Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
11b94d265e | ||
|
|
74c7e5f330 | ||
|
|
b76ad28225 | ||
|
|
a1a1178f4b | ||
|
|
1c66f65341 | ||
|
|
8678549bfb | ||
|
|
3d9f9f347f |
284
README.md
284
README.md
@@ -1,6 +1,6 @@
|
||||
# 🌌 Antigravity Awesome Skills: 133+ Agentic Skills for Claude Code, Gemini CLI, Cursor, Copilot & More
|
||||
# 🌌 Antigravity Awesome Skills: 156+ Agentic Skills for Claude Code, Gemini CLI, Cursor, Copilot & More
|
||||
|
||||
> **The Ultimate Collection of 133+ Universal Agentic Skills for AI Coding Assistants — Claude Code, Gemini CLI, Codex CLI, Antigravity IDE, GitHub Copilot, Cursor, OpenCode**
|
||||
> **The Ultimate Collection of 156+ Universal Agentic Skills for AI Coding Assistants — Claude Code, Gemini CLI, Codex CLI, Antigravity IDE, GitHub Copilot, Cursor, OpenCode**
|
||||
|
||||
[](https://opensource.org/licenses/MIT)
|
||||
[](https://claude.ai)
|
||||
@@ -11,7 +11,7 @@
|
||||
[](https://github.com/opencode-ai/opencode)
|
||||
[](https://github.com/anthropics/antigravity)
|
||||
|
||||
**Antigravity Awesome Skills** is a curated, battle-tested library of **133 high-performance agentic skills** designed to work seamlessly across all major AI coding assistants:
|
||||
**Antigravity Awesome Skills** is a curated, battle-tested library of **156 high-performance agentic skills** designed to work seamlessly across all major AI coding assistants:
|
||||
|
||||
- 🟣 **Claude Code** (Anthropic CLI)
|
||||
- 🔵 **Gemini CLI** (Google DeepMind)
|
||||
@@ -27,7 +27,7 @@ This repository provides essential skills to transform your AI assistant into a
|
||||
|
||||
- [🔌 Compatibility](#-compatibility)
|
||||
- [Features & Categories](#features--categories)
|
||||
- [Full Skill Registry](#full-skill-registry-133133)
|
||||
- [Full Skill Registry](#full-skill-registry-155155)
|
||||
- [Installation](#installation)
|
||||
- [How to Contribute](#how-to-contribute)
|
||||
- [Credits & Sources](#credits--sources)
|
||||
@@ -64,126 +64,185 @@ The repository is organized into several key areas of expertise:
|
||||
|
||||
| Category | Skills Count | Key Skills Included |
|
||||
| :-------------------------- | :----------- | :--------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **🛡️ Cybersecurity** | **~50** | Ethical Hacking, Metasploit, Burp Suite, SQLMap, Active Directory, AWS/Cloud Pentesting, OWASP Top 100, Red Team Tools |
|
||||
| **🛠️ Development** | **~25** | TDD, Systematic Debugging, React Patterns, Backend/Frontend Guidelines, Senior Fullstack, Software Architecture |
|
||||
| **🎨 Creative & Design** | **~10** | UI/UX Pro Max, Frontend Design, Canvas, Algorithmic Art, Theme Factory, D3 Viz, Web Artifacts |
|
||||
| **🤖 AI & LLM Development** | **~8** | LLM App Patterns, Autonomous Agent Patterns, Prompt Engineering, Prompt Library, JavaScript Mastery, Bun Development |
|
||||
| **🛸 Autonomous & Agentic** | **~8** | Loki Mode (Startup-in-a-box), Subagent Driven Dev, Dispatching Parallel Agents, Planning With Files, Skill Creator/Developer |
|
||||
| **📄 Document Processing** | **~4** | DOCX (Official), PDF (Official), PPTX (Official), XLSX (Official) |
|
||||
| **📈 Product & Strategy** | **~8** | Product Manager Toolkit, Content Creator, ASO, Doc Co-authoring, Brainstorming, Internal Comms |
|
||||
| **🔌 Integrations & APIs** | **~25** | Stripe, Firebase, Supabase, Vercel, Clerk Auth, Twilio, Discord Bot, Slack Bot, GraphQL, AWS Serverless |
|
||||
| **🛡️ Cybersecurity** | **~50** | Ethical Hacking, Metasploit, Burp Suite, SQLMap, Active Directory, AWS/Cloud Pentesting, OWASP Top 100, Red Team Tools |
|
||||
| **🎨 Creative & Design** | **~10** | UI/UX Pro Max, Frontend Design, Canvas, Algorithmic Art, Theme Factory, D3 Viz, Web Artifacts |
|
||||
| **🛠️ Development** | **~25** | TDD, Systematic Debugging, React Patterns, Backend/Frontend Guidelines, Senior Fullstack, Software Architecture |
|
||||
| **🏗️ Infrastructure & Git** | **~8** | Linux Shell Scripting, Git Worktrees, Git Pushing, Conventional Commits, File Organization, GitHub Workflow Automation |
|
||||
| **🤖 AI Agents & LLM** | **~30** | LangGraph, CrewAI, Langfuse, RAG Engineer, Prompt Engineer, Voice Agents, Browser Automation, Agent Memory Systems |
|
||||
| **🔄 Workflow & Planning** | **~6** | Writing Plans, Executing Plans, Concise Planning, Verification Before Completion, Code Review (Requesting/Receiving) |
|
||||
| **📄 Document Processing** | **~4** | DOCX (Official), PDF (Official), PPTX (Official), XLSX (Official) |
|
||||
| **🧪 Testing & QA** | **~4** | Webapp Testing, Playwright Automation, Test Fixing, Testing Patterns |
|
||||
| **📈 Product & Strategy** | **~8** | Product Manager Toolkit, Content Creator, ASO, Doc Co-authoring, Brainstorming, Internal Comms |
|
||||
| **🚀 Maker Tools** | **~11** | Micro-SaaS Launcher, Browser Extension Builder, Telegram Bot, AI Wrapper Product, Viral Generator, 3D Web Experience |
|
||||
|
||||
---
|
||||
|
||||
## Full Skill Registry (133/133)
|
||||
## Full Skill Registry (156/156)
|
||||
|
||||
Below is the complete list of available skills. Each skill folder contains a `SKILL.md` that can be imported into Antigravity or Claude Code.
|
||||
|
||||
> [!NOTE] > **Document Skills**: We provide both **community** and **official Anthropic** versions for DOCX, PDF, PPTX, and XLSX. Locally, the official versions are used by default (via symlinks). In the repository, both versions are available for flexibility.
