Browse Skills

ash-authentication.md

4

1 export ash-authentication

2 from "forest/dotfiles"

3 AshAuthentication guidelines for implementing authentication in Ash Framework. Use when adding password, magic link, API key, or OAuth2 authentication strategies. Covers token configuration, UserIdentity resources, confirmation add-ons, and customizing authentication actions. Never hardcode credentials.

2026-01-05

lease-compliance-auditor.md

4

1 export lease-compliance-auditor

2 from "reggiechan74/vp-real-estate"

3 Expert in lease compliance monitoring and obligation tracking. Use when auditing insurance requirements, verifying environmental compliance, checking use clause adherence, or monitoring covenant compliance. Key terms include insurance audit, CGL requirements, environmental compliance, use clause violations, covenant breach, notice requirements, cure periods

2026-01-05

frontend-playwright.md

4

1 export frontend-playwright

2 from "petbrains/mvp-builder"

3 Visual QA gate for frontend code. ALWAYS use before delivering any UI changes - navigate, screenshot, verify console is error-free. Use for: responsive testing across viewports, form/interaction testing, debugging hydration and render issues. Catches visual bugs before users see them.

2026-01-05

claude-skillkit.md

4

1 export claude-skillkit

2 from "rfxlamia/claude-skillkit"

3 Professional skill creation with research-driven workflow and automated validation.USE WHEN: Creating new skills, validating existing skills, deciding between Skills vs Subagents, migrating documents to skills, or running individual validation tools.PRIMARY TRIGGERS: "create skill" = Full creation (12 steps with research + execution planning) "validate skill" = Validation workflow (steps 3-8) "Skills vs Subagents" = Decision workflow (step 0) "convert doc to skill" = Migration workflow "estimate tokens" = Token optimization "security scan" = Security auditWORKFLOW COMPLIANCE: Structured workflows with validation checkpoints. Research phase (Step 1c-1d) ensures skills based on proven approaches.DIFFERENTIATOR: Research-driven creation. Web search (3-5 queries) before building. Multi-proposal generation. 9 automation scripts. Quality 9.0+/10.REUSED: Anthropic's init_skill.py and package_skill.py (production-tested).

2026-01-05

dast-zap.md

4

1 export dast-zap

2 from "AgentSecOps/SecOpsAgentKit"

3 Dynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API testing, and OWASP Top 10 vulnerability detection. Use when: (1) Performing runtime security testing of web applications and APIs, (2) Detecting vulnerabilities like XSS, SQL injection, and authentication flaws in deployed applications, (3) Automating security scans in CI/CD pipelines with Docker containers, (4) Conducting authenticated testing with session management, (5) Generating security reports with OWASP and CWE mappings for compliance.

2026-01-05

argocd-audit.md

4

1 export argocd-audit

2 from "huseyindeniz/gitops-lab"

3 Audits ArgoCD Application manifests and raw K8s resources for anti-patterns, security issues, and best practice violations. Use when asked to audit, review, or check ArgoCD/GitOps quality. Generates a comprehensive report under reports/YYYY-MM-DD/argocd-audit.md. (project)

2026-01-05

story-based-framing.md

4

1 export story-based-framing

2 from "Jamie-BitFlight/claude_skills"

3 This skill should be used when describing patterns or anti-patterns for detection by LLM agents across any domain (code analysis, business processes, security audits, UX design, data quality, medical diagnosis, etc.). Uses narrative storytelling structure ("The Promise" → "The Betrayal" → "The Consequences" → "The Source") to achieve 70% faster pattern identification compared to checklist or formal specification approaches. Triggers when creating pattern descriptions for any systematic analysis, detection tasks, or when delegating pattern-finding to sub-agents.

2026-01-05

debugger.md

4

1 export debugger

2 from "tomeraitz/dotclaude-templates"

3 Verify frontend changes by running flows in browser using Playwright MCP. Checks console logs, captures snapshots, and validates user interactions work correctly.

2026-01-05

secure-coding-practices.md

4

1 export secure-coding-practices

2 from "NickCrew/claude-cortex"

3 Secure coding practices and defensive programming patterns for building security-first applications. Use when implementing authentication, handling user input, managing sensitive data, or conducting secure code reviews.

2026-01-05

testing-guru.md

4

1 export testing-guru

2 from "Jackela/Novel-Engine"

3 Testing specialist for Novel-Engine. Knows exact commands for running backend and frontend tests.

2026-01-05

network-netcat.md

4

1 export network-netcat

2 from "AgentSecOps/SecOpsAgentKit"

3 Network utility for reading and writing data across TCP/UDP connections, port scanning, file transfers, and backdoor communication channels. Use when: (1) Testing network connectivity and port availability, (2) Creating reverse shells and bind shells for authorized penetration testing, (3) Transferring files between systems in restricted environments, (4) Banner grabbing and service enumeration, (5) Establishing covert communication channels, (6) Testing firewall rules and network segmentation.

