Skills by aj-geddes

162 skills available

ios-swift-development
Develop native iOS apps with Swift. Covers MVVM architecture, SwiftUI, URLSession for networking, Combine for reactive programming, and Core Data persistence.
Verified
256 installs
nodejs-express-server
This skill provides example code to build Express.js REST APIs with routing, JWT auth, and Sequelize-backed PostgreSQL integration. It reads environment variables like `process.env.JWT_SECRET` and `process.env.DB_PASS` and uses `postgres://user:pass@localhost/db` for database connections.
Verified
238 installs
rest-api-design
Design RESTful APIs following best practices for resource modeling, HTTP methods, status codes, versioning, and documentation. Use when creating new APIs, designing endpoints, or improving existing API architecture.
Verified
223 installs
markdown-documentation
This skill provides guidelines, templates, and examples for writing Markdown documentation and READMEs. It includes executable shell commands such as `git clone https://github.com/user/repo.git` and `npm install package-name`, which instruct running local commands and fetching resources from external hosts.
Review
184 installs
android-kotlin-development
Develop native Android apps with Kotlin. Covers MVVM with Jetpack, Compose for modern UI, Retrofit for API calls, Room for local storage, and navigation architecture.
Verified
184 installs
css-architecture
Organize CSS using BEM, SMACSS, and CSS-in-JS patterns. Use when building scalable, maintainable styling systems with proper naming conventions.
Verified
167 installs
ansible-automation
This skill provides Ansible playbooks, roles, inventory, and an `ansible-deploy.sh` script for infrastructure automation and application deployment. It executes local shell commands via `ansible-playbook`, accesses credentials such as `~/.ssh/id_rsa` and writes `/.env` files, and calls external hosts like `https://github.com/myorg/myapp.git` and `https://download.docker.com`.
Review
155 installs
flutter-development
Build beautiful cross-platform mobile apps with Flutter and Dart. Covers widgets, state management with Provider/BLoC, navigation, API integration, and material design.
Verified
155 installs
architecture-diagrams
Create system architecture diagrams using Mermaid, PlantUML, C4 model, flowcharts, and sequence diagrams. Use when documenting architecture, system design, data flows, or technical workflows.
Verified
150 installs
nginx-configuration
This skill configures Nginx for reverse proxying, load balancing, SSL/TLS, caching, and monitoring. It includes a deploy script (`nginx-deploy.sh`) that runs `nginx -t`, `systemctl`, and `curl`, and references network hosts like `backend1.internal:8080` and `api1.internal:3000`.
Review
147 installs
user-story-writing
Write effective user stories that capture requirements from the user's perspective. Create clear stories with detailed acceptance criteria to guide development and define done.
Verified
147 installs
api-security-hardening
This skill provides API security hardening guidance with example configurations for Node/Express, FastAPI, and Nginx. It references `process.env.JWT_SECRET`, includes domains such as `https://example.com` and `api.example.com`, and shows `proxy_pass http://backend:3000`.
Verified
147 installs
mobile-app-testing
Comprehensive mobile app testing strategies for iOS and Android. Covers unit tests, UI tests, integration tests, performance testing, and test automation with Detox, Appium, and XCTest.
Verified
146 installs
aws-lambda-functions
This skill provides examples and templates for creating and deploying AWS Lambda functions. It includes explicit shell commands (e.g., `aws`, `zip`, `npm`) and network calls to AWS (e.g., `aws lambda`, `aws iam`, `https://docs.aws.amazon.com/lambda/`), which are purpose-aligned.
Verified
143 installs
docker-containerization
This skill provides Docker containerization guidance for building optimized, secure images and docker-compose services. It contains executable commands like `docker build -t myapp:1.0.0 .` and examples that store credentials in environment variables such as `POSTGRES_PASSWORD` and `DATABASE_URL`.
Review
133 installs
fastapi-development
Provides example FastAPI scaffolding with async routes, Pydantic models, SQLAlchemy integration, and JWT auth. Reads `DATABASE_URL` and `SECRET_KEY` from the environment and initializes a DB engine via `create_async_engine`, which can connect to external databases.
Verified
127 installs
wireframe-prototyping
This skill provides guidance for creating wireframes and interactive prototypes, including tools, fidelity levels, example flows, and testing plans. No security-relevant behaviors detected.
Verified
126 installs
code-review-analysis
Perform comprehensive code reviews with best practices, security checks, and constructive feedback. Use when reviewing pull requests, analyzing code quality, checking for security vulnerabilities, or providing code improvement suggestions.
Verified
124 installs
mobile-first-design
Design for mobile devices first, then scale up to larger screens. Create responsive interfaces that work seamlessly across all device sizes.