|
||||
|
||||
| Skill Name | Description | Path |
|
||||
| :-------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-------------------------------------- |
|
||||
| **API Fuzzing for Bug Bounty** | This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guidance on API security assessment techniques. | `skills/api-fuzzing-bug-bounty` |
|
||||
| **AWS Penetration Testing** | This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment. | `skills/aws-penetration-testing` |
|
||||
| **Active Directory Attacks** | This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing. | `skills/active-directory-attacks` |
|
||||
| **Address GitHub Comments** | Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI. | `skills/address-github-comments` |
|
||||
| **Agent Manager Skill** | Use when you need to manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling. | `skills/agent-manager-skill` |
|
||||
| **Algorithmic Art** | Creating algorithmic art using p5. | `skills/algorithmic-art` |
|
||||
| **App Store Optimization** | Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store. | `skills/app-store-optimization` |
|
||||
| **Autonomous Agent Patterns** | "Design patterns for building autonomous coding agents. | `skills/autonomous-agent-patterns` |
|
||||
| **Backend Guidelines** | Comprehensive backend development guide for Node. | `skills/backend-dev-guidelines` |
|
||||
| **Brainstorming** | "You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. | `skills/brainstorming` |
|
||||
| **BlockRun** | Agent wallet for LLM micropayments. Use when user needs capabilities Claude lacks (image generation, real-time X/Twitter data) or explicitly requests external models ("blockrun", "use grok", "use gpt", "dall-e", "deepseek"). | `skills/blockrun` |
|
||||
| **Brand Guidelines (Anthropic)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-anthropic` |
|
||||
| **Brand Guidelines (Community)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-community` |
|
||||
| **Broken Authentication Testing** | This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". | `skills/broken-authentication` |
|
||||
| **Bun Development** | "Modern JavaScript/TypeScript development with Bun runtime. | `skills/bun-development` |
|
||||
| **Burp Suite Web Application Testing** | This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". | `skills/burp-suite-testing` |
|
||||
| **Canvas Design** | Create beautiful visual art in . | `skills/canvas-design` |
|
||||
| **Claude Code Guide** | Master guide for using Claude Code effectively. | `skills/claude-code-guide` |
|
||||
| **Claude D3.js** | Creating interactive data visualisations using d3. | `skills/claude-d3js-skill` |
|
||||
| **Cloud Penetration Testing** | This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". | `skills/cloud-penetration-testing` |
|
||||
| **Concise Planning** | Use when a user asks for a plan for a coding task, to generate a clear, actionable, and atomic checklist. | `skills/concise-planning` |
|
||||
| **Content Creator** | Create SEO-optimized marketing content with consistent brand voice. | `skills/content-creator` |
|
||||
| **Core Components** | Core component library and design system patterns. | `skills/core-components` |
|
||||
| **Cross-Site Scripting and HTML Injection Testing** | This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". | `skills/xss-html-injection` |
|
||||
| **Dispatching Parallel Agents** | Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies. | `skills/dispatching-parallel-agents` |
|
||||
| **Doc Co-authoring** | Guide users through a structured workflow for co-authoring documentation. | `skills/doc-coauthoring` |
|
||||
| **DOCX (Official)** | "Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. | `skills/docx-official` |
|
||||
| **Ethical Hacking Methodology** | This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", or "write penetration test reports". | `skills/ethical-hacking-methodology` |
|
||||
| **Executing Plans** | Use when you have a written implementation plan to execute in a separate session with review checkpoints. | `skills/executing-plans` |
|
||||
| **File Organizer** | Intelligently organizes files and folders by understanding context, finding duplicates, and suggesting better organizational structures. | `skills/file-organizer` |
|
||||
| **File Path Traversal Testing** | This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". | `skills/file-path-traversal` |
|
||||
| **Finishing Dev Branch** | Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup. | `skills/finishing-a-development-branch` |
|
||||
| **Frontend Design** | Create distinctive, production-grade frontend interfaces with high design quality. | `skills/frontend-design` |
|
||||
| **Frontend Guidelines** | Frontend development guidelines for React/TypeScript applications. | `skills/frontend-dev-guidelines` |
|
||||
| **Git Pushing** | Stage, commit, and push git changes with conventional commit messages. | `skills/git-pushing` |
|
||||
| **GitHub Workflow Automation** | "Automate GitHub workflows with AI assistance. | `skills/github-workflow-automation` |
|
||||
| **HTML Injection Testing** | This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". | `skills/html-injection-testing` |
|
||||
| **IDOR Vulnerability Testing** | This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data. | `skills/idor-testing` |
|
||||
| **Internal Comms (Anthropic)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-anthropic` |
|
||||
| **Internal Comms (Community)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-community` |
|
||||
| **JavaScript Mastery** | "Comprehensive JavaScript reference covering 33+ essential concepts every developer should know. | `skills/javascript-mastery` |
|
||||
| **Kaizen** | Guide for continuous improvement, error proofing, and standardization. | `skills/kaizen` |
|
||||
| **Linux Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". | `skills/linux-privilege-escalation` |
|
||||
| **Linux Shell Scripting** | This skill should be used when the user asks to "create bash scripts", "automate Linux tasks", "monitor system resources", "backup files", "manage users", or "write production shell scripts". | `skills/linux-shell-scripting` |
|
||||
| **LLM App Patterns** | "Production-ready patterns for building LLM applications. | `skills/llm-app-patterns` |
|
||||
| **Loki Mode** | Multi-agent autonomous startup system for Claude Code. | `skills/loki-mode` |
|
||||
| **MCP Builder** | Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. | `skills/mcp-builder` |
|
||||
| **Metasploit Framework** | This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". | `skills/metasploit-framework` |
|
||||
| **Network 101** | This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs. | `skills/network-101` |
|
||||
| **NotebookLM** | Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. | `skills/notebooklm` |
|
||||
| **PDF (Official)** | Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. | `skills/pdf-official` |
|
||||
| **Pentest Checklist** | This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements. | `skills/pentest-checklist` |
|
||||
| **Pentest Commands** | This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references. | `skills/pentest-commands` |
|
||||
| **Planning With Files** | Implements Manus-style file-based planning for complex tasks. | `skills/planning-with-files` |
|
||||
| **Playwright Automation** | Complete browser automation with Playwright. | `skills/playwright-skill` |
|
||||
| **PPTX (Official)** | "Presentation creation, editing, and analysis. | `skills/pptx-official` |
|
||||
| **Privilege Escalation Methods** | This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems. | `skills/privilege-escalation-methods` |
|
||||
| **Product Toolkit** | Comprehensive toolkit for product managers including RICE prioritization, customer interview analysis, PRD templates, discovery frameworks, and go-to-market strategies. | `skills/product-manager-toolkit` |
|
||||
| **Prompt Engineering** | Expert guide on prompt engineering patterns, best practices, and optimization techniques. | `skills/prompt-engineering` |
|
||||
| **Prompt Library** | "Curated collection of high-quality prompts for various use cases. | `skills/prompt-library` |
|
||||
| **React Best Practices** | React and Next. | `skills/react-best-practices` |
|
||||
| **React UI Patterns** | Modern React UI patterns for loading states, error handling, and data fetching. | `skills/react-ui-patterns` |
|
||||
| **Receiving Code Review** | Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation. | `skills/receiving-code-review` |
|
||||
| **Red Team Tools and Methodology** | This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters. | `skills/red-team-tools` |
|
||||
| **Requesting Code Review** | Use when completing tasks, implementing major features, or before merging to verify work meets requirements. | `skills/requesting-code-review` |
