' 'CVSS this,' 'should we fix this,' 'disposition,' 'sign off on,' or has a single security finding and needs to decide what to do.

来源: briiirussell/cybersecurity-skills ↗ · ⭐ 给作者加星

supply-chain-audit

Supply chain security audit with SCA scanning (trivy/grype), SLSA compliance assessment, and SBOM generation (CycloneDX/SPDX)

来源: woohyun212/security-skill ↗ · ⭐ 给作者加星

isms-checklist

Interactive gap analysis against Korea's ISMS-P 102-control certification framework (management, protection, personal information)

来源: woohyun212/security-skill ↗ · ⭐ 给作者加星

siem-rule

Create and convert SIEM detection rules (Sigma/Splunk SPL/Elastic KQL/Sentinel KQL) from threat objectives, IOCs, or CVE reports

来源: woohyun212/security-skill ↗ · ⭐ 给作者加星

security-headers

Analyze HTTP security headers of a target URL and provide remediation advice

来源: woohyun212/security-skill ↗ · ⭐ 给作者加星

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

来源: transilienceai/communitytools ↗ · ⭐ 给作者加星

firewall-review

Claude-native firewall ruleset audit playbook — 17 vendor-agnostic detectors across FortiGate / PAN-OS / Cisco ASA·IOS / Azure NSG / AWS SG / iptables, with framework citations pinned to NIST CSF 2.0, PCI DSS v4.0.1, ISO/IEC 27001:2022, CIS Controls v8.1, and HIPAA. Static analysis only; produces audit-grade evidence with source-file + byte-offset + quoted-rule per finding.

来源: transilienceai/communitytools ↗ · ⭐ 给作者加星

threat-modeling

Threat model, security audit, find vulnerabilities, check security of my app, risk assessment, penetration test prep, analyze attack surface, what could an attacker exploit. Use this skill whenever a user wants holistic security analysis of a codebase, application, or project. MUST be invoked instead of analyzing security yourself — it runs a specialized 8-phase STRIDE workflow producing professional deliverables you cannot generate alone: risk assessment reports, DFD diagrams, threat inventories, attack path validation, mitigation plans, and pentest plans. Trigger on: 威胁建模, 安全评估, 渗透测试, 安全分析, 安全审计, 安全检查, 风险评估. NOT for: fixing one specific bug, adding one security feature (rate limiting, CORS), writing tests, CI/CD setup, or debugging errors.

来源: fr33d3m0n/threat-modeling ↗ · ⭐ 给作者加星

agentguard

GoPlus AgentGuard — AI agent security guard. Run /agentguard checkup for a full security health check, scans all installed skills, checks credentials, permissions, and network exposure, then delivers an HTML report directly to you. Also use for scanning third-party code, blocking dangerous commands, preventing data leaks, evaluating action safety, and running daily security patrols.

来源: GoPlusSecurity/agentguard ↗ · ⭐ 给作者加星

iac-security

Guidance for securing Infrastructure-as-Code (Bicep, ARM, Terraform, and ACI/Container) pipelines on Azure — shift-left scanning, policy-as-code, secret hygiene, identity for pipelines, drift detection, and supply chain. Covers Microsoft Defender for Cloud DevOps Security (GitHub / Azure DevOps connectors), Microsoft Security DevOps (MSDO) extension, Bicep linter and template specs, Terraform best practices on Azure (state management, backend hardening, provider versions), Azure Policy as deploy-time and CI-time gate, GitOps with Flux/ArgoCD on AKS, secret scanning and dependency review, signed commits / artifact signing, OIDC federation for pipeline identity (no client secrets), and integration with Defender for Cloud posture. WHEN: IaC security, Bicep security, Terraform Azure security, Defender for Cloud DevOps Security, MSDO, Microsoft Security DevOps, shift-left Azure, policy as code, OIDC GitHub Actions Azure, secrets in IaC, drift detection, signed Bicep, supply chain Azure. DO NOT USE for Kubernetes admission control alone (use defender-for-containers), generic CI/CD design, or app-layer security.

来源: vinayaklatthe/microsoft-security-skills ↗ · ⭐ 给作者加星

security-architecture

Guidance for designing security architecture using Zero Trust, the Microsoft Cybersecurity Reference Architectures (MCRA), Cloud Adoption Framework Secure methodology, and Well-Architected Security pillar. Covers the six Zero Trust pillars, defense-in-depth, and reference architecture alignment. WHEN: security architecture, Zero Trust design, MCRA, defense in depth, security reference architecture, CAF secure methodology, Well-Architected security pillar, end-to-end security design, security strategy, target state. DO NOT USE for tactical product configuration (use the product-specific skill) or for SOC tooling design (use sentinel / unified-secops-platform).

来源: vinayaklatthe/microsoft-security-skills ↗ · ⭐ 给作者加星

agent-browser

Browser automation CLI for AI agents. Use when the user needs to inspect, test, or automate browser behavior: navigating pages, filling forms, clicking buttons, taking screenshots, extracting page data, testing web apps, dogfooding Open Design previews, QA, bug hunts, or reviewing app quality. Prefe

来源: vercel-labs/agent-browser ↗ · ⭐ 给作者加星

agent-designer

Use when the user asks to design a multi-agent system, pick an orchestration pattern (supervisor/swarm/pipeline), generate tool schemas for agents, or evaluate agent execution logs for cost, latency, and failure bottlenecks. Examples: 'design an agent architecture for research automation', 'generate

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

agent-harness

Turn any domain folder of skills into a bounded agentic loop: compile a goal into a verifiable task plan, execute tasks with the domain's own tools, verify every task with machine-run checks, retry with caps, escalate to a human when budgets exhaust, and refuse to close until everything is verified

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

agent-protocol

Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, and response formats. Use when C-suite agents need to query each other, coordinate cross-functional analysis, or run board meetings with multiple agent roles.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

ai-regression-testing

Regression testing strategies for AI-assisted development. Sandbox-mode API testing without database dependencies, automated bug-check workflows, and patterns to catch AI blind spots where the same model writes and reviews code.