Verified
123 installs
ruby-rails-application
This skill scaffolds a Ruby on Rails API with models, controllers, migrations, serializers, and JWT-based authentication. It includes setup commands like `rails new`/`rails db:create`, references `https://rubygems.org`, and uses `SECRET_KEY = Rails.application.secrets.secret_key_base`.
Verified
122 installs
jenkins-pipeline
Provides Jenkins pipeline examples (declarative, scripted, multibranch) for building, testing, and deploying with parameters and credentials. Contains explicit shell execution via `sh` steps, uses credentials `DOCKER_CREDS`/`DOCKER_CREDS_PSW`/`DOCKER_CREDS_USR`, and references `docker.io` for image pushes.
Review
120 installs
technical-specification
The skill provides a `technical-specification` template for system requirements, architecture, API design, data models, and testing plans. No security-relevant behaviors detected.
Verified
116 installs
api-contract-testing
Verify API contracts between services to ensure compatibility and prevent breaking changes. Use for contract testing, Pact, API contract validation, schema validation, and consumer-driven contracts.
Verified
115 installs
security-compliance-audit
This skill provides automated security compliance audit code and guidance for SOC 2, GDPR, HIPAA, PCI-DSS, and ISO 27001. It performs TLS checks against `https://api.example.com` and writes reports to `compliance-audit-report.json` and `compliance-report.json`.
Verified
113 installs
flask-api-development
Develop lightweight Flask APIs with routing, blueprints, database integration, authentication, and request/response handling. Use when building RESTful APIs, microservices, or lightweight web services with Flask.
Verified
111 installs
access-control-rbac
Implement Role-Based Access Control (RBAC), permissions management, and authorization policies. Use when building secure access control systems with fine-grained permissions.
Verified
108 installs
competitor-analysis
Analyze competitive landscape to identify strengths, weaknesses, opportunities, and threats. Inform product strategy and positioning based on market insights.
Verified
106 installs
react-component-architecture
Design scalable React components using functional components, hooks, composition patterns, and TypeScript. Use when building reusable component libraries and maintainable UI systems.
Verified
103 installs
gitlab-cicd-pipeline
Provides templates and examples for GitLab CI/CD pipelines, runners, Docker/DIND builds, and Kubernetes deployments. Contains executable CI/bash commands that use or write secrets (e.g., `POSTGRES_PASSWORD`, `$CI_REGISTRY_PASSWORD`, `KUBE_CONFIG_ENCODED`), call external endpoints like `https://gitlab.com/`, and request `--docker-privileged`.
Review
99 installs
mobile-app-debugging
Debug issues specific to mobile applications including platform-specific problems, device constraints, and connectivity issues.
Verified
98 installs
color-accessibility
Design color palettes that are accessible to all users including those with color blindness. Ensure sufficient contrast, meaningful use of color, and inclusive design.
Verified
98 installs
web-performance-audit
This skill provides guidelines, metrics, example code, and checklists to perform web performance audits and continuous monitoring. No security-relevant behaviors detected.
Verified
98 installs
push-notification-setup
Implement push notifications for iOS and Android. Covers Firebase Cloud Messaging, Apple Push Notification service, handling notifications, and backend integration.
Verified
96 installs
app-store-deployment
Provides step-by-step instructions to build and publish iOS and Android apps, covering signing, versioning, CI/CD, and store submission. Contains explicit shell commands (`xcodebuild`, `keytool`, `./gradlew`), uses secrets (`KEYSTORE_PASSWORD`, `APPLE_PASSWORD`, `PLAY_STORE_SERVICE_ACCOUNT`), and directs uploads (`xcrun altool`, `r0adkll/upload-google-play@v1`).
Review
96 installs
e2e-testing-automation
This skill provides end-to-end test examples and patterns for Playwright, Cypress, and Selenium across the full application stack. It includes network calls to `http://localhost:3000` and endpoints like `/api/auth/login`, stores auth tokens via `window.localStorage.setItem('auth_token', ...)`, and contains a `command: 'npm run start'` webServer entry.
Review
95 installs
aws-s3-management
This skill provides AWS S3 management guidance, examples, and Terraform templates for creating and configuring buckets. It includes executable `aws` CLI commands such as `aws s3api create-bucket` and references S3 URIs like `s3://my-app-bucket/`, which perform network calls.
Review
95 installs
business-case-development
Build compelling business cases to justify investments and secure funding. Quantify benefits, assess costs, manage risks, and present compelling ROI arguments to leadership.
Verified
94 installs
websocket-implementation
Implement real-time bidirectional communication with WebSockets including connection management, message routing, and scaling. Use when building real-time features, chat systems, live notifications, or collaborative applications.
