Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
security-operations-deployment
Operational security guidance for deployment, monitoring, and maintenance. Use this skill when you need to understand which middlewares to apply, configure environment variables, monitor security post-deployment, or follow the pre-deployment checklist. Triggers include "security operations", "deployment security", "security monitoring", "environment variables", "when to use middleware", "pre-deployment", "security checklist", "production security".
harperaa/secure-claude-skills 7
-
csrf-protection
Implement Cross-Site Request Forgery (CSRF) protection for API routes. Use this skill when you need to protect POST/PUT/DELETE endpoints, implement token validation, prevent cross-site attacks, or secure form submissions. Triggers include "CSRF", "cross-site request forgery", "protect form", "token validation", "withCsrf", "CSRF token", "session fixation".
harperaa/secure-claude-skills 7
-
rate-limiting
Implement rate limiting to prevent brute force attacks, spam, and resource abuse. Use this skill when you need to protect endpoints from automated attacks, prevent API abuse, limit request frequency, or control infrastructure costs. Triggers include "rate limiting", "rate limit", "brute force", "prevent spam", "API abuse", "resource exhaustion", "DoS", "withRateLimit", "too many requests", "429 error".
harperaa/secure-claude-skills 7
-
secure-error-handling
Implement secure error handling to prevent information leakage and provide appropriate error responses. Use this skill when you need to handle errors in API routes, prevent stack trace exposure, implement environment-aware error messages, or use the error handler utilities. Triggers include "error handling", "handle errors", "error messages", "information leakage", "stack trace", "handleApiError", "production errors", "error responses".
harperaa/secure-claude-skills 7
-
security-testing-verification
Test security features and verify implementation before deployment. Use this skill when you need to test CSRF protection, rate limiting, input validation, verify security headers, run security audits, or check the pre-deployment security checklist. Triggers include "test security", "security testing", "verify security", "security checklist", "pre-deployment", "test CSRF", "test rate limit", "security verification".
harperaa/secure-claude-skills 7
-
agent-sop-creator
Guide for creating Agent SOPs (Standard Operating Procedures). Use this skill when the user wants to create a new SOP workflow for AI agents, write an agent procedure, or needs help with SOP format and best practices. Triggers on requests like "create an SOP", "new agent workflow", "help me write an SOP", "create a procedure for agents", or "SOP template".
natsirtguy/natsirtguy-skills 1
-
data-gouv
Skill professionnel pour Claude Code permettant d'accéder, télécharger et analyser les données ouvertes françaises via data.gouv.fr. Inclut une librairie Python complète, des exemples de code, et une documentation détaillée des datasets les plus utilisés.
datactivist/data_redesign_method 1
-
codebuddy-deploy
部署与运维专家,负责把通过 Reviewer 与 QA 门禁的构建安全、可回滚、可观测地部署到服务器(PM2 三进程 + Nginx 反代 + 宝塔)。遵循零停机部署、健康检查、回滚≤3分钟、发布后冒烟的工程基线。处理部署编排、配置管理、流量管理、监控告警。适用于收到 Deploy 部门任务卡或需要发布上线时使用。
lpding888/aiygw4.0 1
-
billing-guard