来源: affaan-m/ECC/tree/main/skills/ai-regression-testing ↗ · ⭐ 给作者加星

api-design-reviewer

Comprehensive REST API design review with automated linting, breaking-change detection, and design scorecards. Catches inconsistent conventions, missing versioning, and design smells before APIs ship. Use when reviewing a PR that adds or changes API endpoints, auditing an existing API for v2 migrati

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

aside

Answer a quick side question without interrupting or losing context from the current task. Resume work automatically after answering.

atlassian-templates

Atlassian Template and Files Creator/Modifier expert for creating, modifying, and managing Jira and Confluence templates, blueprints, custom layouts, reusable components, and standardized content structures. Use when building org-wide templates, custom blueprints, page layouts, and automated content

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

automation-audit-ops

Evidence-first automation inventory and overlap audit workflow for ECC. Use when the user wants to know which jobs, hooks, connectors, MCP servers, or wrappers are live, broken, redundant, or missing before fixing anything.

来源: affaan-m/ECC/tree/main/skills/automation-audit-ops ↗ · ⭐ 给作者加星

autoresearch

Stateful single-mission improvement loop with strict evaluator contract, markdown decision logs, and max-runtime stop behavior

autoresearch-agent

Autonomous experiment loop that optimizes any file by a measurable metric. Inspired by Karpathy's autoresearch. The agent edits a target file, runs a fixed evaluation, keeps improvements (git commit), discards failures (git reset), and loops indefinitely. Use when: user wants to optimize code speed,

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

browser-automation

Use when the user asks to automate browser tasks, scrape websites, fill forms, capture screenshots, extract structured data from web pages, or build web automation workflows. NOT for testing — use playwright-pro for that.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

browser-qa

Use this skill to automate visual testing and UI interaction verification using browser automation after deploying features.

来源: affaan-m/ECC/tree/main/skills/browser-qa ↗ · ⭐ 给作者加星

cancel-ralph

Cancel active Ralph Loop

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

changelog-generator

Produce consistent, auditable release notes from Conventional Commits. Separates commit parsing, semantic-bump logic, and changelog rendering for automated releases with editorial control. Use when cutting a release, generating CHANGELOG.md from git history, computing the next semantic version from

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

chief-of-staff

C-suite orchestration layer. Routes founder questions to the right advisor role(s), triggers multi-role board meetings for complex decisions, synthesizes outputs, and tracks decisions. Every C-suite interaction starts here. Loads company context automatically. Use when a founder question needs routi

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

claude-automation-recommender

Analyze a codebase and recommend Claude Code automations (hooks, subagents, skills, plugins, MCP servers). Use when user asks for automation recommendations, wants to optimize their Claude Code setup, mentions improving Claude Code workflows, asks how to first set up Claude Code for a project, or wa

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

claude-code-plugin-release

Automated semantic versioning and release workflow for Claude Code plugins. Handles version increments across package.json, marketplace.json, plugin.json manifests, build verification, git tagging, GitHub releases, and changelog generation. NPM publishing (so `npx claude-mem@X.Y.Z` resolves) is hand

来源: thedotmack/claude-mem ↗ · ⭐ 给作者加星

code-simplifier

Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by fol

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

continuous-learning

Automatically extract reusable patterns from Claude Code sessions and save them as learned skills for future use.

conversation-analyzer

Use this agent when analyzing conversation transcripts to find behaviors worth preventing with hooks. Typical triggers include the /hookify command being invoked without arguments, or the user explicitly asking to look back at the current conversation and surface mistakes that should be prevented in

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

customer-email-draft-threads

Draft-only Gmail customer support triage with per-draft Codex project threads. Use when the user asks to run the customer email automation, check unread/recent support emails, prepare Gmail draft replies, triage customer/person emails while skipping automated mail, or create agent/project threads fo

来源: MengTo/Skills ↗ · ⭐ 给作者加星

data-scraper-agent

Build a fully automated AI-powered data collection agent for any public source — job boards, prices, news, GitHub, sports, anything. Scrapes on a schedule, enriches data with a free LLM (Gemini Flash), stores results in Notion/Sheets/Supabase, and learns from user feedback. Runs 100% free on GitHub

来源: affaan-m/ECC/tree/main/skills/data-scraper-agent ↗ · ⭐ 给作者加星

decision-logger

Two-layer memory architecture for board meeting decisions. Manages raw transcripts (Layer 1) and approved decisions (Layer 2). Use when logging decisions after a board meeting, reviewing past decisions with /cs:decisions, or checking overdue action items with /cs:review. Invoked automatically by the

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

dexter-patterns

Coding patterns extracted from the dexter repo (TypeScript CLI AI agent for financial research). Use when adding tools, components, LLM providers, or working with the agent loop.

django-celery

Django + Celery async task patterns — configuration, task design, beat scheduling, retries, canvas workflows, monitoring, and testing. Use when adding background jobs, scheduled tasks, or async processing to a Django app.

来源: affaan-m/ECC/tree/main/skills/django-celery ↗ · ⭐ 给作者加星

email-ops

Evidence-first mailbox triage, drafting, send verification, and sent-mail-safe follow-up workflow for ECC. Use when the user wants to organize email, draft or send through the real mail surface, or prove what landed in Sent.