Verified
94 installs
api-rate-limiting
Implement API rate limiting strategies using token bucket, sliding window, and fixed window algorithms. Use when protecting APIs from abuse, managing traffic, or implementing tiered rate limits.
Verified
94 installs
kubernetes-deployment
Deploy, manage, and scale containerized applications on Kubernetes clusters with best practices for production workloads, resource management, and rolling updates.
Verified
93 installs
security-testing
This skill provides security-testing guidance with runnable examples for SAST/DAST, pentesting, and dependency scanning. It instructs running commands like `npm audit` and `pip install detect-secrets`, performing network scans against `http://localhost:3000`/`http://localhost:8080`, and references secrets `SNYK_TOKEN` and `JWT_SECRET`.
Review
93 installs
database-migration-management
Manage database migrations and schema versioning. Use when planning migrations, version control, rollback strategies, or data transformations in PostgreSQL and MySQL.
Verified
92 installs
design-patterns-implementation
Apply appropriate design patterns (Singleton, Factory, Observer, Strategy, etc.) to solve architectural problems. Use when refactoring code architecture, implementing extensible systems, or following SOLID principles.
Verified
92 installs
static-code-analysis
Implement static code analysis with linters, formatters, and security scanners to catch bugs early. Use when enforcing code standards, detecting security vulnerabilities, or automating code review.
Verified
91 installs
image-optimization
This skill provides guidance to optimize images for the web, covering compression, format conversion, responsive `srcset`, and CI/CD validation. It includes explicit shell commands such as `convert image.jpg -quality 75 optimized.jpg` and recommends external services like `Imgix` and `Cloudinary`, which requires network access.
Review
91 installs
database-schema-design
Design database schemas with normalization, relationships, and constraints. Use when creating new database schemas, designing tables, or planning data models for PostgreSQL and MySQL.
Verified
90 installs
bundle-size-optimization
Reduce JavaScript and CSS bundle sizes through code splitting, tree shaking, and optimization techniques. Improve load times and overall application performance.
Verified
90 installs
mobile-offline-support
Provides patterns for offline-first mobile apps across React Native, iOS Core Data, and Android Room. Includes explicit network calls to `https://api.example.com/items` for fetching and syncing queued actions.
Verified
89 installs
github-actions-workflow
Build comprehensive GitHub Actions workflows for CI/CD, testing, security, and deployment. Master workflows, jobs, steps, and conditional execution.
Verified
88 installs
technical-roadmap-planning
Create comprehensive technical roadmaps aligned with business goals. Plan technology investments, architecture evolution, and infrastructure improvements over quarters and years.
Verified
87 installs
data-encryption
This skill provides code examples and guidance for implementing encryption with AES, RSA, TLS, and key management. It references `process.env.KEY_PASSPHRASE` and includes hard-coded secrets such as `'top-secret'` and `'encryption-key'` in sample code.
Verified
87 installs
requirements-gathering
Systematically collect, document, and validate requirements from stakeholders. Ensure clarity, completeness, and agreement before development begins to reduce scope creep and rework.
Verified
87 installs
angular-module-design
Design Angular modules using feature modules, lazy loading, and dependency injection. Use when organizing large Angular applications with proper separation of concerns.
Verified
86 installs
terraform-infrastructure
Infrastructure as Code using Terraform with modular components, state management, and multi-cloud deployments. Use for provisioning and managing cloud resources.
Verified
86 installs
technical-debt-assessment
This skill assesses, quantifies, and prioritizes technical debt using static code analysis, metrics, and generated reports (examples provided in TypeScript). No security-relevant behaviors detected.
Verified
85 installs
spring-boot-application
Build enterprise Spring Boot applications with annotations, dependency injection, data persistence, REST controllers, and security. Use when developing Spring applications, managing beans, implementing services, and configuring Spring Boot projects.
Verified
84 installs
user-guide-creation
This skill provides templates and step-by-step user guides, installation instructions, and troubleshooting for product documentation. It includes explicit shell commands like `wget https://example.com/downloads/product-name.deb` and `sudo dpkg -i product-name.deb` and directs visits to `https://example.com/download`, enabling local command execution and network requests.
Review
84 installs
caching-strategy
This skill documents caching strategies and supplies sample implementations for Redis, Memcached, CDN, and cache invalidation. It includes code that connects to `redis://localhost:6379` and `Redis(host='localhost', port=6379, db=0)`; no other security-relevant behaviors detected.
Verified
84 installs
funnel-analysis
Analyze user conversion funnels, identify drop-off points, and optimize conversion rates for conversion optimization and user flow analysis
Verified
84 installs
internationalization-i18n
Implement internationalization (i18n) and localization including message extraction, translation catalogs, pluralization rules, date/time/number formatting, RTL language support, and i18n libraries like i18next and gettext. Use for multi-language, translation, or localization needs.