|
||||
| **SMTP Penetration Testing** | This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". | `skills/smtp-penetration-testing` |
|
||||
| **SQL Injection Testing** | This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". | `skills/sql-injection-testing` |
|
||||
| **SQLMap Database Penetration Testing** | This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing. | `skills/sqlmap-database-pentesting` |
|
||||
| **SSH Penetration Testing** | This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". | `skills/ssh-penetration-testing` |
|
||||
| **Security Scanning Tools** | This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". | `skills/scanning-tools` |
|
||||
| **Senior Architect** | Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. | `skills/senior-architect` |
|
||||
| **Senior Fullstack** | Comprehensive fullstack development skill for building complete web applications with React, Next. | `skills/senior-fullstack` |
|
||||
| **Shodan Reconnaissance and Pentesting** | This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports. | `skills/shodan-reconnaissance` |
|
||||
| **Shopify Development** | Build Shopify apps, extensions, themes using GraphQL Admin API, Shopify CLI, Polaris UI, and Liquid. Use when user asks about "shopify app", "checkout extension", "shopify theme", "liquid template", "polaris", "shopify graphql", "shopify webhook", or "metafields". | `skills/shopify-development` |
|
||||
| **Skill Creator** | Guide for creating effective skills. | `skills/skill-creator` |
|
||||
| **Skill Developer** | Create and manage Claude Code skills following Anthropic best practices. | `skills/skill-developer` |
|
||||
| **Slack GIF Creator** | Knowledge and utilities for creating animated GIFs optimized for Slack. | `skills/slack-gif-creator` |
|
||||
| **Software Architecture** | Guide for quality focused software architecture. | `skills/software-architecture` |
|
||||
| **Subagent Driven Dev** | Use when executing implementation plans with independent tasks in the current session. | `skills/subagent-driven-development` |
|
||||
| **Systematic Debugging** | Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes. | `skills/systematic-debugging` |
|
||||
| **TDD** | Use when implementing any feature or bugfix, before writing implementation code. | `skills/test-driven-development` |
|
||||
| **Test Fixing** | Run tests and systematically fix all failing tests using smart error grouping. | `skills/test-fixing` |
|
||||
| **Testing Patterns** | Jest testing patterns, factory functions, mocking strategies, and TDD workflow. | `skills/testing-patterns` |
|
||||
| **Theme Factory** | Toolkit for styling artifacts with a theme. | `skills/theme-factory` |
|
||||
| **Top 100 Vulnerabilities** | This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". | `skills/top-web-vulnerabilities` |
|
||||
| **UI/UX Pro Max** | "UI/UX design intelligence. | `skills/ui-ux-pro-max` |
|
||||
| **Using Git Worktrees** | Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification. | `skills/using-git-worktrees` |
|
||||
| **Using Superpowers** | Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions. | `skills/using-superpowers` |
|
||||
| **Verification Before Completion** | Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always. | `skills/verification-before-completion` |
|
||||
| **Web Artifacts** | Suite of tools for creating elaborate, multi-component claude. | `skills/web-artifacts-builder` |
|
||||
| **Web Design Guidelines** | Review UI code for Web Interface Guidelines compliance. | `skills/web-design-guidelines` |
|
||||
| **Webapp Testing** | Toolkit for interacting with and testing local web applications using Playwright. | `skills/webapp-testing` |
|
||||
| **Windows Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation. | `skills/windows-privilege-escalation` |
|
||||
| **Wireshark Network Traffic Analysis** | This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". | `skills/wireshark-analysis` |
|
||||
| **Workflow Automation** | "Design and implement automated workflows combining visual logic with custom code. | `skills/workflow-automation` |
|
||||
| **WordPress Penetration Testing** | This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". | `skills/wordpress-penetration-testing` |
|
||||
| **Writing Plans** | Use when you have a spec or requirements for a multi-step task, before touching code. | `skills/writing-plans` |
|
||||
| **Writing Skills** | Use when creating new skills, editing existing skills, or verifying skills work before deployment. | `skills/writing-skills` |
|
||||
| **XLSX (Official)** | "Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. | `skills/xlsx-official` |
|
||||
| Skill Name | Description | Path |
|
||||
| :-------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :--------------------------------------- |
|
||||
| **3D Web Experience** | Expert in building 3D experiences for the web - Three.js, React Three Fiber, Spline, WebGL. | `skills/3d-web-experience` |
|
||||
| **Active Directory Attacks** | This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing. | `skills/active-directory-attacks` |
|
||||
| **Address GitHub Comments** | Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI. | `skills/address-github-comments` |
|
||||
| **Agent Evaluation** | Testing and benchmarking LLM agents including behavioral testing, capability assessment, reliability metrics. | `skills/agent-evaluation` |
|
||||
| **Agent Manager Skill** | Use when you need to manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling. | `skills/agent-manager-skill` |
|
||||
| **Agent Memory Systems** | Memory architecture for agents: short-term, long-term (vector stores), and cognitive architectures. | `skills/agent-memory-systems` |
|
||||
| **Agent Tool Builder** | Tool design from schema to error handling. JSON Schema best practices, validation, and MCP. | `skills/agent-tool-builder` |
|
||||
| **AI Agents Architect** | Expert in autonomous AI agents. Tool use, memory systems, planning strategies, multi-agent orchestration. | `skills/ai-agents-architect` |
|
||||
| **AI Product** | LLM integration patterns, RAG architecture, prompt engineering, AI UX, and cost optimization. | `skills/ai-product` |
|
||||
| **AI Wrapper Product** | Building products that wrap AI APIs into focused tools. Prompt engineering, cost management. | `skills/ai-wrapper-product` |
|
||||
| **Algolia Search** | Algolia search implementation, indexing strategies, React InstantSearch, relevance tuning. | `skills/algolia-search` |
|
||||
| **Algorithmic Art** | Creating algorithmic art using p5. | `skills/algorithmic-art` |
|
||||
| **API Fuzzing for Bug Bounty** | This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guidance on API security assessment techniques. | `skills/api-fuzzing-bug-bounty` |
|
||||
| **App Store Optimization** | Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store. | `skills/app-store-optimization` |
|
||||
| **Autonomous Agent Patterns** | "Design patterns for building autonomous coding agents. | `skills/autonomous-agent-patterns` |
|
||||
| **Autonomous Agents** | AI systems that independently decompose goals, plan actions, execute tools. ReAct, reflection. | `skills/autonomous-agents` |
|
||||
| **AWS Penetration Testing** | This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment. | `skills/aws-penetration-testing` |
|
||||
| **AWS Serverless** | Serverless on AWS. Lambda, API Gateway, DynamoDB, SQS/SNS, SAM/CDK deployment. | `skills/aws-serverless` |
|
||||
| **Azure Functions** | Azure Functions patterns. Isolated worker model, Durable Functions, cold start optimization. | `skills/azure-functions` |
|
||||
| **Backend Guidelines** | Comprehensive backend development guide for Node. | `skills/backend-dev-guidelines` |
|
||||
| **BlockRun** | Agent wallet for LLM micropayments. Use when user needs capabilities Claude lacks (image generation, real-time X/Twitter data) or explicitly requests external models ("blockrun", "use grok", "use gpt", "dall-e", "deepseek"). | `skills/blockrun` |
|
||||
| **Brainstorming** | "You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. | `skills/brainstorming` |
|
||||
| **Brand Guidelines (Anthropic)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-anthropic` |
|
||||
| **Brand Guidelines (Community)** | Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. | `skills/brand-guidelines-community` |
|
||||
| **Broken Authentication Testing** | This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". | `skills/broken-authentication` |
|
||||
| **Browser Automation** | Browser automation with Playwright and Puppeteer. Testing, scraping, agentic control. | `skills/browser-automation` |
|
||||
| **Browser Extension Builder** | Building browser extensions - Chrome, Firefox. Manifest v3, content scripts, monetization. | `skills/browser-extension-builder` |
|
||||