来源: affaan-m/ECC/tree/main/skills/email-ops ↗ · ⭐ 给作者加星

email-sequence

When the user wants to create or optimize an email sequence, drip campaign, automated email flow, or lifecycle email program. Also use when the user mentions "email sequence," "drip campaign," "nurture sequence," "onboarding emails," "welcome sequence," "re-engagement emails," "email automation," or

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

emails

When the user wants to create or optimize an email sequence, drip campaign, automated email flow, or lifecycle email program. Also use when the user mentions "email sequence," "drip campaign," "nurture sequence," "onboarding emails," "welcome sequence," "re-engagement emails," "email automation," "l

来源: coreyhaines31/marketingskills ↗ · ⭐ 给作者加星

figma-code-connect-components

Connect Figma design components to code components using Code Connect so design-system updates flow into the codebase automatically.

来源: openai/skills ↗ · ⭐ 给作者加星

gateguard

Fact-forcing gate that blocks Edit/Write/Bash (including MultiEdit) and demands concrete investigation (importers, data schemas, user instruction) before allowing the action. Measurably improves output quality by +2.25 points vs ungated agents.

来源: affaan-m/ECC/tree/main/skills/gateguard ↗ · ⭐ 给作者加星

gdpr-dsgvo-expert

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests with Art. 12(3) one-month deadlines. Use when running GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, or data subj

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

git-teacher-review

Automated review request workflow — handles branch creation, commit, push, and PR creation as one step. Hides Git branch jargon from users and presents it as "a safe workspace to show your teammates." Korean triggers: "PR 만들어줘", "검토 요청", "리뷰 요청", "수정 제안", "팀원한테 보여주고 싶어", "확인 요청". English triggers: "

来源: fivetaku/gptaku_plugins ↗ · ⭐ 给作者加星

help

Explain Ralph Loop plugin and available commands

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

hook-development

This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or mentions hook events (PreToolUse, PostToolUse,

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

hookify

Create hooks to prevent unwanted behaviors from conversation analysis or explicit instructions

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

hookify-configure

Enable or disable hookify rules interactively

hookify-help

Get help with the hookify system

hookify-list

List all configured hookify rules

hookify-rules

This skill should be used when the user asks to create a hookify rule, write a hook rule, configure hookify, add a hookify rule, or needs guidance on hookify rule syntax and patterns.

来源: affaan-m/ECC/tree/main/skills/hookify-rules ↗ · ⭐ 给作者加星

image-batch

폴더 안 이미지 수십·수백 장을 원본을 보존하며 한 번에 리사이즈·형식 변환·이름 변경·용량 압축합니다. "사진 전부 줄여줘", "이미지 일괄 변환해줘" 같은 요청에 사용.

来源: x77xdavid-prog/checkup-skills ↗ · ⭐ 给作者加星

interview-system-designer

This skill should be used when the user asks to "design interview processes", "create hiring pipelines", "calibrate interview loops", "generate interview questions", "design competency matrices", "analyze interviewer bias", "create scoring rubrics", "build question banks", or "optimize hiring system

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

ios-fix

Autonomous iOS bug fixer. Takes a bug found by /ios-qa, reads the source, writes the fix, rebuilds, redeploys, and verifies the fix on the real device. Closes the loop: find bug → fix bug → confirm fix — zero human intervention. Captures the pre-bug state snapshot as a regression test fixture, so th

来源: garrytan/gstack ↗ · ⭐ 给作者加星

ios-qa

Live-device iOS QA for SwiftUI apps. Connects to a real iPhone via USB CoreDevice IPv6 tunnel, reads Swift source to understand every screen, then runs a vision-driven agent loop: screenshot → analyze → decide → act → verify → repeat. All interaction happens via HTTP to an embedded StateServer in th

来源: garrytan/gstack ↗ · ⭐ 给作者加星

jira-expert

Atlassian Jira expert for creating and managing projects, planning, product discovery, JQL queries, workflows, custom fields, automation, reporting, and all Jira features. Use when setting up or configuring Jira projects, writing JQL and advanced searches, creating dashboards, designing workflows, o

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

korea-public-data

Use when integrating Korean public/government data APIs — 공공데이터포털(data.go.kr), 온비드(공매), 법원경매, LH 분양·임대, HIRA 병원정보, 청약홈(applyhome), DART 전자공시, 국토부 실거래가. Covers 인증키 함정, XML/JSON, rate limit, 페이징, 좌표계 변환, SQLite 캐싱+cron 갱신. Triggers: 공공데이터, 온비드, 경매 데이터, HIRA, 청약홈, 실거래가, data.go.kr, 공매, LH.

来源: x77xdavid-prog/checkup-skills ↗ · ⭐ 给作者加星

kubernetes-operator

Use when building a Kubernetes Operator — custom controllers that reconcile CRD state. Triggers on "build an operator", "CRD design", "reconcile loop", "controller-runtime", "kubebuilder", "operator-sdk", "metacontroller", "KOPF", "operator capability levels", or "custom resource". Ships CRD validat

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

list

List all configured hookify rules

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

local-build-reminder

Remind the user to rebuild OMC after editing TypeScript when running from a local fork. Triggered automatically by the AI whenever it notices it (or the user) just changed a src/**/*.ts file in an OMC dev install.

loop

Start an autonomous experiment loop with user-selected interval (10min, 1h, daily, weekly, monthly). Uses CronCreate for scheduling. Use when the user runs /ar:loop or asks to run an autoresearch experiment continuously on a schedule.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

loop-library

Discover, find, compare, audit, repair, adapt, and design repeatable AI-agent loops with explicit triggers, actions, verification, stopping conditions, guardrails, and handoffs. Use when a user asks to analyze a codebase for potential loops, mine coding-thread history for work done more than once, t

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

marquee-loop

Apply seamless infinite marquee loops using duplicated items.