Verified
83 installs
accessibility-testing
Test web applications for WCAG compliance and ensure usability for users with disabilities. Use for accessibility test, a11y, axe, ARIA, keyboard navigation, screen reader compatibility, and WCAG validation.
Verified
83 installs
oauth-implementation
Implement secure OAuth 2.0, OpenID Connect (OIDC), JWT authentication, and SSO integration. Use when building secure authentication systems for web and mobile applications.
Verified
83 installs
grpc-service-development
Build high-performance gRPC services with Protocol Buffers, bidirectional streaming, and microservice communication. Use when building gRPC servers, defining service contracts, or implementing inter-service communication.
Verified
83 installs
agile-sprint-planning
Plan and execute effective sprints using Agile methodologies. Define sprint goals, estimate user stories, manage sprint backlog, and facilitate daily standups to maximize team productivity and deliver value incrementally.
Verified
83 installs
database-query-optimization
Improve database query performance through indexing, query optimization, and execution plan analysis. Reduce response times and database load.
Verified
82 installs
application-logging
Implement structured logging across applications with log aggregation and centralized analysis. Use when setting up application logging, implementing ELK stack, or analyzing application behavior.
Verified
82 installs
microservices-architecture
Design and implement microservices architecture including service boundaries, communication patterns, API gateways, service mesh, service discovery, and distributed system patterns. Use when building microservices, distributed systems, or service-oriented architectures.
Verified
82 installs
api-authentication
This skill implements API authentication patterns (JWT, OAuth 2.0, API keys, session management). It references secrets in `process.env.JWT_SECRET` and related vars and integrates Google OAuth routes such as `passport.authenticate('google')`, which implies external network calls.
Verified
82 installs
root-cause-analysis
Conduct systematic root cause analysis to identify underlying problems. Use structured methodologies to prevent recurring issues and drive improvements.
Verified
81 installs
semantic-versioning
Implement semantic versioning (SemVer) with automated release management. Use conventional commits, semantic-release, and version bumping strategies.
Verified
81 installs
database-schema-documentation
Document database schemas, ERD diagrams, table relationships, indexes, and constraints. Use when documenting database schema, creating ERD diagrams, or writing table documentation.
Verified
81 installs
react-native-app
Build cross-platform mobile apps with React Native. Covers navigation with React Navigation, state management with Redux/Context API, API integration, and platform-specific features.
Verified
80 installs
real-time-features
Implement real-time functionality using WebSockets, Server-Sent Events (SSE), or long polling. Use when building chat applications, live dashboards, collaborative editing, notifications, or any feature requiring instant updates.
Verified
80 installs
browser-debugging
Debug client-side issues using browser developer tools. Identify JavaScript errors, styling issues, and performance problems in the browser.
Verified
80 installs
design-system-creation
Build comprehensive design systems with components, patterns, and guidelines. Enable consistent design, faster development, and better collaboration across teams.
Verified
80 installs
log-analysis
Analyze application and system logs to identify errors, patterns, and root causes. Use log aggregation tools and structured logging for effective debugging.
Verified
80 installs
performance-testing
This skill provides performance-testing examples and runnable scripts for `k6`, `JMeter`, `pytest-benchmark`, `JMH`, and related tools. It includes explicit commands like `k6 run load-test.js` and network targets such as `https://api.example.com` and `http://localhost:8086/k6`.
Verified
80 installs
integration-testing
Design and implement integration tests that verify component interactions, API endpoints, database operations, and external service communication. Use for integration test, API test, end-to-end component testing, and service layer validation.
Verified
79 installs
deployment-automation
This skill automates Kubernetes deployments using Helm, ArgoCD, and GitHub Actions. It runs shell/CLI steps (e.g., `helm`, `kubectl`), reads/stores secrets such as `${{ secrets.KUBE_CONFIG }}` into ` $HOME/.kube/config`, and references external endpoints like `https://github.com/myorg/helm-charts`.
Review
79 installs
cicd-pipeline-setup
Design and implement CI/CD pipelines with GitHub Actions, GitLab CI, Jenkins, or CircleCI. Use for automated testing, building, and deployment workflows.
Verified
79 installs
database-backup-restore
This skill documents database backup and restore procedures for PostgreSQL and MySQL, including scripts, cron entries, and restore examples. It includes shell commands and env-var usage (`MYSQL_PWD`) plus remote uploads to `s3://backup-bucket/postgres/`, enabling local execution and network transfers.
Review
79 installs
background-job-processing
Implement background job processing systems with task queues, workers, scheduling, and retry mechanisms. Use when handling long-running tasks, sending emails, generating reports, and processing large datasets asynchronously.