| **BullMQ Specialist** | BullMQ for Redis-backed job queues, background processing in Node.js/TypeScript. | `skills/bullmq-specialist` |
|
||||
| **Bun Development** | "Modern JavaScript/TypeScript development with Bun runtime. | `skills/bun-development` |
|
||||
| **Burp Suite Web Application Testing** | This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". | `skills/burp-suite-testing` |
|
||||
| **Canvas Design** | Create beautiful visual art in . | `skills/canvas-design` |
|
||||
| **Claude Code Guide** | Master guide for using Claude Code effectively. | `skills/claude-code-guide` |
|
||||
| **Claude D3.js** | Creating interactive data visualisations using d3. | `skills/claude-d3js-skill` |
|
||||
| **Clerk Auth** | Clerk auth implementation, middleware, organizations, webhooks, user sync. | `skills/clerk-auth` |
|
||||
| **Cloud Penetration Testing** | This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". | `skills/cloud-penetration-testing` |
|
||||
| **Computer Use Agents** | AI agents that interact with computers like humans. Screen control, sandboxing. | `skills/computer-use-agents` |
|
||||
| **Concise Planning** | Use when a user asks for a plan for a coding task, to generate a clear, actionable, and atomic checklist. | `skills/concise-planning` |
|
||||
| **Content Creator** | Create SEO-optimized marketing content with consistent brand voice. | `skills/content-creator` |
|
||||
| **Context Window Management** | Managing LLM context windows. Summarization, trimming, routing. | `skills/context-window-management` |
|
||||
| **Conversation Memory** | Persistent memory for LLM conversations. Short-term, long-term, entity-based memory. | `skills/conversation-memory` |
|
||||
| **Core Components** | Core component library and design system patterns. | `skills/core-components` |
|
||||
| **CrewAI** | Role-based multi-agent framework. Agent design, task definition, crew orchestration. | `skills/crewai` |
|
||||
| **Cross-Site Scripting and HTML Injection Testing** | This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". | `skills/xss-html-injection` |
|
||||
| **Discord Bot Architect** | Production Discord bots. Discord.js, Pycord, slash commands, sharding. | `skills/discord-bot-architect` |
|
||||
| **Dispatching Parallel Agents** | Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies. | `skills/dispatching-parallel-agents` |
|
||||
| **Doc Co-authoring** | Guide users through a structured workflow for co-authoring documentation. | `skills/doc-coauthoring` |
|
||||
| **DOCX (Official)** | "Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. | `skills/docx-official` |
|
||||
| **Email Systems** | Transactional email, marketing automation, deliverability, infrastructure. | `skills/email-systems` |
|
||||
| **Ethical Hacking Methodology** | This skill should be used when the user asks to "learn ethical hacking", "understand penetration testing lifecycle", "perform reconnaissance", "conduct security scanning", "exploit vulnerabilities", or "write penetration test reports". | `skills/ethical-hacking-methodology` |
|
||||
| **Executing Plans** | Use when you have a written implementation plan to execute in a separate session with review checkpoints. | `skills/executing-plans` |
|
||||
| **File Organizer** | Intelligently organizes files and folders by understanding context, finding duplicates, and suggesting better organizational structures. | `skills/file-organizer` |
|
||||
| **File Path Traversal Testing** | This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". | `skills/file-path-traversal` |
|
||||
| **File Uploads** | File uploads and cloud storage. S3, Cloudflare R2, presigned URLs. | `skills/file-uploads` |
|
||||
| **Finishing Dev Branch** | Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup. | `skills/finishing-a-development-branch` |
|
||||
| **Firebase** | Firebase Auth, Firestore, Realtime Database, Cloud Functions, Storage. | `skills/firebase` |
|
||||
| **Frontend Design** | Create distinctive, production-grade frontend interfaces with high design quality. | `skills/frontend-design` |
|
||||
| **Frontend Guidelines** | Frontend development guidelines for React/TypeScript applications. | `skills/frontend-dev-guidelines` |
|
||||
| **GCP Cloud Run** | Serverless on GCP. Cloud Run services and functions, Pub/Sub. | `skills/gcp-cloud-run` |
|
||||
| **Git Pushing** | Stage, commit, and push git changes with conventional commit messages. | `skills/git-pushing` |
|
||||
| **GitHub Workflow Automation** | "Automate GitHub workflows with AI assistance. | `skills/github-workflow-automation` |
|
||||
| **GraphQL** | Schema design, resolvers, DataLoader, federation, Apollo/urql integration. | `skills/graphql` |
|
||||
| **HTML Injection Testing** | This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". | `skills/html-injection-testing` |
|
||||
| **HubSpot Integration** | HubSpot CRM integration. OAuth, CRM objects, webhooks, custom objects. | `skills/hubspot-integration` |
|
||||
| **IDOR Vulnerability Testing** | This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data. | `skills/idor-testing` |
|
||||
| **Inngest** | Inngest for serverless background jobs, event-driven workflows. | `skills/inngest` |
|
||||
| **Interactive Portfolio** | Building portfolios that land jobs. Developer, designer portfolios. | `skills/interactive-portfolio` |
|
||||
| **Internal Comms (Anthropic)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-anthropic` |
|
||||
| **Internal Comms (Community)** | A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. | `skills/internal-comms-community` |
|
||||
| **JavaScript Mastery** | "Comprehensive JavaScript reference covering 33+ essential concepts every developer should know. | `skills/javascript-mastery` |
|
||||
| **Kaizen** | Guide for continuous improvement, error proofing, and standardization. | `skills/kaizen` |
|
||||
| **Langfuse** | Open-source LLM observability. Tracing, prompt management, evaluation. | `skills/langfuse` |
|
||||
| **LangGraph** | Stateful, multi-actor AI applications. Graph construction, persistence. | `skills/langgraph` |
|
||||
| **Linux Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". | `skills/linux-privilege-escalation` |
|
||||
| **Linux Shell Scripting** | This skill should be used when the user asks to "create bash scripts", "automate Linux tasks", "monitor system resources", "backup files", "manage users", or "write production shell scripts". | `skills/linux-shell-scripting` |
|
||||
| **LLM App Patterns** | "Production-ready patterns for building LLM applications. | `skills/llm-app-patterns` |
|
||||
| **Loki Mode** | Multi-agent autonomous startup system for Claude Code. | `skills/loki-mode` |
|
||||
| **MCP Builder** | Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. | `skills/mcp-builder` |
|
||||
| **Metasploit Framework** | This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". | `skills/metasploit-framework` |
|
||||
| **Moodle External API Development** | Create custom external web service APIs for Moodle LMS. Use when implementing web services for course management, user tracking, quiz operations, or custom plugin functionality. Covers parameter validation, database operations, error handling, service registration, and Moodle coding standards. | `skills/moodle-external-api-development` |
|
||||
| **Micro-SaaS Launcher** | Launching small SaaS products fast. Idea validation, MVP, pricing. | `skills/micro-saas-launcher` |
|
||||
| **Neon Postgres** | Neon serverless Postgres, branching, connection pooling, Prisma integration. | `skills/neon-postgres` |
|
||||
| **Network 101** | This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs. | `skills/network-101` |
|
||||
| **Next.js Supabase Auth** | Supabase Auth with Next.js App Router. Auth middleware. | `skills/nextjs-supabase-auth` |
|
||||
| **NotebookLM** | Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. | `skills/notebooklm` |
|
||||
| **Notion Template Business** | Building and selling Notion templates. Design, pricing, marketing. | `skills/notion-template-business` |
|
||||
| **PDF (Official)** | Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. | `skills/pdf-official` |
|
||||
| **Pentest Checklist** | This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements. | `skills/pentest-checklist` |
|
||||
| **Pentest Commands** | This skill should be used when the user asks to "run pentest commands", "scan with nmap", "use metasploit exploits", "crack passwords with hydra or john", "scan web vulnerabilities with nikto", "enumerate networks", or needs essential penetration testing command references. | `skills/pentest-commands` |
|
||||
| **Personal Tool Builder** | Building custom tools. Rapid prototyping, local-first apps, CLI tools. | `skills/personal-tool-builder` |
|
||||
| **Plaid Fintech** | Plaid API for banking. Link token flows, transactions, ACH. | `skills/plaid-fintech` |
|
||||
| **Planning With Files** | Implements Manus-style file-based planning for complex tasks. | `skills/planning-with-files` |
