Browse Skills

container-grype.md

4

1 export container-grype

2 from "AgentSecOps/SecOpsAgentKit"

3 Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators. Use when: (1) Scanning container images and filesystems for known vulnerabilities, (2) Integrating vulnerability scanning into CI/CD pipelines with severity thresholds, (3) Analyzing SBOMs (Syft, SPDX, CycloneDX) for security risks, (4) Prioritizing remediation based on threat metrics (CVSS, EPSS, KEV), (5) Generating vulnerability reports in multiple formats (JSON, SARIF, CycloneDX) for security toolchain integration.

2026-01-05

debugger.md

4

1 export debugger

2 from "tomeraitz/dotclaude-templates"

3 Verify frontend changes by running flows in browser using Playwright MCP. Checks console logs, captures snapshots, and validates user interactions work correctly.

2026-01-05

ruby-integration.md

4

1 export ruby-integration

2 from "braintrustdata/braintrust-sdk-ruby"

3 This skill is for writing integrations to the Ruby SDK. Claude acts as the engineer implementing LLM provider or agentic framework integrations. Use when adding support for OpenAI-like providers, Anthropic-like providers, or agent frameworks. Covers TDD workflow, comprehensive testing (streaming/non-streaming/tokens/multimodal), defensive coding, MCP validation, and StandardRB compliance.

2026-01-05

k8s-security.md

4

1 export k8s-security

2 from "kcns008/cluster-code"

3 Kubernetes and OpenShift security assessment, hardening, and compliance. Use this skill when:(1) Auditing cluster or workload security posture(2) Implementing Pod Security Standards/Admission(3) Configuring RBAC roles and permissions(4) Setting up NetworkPolicies for zero-trust(5) Managing Secrets securely (encryption, external secrets)(6) Scanning images for vulnerabilities(7) Implementing OCP SecurityContextConstraints(8) Compliance checking (CIS benchmarks, SOC2, PCI-DSS)(9) Security incident investigation(10) Hardening cluster components

2026-01-05

presentation-generator.md

4

1 export presentation-generator

2 from "glebis/claude-skills"

3 Generate interactive HTML presentations with neobrutalism styling, ASCII art decorations, and Agency brand colors. Outputs HTML (interactive with navigation), PNG (individual slides via Playwright), and PDF. References brand-agency skill for colors and typography. Use when creating presentations, slide decks, pitch materials, or visual summaries.

2026-01-05

manage-react-hook-tests.md

4

1 export manage-react-hook-tests

2 from "talbenmoshe/zdr-tools"

3 Create or update test files for React hooks. Use when user asks to "create hook tests", "test useMyHook", "generate tests for hook", "update hook tests", or mentions needing tests for a React hook. Generates vitest test files with renderHook, Fake context providers, and proper test structure.

2026-01-05

sbom-syft.md

4

1 export sbom-syft

2 from "AgentSecOps/SecOpsAgentKit"

3 Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects packages across 28+ ecosystems with multi-format output support (CycloneDX, SPDX, syft-json). Enables vulnerability assessment, license compliance, and supply chain security. Use when: (1) Generating SBOMs for container images or applications, (2) Analyzing software dependencies and packages for vulnerability scanning, (3) Tracking license compliance across dependencies, (4) Integrating SBOM generation into CI/CD for supply chain security, (5) Creating signed SBOM attestations for software provenance.

2026-01-05

backend-api-patterns.md

4

1 export backend-api-patterns

2 from "duyet/duyetbot-agent"

3 Backend and API implementation patterns for scalability, security, and maintainability. Use when building APIs, services, and backend infrastructure.

2026-01-05

code-quality-workflow.md

4

1 export code-quality-workflow

2 from "NickCrew/claude-cortex"

3 Use when assessing or improving code quality, maintainability, performance, or security hygiene - provides workflows for analysis, code review, and systematic improvements with validation steps.

2026-01-05

k8s-troubleshooting.md

4

1 export k8s-troubleshooting

2 from "kcns008/cluster-code"

3 Comprehensive Kubernetes and OpenShift cluster health analysis and troubleshooting based on Popeye's issue detection patterns. Use this skill when:(1) Proactive cluster health assessment and security analysis(2) Analyzing pod/container logs for errors or issues(3) Interpreting cluster events (kubectl get events)(4) Debugging pod failures: CrashLoopBackOff, ImagePullBackOff, OOMKilled, etc.(5) Diagnosing networking issues: DNS, Service connectivity, Ingress/Route problems(6) Investigating storage issues: PVC pending, mount failures(7) Analyzing node problems: NotReady, resource pressure, taints(8) Troubleshooting OCP-specific issues: SCCs, Routes, Operators, Builds(9) Performance analysis and resource optimization(10) Security vulnerability assessment and RBAC validation(11) Configuration best practices validation(12) Reliability and high availability analysis

2026-01-05

swift-6-best-practices-guide.md

4

1 export swift-6-best-practices-guide

2 from "mosif16/codex-Skills"

3 A comprehensive guide to best practices in Swift 6+, covering architecture, concurrency, UI development, code style, dependencies, performance, and testing.