来源: MengTo/Skills ↗ · ⭐ 给作者加星

mdr-745-specialist

EU MDR 2017/745 compliance specialist for medical device classification, technical documentation, clinical evidence, and post-market surveillance. Covers Annex VIII classification rules, Annex II/III technical files, Annex XIV clinical evaluation, Art. 86 PSUR schedules, and EUDAMED integration. Use

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

messages-ops

Evidence-first live messaging workflow for ECC. Use when the user wants to read texts or DMs, recover a recent one-time code, inspect a thread before replying, or prove which message source was actually checked.

来源: affaan-m/ECC/tree/main/skills/messages-ops ↗ · ⭐ 给作者加星

meta-ads-mcp

Use when automating Meta (Facebook / Instagram) advertising programmatically — via an MCP server or the Meta Marketing API. Campaign / ad set / ad creation, custom & lookalike audiences, Conversions API (CAPI), insights & ROAS reporting, automated rules. Covers 메타 광고 자동화, 페이스북/인스타 광고 API. Note: requ

来源: x77xdavid-prog/checkup-skills ↗ · ⭐ 给作者加星

named-persona-adversarial-review

Code review through the lens of real engineers' documented philosophies (Torvalds, Thompson, Carmack, Kent Beck, Jobs, Cagan). Complements abstract-role adversarial review with named, sourced perspectives. Use when automated review findings feel generic, when a PR has architectural or UX impact, or

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

netmiko-ssh-automation

Safe Python Netmiko patterns for read-only collection, bounded batch SSH, TextFSM parsing, guarded config changes, timeouts, and network automation error handling.

来源: affaan-m/ECC/tree/main/skills/netmiko-ssh-automation ↗ · ⭐ 给作者加星

notebooklm

Browser automation skill for controlling Google's NotebookLM. Use when the user wants anything done in NotebookLM (e.g., 'open NotebookLM', 'check my [name] notebook', 'ask my notebook about X', 'add [source] to NotebookLM', 'generate a Video Overview from my notebook', 'use NotebookLM Studio'). Han

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

optimize-web-animations

Profile, audit, and optimize frontend page performance with emphasis on animation work, memory-leak risks, long-session slowdowns, CSS animations, canvas/WebGL requestAnimationFrame loops, marquees, skeletons, GSAP/Three/Matter effects, timers, listeners, and observers. Use when the user asks to mak

来源: MengTo/Skills ↗ · ⭐ 给作者加星

playwright

Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via `playwright-cli` or the bundled wrapper script.

来源: MengTo/Skills ↗ · ⭐ 给作者加星

playwright-pro

Production-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test migration, CI/CD testing, or test suites. Generate tests, fix flaky failures, migrate from Cypress/Selenium, sync with TestRail, run on BrowserSt

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

post-mortem

/cs:post-mortem <decision> — Honest retrospective on an executed decision, scored against original assumptions and dissent. Closes the strategic sprint loop. Use when a decision hits its 90-day review checkpoint or its kill criteria trigger — e.g. scoring last quarter's pricing change against its pr

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

production-scheduling

Codified expertise for production scheduling, job sequencing, line balancing, changeover optimization, and bottleneck resolution in discrete and batch manufacturing. Informed by production schedulers with 15+ years experience. Includes TOC/drum-buffer-rope, SMED, OEE analysis, disruption response frameworks, and ERP/MES interaction patterns. Use when scheduling production, resolving bottlenecks, optimizing changeovers, responding to disruptions, or balancing manufacturing lines.

来源: affaan-m/ECC/tree/main/skills/production-scheduling ↗ · ⭐ 给作者加星

prp-implement

Execute an implementation plan with rigorous validation loops

qa-only

Report-only QA testing. Systematically tests a web application and produces a structured report with health score, screenshots, and repro steps — but never fixes anything. Use when asked to "just report bugs", "qa report only", or "test but don't fix". For the full test-fix-verify loop, use /qa inst

来源: garrytan/gstack ↗ · ⭐ 给作者加星

ralph

Self-referential loop until task completion with configurable verification reviewer

ralph-loop

Start Ralph Loop in current session

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

referrals

When the user wants to create, optimize, or analyze a referral program, affiliate program, or word-of-mouth strategy. Also use when the user mentions 'referral,' 'affiliate,' 'ambassador,' 'word of mouth,' 'viral loop,' 'refer a friend,' 'partner program,' 'referral incentive,' 'how to get referrals

来源: coreyhaines31/marketingskills ↗ · ⭐ 给作者加星

revops

When the user wants help with revenue operations, lead lifecycle management, or marketing-to-sales handoff processes. Also use when the user mentions 'RevOps,' 'revenue operations,' 'lead scoring,' 'lead routing,' 'MQL,' 'SQL,' 'pipeline stages,' 'deal desk,' 'CRM automation,' 'marketing-to-sales ha

来源: coreyhaines31/marketingskills ↗ · ⭐ 给作者加星

santa-loop

Adversarial dual-review convergence loop — two independent model reviewers must both approve before code ships.

scrape

Pull data from a web page. First call on a new intent prototypes the flow via $B primitives and returns JSON. Subsequent calls on a matching intent route to a codified browser-skill and return in ~200ms. Read-only — for mutating flows (form fills, clicks, submissions), use /automate. Use when asked

来源: garrytan/gstack ↗ · ⭐ 给作者加星

senior-devops

Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting up pipelines, deploying applications, managing infrastructure, implementi

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

setup-deploy

Configure deployment settings for /land-and-deploy. Detects your deploy platform (Fly.io, Render, Vercel, Netlify, Heroku, GitHub Actions, custom), production URL, health check endpoints, and deploy status commands. Writes the configuration to CLAUDE.md so all future deploys are automatic. Use when:

来源: garrytan/gstack ↗ · ⭐ 给作者加星

shadcn-ui

Build UI components with shadcn/ui. Pairs with the Stitch design loop to ship structured, accessible components quickly.