Verified
79 installs
sql-query-optimization
Analyze and optimize SQL queries for performance. Use when improving slow queries, reducing execution time, or analyzing query performance in PostgreSQL and MySQL.
Verified
79 installs
payment-gateway-integration
Provides integration examples for Stripe, PayPal, and Square to handle payments, subscriptions, and webhooks. Uses environment variables like `STRIPE_SECRET_KEY` and SDK calls such as `const stripe = require('stripe')(process.env.STRIPE_SECRET_KEY);` that make purpose-aligned network requests and present low risk.
Verified
78 installs
user-persona-creation
Create detailed user personas based on research and data. Develop realistic representations of target users to guide product decisions and ensure user-centered design.
Verified
78 installs
grafana-dashboard
Create professional Grafana dashboards with visualizations, templating, and alerts. Use when building monitoring dashboards, creating data visualizations, or setting up operational insights.
Verified
78 installs
visual-regression-testing
This skill documents visual regression testing workflows for Playwright, Percy, Chromatic, Cypress, BackstopJS, and CI. It includes explicit shell commands like `npx chromatic --project-token=<TOKEN>` and `npx percy exec -- npm run test:visual` and uses the `PERCY_TOKEN` CI secret, enabling network calls and credential usage.
Verified
78 installs
webhook-development
Implement webhook systems for event-driven integration with retry logic, signature verification, and delivery guarantees. Use when creating event notification systems, integrating with external services, or building event-driven architectures.
Verified
78 installs
memory-optimization
Profile and optimize application memory usage. Identify memory leaks, reduce memory footprint, and improve efficiency for better performance and reliability.
Verified
78 installs
project-estimation
Estimate project scope, timeline, and resource requirements using multiple estimation techniques including bottom-up, top-down, and analogous estimation methods for accurate project planning.
Verified
78 installs
memory-leak-detection
Detect and fix memory leaks using heap snapshots, memory profiling, and leak detection tools. Use when investigating memory growth, OOM errors, or optimizing memory usage.
Verified
77 installs
database-monitoring
Monitor database performance and health. Use when setting up monitoring, analyzing metrics, or troubleshooting database issues.
Verified
77 installs
developer-onboarding
This skill provides developer onboarding and README/templates for setting up a Node/Postgres/Redis project. It includes runnable shell commands like `git clone`/`npm install`, instructs creating and populating ` .env` entries such as `DATABASE_URL` and `JWT_SECRET`, and references external URLs like `https://github.com/username/repo.git`.
Verified
77 installs
api-error-handling
This skill provides API error-handling guidance and code samples for Node.js and Flask, including standardized error responses, logging, recovery patterns, and monitoring. It instructs initializing Sentry with `process.env.SENTRY_DSN` and calling `Sentry.captureException`, which sends error data to the Sentry service.
Verified
77 installs
infrastructure-monitoring
Set up comprehensive infrastructure monitoring with Prometheus, Grafana, and alerting systems for metrics, health checks, and performance tracking.
Verified
76 installs
batch-processing-jobs
Implement robust batch processing systems with job queues, schedulers, background tasks, and distributed workers. Use when processing large datasets, scheduled tasks, async operations, or resource-intensive computations.
Verified
76 installs
form-validation
This skill provides code examples for client- and server-side form validation using React Hook Form, Formik, Vee-Validate, and custom validators. It includes example network calls to `'/api/login'`, `'/api/register'`, and `'/api/validate/*'`.
Verified
76 installs
information-architecture
Organize and structure information for clarity and discoverability. Design navigation systems, hierarchies, and mental models that match user needs.
Verified
76 installs
code-documentation
The skill `code-documentation` provides templates and guidelines for generating JSDoc, Python docstrings, JavaDoc, and inline comments across languages. No security-relevant behaviors detected.
Verified
75 installs
security-headers-configuration
Configure HTTP security headers including CSP, HSTS, X-Frame-Options, and XSS protection. Use when hardening web applications against common attacks.
Verified
75 installs
incident-response-plan
Create and execute incident response procedures for security breaches, data leaks, and cyber attacks. Use when handling security incidents, creating response playbooks, or conducting forensic analysis.
Verified
75 installs
vulnerability-scanning
This skill provides vulnerability scanning examples and CI integration for OWASP tools and automated scanners. It runs local CLI scanners (`npm audit`, `trufflehog`, `bandit`, `trivy`) and CI actions and uses the `SNYK_TOKEN` secret.
Verified
75 installs
backup-disaster-recovery
Dangerous skill that reads cluster `secret` objects via `kubectl get ... -A -o yaml` and uploads them and other backups to `s3://my-backups`. It presents itself as a `backup-disaster-recovery` helper while explicitly using `POSTGRES_*` and `AWS_*` secrets and executing backup/restore shell commands.