|
||||
| **Playwright Automation** | Complete browser automation with Playwright. | `skills/playwright-skill` |
|
||||
| **PPTX (Official)** | "Presentation creation, editing, and analysis. | `skills/pptx-official` |
|
||||
| **Privilege Escalation Methods** | This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems. | `skills/privilege-escalation-methods` |
|
||||
| **Product Toolkit** | Comprehensive toolkit for product managers including RICE prioritization, customer interview analysis, PRD templates, discovery frameworks, and go-to-market strategies. | `skills/product-manager-toolkit` |
|
||||
| **Prompt Caching** | Caching strategies for LLM prompts. Anthropic caching, CAG. | `skills/prompt-caching` |
|
||||
| **Prompt Engineer** | Designing prompts for LLM applications. Structure, evaluation. | `skills/prompt-engineer` |
|
||||
| **Prompt Engineering** | Expert guide on prompt engineering patterns, best practices, and optimization techniques. | `skills/prompt-engineering` |
|
||||
| **Prompt Library** | "Curated collection of high-quality prompts for various use cases. | `skills/prompt-library` |
|
||||
| **RAG Engineer** | Building RAG systems. Embedding models, vector databases, chunking. | `skills/rag-engineer` |
|
||||
| **RAG Implementation** | RAG patterns. Chunking, embeddings, vector stores. | `skills/rag-implementation` |
|
||||
| **React Best Practices** | React and Next. | `skills/react-best-practices` |
|
||||
| **React UI Patterns** | Modern React UI patterns for loading states, error handling, and data fetching. | `skills/react-ui-patterns` |
|
||||
| **Receiving Code Review** | Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation. | `skills/receiving-code-review` |
|
||||
| **Red Team Tools and Methodology** | This skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters. | `skills/red-team-tools` |
|
||||
| **Requesting Code Review** | Use when completing tasks, implementing major features, or before merging to verify work meets requirements. | `skills/requesting-code-review` |
|
||||
| **Salesforce Development** | Salesforce integration, Apex development, Lightning components. | `skills/salesforce-development` |
|
||||
| **Scroll Experience** | GSAP/Framer scroll-driven storytelling. Parallax effects. | `skills/scroll-experience` |
|
||||
| **Security Scanning Tools** | This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". | `skills/scanning-tools` |
|
||||
| **Segment CDP** | Segment customer data platform. Event tracking, identity resolution. | `skills/segment-cdp` |
|
||||
| **Senior Architect** | Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. | `skills/senior-architect` |
|
||||
| **Senior Fullstack** | Comprehensive fullstack development skill for building complete web applications with React, Next. | `skills/senior-fullstack` |
|
||||
| **Shodan Reconnaissance and Pentesting** | This skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports. | `skills/shodan-reconnaissance` |
|
||||
| **Shopify Apps** | Building Shopify apps. App Bridge, Polaris, webhooks. | `skills/shopify-apps` |
|
||||
| **Shopify Development** | Build Shopify apps, extensions, themes using GraphQL Admin API, Shopify CLI, Polaris UI, and Liquid. Use when user asks about "shopify app", "checkout extension", "shopify theme", "liquid template", "polaris", "shopify graphql", "shopify webhook", or "metafields". | `skills/shopify-development` |
|
||||
| **Skill Creator** | Guide for creating effective skills. | `skills/skill-creator` |
|
||||
| **Skill Developer** | Create and manage Claude Code skills following Anthropic best practices. | `skills/skill-developer` |
|
||||
| **Slack Bot Builder** | Production Slack bots. Bolt framework, slash commands, modals. | `skills/slack-bot-builder` |
|
||||
| **Slack GIF Creator** | Knowledge and utilities for creating animated GIFs optimized for Slack. | `skills/slack-gif-creator` |
|
||||
| **SMTP Penetration Testing** | This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". | `skills/smtp-penetration-testing` |
|
||||
| **Software Architecture** | Guide for quality focused software architecture. | `skills/software-architecture` |
|
||||
| **SQL Injection Testing** | This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". | `skills/sql-injection-testing` |
|
||||
| **SQLMap Database Penetration Testing** | This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing. | `skills/sqlmap-database-pentesting` |
|
||||
| **SSH Penetration Testing** | This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". | `skills/ssh-penetration-testing` |
|
||||
| **Stripe Integration** | Stripe patterns. Checkout, subscriptions, payment intents, webhooks. | `skills/stripe-integration` |
|
||||
| **Subagent Driven Dev** | Use when executing implementation plans with independent tasks in the current session. | `skills/subagent-driven-development` |
|
||||
| **Systematic Debugging** | Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes. | `skills/systematic-debugging` |
|
||||
| **TDD** | Use when implementing any feature or bugfix, before writing implementation code. | `skills/test-driven-development` |
|
||||
| **Telegram Bot Builder** | Building Telegram bots. Bot API, inline mode, payments, Mini Apps. | `skills/telegram-bot-builder` |
|
||||
| **Telegram Mini App** | TON Connect, Telegram Mini Apps, wallet integration. | `skills/telegram-mini-app` |
|
||||
| **Test Fixing** | Run tests and systematically fix all failing tests using smart error grouping. | `skills/test-fixing` |
|
||||
| **Testing Patterns** | Jest testing patterns, factory functions, mocking strategies, and TDD workflow. | `skills/testing-patterns` |
|
||||
| **Theme Factory** | Toolkit for styling artifacts with a theme. | `skills/theme-factory` |
|
||||
| **Top 100 Vulnerabilities** | This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". | `skills/top-web-vulnerabilities` |
|
||||
| **Trigger.dev** | Trigger.dev for serverless background jobs. Long-running tasks. | `skills/trigger-dev` |
|
||||
| **Twilio Communications** | Twilio for SMS, voice, video. Programmable messaging, OTP. | `skills/twilio-communications` |
|
||||
| **UI/UX Pro Max** | "UI/UX design intelligence. | `skills/ui-ux-pro-max` |
|
||||
| **Upstash QStash** | Upstash QStash for serverless message queues. | `skills/upstash-qstash` |
|
||||
| **Using Git Worktrees** | Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification. | `skills/using-git-worktrees` |
|
||||
| **Using Superpowers** | Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions. | `skills/using-superpowers` |
|
||||
| **Vercel Deployment** | Vercel deployment. Edge functions, preview deployments. | `skills/vercel-deployment` |
|
||||
| **Verification Before Completion** | Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always. | `skills/verification-before-completion` |
|
||||
| **Viral Generator Builder** | Building shareable generators that go viral. | `skills/viral-generator-builder` |
|
||||
| **Voice Agents** | Voice-based AI assistants. Speech-to-text, real-time conversation. | `skills/voice-agents` |
|
||||
| **Voice AI Development** | Voice AI patterns. Wake words, streaming ASR, emotional TTS. | `skills/voice-ai-development` |
|
||||
| **Web Artifacts** | Suite of tools for creating elaborate, multi-component claude. | `skills/web-artifacts-builder` |
|
||||
| **Web Design Guidelines** | Review UI code for Web Interface Guidelines compliance. | `skills/web-design-guidelines` |
|
||||
| **Webapp Testing** | Toolkit for interacting with and testing local web applications using Playwright. | `skills/webapp-testing` |
|
||||
| **Windows Privilege Escalation** | This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation. | `skills/windows-privilege-escalation` |
|
||||
| **Wireshark Network Traffic Analysis** | This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". | `skills/wireshark-analysis` |
|
||||
| **WordPress Penetration Testing** | This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". | `skills/wordpress-penetration-testing` |
|
||||
| **Workflow Automation** | "Design and implement automated workflows combining visual logic with custom code. | `skills/workflow-automation` |
|
||||
| **Writing Plans** | Use when you have a spec or requirements for a multi-step task, before touching code. | `skills/writing-plans` |
|
||||
| **Writing Skills** | Use when creating new skills, editing existing skills, or verifying skills work before deployment. | `skills/writing-skills` |
|
||||
| **XLSX (Official)** | "Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. | `skills/xlsx-official` |
|
||||
| **Zapier/Make Patterns** | No-code automation. Zapier, Make, n8n workflows. | `skills/zapier-make-patterns` |
|
||||
|
||||
> [!TIP]
|
||||
> Use the `validate_skills.py` script in the `scripts/` directory to ensure all skills are properly formatted and ready for use.
