Browse Skills

argocd-audit.md

4

1 export argocd-audit

2 from "huseyindeniz/gitops-lab"

3 Audits ArgoCD Application manifests and raw K8s resources for anti-patterns, security issues, and best practice violations. Use when asked to audit, review, or check ArgoCD/GitOps quality. Generates a comprehensive report under reports/YYYY-MM-DD/argocd-audit.md. (project)

2026-01-05

story-based-framing.md

4

1 export story-based-framing

2 from "Jamie-BitFlight/claude_skills"

3 This skill should be used when describing patterns or anti-patterns for detection by LLM agents across any domain (code analysis, business processes, security audits, UX design, data quality, medical diagnosis, etc.). Uses narrative storytelling structure ("The Promise" → "The Betrayal" → "The Consequences" → "The Source") to achieve 70% faster pattern identification compared to checklist or formal specification approaches. Triggers when creating pattern descriptions for any systematic analysis, detection tasks, or when delegating pattern-finding to sub-agents.

2026-01-05

security-reporter.md

4

1 export security-reporter

2 from "jpoley/jp-spec-kit"

3 Use when generating comprehensive security audit reports, analyzing security scan results, calculating security posture, or creating OWASP Top 10 compliance assessments. Invoked for security reporting, vulnerability aggregation, and remediation planning.

2026-01-05

microsim-standardization.md

4

1 export microsim-standardization

2 from "dmccreary/claude-skills"

3 This skill standardizes MicroSim directories by validating structure, metadata, documentation, and required components against a comprehensive quality checklist. Use this when auditing or upgrading a MicroSim to ensure it meets all documentation and structural standards, including index.md formatting, metadata.json validation, iframe embeds, and p5.js editor links.

2026-01-05

fastmcp-creator.md

4

1 export fastmcp-creator

2 from "Jamie-BitFlight/claude_skills"

3 Build Model Context Protocol (MCP) servers - comprehensive coverage of generic MCP protocol AND FastMCP framework specialization. Use when creating any MCP server (Python FastMCP preferred, TypeScript/Node also covered). Includes agent-centric design principles, evaluation creation, Pydantic/Zod validation, async patterns, STDIO/HTTP/SSE transports, FastMCP Cloud deployment, .mcpb packaging, security patterns, and mid-2025+ community practices. Standalone skill with no external dependencies.

2026-01-05

k8s-security.md

4

1 export k8s-security

2 from "kcns008/cluster-code"

3 Kubernetes and OpenShift security assessment, hardening, and compliance. Use this skill when:(1) Auditing cluster or workload security posture(2) Implementing Pod Security Standards/Admission(3) Configuring RBAC roles and permissions(4) Setting up NetworkPolicies for zero-trust(5) Managing Secrets securely (encryption, external secrets)(6) Scanning images for vulnerabilities(7) Implementing OCP SecurityContextConstraints(8) Compliance checking (CIS benchmarks, SOC2, PCI-DSS)(9) Security incident investigation(10) Hardening cluster components

2026-01-05

manage-entity-tests.md

4

1 export manage-entity-tests

2 from "talbenmoshe/zdr-tools"

3 Create or update test files for TypeScript classes that implement interfaces. Use when user asks to "create tests", "update tests", "generate test file", "fix tests", "test MyClass", or mentions needing tests for a class. Generates vitest test files with describe blocks, createClass helpers, and proper fake dependency injection.

2026-01-05

backend-api-patterns.md

4

1 export backend-api-patterns

2 from "duyet/duyetbot-agent"

3 Backend and API implementation patterns for scalability, security, and maintainability. Use when building APIs, services, and backend infrastructure.

2026-01-05

k8s-troubleshooting.md

4

1 export k8s-troubleshooting

2 from "kcns008/cluster-code"

3 Comprehensive Kubernetes and OpenShift cluster health analysis and troubleshooting based on Popeye's issue detection patterns. Use this skill when:(1) Proactive cluster health assessment and security analysis(2) Analyzing pod/container logs for errors or issues(3) Interpreting cluster events (kubectl get events)(4) Debugging pod failures: CrashLoopBackOff, ImagePullBackOff, OOMKilled, etc.(5) Diagnosing networking issues: DNS, Service connectivity, Ingress/Route problems(6) Investigating storage issues: PVC pending, mount failures(7) Analyzing node problems: NotReady, resource pressure, taints(8) Troubleshooting OCP-specific issues: SCCs, Routes, Operators, Builds(9) Performance analysis and resource optimization(10) Security vulnerability assessment and RBAC validation(11) Configuration best practices validation(12) Reliability and high availability analysis

2026-01-05

python-testing-patterns.md

4

1 export python-testing-patterns

2 from "NickCrew/claude-cortex"

3 Python testing patterns and best practices using pytest, mocking, and property-based testing. Use when writing unit tests, integration tests, or implementing test-driven development in Python projects.