sms

When the user wants to plan, build, or optimize SMS or MMS marketing — including welcome flows, abandoned cart texts, post-purchase, win-back, promotional sends, or transactional/auth SMS. Also use when the user mentions "SMS marketing," "text message campaigns," "SMS sequence," "SMS automation," "a

来源: coreyhaines31/marketingskills ↗ · ⭐ 给作者加星

social

When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms, or wants to do social listening and engagement triage. Also use when the user mentions 'LinkedIn post,' 'Twitter thread,' 'social media,' 'conte

来源: coreyhaines31/marketingskills ↗ · ⭐ 给作者加星

social-content

When the user wants help creating, scheduling, or optimizing social media content for LinkedIn, Twitter/X, Instagram, TikTok, Facebook, or other platforms. Also use when the user mentions 'LinkedIn post,' 'Twitter thread,' 'social media,' 'content calendar,' 'social scheduling,' 'engagement,' or 'vi

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

social-publisher

Agent-driven scheduling and publishing of social media posts across 13 platforms via SocialClaw. Use when the user wants to publish to X, LinkedIn, Instagram, Facebook Pages, TikTok, Discord, Telegram, YouTube, Reddit, WordPress, or Pinterest — or when managing campaigns, uploading media, or monitoring post delivery status.

来源: affaan-m/ECC/tree/main/skills/social-publisher ↗ · ⭐ 给作者加星

stitch-loop

Iterative design-to-code feedback loop. Critique → adjust → ship cycle for tightening visual fidelity between brief and built UI.

unified-notifications-ops

Operate notifications as one ECC-native workflow across GitHub, Linear, desktop alerts, hooks, and connected communication surfaces. Use when the real problem is alert routing, deduplication, escalation, or inbox collapse.

来源: affaan-m/ECC/tree/main/skills/unified-notifications-ops ↗ · ⭐ 给作者加星

venice-audio-music

Music generation queueing, retrieval, and completion endpoints via Venice.ai. Suited for jingles, background loops, and prototype scoring.

来源: veniceai/skills ↗ · ⭐ 给作者加星

verification-loop

A comprehensive verification system for Claude Code sessions.

来源: affaan-m/ECC/tree/main/skills/verification-loop ↗ · ⭐ 给作者加星

workflow-builder

Design and write deterministic multi-agent workflow scripts (.js files in .claude/workflows/) for Claude Code's Workflow tool. Use when a user wants to build, create, author, scaffold, or run a custom Claude Code workflow, orchestrate sub-agents (fan-out, pipeline, loop, judge-panel), or automate a

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

writing-hookify-rules

This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

x-bookmark-quote-posts

Check a user's latest X/Twitter bookmarks and turn recent saved posts into source-backed quote-post drafts. Use when asked to review X bookmarks, create quote posts from bookmarks, refresh a bookmark quote queue, run a bookmark quote automation, or write first-person quote posts from X sources.

来源: MengTo/Skills ↗ · ⭐ 给作者加星

youtube-clipper

YouTube clip generation and editing with automated workflows — pull source video, slice highlights, add captions, and export.

zero-hallucination-coder

Runs a disciplined Discuss -> Map -> Decompose -> Execute -> Verify loop that grounds code in verified structure — no invented APIs, no assumed imports, no placeholder code — with a lazy-senior-dev YAGNI ladder that deletes unnecessary code before it is written. Use when a coding task is high-stakes

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

8-bit-orbit-video-template

Hyperframes-based video template for retro pixel deck motion design. Use when users want a high-fidelity, multi-scene HTML-to-video composition with advanced transitions, interactive preview controls, and ready-to-render default style.

bdi-mental-states

This skill should be used when modeling agent mental states with BDI concepts: beliefs, desires, intentions, RDF-to-belief transformations, rational agency traces, cognitive agents, BDI ontologies, and neuro-symbolic AI integration.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/bdi-mental-states ↗ · ⭐ 给作者加星

context-compression

This skill should be used when long-running agent sessions need context compression, structured summarization, compaction, token-per-task optimization, or durable handoff summaries that preserve decisions, files, risks, and next actions.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-compression ↗ · ⭐ 给作者加星

context-fundamentals

This skill should be used to explain or reason about the foundational concepts of context engineering: what context is, the anatomy of a context window, how attention mechanics work, the U-shaped attention curve, why context quality matters more than quantity, and the mental models needed to interpr

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-fundamentals ↗ · ⭐ 给作者加星

context-optimization

This skill should be used for improving context efficiency: context budgeting, observation masking, prefix or KV-cache strategy, partitioning, token-cost reduction, retrieval scoping, and extending effective context capacity without lowering answer quality.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/context-optimization ↗ · ⭐ 给作者加星

filesystem-context

This skill should be used when agent work needs file-backed context: durable scratchpads, tool-output offloading, just-in-time discovery, cross-agent handoff files, filesystem memory, or cleanup policies for context stored outside the prompt.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/filesystem-context ↗ · ⭐ 给作者加星

harness-engineering

This skill should be used when designing autonomous agent harnesses: research loops, evaluation scaffolds, locked and editable surfaces, durable logs, novelty gates, pruning, rollback, PR preparation, and human approval boundaries.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/harness-engineering ↗ · ⭐ 给作者加星

latent-briefing

This skill should be used when the user asks to "share memory between agents", "KV cache compaction for multi-agent", "orchestrator worker context", "latent briefing", "reduce worker tokens", "cross-agent memory without summarization", or discusses Attention Matching compaction, recursive language m

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/latent-briefing ↗ · ⭐ 给作者加星

long-horizon-prompting

This skill should be used when writing, enhancing, or evaluating the launch prompt for a long-running autonomous agent or a parallel multi-agent orchestration attacking a hard problem: pseudo-formal task briefs that define terms and an exact success predicate linguistically, enumerate non-counting o

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/long-horizon-prompting ↗ · ⭐ 给作者加星

memory-systems

This skill should be used for persistent semantic memory in agent systems: cross-session knowledge retention, entity tracking, temporal validity, graph or vector retrieval, memory consolidation, and memory benchmark selection. Route file-backed scratchpads to filesystem-context, handoff summaries to

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/memory-systems ↗ · ⭐ 给作者加星

multi-agent-patterns

This skill should be used when designing multi-agent systems that need context isolation, supervisor or swarm coordination, explicit handoffs, parallel execution, or a decision on whether multiple agents are justified.