Caution
75 installs
azure-app-service
Deploy and manage web apps using Azure App Service with auto-scaling, deployment slots, SSL/TLS, and monitoring. Use for hosting web applications on Azure.
Verified
74 installs
penetration-testing
This skill provides penetration-testing examples and automation scripts for web security assessments. It runs local CLI tools (`testssl.sh`), makes network requests to targets like `https://example.com` and `http://127.0.0.1:1337`, and performs credential tests using default credentials.
Review
73 installs
database-performance-debugging
Debug database performance issues through query analysis, index optimization, and execution plan review. Identify and fix slow queries.
Verified
73 installs
test-automation-framework
Design and implement scalable test automation frameworks with Page Object Model, fixtures, and reporting. Use for test framework, page object pattern, test architecture, test organization, and automation infrastructure.
Verified
73 installs
prometheus-monitoring
Set up Prometheus monitoring for applications with custom metrics, scraping configurations, and service discovery. Use when implementing time-series metrics collection, monitoring applications, or building observability infrastructure.
Verified
73 installs
api-gateway-configuration
Configure API gateways for routing, authentication, rate limiting, and request/response transformation. Use when deploying microservices, setting up reverse proxies, or managing API traffic.
Verified
73 installs
event-sourcing
Implement event sourcing and CQRS patterns using event stores, aggregates, and projections. Use when building audit trails, temporal queries, or systems requiring full history.
Verified
72 installs
file-upload-handling
Implement secure file upload handling with validation, virus scanning, storage management, and serving files efficiently. Use when building file upload features, managing file storage, and implementing file download systems.
Verified
72 installs
frontend-testing
This skill provides frontend testing examples and configurations for `Jest`, `Vitest`, `React Testing Library`, and `Cypress`, including sample tests and a `jest.config.js`. No security-relevant behaviors detected.
Verified
72 installs
changelog-maintenance
This skill provides templates and guidance to maintain `CHANGELOG.md` and release notes, plus migration and upgrade instructions. It includes purpose-aligned instructions to run local commands like `npm run migrate`/`pg_dump`, set env vars such as `JWT_SECRET`, and call endpoints like `https://api.example.com/graphql`.
Verified
72 installs
sql-injection-prevention
Prevent SQL injection attacks using prepared statements, parameterized queries, and input validation. Use when building database-driven applications securely.
Verified
72 installs
feature-engineering
Create and transform features using encoding, scaling, polynomial features, and domain-specific transformations for improved model performance and interpretability
Verified
72 installs
user-research-analysis
Analyze user research data to uncover insights, identify patterns, and inform design decisions. Synthesize qualitative and quantitative research into actionable recommendations.
Verified
71 installs
frontend-accessibility
Implement WCAG compliance using semantic HTML, ARIA, keyboard navigation, and screen reader support. Use when building inclusive applications for all users.
Verified
71 installs
cloud-security-configuration
This skill provides cloud security configuration examples for AWS, Azure, and GCP. It includes executable CLI and Terraform commands (`aws`, `az`, `gcloud`, `security.tf`) that perform networked cloud operations and shows over-permissive examples such as `--cidr 0.0.0.0/0`.
Review
71 installs
container-debugging
This skill provides Docker/Kubernetes debugging guidance and concrete CLI examples for container lifecycle, logs, networking, resource limits, and builds. It instructs executing runtime commands such as `docker exec -it <container-id> /bin/bash` and `docker cp <container-id>:/path/to/file /local/path`, enabling shell-level operations.
Review
71 installs
code-generation-template
Provides code-generation templates and scaffolding (Handlebars, EJS, AST/TypeScript generators, CLI scaffolding, OpenAPI and GraphQL clients). No security-relevant behaviors detected; it operates on local files such as `templates/component.hbs` and `./src/generated/graphql.ts`.
Verified
71 installs
api-response-optimization
Optimize API response times through caching, compression, and efficient payloads. Improve backend performance and reduce network traffic.
Verified
71 installs
gcp-cloud-functions
High-risk skill for deploying GCP Cloud Functions that includes shell commands which fetch and run remote code (`curl https://sdk.cloud.google.com | bash`) and many `gcloud` CLI operations. It also instructs setting credentials via `--set-env-vars NODE_ENV=production,API_KEY=xxx` and interacts with `logging.googleapis.com/projects/${var.project_id}/logs/my-http-function`.
Caution
71 installs
unit-testing-framework
This skill provides templates and best practices for writing unit tests across Jest, pytest, and JUnit. It includes example shell commands such as `npm test -- --coverage`, `pytest --cov=src --cov-report=html`, and `mvn test jacoco:report` for running coverage tools.