|
||||
@@ -246,6 +305,7 @@ This collection would not be possible without the incredible work of the Claude
|
||||
- **[alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills)**: Senior Engineering and PM toolkit.
|
||||
- **[karanb192/awesome-claude-skills](https://github.com/karanb192/awesome-claude-skills)**: A massive list of verified skills for Claude Code.
|
||||
- **[zircote/.claude](https://github.com/zircote/.claude)**: Shopify development skill reference.
|
||||
- **[vibeforge1111/vibeship-spawner-skills](https://github.com/vibeforge1111/vibeship-spawner-skills)**: AI Agents, Integrations, Maker Tools (57 skills, Apache 2.0).
|
||||
|
||||
### Inspirations
|
||||
|
||||
|
||||
@@ -7,6 +7,8 @@ def generate_index(skills_dir, output_file):
|
||||
skills = []
|
||||
|
||||
for root, dirs, files in os.walk(skills_dir):
|
||||
# Skip .disabled directories
|
||||
dirs[:] = [d for d in dirs if d != '.disabled']
|
||||
if "SKILL.md" in files:
|
||||
skill_path = os.path.join(root, "SKILL.md")
|
||||
dir_name = os.path.basename(root)
|
||||
|
||||
@@ -7,6 +7,8 @@ def validate_skills(skills_dir):
|
||||
skill_count = 0
|
||||
|
||||
for root, dirs, files in os.walk(skills_dir):
|
||||
# Skip .disabled directories
|
||||
dirs[:] = [d for d in dirs if d != '.disabled']
|
||||
if "SKILL.md" in files:
|
||||
skill_count += 1
|
||||
skill_path = os.path.join(root, "SKILL.md")
|
||||
|
||||
597
skills/moodle-external-api-development/SKILL.md
Normal file
597
skills/moodle-external-api-development/SKILL.md
Normal file
@@ -0,0 +1,597 @@
|
||||
---
|
||||
name: moodle-external-api-development
|
||||
description: Create custom external web service APIs for Moodle LMS. Use when implementing web services for course management, user tracking, quiz operations, or custom plugin functionality. Covers parameter validation, database operations, error handling, service registration, and Moodle coding standards.
|
||||
---
|
||||
|
||||
# Moodle External API Development
|
||||
|
||||
This skill guides you through creating custom external web service APIs for Moodle LMS, following Moodle's external API framework and coding standards.
|
||||
|
||||
## When to Use This Skill
|
||||
|
||||
- Creating custom web services for Moodle plugins
|
||||
- Implementing REST/AJAX endpoints for course management
|
||||
- Building APIs for quiz operations, user tracking, or reporting
|
||||
- Exposing Moodle functionality to external applications
|
||||
- Developing mobile app backends using Moodle
|
||||
|
||||
## Core Architecture Pattern
|
||||
|
||||
Moodle external APIs follow a strict three-method pattern:
|
||||
|
||||
1. **`execute_parameters()`** - Defines input parameter structure
|
||||
2. **`execute()`** - Contains business logic
|
||||
3. **`execute_returns()`** - Defines return structure
|
||||
|
||||
## Step-by-Step Implementation
|
||||
|
||||
### Step 1: Create the External API Class File
|
||||
|
||||
**Location**: `/local/yourplugin/classes/external/your_api_name.php`
|
||||
|
||||
```php
|
||||
<?php
|
||||
namespace local_yourplugin\external;
|
||||
|
||||
defined('MOODLE_INTERNAL') || die();
|
||||
require_once("$CFG->libdir/externallib.php");
|
||||
|
||||
use external_api;
|
||||
use external_function_parameters;
|
||||
use external_single_structure;
|
||||
use external_value;
|
||||
|
||||
class your_api_name extends external_api {
|
||||
|
||||
// Three required methods will go here
|
||||
|
||||
}
|
||||
```
|
||||
|
||||
**Key Points**:
|
||||
- Class must extend `external_api`
|
||||
- Namespace follows: `local_pluginname\external` or `mod_modname\external`
|
||||
- Include the security check: `defined('MOODLE_INTERNAL') || die();`
|
||||
- Require externallib.php for base classes
|
||||
|
||||
### Step 2: Define Input Parameters
|
||||
|
||||
```php
|
||||
public static function execute_parameters() {
|
||||
return new external_function_parameters([
|
||||
'userid' => new external_value(PARAM_INT, 'User ID', VALUE_REQUIRED),
|
||||
'courseid' => new external_value(PARAM_INT, 'Course ID', VALUE_REQUIRED),
|
||||
'options' => new external_single_structure([
|
||||
'includedetails' => new external_value(PARAM_BOOL, 'Include details', VALUE_DEFAULT, false),
|
||||
'limit' => new external_value(PARAM_INT, 'Result limit', VALUE_DEFAULT, 10)
|
||||
], 'Options', VALUE_OPTIONAL)
|
||||
]);
|
||||
}
|
||||
```
|
||||
|
||||
**Common Parameter Types**:
|
||||
- `PARAM_INT` - Integers
|
||||
- `PARAM_TEXT` - Plain text (HTML stripped)
|
||||
- `PARAM_RAW` - Raw text (no cleaning)
|
||||
- `PARAM_BOOL` - Boolean values
|
||||
- `PARAM_FLOAT` - Floating point numbers
|
||||
- `PARAM_ALPHANUMEXT` - Alphanumeric with extended chars
|
||||
|
||||
**Structures**:
|
||||
- `external_value` - Single value
|
||||
- `external_single_structure` - Object with named fields
|
||||
- `external_multiple_structure` - Array of items
|
||||
|
||||
**Value Flags**:
|
||||
- `VALUE_REQUIRED` - Parameter must be provided
|
||||
- `VALUE_OPTIONAL` - Parameter is optional
|
||||
- `VALUE_DEFAULT, defaultvalue` - Optional with default
|
||||
|
||||
### Step 3: Implement Business Logic
|
||||
|
||||
```php
|
||||
public static function execute($userid, $courseid, $options = []) {
|
||||
global $DB, $USER;
|
||||
|
||||
// 1. Validate parameters
|
||||
$params = self::validate_parameters(self::execute_parameters(), [
|
||||
'userid' => $userid,
|
||||
'courseid' => $courseid,
|
||||
'options' => $options
|
||||
]);
|
||||
|
||||
// 2. Check permissions/capabilities
|
||||
$context = \context_course::instance($params['courseid']);
|
||||
self::validate_context($context);
|
||||
require_capability('moodle/course:view', $context);
|
||||
|
||||
// 3. Verify user access
|
||||
if ($params['userid'] != $USER->id) {
|
||||
require_capability('moodle/course:viewhiddenactivities', $context);
|
||||
}
|
||||
|
||||
// 4. Database operations
|
||||
$sql = "SELECT id, name, timecreated
|
||||
FROM {your_table}
|
||||
WHERE userid = :userid
|
||||
AND courseid = :courseid
|
||||
LIMIT :limit";
|
||||
|
||||
$records = $DB->get_records_sql($sql, [