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/multi-agent-patterns ↗ · ⭐ 给作者加星

self-improvement-loops

This skill should be used when the harness, scaffold, workflow, or optimizer itself is the optimization target: recursive self-improvement (RSI) loops, meta-harnesses, self-improving harnesses that mine their own failures and propose bounded edits, evolutionary or population-based search over agent

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/self-improvement-loops ↗ · ⭐ 给作者加星

tool-design

This skill should be used for the tool-interface layer of an agent system specifically: writing tool descriptions agents can route on, designing tool schemas and response formats, naming conventions, actionable error recovery messages, MCP server design, tool-set consolidation, and deciding when to

来源: muratcankoylan/Agent-Skills-for-Context-Engineering/tree/main/skills/tool-design ↗ · ⭐ 给作者加星

agent-creator

Use this agent when the user asks to "create an agent", "generate an agent", "build a new agent", "make me an agent that...", or describes agent functionality they need. Trigger when user wants to create autonomous agents for plugins. Examples:

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

agent-decision-receipts

Mint a tamper-evident, post-quantum-signed receipt for a consequential agent action (deploy, delete, pay, grant-access, model decision) so it can be verified later from the certificate alone. Use when an autonomous agent takes a side-effecting action that may need to be proven later, or when satisfy

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

agent-development

This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

agent-harness-construction

Design and optimize AI agent action spaces, tool definitions, and observation formatting for higher completion rates.

来源: affaan-m/ECC/tree/main/skills/agent-harness-construction ↗ · ⭐ 给作者加星

agent-sdk-verifier-py

Use this agent to verify that a Python Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a Python Agent SDK app has been created or modified.

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

agent-sdk-verifier-ts

Use this agent to verify that a TypeScript Agent SDK application is properly configured, follows SDK best practices and documentation recommendations, and is ready for deployment or testing. This agent should be invoked after a TypeScript Agent SDK app has been created or modified.

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

agent-sort

Legacy slash-entry shim for the agent-sort skill. Prefer the skill directly.

agent-workflow-designer

Design production-grade multi-agent workflows with clear pattern choice (sequential, parallel, hierarchical), handoff contracts, failure handling, and cost/context controls. Use when architecting a multi-step agent pipeline, choosing between single-agent vs multi-agent approaches, or refactoring an

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

agenthub

Multi-agent collaboration plugin that spawns N parallel subagents competing on the same task via git worktree isolation. Agents work independently, results are evaluated by metric or LLM judge, and the best branch is merged. Use when: user wants multiple approaches tried in parallel — code optimizat

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

agentic-engineering

Operate as an agentic engineer using eval-first execution, decomposition, and cost-aware model routing.

来源: affaan-m/ECC/tree/main/skills/agentic-engineering ↗ · ⭐ 给作者加星

agentic-os

Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases.

来源: affaan-m/ECC/tree/main/skills/agentic-os ↗ · ⭐ 给作者加星

ai-first-engineering

Engineering operating model for teams where AI agents generate a large share of implementation output.

来源: affaan-m/ECC/tree/main/skills/ai-first-engineering ↗ · ⭐ 给作者加星

ai-slop-cleaner

Clean AI-generated code slop with a regression-safe, deletion-first workflow and optional reviewer-only mode

andreessen

Marc Andreessen-mode decision and productivity skill. A blunt, market-first operator that pressure-tests ideas, ventures, features, and career bets through Andreessen's actual frameworks — market dominates team and product; the only milestone that matters is product/market fit; bias to build over de

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

apple-hig

Apple Human Interface Guidelines as 14 agent skills covering platforms, foundations, components, patterns, inputs, and technologies for iOS, macOS, visionOS, watchOS, and tvOS.

arquiteto-de-empresa

Company Architect: builds a business from scratch as an OKF (Open Knowledge Format) bundle — a tree of version-controllable .md files with frontmatter type, links forming a graph, and reserved index.md/log.md, readable by humans and agents. Guides the founder through a 12-phase interview (foundation

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

artifacts-builder

Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui).

来源: ComposioHQ/awesome-claude-skills ↗ · ⭐ 给作者加星

ask-matt

Ask which skill or flow fits your situation. A router over the skills in this repo.

来源: mattpocock/skills/tree/main/skills/engineering/ask-matt ↗ · ⭐ 给作者加星

aura-asset-images

Use when you need high-quality stock-style images from Aura Assets (aura.build/assets) similar to Unsplash for design mockups and marketing: backgrounds, abstract wallpapers, architecture, portraits, and headshots. Includes a workflow for searching by tag on aura.build/assets and returns 5 real imag

来源: MengTo/Skills ↗ · ⭐ 给作者加星

autonomous-agent-harness

Transform Claude Code into a fully autonomous agent system with persistent memory, scheduled operations, computer use, and task queuing. Replaces standalone agent frameworks (Hermes, AutoGPT) by leveraging Claude Code's native crons, dispatch, MCP tools, and memory. Use when the user wants continuous autonomous operation, scheduled tasks, or a self-directing agent loop.