计费审计专家,在规划/开发/运行阶段持续审计与优化成本。评估任务卡预算、模拟调用成本、监控高成本路径,在超出预算或异常时阻断执行并提出替代方案。遵循数据驱动、三板斧优化(缓存/批量/降级)、预警阻断的工程基线。适用于规划预审、PR成本审查、运行时监控时使用。
lpding888/aiygw4.0 1
-
qa-acceptance
质量验收专家,从用户视角验证交付物可用性/正确性/性能/回归。遵循阻断不合格交付、脚本化验证、数据隔离、覆盖验收标准的工程基线。使用 Playwright(E2E)、Jest+Supertest(API)、k6(性能)等工具。适用于收到 QA 部门任务卡(如 CMS-Q-001)或需要验收交付物时使用。
lpding888/aiygw4.0 1
-
reviewer
代码审查员,守护质量闸口。对所有部门(Backend/Frontend/SCF/Deploy)的 PR 进行安全、性能、正确性、可维护性、可观测性的系统性审查。遵循证据先行、问题分级、签发修复卡、独立克制的工程基线。适用于收到任一部门提交 PR 或需要质量把关时使用。
lpding888/aiygw4.0 1
-
frontend-dev
前端开发专家,负责 Next.js 14 App Router + React 18 + TypeScript + Ant Design + Zustand 前端应用开发。遵循契约驱动、统一UI规范、访问控制、可测试性工程基线。处理登录鉴权、动态表单、内容管理UI、E2E测试。适用于收到 Frontend 部门任务卡(如 CMS-F-001)或修复类任务卡时使用。
lpding888/aiygw4.0 1
-
backend-dev
后端开发专家,负责 Express.js + Knex.js + MySQL 8 + Redis 后端服务开发。遵循 OpenAPI 先行、TDD 推动、RBAC 安全、可观测性工程基线。处理 Provider 动态加载、缓存系统、数据库设计、内容管理 API 开发。适用于收到 Backend 部门任务卡(如 CMS-B-001)或修复类任务卡时使用。
lpding888/aiygw4.0 1
-
scf-worker
云函数工程师,负责腾讯云 SCF 无服务器函数开发。遵循最小权限、幂等、重试+死信、可观测性工程基线。处理 COS 直传签名、回调处理、媒体转码、Webhook 转发、批处理任务。适用于收到 SCF 部门任务卡(如 CMS-S-001)或修复类任务卡时使用。
lpding888/aiygw4.0 1
-
product-planner
AI产品经理,整套"0基础 AI 协同开发系统"的源头角色与项目总导演。将自然语言需求转换为可执行的产品规划与标准化任务卡,协调 Backend/Frontend/SCF/QA/Reviewer/Deploy/Billing Guard 多部门有序并行交付。遵循易用性优先、契约优先、门禁治理、MVP-first 的工程基线。适用于收到自然语言需求时使用。
lpding888/aiygw4.0 1
-
skill-creator
Create and refine Codex skills (folders containing `SKILL.md`). Use when you need help naming a skill, writing effective `name`/`description`, structuring the on-disk instructions, or adding scripts/references/assets for repeatable workflows.
eliasjudin/codex-skill-creator 2
-
fintech-patterns
Common fintech customer patterns, objections, and success stories. Compliance handling, long conversation management, and case studies.
sigridjineth/interview-copilot-with-skills 1
-
cdp-skills
Claude Developer Platform Skills feature. Custom knowledge packages for agents, curated playbooks, and versioned expertise domains.
sigridjineth/interview-copilot-with-skills 1
-
memory-playbook
Cross-session persistence for user preferences, implementation guide for Memory feature.
sigridjineth/interview-copilot-with-skills 1
-
pricing-guidance
Claude API pricing, tier recommendations, token cost optimization, and ROI calculations for CDP features.
sigridjineth/interview-copilot-with-skills 1
-
interview-records
Archive of past customer interviews. Contains full transcripts, summaries, pain points, outcomes, and skills used. Use for referencing previous conversations with the same company or finding similar case patterns.
sigridjineth/interview-copilot-with-skills 1
-
context_editing_guide
Managing context window, token optimization, summarization strategies for long conversations.
sigridjineth/interview-copilot-with-skills 1
-
atl-cli
Atlassian Server CLI (Jira/Confluence/Bitbucket). This skill should be used when working with Jira issues, Confluence page operations, Bitbucket pull requests, or any Atlassian Server tasks. Triggers on: issue tracking, wiki pages, PR management, CQL queries.
lroolle/atlas-cli 1
-
draw-io
Generate and validate draw.io diagrams in XML format. Strict quality rules for font settings, edge routing, containers, layers, and Japanese text. 23-rule validator with CLI. Use for flowcharts, architecture diagrams, sequence diagrams in .drawio format.
ekusiadadus/draw-mcp 26