Browse Skills

auditing-access-control.md

2

1 export auditing-access-control

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to audit access control implementations in various systems. It uses the access-control-auditor plugin to identify potential vulnerabilities and misconfigurations related to access control. Use this skill when the user asks to "audit access control", "check permissions", "assess access rights", or requests a "security review" focused on access management. It's particularly useful for analyzing IAM policies, ACLs, and other access control mechanisms in cloud environments, applications, or infrastructure. The skill helps ensure compliance with security best practices and identify potential privilege escalation paths.

2026-01-05

managing-ssltls-certificates.md

2

1 export managing-ssltls-certificates

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to manage and monitor SSL/TLS certificates using the ssl-certificate-manager plugin. It is activated when the user requests actions related to SSL certificates, such as checking certificate expiry, renewing certificates, or listing installed certificates. Use this skill when the user mentions "SSL certificate", "TLS certificate", "certificate expiry", "renew certificate", or similar phrases related to SSL/TLS certificate management. The plugin can list, check, and renew certificates, providing vital information for maintaining secure connections.

2026-01-05

building-terraform-modules.md

2

1 export building-terraform-modules

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill empowers Claude to build reusable Terraform modules based on user specifications. It leverages the terraform-module-builder plugin to generate production-ready, well-documented Terraform module code, incorporating best practices for security, scalability, and multi-platform support. Use this skill when the user requests to create a new Terraform module, generate Terraform configuration, or needs help structuring infrastructure as code using Terraform. The trigger terms include "create Terraform module," "generate Terraform configuration," "Terraform module code," and "infrastructure as code."

2026-01-05

testing-deployment-implementation.md

2

1 export testing-deployment-implementation

2 from "pluginagentmarketplace/custom-plugin-angular"

3 Write unit tests for components and services, implement E2E tests with Cypress, set up test mocks, optimize production builds, configure CI/CD pipelines, and deploy to production platforms.

2026-01-05

rbac-policy-tester.md

2

1 export rbac-policy-tester

2 from "patricio0312rev/skillset"

3 Creates comprehensive permission tests ensuring RBAC doesn't regress with test matrices, CI gating, and authorization coverage. Use for "RBAC testing", "permission tests", "authorization testing", or "access control tests".

2026-01-05

checking-hipaa-compliance.md

2

1 export checking-hipaa-compliance

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to automatically check for HIPAA (Health Insurance Portability and Accountability Act) compliance issues in codebases, infrastructure configurations, and documentation. It leverages the hipaa-compliance-checker plugin to identify potential violations related to data privacy, security, and access controls. Use this skill when the user explicitly requests to "check HIPAA compliance", "scan for HIPAA violations", "assess HIPAA readiness", or similar phrases related to HIPAA audits and security best practices. It is useful for projects handling protected health information (PHI) and requiring adherence to HIPAA regulations.

2026-01-05

update-ai-models.md

2

1 export update-ai-models

2 from "rot1024/honyo"

3 Search the web for the latest AI models from Anthropic, OpenAI, and Google, then update src/models.ts with new model IDs. Use when user asks to update or add AI models.

2026-01-05

codegen-refactor.md

2

1 export codegen-refactor

2 from "nihiyama/ffq"

3 Perform refactoring using TDD starting from README + Issue (following codegen-test), aligning with existing implementation conventions, and leveraging Serena MCP semantic search/editing to improve internal quality with high performance and race-safety in mind.

2026-01-05

managing-snapshot-tests.md

2

1 export managing-snapshot-tests

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to manage and update snapshot tests using intelligent diff analysis and selective updates. It is triggered when the user asks to analyze snapshot failures, update snapshots, or manage snapshot tests in general. It helps distinguish intentional changes from regressions, selectively update snapshots, and validate snapshot integrity. Use this when the user mentions "snapshot tests", "update snapshots", "snapshot failures", or requests to run "/snapshot-manager" or "/sm". It supports Jest, Vitest, Playwright, and Storybook frameworks.

2026-01-05

encryption-key-lifecycle.md

2

1 export encryption-key-lifecycle

2 from "daishiman/AIWorkflowOrchestrator"

3 暗号化鍵のライフサイクル管理（生成、ローテーション、失効、バックアップ）のベストプラクティスを提供するスキル。Anchors:- NIST SP 800-57 / 適用: 鍵ライフサイクル全般 / 目的: 業界標準準拠- AWS KMS Best Practices / 適用: クラウド鍵管理 / 目的: クラウド実装パターン- Continuous Delivery (Jez Humble) / 適用: 自動化設計 / 目的: ローテーション自動化Trigger:Use when implementing key generation, rotation, revocation, backup strategies, or managing cryptographic key lifecycle.encryption key, key rotation, key lifecycle, key management, cryptographic keys, HSM, KMS

2026-01-05

deployment-checklist-generator.md

2

1 export deployment-checklist-generator

2 from "patricio0312rev/skillset"

3 Creates comprehensive deployment checklists with pre-deployment checks, smoke tests, verification steps, and sign-off workflows. Use for "deployment checklist", "release verification", "deployment runbook", or "production readiness".

2026-01-05

tpm-report.md

2

1 export tpm-report

2 from "urjitbhatia/tpm-mcp"

3 Generate beautiful PDF status reports from tpm-mcp project data. Creates executive-ready project status reports with progress bars, milestones, and blockers. Requires Playwright MCP for PDF generation.