来源: affaan-m/ECC/tree/main/skills/autonomous-agent-harness ↗ · ⭐ 给作者加星

autonomous-loops

Patterns and architectures for autonomous Claude Code loops — from simple sequential pipelines to RFC-driven multi-agent DAG systems.

来源: affaan-m/ECC/tree/main/skills/autonomous-loops ↗ · ⭐ 给作者加星

autopilot

Full autonomous execution from idea to working code

autoplan

Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with auto-decisions using 6 decision principles. Surfaces taste decisions (close approaches, borderline scope, codex disagreements) at a final approval gate. One command, fully reviewed

来源: garrytan/gstack ↗ · ⭐ 给作者加星

aws-solution-architect

Design AWS architectures for startups using serverless patterns and IaC templates. Use when asked to design serverless architecture, create CloudFormation templates, optimize AWS costs, set up CI/CD pipelines, or migrate to AWS. Covers Lambda, API Gateway, DynamoDB, ECS, Aurora, and cost optimizatio

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

azure-cloud-architect

Design Azure architectures for startups and enterprises. Use when asked to design Azure infrastructure, create Bicep/ARM templates, optimize Azure costs, set up Azure DevOps pipelines, or migrate to Azure. Covers AKS, App Service, Azure Functions, Cosmos DB, and cost optimization.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

blueprint

Turn a one-line objective into a step-by-step construction plan for multi-session, multi-agent engineering projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review gate, dependency graph, parallel step detection, anti-pattern catalog, a

来源: affaan-m/ECC/tree/main/skills/blueprint ↗ · ⭐ 给作者加星

board

Read, write, and browse the AgentHub message board for agent coordination. Use when the user runs /hub:board or asks to post, read, or inspect coordination messages between competing AgentHub agents.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

board-meeting

Multi-agent board meeting protocol for strategic decisions. Runs a structured 6-phase deliberation: context loading, independent C-suite contributions (isolated, no cross-pollination), critic analysis, synthesis, founder review, and decision extraction. Use when the user invokes /cs:boardroom, calls

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

boardroom

/cs:boardroom <brief> — 6-phase multi-role deliberation across the C-suite with Phase 2 isolation, critic pre-screen, and synthesis. Outputs a board memo. Use when a decision spans multiple executive domains — e.g. a pricing change touching finance, positioning, and product, or a raise-vs-cut runway

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

brief

/cs:brief <topic> — Generate a one-page strategy brief from an office-hours intake. First step in the strategic sprint pipeline. Use when a strategic question needs to be framed before boardroom deliberation — e.g. locking options, assumptions, and success criteria for a pricing change or a market-e

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

business-growth-skills

Router/index for the 4 business & growth skills bundled in this plugin: customer-success-manager (health scoring, churn risk, expansion), sales-engineer (RFP analysis, competitive matrices, PoC planning), revenue-operations (pipeline, forecast accuracy, GTM efficiency), and contract-and-proposal-wri

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

c-level-agents

Founder-mode executive team. 13 cs-* C-suite agents (CFO, CMO, CRO, CPO, COO, CHRO, CISO, GC, CDO, CAIO, CCO, VPE, Chief of Staff) and 21 /cs:* slash commands for forcing-question office hours, multi-role boardroom deliberation, strategic sprint pipeline, and meta routing. Use when the founder needs

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

c-level-skills

Index and router for the C-level advisory bundle: 33 skills covering 14 C-suite roles, orchestration, cross-cutting capabilities, and culture. Use when exploring what the c-level-advisor bundle contains, deciding which advisor skill fits a question, or finding the entry points (cs-onboard interview,

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

campaign-analytics

Analyzes campaign performance with multi-touch attribution, funnel conversion analysis, and ROI calculation for marketing optimization. Use when analyzing marketing campaigns, ad performance, attribution models, conversion rates, or calculating marketing ROI, ROAS, CPA, and campaign metrics across c

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

cancel

Cancel any active OMC mode (autopilot, ralph, ultrawork, ultraqa, swarm, ultrapilot, pipeline, team)

cavecrew

Decision guide for delegating to caveman-style subagents. Tells the main thread WHEN to spawn `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit), or `cavecrew-reviewer` (diff review) instead of doing the work inline or using vanilla `Explore`. Subagent output is caveman-compressed so the tool-result injected back into main context is ~60% smaller — main context lasts longer across long sessions. Trigger: "delegate to subagent", "use cavecrew", "spawn investigator/builder/reviewer", "save context", "compressed agent output".

来源: JuliusBrussee/caveman/tree/main/skills/cavecrew ↗ · ⭐ 给作者加星

caveman

Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less toke

来源: x77xdavid-prog/ponytail ↗ · ⭐ 给作者加星

caveman-commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

来源: JuliusBrussee/caveman/tree/main/skills/caveman-commit ↗ · ⭐ 给作者加星

caveman-compress

Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as FILE.original.md. Trigger: /caveman-compress FILEPATH or "compress memory file"

来源: JuliusBrussee/caveman/tree/main/skills/caveman-compress ↗ · ⭐ 给作者加星

ccg

Claude-Codex-Gemini tri-model orchestration via /ask codex + /ask gemini, then Claude synthesizes results

cco-review

/cs:cco-review <plan> — Retention-obsessed Chief Customer Officer interrogation of any plan that touches customer retention, segmentation, CS team sizing, or CS team hiring. Use when gross retention is slipping, before approving CSM headcount, or when deciding which customer segments to keep or fire

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

cdo-review

/cs:cdo-review <plan> — Decision-driven Chief Data Officer interrogation of any plan that touches training data, data architecture, data productization, or data team hiring. Use when validating training-data rights before model work, choosing warehouse vs lakehouse vs mesh, or valuing data assets fo

