Browse Skills

generating-test-doubles.md

2

1 export generating-test-doubles

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill uses the test-doubles-generator plugin to automatically create mocks, stubs, spies, and fakes for unit testing. It analyzes dependencies in the code and generates appropriate test doubles based on the chosen testing framework, such as Jest, Sinon, or others. Use this skill when you need to generate test doubles, mocks, stubs, spies, or fakes to isolate units of code during testing. Trigger this skill by requesting test double generation or using the `/gen-doubles` or `/gd` command.

2026-01-05

testing-skills-with-subagents.md

2

1 export testing-skills-with-subagents

2 from "cipherstash/cipherpowers"

3 Use when creating or editing skills, before deployment, to verify they work under pressure and resist rationalization - applies RED-GREEN-REFACTOR cycle to process documentation by running baseline without skill, writing to address failures, iterating to close loopholes

2026-01-05

scanning-for-data-privacy-issues.md

2

1 export scanning-for-data-privacy-issues

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to automatically scan code and configuration files for potential data privacy vulnerabilities using the data-privacy-scanner plugin. It identifies sensitive data exposure, compliance violations, and other privacy-related risks. Use this skill when the user requests to "scan for data privacy issues", "check privacy compliance", "find PII leaks", "identify GDPR violations", or needs a "privacy audit" of their codebase. The skill is most effective when used on projects involving personal data, financial information, or health records.

2026-01-05

scanning-for-xss-vulnerabilities.md

2

1 export scanning-for-xss-vulnerabilities

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to automatically scan for XSS (Cross-Site Scripting) vulnerabilities in code. It is triggered when the user requests to "scan for XSS vulnerabilities", "check for XSS", or uses the command "/xss". The skill identifies reflected, stored, and DOM-based XSS vulnerabilities. It analyzes HTML, JavaScript, CSS, and URL contexts to detect potential exploits and suggests safe proof-of-concept payloads. This skill is best used during code review, security audits, and before deploying web applications to production.

2026-01-05

automating-database-backups.md

2

1 export automating-database-backups

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill automates database backups using the database-backup-automator plugin. It creates scripts for scheduled backups, compression, encryption, and restore procedures across PostgreSQL, MySQL, MongoDB, and SQLite. Use this when the user requests database backup automation, disaster recovery planning, setting up backup schedules, or creating restore procedures. The skill is triggered by phrases like "create database backup", "automate database backups", "setup backup schedule", or "generate restore procedure".

2026-01-05

managing-permissions.md

2

1 export managing-permissions

2 from "wombat9000/claude-plugins"

3 Guide for configuring Claude Code permissions in settings.json with security best practices for allow, ask, and deny rules. Use when: (1) Setting up or modifying permissions in settings.json, (2) Discussing tool permissions, access control, or security configuration, (3) User mentions allowing, blocking, or restricting specific tools or file access, (4) Configuring Bash command permissions, file access (Read/Edit/Write), or WebFetch restrictions, (5) Questions about what permissions are safe vs risky, (6) Troubleshooting permission-related errors or "permission denied" issues, (7) Reviewing security configuration or hardening Claude Code access.

2026-01-05

event-sourcing.md

2

1 export event-sourcing

2 from "daishiman/AIWorkflowOrchestrator"

3 イベントソーシングパターンの設計・実装スキル。状態変更をイベントとして記録し、イベントストリームから状態を再構築する。CQRS、スナップショット、イベントリプレイを統合的に提供。Anchors:• Domain-Driven Design (Eric Evans) / 適用: ドメインイベント設計 / 目的: 業務的に意味のあるイベント抽出• Implementing DDD (Vaughn Vernon) / 適用: イベントストア実装 / 目的: アグリゲートとイベント境界• CQRS Journey (Microsoft) / 適用: CQRS実装パターン / 目的: コマンドとクエリの分離• Event Sourcing Pattern (Martin Fowler) / 適用: 基礎パターン / 目的: 状態変更の記録と再生Trigger:Use when implementing event sourcing, designing domain events, building event stores, implementing CQRS, or requiring complete audit trails and time-travel debugging.event sourcing, cqrs, event store, domain events, aggregate, projection, snapshot, event replay

2026-01-05

playwright.md

2

1 export playwright

2 from "dashed/claude-marketplace"

3 Browser automation with Playwright for Python. Use when testing websites, taking screenshots, filling forms, scraping web content, or automating browser interactions. Triggers on browser, web testing, screenshots, selenium, puppeteer, or playwright.

2026-01-05

auditing-access-control.md

2

1 export auditing-access-control

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill enables Claude to audit access control implementations in various systems. It uses the access-control-auditor plugin to identify potential vulnerabilities and misconfigurations related to access control. Use this skill when the user asks to "audit access control", "check permissions", "assess access rights", or requests a "security review" focused on access management. It's particularly useful for analyzing IAM policies, ACLs, and other access control mechanisms in cloud environments, applications, or infrastructure. The skill helps ensure compliance with security best practices and identify potential privilege escalation paths.

2026-01-05

dependency-doctor.md

2

1 export dependency-doctor

2 from "patricio0312rev/skillset"

3 Audits project dependencies for outdated packages, duplicates, heavy/problematic libraries, security vulnerabilities, and risky version combinations. Generates prioritized reports with security, performance, and maintainability insights, upgrade paths, and safe pinning recommendations. Use when users request dependency audits, package updates, security checks, or dependency optimization.