|
||||
'userid' => $params['userid'],
|
||||
'courseid' => $params['courseid'],
|
||||
'limit' => $params['options']['limit']
|
||||
]);
|
||||
|
||||
// 5. Process and return data
|
||||
$results = [];
|
||||
foreach ($records as $record) {
|
||||
$results[] = [
|
||||
'id' => $record->id,
|
||||
'name' => $record->name,
|
||||
'timestamp' => $record->timecreated
|
||||
];
|
||||
}
|
||||
|
||||
return [
|
||||
'items' => $results,
|
||||
'count' => count($results)
|
||||
];
|
||||
}
|
||||
```
|
||||
|
||||
**Critical Steps**:
|
||||
1. **Always validate parameters** using `validate_parameters()`
|
||||
2. **Check context** using `validate_context()`
|
||||
3. **Verify capabilities** using `require_capability()`
|
||||
4. **Use parameterized queries** to prevent SQL injection
|
||||
5. **Return structured data** matching return definition
|
||||
|
||||
### Step 4: Define Return Structure
|
||||
|
||||
```php
|
||||
public static function execute_returns() {
|
||||
return new external_single_structure([
|
||||
'items' => new external_multiple_structure(
|
||||
new external_single_structure([
|
||||
'id' => new external_value(PARAM_INT, 'Item ID'),
|
||||
'name' => new external_value(PARAM_TEXT, 'Item name'),
|
||||
'timestamp' => new external_value(PARAM_INT, 'Creation time')
|
||||
])
|
||||
),
|
||||
'count' => new external_value(PARAM_INT, 'Total items')
|
||||
]);
|
||||
}
|
||||
```
|
||||
|
||||
**Return Structure Rules**:
|
||||
- Must match exactly what `execute()` returns
|
||||
- Use appropriate parameter types
|
||||
- Document each field with description
|
||||
- Nested structures allowed
|
||||
|
||||
### Step 5: Register the Service
|
||||
|
||||
**Location**: `/local/yourplugin/db/services.php`
|
||||
|
||||
```php
|
||||
<?php
|
||||
defined('MOODLE_INTERNAL') || die();
|
||||
|
||||
$functions = [
|
||||
'local_yourplugin_your_api_name' => [
|
||||
'classname' => 'local_yourplugin\external\your_api_name',
|
||||
'methodname' => 'execute',
|
||||
'classpath' => 'local/yourplugin/classes/external/your_api_name.php',
|
||||
'description' => 'Brief description of what this API does',
|
||||
'type' => 'read', // or 'write'
|
||||
'ajax' => true,
|
||||
'capabilities'=> 'moodle/course:view', // comma-separated if multiple
|
||||
'services' => [MOODLE_OFFICIAL_MOBILE_SERVICE] // Optional
|
||||
],
|
||||
];
|
||||
|
||||
$services = [
|
||||
'Your Plugin Web Service' => [
|
||||
'functions' => [
|
||||
'local_yourplugin_your_api_name'
|
||||
],
|
||||
'restrictedusers' => 0,
|
||||
'enabled' => 1
|
||||
]
|
||||
];
|
||||
```
|
||||
|
||||
**Service Registration Keys**:
|
||||
- `classname` - Full namespaced class name
|
||||
- `methodname` - Always 'execute'
|
||||
- `type` - 'read' (SELECT) or 'write' (INSERT/UPDATE/DELETE)
|
||||
- `ajax` - Set true for AJAX/REST access
|
||||
- `capabilities` - Required Moodle capabilities
|
||||
- `services` - Optional service bundles
|
||||
|
||||
### Step 6: Implement Error Handling & Logging
|
||||
|
||||
```php
|
||||
private static function log_debug($message) {
|
||||
global $CFG;
|
||||
$logdir = $CFG->dataroot . '/local_yourplugin';
|
||||
if (!file_exists($logdir)) {
|
||||
mkdir($logdir, 0777, true);
|
||||
}
|
||||
$debuglog = $logdir . '/api_debug.log';
|
||||
$timestamp = date('Y-m-d H:i:s');
|
||||
file_put_contents($debuglog, "[$timestamp] $message\n", FILE_APPEND | LOCK_EX);
|
||||
}
|
||||
|
||||
public static function execute($userid, $courseid) {
|
||||
global $DB;
|
||||
|
||||
try {
|
||||
self::log_debug("API called: userid=$userid, courseid=$courseid");
|
||||
|
||||
// Validate parameters
|
||||
$params = self::validate_parameters(self::execute_parameters(), [
|
||||
'userid' => $userid,
|
||||
'courseid' => $courseid
|
||||
]);
|
||||
|
||||
// Your logic here
|
||||
|
||||
self::log_debug("API completed successfully");
|
||||
return $result;
|
||||
|
||||
} catch (\invalid_parameter_exception $e) {
|
||||
self::log_debug("Parameter validation failed: " . $e->getMessage());
|
||||
throw $e;
|
||||
} catch (\moodle_exception $e) {
|
||||
self::log_debug("Moodle exception: " . $e->getMessage());
|
||||
throw $e;
|
||||
} catch (\Exception $e) {
|
||||
// Log detailed error info
|
||||
$lastsql = method_exists($DB, 'get_last_sql') ? $DB->get_last_sql() : '[N/A]';
|
||||
self::log_debug("Fatal error: " . $e->getMessage());
|
||||
self::log_debug("Last SQL: " . $lastsql);
|
||||
self::log_debug("Stack trace: " . $e->getTraceAsString());
|
||||
throw $e;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
**Error Handling Best Practices**:
|
||||
- Wrap logic in try-catch blocks
|
||||
- Log errors with timestamps and context
|
||||
- Capture SQL queries on database errors
|
||||
- Preserve stack traces for debugging
|
||||
- Re-throw exceptions after logging
|
||||
|
||||
## Advanced Patterns
|
||||
|
||||
### Complex Database Operations
|
||||
|
||||
```php
|
||||
// Transaction example
|
||||
$transaction = $DB->start_delegated_transaction();
|
||||
|
||||
try {
|
||||
// Insert record
|
||||
$recordid = $DB->insert_record('your_table', $dataobject);
|
||||
|
||||
// Update related records
|
||||
$DB->set_field('another_table', 'status', 1, ['recordid' => $recordid]);
|
||||
|
||||
// Commit transaction
|
||||
$transaction->allow_commit();
|
||||
} catch (\Exception $e) {
|
||||
$transaction->rollback($e);
|
||||
throw $e;
|
||||
}
|
||||
```
|
||||
|
||||
### Working with Course Modules
|
||||
|
||||
```php
|
||||
// Create course module
|
||||
$moduleid = $DB->get_field('modules', 'id', ['name' => 'quiz'], MUST_EXIST);
|
||||
|
||||
$cm = new \stdClass();
|
||||
$cm->course = $courseid;
|
||||
$cm->module = $moduleid;
|
||||
$cm->instance = 0; // Will be updated after activity creation
|
||||
$cm->visible = 1;
|
||||
$cm->groupmode = 0;
|
||||
$cmid = add_course_module($cm);
|
||||
|
||||
// Create activity instance (e.g., quiz)
|
||||
$quiz = new \stdClass();
|
||||
$quiz->course = $courseid;
|
||||
$quiz->name = 'My Quiz';
|
||||
$quiz->coursemodule = $cmid;
|
||||
// ... other quiz fields ...