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

chief-ai-officer-advisor

Chief AI Officer advisory for startups: model build-vs-buy decisions (API vs fine-tune vs in-house), AI risk classification under EU AI Act + US state patchwork, AI cost economics (API-to-self-hosted breakeven), and AI team org evolution. Use when deciding whether to call an API or fine-tune, classi

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

chief-customer-officer-advisor

Chief Customer Officer advisory for startups: retention decomposition (gross retention vs NRR honesty, churn root-cause taxonomy), customer segmentation strategy (differential investment across tiers + ICP fit scoring), CS team coverage model (pooled vs named CSM thresholds + ratio math), and CS tea

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

chief-data-officer-advisor

Chief Data Officer advisory for startups: AI training data rights and consent provenance, data product strategy (warehouse vs lakehouse vs mesh, build-vs-buy), B2B customer-data-as-asset valuation and M&A readiness, data team org evolution. Use when deciding whether to train models on customer data,

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

chro-advisor

People leadership for scaling companies. Hiring strategy, compensation design, org structure, culture, and retention. Use when building hiring plans, designing comp frameworks, restructuring teams, managing performance, building culture, or when user mentions CHRO, HR, people strategy, talent, headc

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

ci-cd-pipeline-builder

Generate pragmatic CI/CD pipelines from detected project stack signals — fast baseline generation, repeatable checks, environment-aware deployment stages. Use when setting up CI for a new project, refactoring existing pipelines, or standardizing deployment workflows across multiple repos.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

claude-api

Anthropic Claude API patterns for Python and TypeScript. Covers Messages API, streaming, tool use, vision, extended thinking, batches, prompt caching, and Claude Agent SDK. Use when building applications with the Claude API or Anthropic SDKs.

来源: anthropics/skills ↗ · ⭐ 给作者加星

claude-devfleet

Orchestrate multi-agent coding tasks via Claude DevFleet — plan projects, dispatch parallel agents in isolated worktrees, monitor progress, and read structured reports.

来源: affaan-m/ECC/tree/main/skills/claude-devfleet ↗ · ⭐ 给作者加星

cmo-advisor

Marketing leadership for scaling companies. Brand positioning, growth model design, marketing budget allocation, and marketing org design. Use when designing brand strategy, selecting growth models (PLG vs sales-led vs community-led), allocating marketing budgets, building marketing teams, or when u

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

code-reviewer

Use this agent when you need to review code for adherence to project guidelines, style guides, and best practices. This agent should be used proactively after writing or modifying code, especially before committing changes or creating pull requests. It will check for style violations, potential issu

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

code-to-prd

Reverse-engineer any codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, state management, API integrations, and user interactions to produce business-readable documentation detailed enough for engineers or AI agents to fully reconstruct every page and endpoint

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

codebase-design

Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.

来源: mattpocock/skills/tree/main/skills/engineering/codebase-design ↗ · ⭐ 给作者加星

comment-analyzer

Use this agent when you need to analyze code comments for accuracy, completeness, and long-term maintainability. This includes (1) after generating large documentation comments or docstrings, (2) before finalizing a pull request that adds or modifies comments, (3) when reviewing existing comments fo

来源: anthropics/claude-plugins-official ↗ · ⭐ 给作者加星

commercial-forecaster

Use when building a quarterly bookings forecast, ARR projection, pipeline forecast, NRR projection, or commit/best-case/pipe-only board number — especially when the CRO needs to walk the board through funnel math + cohort ARR + per-stage conversion assumptions without the theatre of a single undefen

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

compliance-os

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across multiple frameworks. Four decisions: (1) Given a company profile, which of the 12 supported frameworks app

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

compliance-readiness

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification stage 1.

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

content-production

Full content production pipeline — takes a topic from blank page to published-ready piece. Use when you need to execute content: write a blog post, article, or guide end-to-end. Triggers: 'write a post about', 'draft an article', 'create content for', 'help me write', 'I need a blog post'. NOT for c

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

context-budget

Audits Claude Code context window consumption across agents, skills, MCP servers, and rules. Identifies bloat, redundant components, and produces prioritized token-savings recommendations.

来源: affaan-m/ECC/tree/main/skills/context-budget ↗ · ⭐ 给作者加星

continuous-agent-loop

Patterns for continuous autonomous agent loops with quality gates, evals, and recovery controls.

来源: affaan-m/ECC/tree/main/skills/continuous-agent-loop ↗ · ⭐ 给作者加星

continuous-learning-v2

Instinct-based learning system that observes sessions via hooks, creates atomic instincts with confidence scoring, and evolves them into skills/commands/agents. v2.1 adds project-scoped instincts to prevent cross-project contamination.

来源: affaan-m/ECC/tree/main/skills/continuous-learning-v2 ↗ · ⭐ 给作者加星

coo-advisor

Operations leadership for scaling companies. Process design, OKR execution, operational cadence, and scaling playbooks. Use when designing operations, setting up OKRs, building processes, scaling teams, analyzing bottlenecks, planning operational cadence, or when user mentions COO, operations, proce

来源: alirezarezvani/claude-skills ↗ · ⭐ 给作者加星

cost-aware-llm-pipeline

Cost optimization patterns for LLM API usage — model routing by task complexity, budget tracking, retry logic, and prompt caching.

来源: affaan-m/ECC/tree/main/skills/cost-aware-llm-pipeline ↗ · ⭐ 给作者加星

cost-tracking

Track and report Claude Code token usage, spending, and budgets from the local ECC cost-tracker metrics log. Use when the user asks about costs, spending, usage, tokens, budgets, or cost breakdowns by model, session, or date.

来源: affaan-m/ECC/tree/main/skills/cost-tracking ↗ · ⭐ 给作者加星