2026-01-05

rust-best-practices-guide.md

4

1 export rust-best-practices-guide

2 from "mosif16/codex-Skills"

3 A comprehensive guide to modern Rust best practices covering style, error handling, performance, concurrency, project organization, dependency management, documentation, testing, security, and CI.

2026-01-05

dev-workflows.md

4

1 export dev-workflows

2 from "NickCrew/claude-cortex"

3 Use when running builds, executing tests, or improving developer experience workflows - provides structured guidance for build/test execution and DX improvement.

2026-01-05

secrets-gitleaks.md

4

1 export secrets-gitleaks

2 from "AgentSecOps/SecOpsAgentKit"

3 Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.

2026-01-05

schema-e2e-validation.md

4

1 export schema-e2e-validation

2 from "terrylica/cc-skills"

3 Run Earthly E2E validation for YAML schema contracts. Use when validating YAML schema changes, testing schema contracts against live ClickHouse, or regenerating Python types, DDL, and docs from YAML. For SQL schema design and optimization, use clickhouse-architect skill instead.

2026-01-05

debugging-and-diagnosis.md

4

1 export debugging-and-diagnosis

2 from "outfitter-dev/agents"

3 Systematic debugging methodology using evidence-based investigation to identify root causes. Use when encountering bugs, errors, unexpected behavior, failing tests, or intermittent issues. Enforces four-phase framework (root cause investigation, pattern analysis, hypothesis testing, implementation) with the iron law NO FIXES WITHOUT ROOT CAUSE FIRST. Covers runtime errors, logic bugs, integration failures, and performance issues. Useful when debugging, troubleshooting, investigating failures, or when --debug flag is mentioned.

2026-01-05

threat-modeling-techniques.md

4

1 export threat-modeling-techniques

2 from "NickCrew/claude-cortex"

3 Threat modeling methodologies using STRIDE, attack trees, and risk assessment for proactive security analysis. Use when designing secure systems, conducting security reviews, or identifying potential attack vectors in applications.

2026-01-05

devtools.md

4

1 export devtools

2 from "sanand0/scripts"

3 Use CDP at localhost:9222 to test/debug websites, automate browser tasks

2026-01-05

container-grype.md

4

1 export container-grype

2 from "AgentSecOps/SecOpsAgentKit"

3 Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators. Use when: (1) Scanning container images and filesystems for known vulnerabilities, (2) Integrating vulnerability scanning into CI/CD pipelines with severity thresholds, (3) Analyzing SBOMs (Syft, SPDX, CycloneDX) for security risks, (4) Prioritizing remediation based on threat metrics (CVSS, EPSS, KEV), (5) Generating vulnerability reports in multiple formats (JSON, SARIF, CycloneDX) for security toolchain integration.

2026-01-05

forensics-osquery.md

4

1 export forensics-osquery

2 from "AgentSecOps/SecOpsAgentKit"

3 SQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational databases. Enables rapid evidence collection, threat hunting, and incident response across Linux, macOS, and Windows endpoints. Use when: (1) Investigating security incidents and collecting forensic artifacts, (2) Threat hunting across endpoints for suspicious activity, (3) Analyzing running processes, network connections, and persistence mechanisms, (4) Collecting system state during incident response, (5) Querying file hashes, user activity, and system configuration for compromise indicators, (6) Building detection queries for continuous monitoring with osqueryd.

2026-01-05

local-setup.md

4

1 export local-setup

2 from "toolkit-ai/magnet-mcp-server"

3 Interactive setup workflow for running the Magnet MCP server locally (project-specific, magnet-app directory only). Use when user says "local setup", "run locally", "test locally", "configure MCP", or "set up local development".

2026-01-05

ruby-integration.md

4

1 export ruby-integration

2 from "braintrustdata/braintrust-sdk-ruby"

3 This skill is for writing integrations to the Ruby SDK. Claude acts as the engineer implementing LLM provider or agentic framework integrations. Use when adding support for OpenAI-like providers, Anthropic-like providers, or agent frameworks. Covers TDD workflow, comprehensive testing (streaming/non-streaming/tokens/multimodal), defensive coding, MCP validation, and StandardRB compliance.

2026-01-05

code-quality-workflow.md

4

1 export code-quality-workflow

2 from "NickCrew/claude-cortex"

3 Use when assessing or improving code quality, maintainability, performance, or security hygiene - provides workflows for analysis, code review, and systematic improvements with validation steps.

2026-01-05

using-security-architect.md

4

1 export using-security-architect

2 from "tachyon-beep/skillpacks"

3 Routes to security architecture skills - threat modeling, controls, compliance, authorization

2026-01-05

backend-passport-js.md

4

1 export backend-passport-js

2 from "petbrains/mvp-builder"

3 Authentication middleware for Express.js and Node.js applications. Use when building Express APIs that need JWT authentication, OAuth, or custom auth strategies. Provides 500+ authentication strategies. Choose Passport.js over Auth.js for Express backends, pure API servers, or when you need maximum control over auth flow.

2026-01-05