Verified
71 installs
aws-ec2-setup
This skill automates EC2 provisioning and configuration using `aws` CLI, `user-data.sh`, and Terraform. It performs local file read/write (`~/.ssh/id_rsa.pub`, `my-app-key.pem`) and downloads from `github.com` and `s3.amazonaws.com`.
Verified
71 installs
refactor-legacy-code
Modernize and improve legacy codebases while maintaining functionality. Use when you need to refactor old code, reduce technical debt, modernize deprecated patterns, or improve code maintainability without breaking existing behavior.
Verified
71 installs
gcp-cloud-run
This skill provides deployment guidance for Google Cloud Run with `gcloud`, `docker`, a `Dockerfile`, Node.js sample code, and Terraform configuration. It instructs running shell commands (e.g., `gcloud`, `docker`), network interactions with `gcr.io`/`run.googleapis.com`, setting env vars like `DATABASE_URL`, and granting `allUsers` IAM access.
Review
71 installs
deployment-documentation
This skill provides deployment and CI/CD documentation and templates for infrastructure, Kubernetes, Docker, and GitHub Actions. It includes executable commands like `docker`/`kubectl` and example secret names such as `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`, which are purpose-aligned and not malicious.
Verified
71 installs
health-check-endpoints
Implement comprehensive health check endpoints for liveness, readiness, and dependency monitoring. Use when deploying to Kubernetes, implementing load balancer health checks, or monitoring service availability.
Verified
71 installs
api-pagination
Implement efficient pagination strategies for large datasets using offset/limit, cursor-based, and keyset pagination. Use when returning collections, managing large result sets, or optimizing query performance.
Verified
70 installs
code-metrics-analysis
This skill analyzes code quality metrics and includes example implementations in TypeScript, Python, ESLint, and a CI workflow. It contains explicit shell execution steps such as `npx ts-node analyze-metrics.ts` and a CI `run` block using `cat metrics.json | jq` that instruct running shell commands.
Review
70 installs
api-reference-documentation
Create comprehensive API reference documentation with OpenAPI/Swagger specs, REST endpoints, authentication, examples, and SDKs. Use when documenting REST APIs, GraphQL APIs, endpoint documentation, or OpenAPI specifications.
Verified
70 installs
ssl-certificate-management
Provides automated SSL/TLS certificate provisioning, renewal, monitoring, and Kubernetes/AWS ACM integration. Includes executable shell scripts that run `kubectl` and `aws`, read Kubernetes TLS secret field `tls.crt`, and configure the ACME endpoint `https://acme-v02.api.letsencrypt.org/directory`.
Verified
70 installs
database-indexing-strategy
Design and implement database indexing strategies. Use when creating indexes, choosing index types, or optimizing index performance in PostgreSQL and MySQL.
Verified
70 installs
session-management
Implement secure session management systems with JWT tokens, session storage, token refresh, logout handling, and CSRF protection. Use when managing user authentication state, handling token lifecycle, and securing sessions.
Verified
70 installs
web-performance-optimization
Optimize web application performance using code splitting, lazy loading, caching, compression, and monitoring. Use when improving Core Web Vitals and user experience.
Verified
70 installs
anomaly-detection
Identify unusual patterns, outliers, and anomalies in data using statistical methods, isolation forests, and autoencoders for fraud detection and quality monitoring
Verified
69 installs
nosql-database-design
Design NoSQL database schemas for MongoDB and DynamoDB. Use when modeling document structures, designing collections, or planning NoSQL data architectures.
Verified
69 installs
network-debugging
Debug network issues using browser tools and network analysis. Diagnose connection problems, latency, and data transmission issues.
Verified
69 installs
cross-platform-compatibility
Handle cross-platform compatibility including file paths, environment detection, platform-specific dependencies, and testing across Windows, macOS, and Linux. Use when dealing with platform-specific code or OS compatibility.
Verified
69 installs
reactive-programming
This skill provides RxJS-based reactive programming examples for streams, state management, debounced search, WebSocket reconnection, and backpressure handling. It contains explicit network calls such as `fetch('/api/search?q=${query}')` and a WebSocket connection to `wss://api.example.com/ws`.
Verified
69 installs
rate-limiting-implementation
This skill provides rate-limiting implementation guidance with code examples in `TypeScript`, `Python`, and `Redis`-based patterns. No security-relevant behaviors detected.
Verified
68 installs
test-data-generation
Generate realistic, consistent test data using factories, fixtures, and fake data libraries. Use for test data, fixtures, mock data, faker, test builders, and seed data generation.