2026-01-05

qwen-roadmap-auditor-prototype.md

4

1 export qwen-roadmap-auditor-prototype

2 from "Foundup/Foundups-Agent"

3 Qwen Roadmap Auditor (Prototype)

2026-01-05

objection-handling-expert.md

4

1 export objection-handling-expert

2 from "reggiechan74/vp-real-estate"

3 Expert in analyzing and responding to tenant objections in commercial lease negotiations. Use when tenant objects to rent as above market, requests higher TI allowance, demands more free rent, pushes back on security deposit or personal guarantee, claims market is soft, cites competitive properties, requests shorter term or early termination rights, or challenges any lease provision. Expert in classifying objection types (financial, operational, market-based, risk-based), distinguishing legitimate concerns from negotiating tactics, and crafting evidence-based responses. Key terms include rent objection, TI allowance, free rent, market comparables, competitive pressure, tactical objection, legitimate concern, evidence-based response, value-creating solution

2026-01-05

using-technical-writer.md

4

1 export using-technical-writer

2 from "tachyon-beep/skillpacks"

3 Router for documentation tasks - routes to ADRs, APIs, runbooks, security docs, or governance docs

2026-01-05

crack-hashcat.md

4

1 export crack-hashcat

2 from "AgentSecOps/SecOpsAgentKit"

3 Advanced password recovery and hash cracking tool supporting multiple algorithms and attack modes. Use when: (1) Performing authorized password auditing and security assessments, (2) Recovering passwords from captured hashes in forensic investigations, (3) Testing password policy strength and complexity, (4) Validating encryption implementations, (5) Conducting security research on cryptographic hash functions, (6) Demonstrating password weakness in penetration testing reports.

2026-01-05

hono-dev.md

4

1 export hono-dev

2 from "outfitter-dev/agents"

3 Type-safe API development with Hono framework. Covers route chaining for type inference, factory patterns, Zod OpenAPI integration, error handling, RPC client, and testing patterns. Use when building APIs with Hono, using hc client, or when Hono, RPC, OpenAPI, or --hono flag mentioned.

2026-01-05

test-generator.md

4

1 export test-generator

2 from "benshapyro/cadre-devkit-claude"

3 Generates Jest or Pytest tests following Ben's testing standards. Use when creating tests, adding test coverage, writing unit tests, mocking dependencies, or when user mentions testing, test cases, Jest, Pytest, fixtures, assertions, or coverage.

2026-01-05

using-security-architect.md

4

1 export using-security-architect

2 from "tachyon-beep/skillpacks"

3 Routes to security architecture skills - threat modeling, controls, compliance, authorization

2026-01-05

ruby-integration.md

4

1 export ruby-integration

2 from "braintrustdata/braintrust-sdk-ruby"

3 This skill is for writing integrations to the Ruby SDK. Claude acts as the engineer implementing LLM provider or agentic framework integrations. Use when adding support for OpenAI-like providers, Anthropic-like providers, or agent frameworks. Covers TDD workflow, comprehensive testing (streaming/non-streaming/tokens/multimodal), defensive coding, MCP validation, and StandardRB compliance.

2026-01-05

devtools.md

4

1 export devtools

2 from "sanand0/scripts"

3 Use CDP at localhost:9222 to test/debug websites, automate browser tasks

2026-01-05

dev-workflows.md

4

1 export dev-workflows

2 from "NickCrew/claude-cortex"

3 Use when running builds, executing tests, or improving developer experience workflows - provides structured guidance for build/test execution and DX improvement.

2026-01-05

fastmcp-creator.md

4

1 export fastmcp-creator

2 from "Jamie-BitFlight/claude_skills"

3 Build Model Context Protocol (MCP) servers - comprehensive coverage of generic MCP protocol AND FastMCP framework specialization. Use when creating any MCP server (Python FastMCP preferred, TypeScript/Node also covered). Includes agent-centric design principles, evaluation creation, Pydantic/Zod validation, async patterns, STDIO/HTTP/SSE transports, FastMCP Cloud deployment, .mcpb packaging, security patterns, and mid-2025+ community practices. Standalone skill with no external dependencies.

2026-01-05

swift-6-best-practices-guide.md

4

1 export swift-6-best-practices-guide

2 from "mosif16/codex-Skills"

3 A comprehensive guide to best practices in Swift 6+, covering architecture, concurrency, UI development, code style, dependencies, performance, and testing.

2026-01-05

backend-master.md

4

1 export backend-master

2 from "petbrains/mvp-builder"

3 Master skill for TypeScript backend development. Decision framework for APIs (tRPC/REST), authentication (Auth.js/Passport), database (Prisma), validation (Zod), logging (Pino), testing (Vitest), and deployment (Docker). Routes to specialized skills for implementation. Use as entry point for any backend task.

2026-01-05