2026-01-05

tdd-red-green-refactor.md

2

1 export tdd-red-green-refactor

2 from "daishiman/AIWorkflowOrchestrator"

3 Red-Green-Refactorサイクルを中心にTDDを実行するための専門スキル。失敗テストの設計、最小実装、リファクタを反復し、品質と速度を両立する。Anchors:• Test-Driven Development: By Example / 適用: RGRサイクル / 目的: 反復の規律• Refactoring (Martin Fowler) / 適用: 改善手順 / 目的: 振る舞い維持• xUnit Test Patterns / 適用: テスト設計 / 目的: 表現の一貫性Trigger:Use when focusing on the red-green-refactor cycle, coaching TDD execution, or reviewing cycle quality.red-green-refactor, TDD cycle, failing test, minimal implementation, refactoring

2026-01-05

code-review-checklist.md

2

1 export code-review-checklist

2 from "phrazzld/claude-config"

3 Apply comprehensive code review checklist covering purpose, design, quality, correctness, security, performance, testing, and documentation. Use when reviewing pull requests, conducting code reviews, or self-reviewing changes before committing.

2026-01-05

environment-isolation.md

2

1 export environment-isolation

2 from "daishiman/AIWorkflowOrchestrator"

3 環境分離とアクセス制御スキル。開発・ステージング・本番環境の厳格な分離、環境間Secret共有の防止、最小権限原則の徹底を提供します。Anchors:• Building Secure and Reliable Systems / 適用: Defense in Depth原則 / 目的: 多層防御設計• The Twelve-Factor App / 適用: Config要素とコードの分離 / 目的: 環境変数による設定管理• Railway Secret Management / 適用: 環境グループによるSecret分離 / 目的: 環境別SecretストアTrigger:Use when designing environment isolation strategy, managing secrets across dev/staging/prod environments,implementing access control policies, preventing cross-environment data contamination,or validating environment separation compliance.environment isolation, secret management, access control, Railway secrets, GitHub secrets, security boundaries

2026-01-05

golang.md

2

1 export golang

2 from "cosmix/claude-code-setup"

3 Go language expertise for writing idiomatic, production-quality Go code. Use for Go development, concurrency patterns, error handling, testing, and module management. Triggers: go, golang, goroutine, channel, go mod, go test, effective go.

2026-01-05

git-hooks-concepts.md

2

1 export git-hooks-concepts

2 from "daishiman/AIWorkflowOrchestrator"

3 Git Hooksの基本概念、ライフサイクル、実装パターンを提供し、コミット前のコード品質チェックとプッシュ前のテスト自動化を実現するスキル。Anchors:• Pro Git (Scott Chacon) / 適用: Git Hooksのライフサイクル理解 / 目的: クライアント/サーバー側フックの適切な選択• Continuous Delivery (Jez Humble) / 適用: 自動化パイプライン設計 / 目的: 品質ゲートの段階的実装Trigger:Use when implementing Git hooks for pre-commit code quality checks, pre-push test execution, or commit message validation.pre-commit, pre-push, git hooks, husky, lint-staged, conventional commits

2026-01-05

matrix-builds.md

2

1 export matrix-builds

2 from "daishiman/AIWorkflowOrchestrator"

3 GitHub Actionsマトリックスビルド戦略設計・最適化スキル。複数OS、バージョン、環境での並列テストを実現。Anchors:• GitHub Actions Documentation / 適用: strategy.matrix / 目的: 並列CI/CD• GitHub Actions Workflow Syntax / 適用: include/exclude / 目的: 条件付きビルドTrigger:Use when configuring matrix builds, multi-environment testing, CI parallelization,dynamic matrix generation, or optimizing max-parallel settings.

2026-01-05

test-validator.md

2

1 export test-validator

2 from "masanao-ohba/claude-manifests"

3 Validates PHP test files for CakePHP projects, ensuring compliance with testing standards including proper documentation format, Configure::read usage, and avoiding prohibited patterns

2026-01-05

tdd-enforcement-algorithm.md

2

1 export tdd-enforcement-algorithm

2 from "cipherstash/cipherpowers"

3 Algorithmic decision tree enforcing test-first development via boolean conditions instead of imperatives

2026-01-05

implementing-backup-strategies.md

2

1 export implementing-backup-strategies

2 from "jeremylongshore/claude-code-plugins-nixtla"

3 This skill implements backup strategies for databases and applications. It generates configuration files and setup code to ensure data protection and disaster recovery. Use this skill when the user requests to "implement backup strategy", "configure backups", "setup data recovery", or needs help with "backup automation". The skill provides production-ready configurations, best practices, and multi-platform support for database and application backups. It focuses on security and scalability.

2026-01-05

evaluation-harness.md

2

1 export evaluation-harness

2 from "patricio0312rev/skillset"

3 Builds repeatable evaluation systems with golden datasets, scoring rubrics, pass/fail thresholds, and regression reports. Use for "LLM evaluation", "testing AI systems", "quality assurance", or "model benchmarking".

2026-01-05

security-review.md

2

1 export security-review

2 from "duc01226/EasyPlatform"

3 Use when reviewing code for security vulnerabilities, implementing authorization, or ensuring data protection.

2026-01-05

adversarial-code-review.md

2

1 export adversarial-code-review

2 from "third774/dotfiles"

3 Review code through hostile perspectives to find bugs, security issues, and unintended consequences the author missed. Use when reviewing PRs, auditing codebases, or before critical deployments.

2026-01-05

systematic-debugging.md

2

1 export systematic-debugging

2 from "third774/dotfiles"

3 Four-phase debugging framework with root cause tracing - understand the source before proposing fixes. Use when investigating bugs, errors, unexpected behavior, or failed tests.

2026-01-05

stack-audit.md

2

1 export stack-audit

2 from "Euda1mon1a/Autonomous-Assignment-Program-Manager"

3 Comprehensive stack health audit for codebase and infrastructure. Runs 10 health checks covering frontend, backend, migrations, Docker, API integrity, and backup status. Use routinely to prevent "time loops" from accumulated issues.

2026-01-05