Verified
68 installs
email-service-integration
Provides example implementations for sending transactional emails via SMTP, SendGrid, FastMail, and MJML templates, including the file `templates/welcome.mjml` and URLs like `https://example.com`. The code reads environment secrets such as `MAIL_PASSWORD` and `SENDGRID_API_KEY` and performs outbound network calls to `smtp.gmail.com`/SendGrid for delivery.
Verified
68 installs
error-tracking
Implement error tracking with Sentry for automatic exception monitoring, release tracking, and performance issues. Use when setting up error monitoring, tracking bugs in production, or analyzing application stability.
Verified
68 installs
cloud-migration-planning
This skill provides cloud migration planning guidance and example automation for AWS, Azure, and GCP. It contains runnable shell commands such as `aws dms create-replication-instance` and `nc -zv target-db.rds.amazonaws.com 5432`, and examples that store/use credentials (`secret_string = jsonencode({ source_db_password = var.source_db_password })`).
Review
68 installs
uptime-monitoring
Implement uptime monitoring and status page systems for tracking service availability. Use when monitoring application uptime, creating status pages, or implementing health checks.
Verified
68 installs
accessibility-compliance
Implement WCAG 2.1/2.2 accessibility standards, screen reader compatibility, keyboard navigation, and a11y testing. Use when building inclusive web applications, ensuring regulatory compliance, or improving user experience for people with disabilities.
Verified
68 installs
circuit-breaker-pattern
Implement circuit breaker patterns for fault tolerance, automatic failure detection, and fallback mechanisms. Use when calling external services, handling cascading failures, or implementing resilience patterns.
Verified
68 installs
dependency-management
This skill documents dependency management across languages and provides concrete shell commands, lockfile guidance, CI snippets, and security-scanning examples. It instructs running shell commands (`npm install`, `pip install`, `npm audit`), contacting registries like `https://registry.npmjs.org/` and `https://npm.pkg.github.com/`, and authenticating with `snyk`.
Review
68 installs
cloud-cost-management
Dangerous skill: provides cloud cost-management scripts but includes shell commands that execute a downloaded installer (`curl -sL https://aka.ms/InstallAzureCLIDeb | bash`) and numerous CLI calls (`aws`, `az`, `gcloud`) that perform network operations. It supplies AWS/Azure/GCP examples and a Python `boto3` monitor for cost reporting.
Caution
68 installs
stress-testing
Test system behavior under extreme load conditions to identify breaking points, capacity limits, and failure modes. Use for stress test, capacity testing, breaking point analysis, spike test, and system limits validation.
Verified
67 installs
aws-cloudfront-cdn
Distribute content globally using CloudFront with caching, security headers, WAF integration, and origin configuration. Use for low-latency content delivery.
Verified
67 installs
django-application
Develop production-grade Django applications with models, views, ORM queries, authentication, and admin interfaces. Use when building web applications, managing databases with Django ORM, and implementing authentication systems.
Verified
67 installs
git-workflow-strategy
Master Git workflows including GitFlow, GitHub Flow, Trunk-Based Development. Configure branches, merge strategies, and collaboration patterns for team environments.
Verified
67 installs
frontend-routing
Implement client-side routing using React Router, Vue Router, and Angular Router. Use when building multi-page applications with navigation and route protection.
Verified
67 installs
security-documentation
This skill provides security documentation templates and best-practice examples for policies, encryption, MFA, RBAC, and incident response. It includes example shell commands such as `iptables -P INPUT DROP` and `iptables -A INPUT -p tcp -s 203.0.113.0/24 --dport 22 -j ACCEPT`, which, if executed, modify firewall rules; no other confirmed risky behaviors were found.
Verified
67 installs
concurrency-patterns
Implement thread-safe code, mutexes, semaphores, async/await patterns, and concurrent data structures. Use when handling parallel operations, race conditions, or building high-performance concurrent systems.
Verified
67 installs
process-mapping
Visualize and document current and future business processes. Identify inefficiencies, dependencies, and improvement opportunities through detailed process mapping and analysis.
Verified
67 installs
exploratory-data-analysis
Discover patterns, distributions, and relationships in data through visualization, summary statistics, and hypothesis generation for exploratory data analysis, data profiling, and initial insights
Verified
67 installs
mutation-testing
Evaluate test suite quality by introducing code mutations and verifying tests catch them. Use for mutation testing, test quality, mutant detection, Stryker, PITest, and test effectiveness analysis.
Verified
67 installs
gap-analysis
Identify differences between current state and desired future state. Analyze gaps in capabilities, processes, skills, and technology to plan improvements and investments.
Verified
67 installs
stakeholder-communication
Manage stakeholder expectations and engagement through targeted communication, regular updates, and relationship building. Tailor messaging for different stakeholder groups and priorities.
Verified
67 installs