2026-01-05

testing-quality-assurance.md

4

1 export testing-quality-assurance

2 from "ikeniborn/familyBudget"

3 Автоматизация тестирования и проверки качества кода

2026-01-05

secrets-gitleaks.md

4

1 export secrets-gitleaks

2 from "AgentSecOps/SecOpsAgentKit"

3 Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.

2026-01-05

schema-e2e-validation.md

4

1 export schema-e2e-validation

2 from "terrylica/cc-skills"

3 Run Earthly E2E validation for YAML schema contracts. Use when validating YAML schema changes, testing schema contracts against live ClickHouse, or regenerating Python types, DDL, and docs from YAML. For SQL schema design and optimization, use clickhouse-architect skill instead.

2026-01-05

debugging-and-diagnosis.md

4

1 export debugging-and-diagnosis

2 from "outfitter-dev/agents"

3 Systematic debugging methodology using evidence-based investigation to identify root causes. Use when encountering bugs, errors, unexpected behavior, failing tests, or intermittent issues. Enforces four-phase framework (root cause investigation, pattern analysis, hypothesis testing, implementation) with the iron law NO FIXES WITHOUT ROOT CAUSE FIRST. Covers runtime errors, logic bugs, integration failures, and performance issues. Useful when debugging, troubleshooting, investigating failures, or when --debug flag is mentioned.

2026-01-05

devtools.md

4

1 export devtools

2 from "sanand0/scripts"

3 Use CDP at localhost:9222 to test/debug websites, automate browser tasks

2026-01-05

threat-modeling-techniques.md

4

1 export threat-modeling-techniques

2 from "NickCrew/claude-cortex"

3 Threat modeling methodologies using STRIDE, attack trees, and risk assessment for proactive security analysis. Use when designing secure systems, conducting security reviews, or identifying potential attack vectors in applications.

2026-01-05

forensics-osquery.md

4

1 export forensics-osquery

2 from "AgentSecOps/SecOpsAgentKit"

3 SQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational databases. Enables rapid evidence collection, threat hunting, and incident response across Linux, macOS, and Windows endpoints. Use when: (1) Investigating security incidents and collecting forensic artifacts, (2) Threat hunting across endpoints for suspicious activity, (3) Analyzing running processes, network connections, and persistence mechanisms, (4) Collecting system state during incident response, (5) Querying file hashes, user activity, and system configuration for compromise indicators, (6) Building detection queries for continuous monitoring with osqueryd.

2026-01-05

dev-workflows.md

4

1 export dev-workflows

2 from "NickCrew/claude-cortex"

3 Use when running builds, executing tests, or improving developer experience workflows - provides structured guidance for build/test execution and DX improvement.

2026-01-05

local-setup.md

4

1 export local-setup

2 from "toolkit-ai/magnet-mcp-server"

3 Interactive setup workflow for running the Magnet MCP server locally (project-specific, magnet-app directory only). Use when user says "local setup", "run locally", "test locally", "configure MCP", or "set up local development".

2026-01-05

python-testing-patterns.md

4

1 export python-testing-patterns

2 from "NickCrew/claude-cortex"

3 Python testing patterns and best practices using pytest, mocking, and property-based testing. Use when writing unit tests, integration tests, or implementing test-driven development in Python projects.

2026-01-05

rust-best-practices-guide.md

4

1 export rust-best-practices-guide

2 from "mosif16/codex-Skills"

3 A comprehensive guide to modern Rust best practices covering style, error handling, performance, concurrency, project organization, dependency management, documentation, testing, security, and CI.

2026-01-05

fastmcp-creator.md

4

1 export fastmcp-creator

2 from "Jamie-BitFlight/claude_skills"

3 Build Model Context Protocol (MCP) servers - comprehensive coverage of generic MCP protocol AND FastMCP framework specialization. Use when creating any MCP server (Python FastMCP preferred, TypeScript/Node also covered). Includes agent-centric design principles, evaluation creation, Pydantic/Zod validation, async patterns, STDIO/HTTP/SSE transports, FastMCP Cloud deployment, .mcpb packaging, security patterns, and mid-2025+ community practices. Standalone skill with no external dependencies.

2026-01-05

backend-passport-js.md

4

1 export backend-passport-js

2 from "petbrains/mvp-builder"

3 Authentication middleware for Express.js and Node.js applications. Use when building Express APIs that need JWT authentication, OAuth, or custom auth strategies. Provides 500+ authentication strategies. Choose Passport.js over Auth.js for Express backends, pure API servers, or when you need maximum control over auth flow.

2026-01-05