2026-01-05

quality-gates-enforcer.md

2

1 export quality-gates-enforcer

2 from "patricio0312rev/skillset"

3 Enforces minimum quality thresholds in CI including code coverage, linting, type checking, and security scanning. Provides required checks, PR rules, and automated enforcement. Use for "quality gates", "CI checks", "code quality", or "PR requirements".

2026-01-05

github-actions-ci.md

2

1 export github-actions-ci

2 from "MrPointer/dotfiles"

3 GitHub Actions CI/CD guide for the dotfiles repository. Use when creating or modifying GitHub Actions workflows, adding CI/CD pipelines, setting up build/test automation, configuring matrix builds, working with artifacts, implementing E2E tests in containers, or troubleshooting workflow issues. Covers workflow patterns, security best practices, caching strategies, and multi-platform testing.

2026-01-05

dependency-auditing.md

2

1 export dependency-auditing

2 from "daishiman/AIWorkflowOrchestrator"

3 依存関係の脆弱性検出、評価、修正計画を体系化するスキル。CVSS評価と修正優先度を整理し、継続的な監査を支援する。Anchors:• CVSS v3.1 Specification / 適用: 重大度評価 / 目的: 優先度の整合性• The Pragmatic Programmer / 適用: 自動化と継続改善 / 目的: 監査の継続性• OWASP Dependency-Check / 適用: 依存監査 / 目的: 脆弱性検出の標準化Trigger:Use when auditing dependencies, evaluating vulnerability reports, prioritizing remediation, or integrating security scans into CI/CD.dependency audit, CVE, GHSA, CVSS, npm audit, pnpm audit, security scanning

2026-01-05

visual-regression-test-setup.md

2

1 export visual-regression-test-setup

2 from "Dexploarer/hyper-forge"

3 Sets up visual regression testing using Percy, Chromatic, or Playwright to catch unintended UI changes through screenshot comparison. Use when user asks to "setup visual testing", "add screenshot tests", "prevent visual bugs", or "setup Percy/Chromatic".

2026-01-05

electron-ui-patterns.md

2

1 export electron-ui-patterns

2 from "daishiman/AIWorkflowOrchestrator"

3 ElectronデスクトップアプリケーションのUI実装パターンと設計知識。BrowserWindow管理、ネイティブUI要素、フレームレスウィンドウを提供。Anchors:• Electron API / 適用: BrowserWindow・Menu・Tray / 目的: ネイティブUI実装• Don't Make Me Think / 適用: ウィンドウレイアウト / 目的: ユーザビリティ向上• Electron Security / 適用: preload・contextIsolation / 目的: セキュアなUI実装Trigger:Use when configuring BrowserWindow, implementing custom titlebars, designing native menus, developing system tray apps, or building frameless windows.BrowserWindow, Menu, Tray, frameless window, custom titlebar, native UI

2026-01-05

checking-infrastructure-compliance.md

2

1 export checking-infrastructure-compliance

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill allows Claude to check infrastructure compliance against industry standards such as SOC2, HIPAA, and PCI-DSS. It analyzes existing infrastructure configurations and reports on potential compliance violations. Use this skill when the user asks to assess compliance, identify security risks related to compliance, or generate reports on compliance status for SOC2, HIPAA, or PCI-DSS. Trigger terms include: "compliance check", "SOC2 compliance", "HIPAA compliance", "PCI-DSS compliance", "compliance report", "infrastructure compliance", "security audit", "assess compliance".

2026-01-05

integration-test-builder.md

2

1 export integration-test-builder

2 from "patricio0312rev/skillset"

3 Creates integration tests for API endpoints with database flows, including test harness setup, fixtures, setup/teardown, database seeding, and CI-friendly strategies. Use for "integration testing", "API tests", "database tests", or "test harness".

2026-01-05

security-patterns.md

2

1 export security-patterns

2 from "andyngdz/exogen"

3 Use when working with Electron - IPC security, renderer isolation, Node API access

2026-01-05

api-testing.md

2

1 export api-testing

2 from "ChuDiRen/AI-agent-testing-platform"

3 使用 pytest + httpx 进行 API 接口自动化测试的工具包。支持 RESTful API 测试、JWT 认证、参数化测试、断言验证以及测试报告生成。

2026-01-05

testing-anti-patterns.md

2

1 export testing-anti-patterns

2 from "robertpelloni/workspace"

3 Never test mock behavior. Never add test-only methods to production classes. Understand dependencies before mocking.

2026-01-05

performance-testing.md

2

1 export performance-testing

2 from "cosmix/claude-code-setup"

3 Performance testing guidance including load testing with k6, locust, and artillery, benchmarking strategies, profiling techniques, metrics analysis, performance budgets, and bottleneck identification. Use when setting up performance tests, analyzing system behavior under load, or optimizing application performance. Trigger keywords: performance testing, load testing, k6, locust, artillery, benchmarking, profiling, latency, throughput, performance budget, bottleneck, stress testing, scalability testing.

2026-01-05

custom-hooks-patterns.md

2

1 export custom-hooks-patterns

2 from "daishiman/AIWorkflowOrchestrator"

3 Reactカスタムフックの設計・抽出・合成・テストの実務指針を提供するスキル。再利用性と保守性を高めるための判断基準を整理する。Anchors:• Learning React / 適用: フック設計の基本 / 目的: 再利用可能な設計• React公式ドキュメント / 適用: フックルール / 目的: 安全な実装• Refactoring / 適用: 抽出判断 / 目的: 重複削減と責務分離Trigger:Use when designing custom React hooks, extracting reusable logic, composing hooks, or validating hook usage patterns.custom hooks, hook composition, hook extraction, hook testing, hook design

2026-01-05