|
||||
|
||||
$quizid = quiz_add_instance($quiz, null);
|
||||
|
||||
// Update course module with instance ID
|
||||
$DB->set_field('course_modules', 'instance', $quizid, ['id' => $cmid]);
|
||||
course_add_cm_to_section($courseid, $cmid, 0);
|
||||
```
|
||||
|
||||
### Access Restrictions (Groups/Availability)
|
||||
|
||||
```php
|
||||
// Restrict activity to specific user via group
|
||||
$groupname = 'activity_' . $activityid . '_user_' . $userid;
|
||||
|
||||
// Create or get group
|
||||
if (!$groupid = $DB->get_field('groups', 'id', ['courseid' => $courseid, 'name' => $groupname])) {
|
||||
$groupdata = (object)[
|
||||
'courseid' => $courseid,
|
||||
'name' => $groupname,
|
||||
'timecreated' => time(),
|
||||
'timemodified' => time()
|
||||
];
|
||||
$groupid = $DB->insert_record('groups', $groupdata);
|
||||
}
|
||||
|
||||
// Add user to group
|
||||
if (!$DB->record_exists('groups_members', ['groupid' => $groupid, 'userid' => $userid])) {
|
||||
$DB->insert_record('groups_members', (object)[
|
||||
'groupid' => $groupid,
|
||||
'userid' => $userid,
|
||||
'timeadded' => time()
|
||||
]);
|
||||
}
|
||||
|
||||
// Set availability condition
|
||||
$restriction = [
|
||||
'op' => '&',
|
||||
'show' => false,
|
||||
'c' => [
|
||||
[
|
||||
'type' => 'group',
|
||||
'id' => $groupid
|
||||
]
|
||||
],
|
||||
'showc' => [false]
|
||||
];
|
||||
|
||||
$DB->set_field('course_modules', 'availability', json_encode($restriction), ['id' => $cmid]);
|
||||
```
|
||||
|
||||
### Random Question Selection with Tags
|
||||
|
||||
```php
|
||||
private static function get_random_questions($categoryid, $tagname, $limit) {
|
||||
global $DB;
|
||||
|
||||
$sql = "SELECT q.id
|
||||
FROM {question} q
|
||||
INNER JOIN {question_versions} qv ON qv.questionid = q.id
|
||||
INNER JOIN {question_bank_entries} qbe ON qbe.id = qv.questionbankentryid
|
||||
INNER JOIN {question_categories} qc ON qc.id = qbe.questioncategoryid
|
||||
JOIN {tag_instance} ti ON ti.itemid = q.id
|
||||
JOIN {tag} t ON t.id = ti.tagid
|
||||
WHERE LOWER(t.name) = :tagname
|
||||
AND qc.id = :categoryid
|
||||
AND ti.itemtype = 'question'
|
||||
AND q.qtype = 'multichoice'";
|
||||
|
||||
$qids = $DB->get_fieldset_sql($sql, [
|
||||
'categoryid' => $categoryid,
|
||||
'tagname' => strtolower($tagname)
|
||||
]);
|
||||
|
||||
shuffle($qids);
|
||||
return array_slice($qids, 0, $limit);
|
||||
}
|
||||
```
|
||||
|
||||
## Testing Your API
|
||||
|
||||
### 1. Via Moodle Web Services Test Client
|
||||
|
||||
1. Enable web services: **Site administration > Advanced features**
|
||||
2. Enable REST protocol: **Site administration > Plugins > Web services > Manage protocols**
|
||||
3. Create service: **Site administration > Server > Web services > External services**
|
||||
4. Test function: **Site administration > Development > Web service test client**
|
||||
|
||||
### 2. Via curl
|
||||
|
||||
```bash
|
||||
# Get token first
|
||||
curl -X POST "https://yourmoodle.com/login/token.php" \
|
||||
-d "username=admin" \
|
||||
-d "password=yourpassword" \
|
||||
-d "service=moodle_mobile_app"
|
||||
|
||||
# Call your API
|
||||
curl -X POST "https://yourmoodle.com/webservice/rest/server.php" \
|
||||
-d "wstoken=YOUR_TOKEN" \
|
||||
-d "wsfunction=local_yourplugin_your_api_name" \
|
||||
-d "moodlewsrestformat=json" \
|
||||
-d "userid=2" \
|
||||
-d "courseid=3"
|
||||
```
|
||||
|
||||
### 3. Via JavaScript (AJAX)
|
||||
|
||||
```javascript
|
||||
require(['core/ajax'], function(ajax) {
|
||||
var promises = ajax.call([{
|
||||
methodname: 'local_yourplugin_your_api_name',
|
||||
args: {
|
||||
userid: 2,
|
||||
courseid: 3
|
||||
}
|
||||
}]);
|
||||
|
||||
promises[0].done(function(response) {
|
||||
console.log('Success:', response);
|
||||
}).fail(function(error) {
|
||||
console.error('Error:', error);
|
||||
});
|
||||
});
|
||||
```
|
||||
|
||||
## Common Pitfalls & Solutions
|
||||
|
||||
### 1. "Function not found" Error
|
||||
**Solution**:
|
||||
- Purge caches: **Site administration > Development > Purge all caches**
|
||||
- Verify function name in services.php matches exactly
|
||||
- Check namespace and class name are correct
|
||||
|
||||
### 2. "Invalid parameter value detected"
|
||||
**Solution**:
|
||||
- Ensure parameter types match between definition and usage
|
||||
- Check required vs optional parameters
|
||||
- Validate nested structure definitions
|
||||
|
||||
### 3. SQL Injection Vulnerabilities
|
||||
**Solution**:
|
||||
- Always use placeholder parameters (`:paramname`)
|
||||
- Never concatenate user input into SQL strings
|
||||
- Use Moodle's database methods: `get_record()`, `get_records()`, etc.
|
||||
|
||||
### 4. Permission Denied Errors
|
||||
**Solution**:
|
||||
- Call `self::validate_context($context)` early in execute()
|
||||
- Check required capabilities match user's permissions
|
||||
- Verify user has role assignments in the context
|
||||
|
||||
### 5. Transaction Deadlocks
|
||||
**Solution**:
|
||||
- Keep transactions short
|
||||
- Always commit or rollback in finally blocks
|
||||
- Avoid nested transactions
|
||||
|
||||
## Debugging Checklist
|
||||
|
||||
- [ ] Check Moodle debug mode: **Site administration > Development > Debugging**
|
||||
- [ ] Review web services logs: **Site administration > Reports > Logs**
|
||||
- [ ] Check custom log files in `$CFG->dataroot/local_yourplugin/`
|
||||
- [ ] Verify database queries using `$DB->set_debug(true)`
|
||||
- [ ] Test with admin user to rule out permission issues
|
||||
- [ ] Clear browser cache and Moodle caches
|
||||
- [ ] Check PHP error logs on server
|
||||
|
||||
## Plugin Structure Checklist
|
||||
|
||||
```
|
||||
local/yourplugin/
|
||||
├── version.php # Plugin version and metadata
|
||||
├── db/
|
||||
│ ├── services.php # External service definitions
|
||||
│ └── access.php # Capability definitions (optional)
|
||||
├── classes/
|
||||
│ └── external/
|
||||
│ ├── your_api_name.php # External API implementation
|
||||
│ └── another_api.php # Additional APIs
|
||||
├── lang/
|
||||
│ └── en/
|
||||
│ └── local_yourplugin.php # Language strings
|
||||
└── tests/
|
||||
└── external_test.php # Unit tests (optional but recommended)
|
||||
```
|
||||
|
||||
## Examples from Real Implementation
|
||||
|
||||
### Simple Read API (Get Quiz Attempts)
|
||||
|
||||
```php
|
||||
<?php
|
||||
namespace local_userlog\external;
|
||||
|
||||
defined('MOODLE_INTERNAL') || die();
|
||||
require_once("$CFG->libdir/externallib.php");
|
||||
|
||||
use external_api;
|
||||
use external_function_parameters;
|
||||
use external_single_structure;
|
||||
use external_value;
|
||||
|
||||
class get_quiz_attempts extends external_api {
|
||||
public static function execute_parameters() {
|
||||
return new external_function_parameters([
|
||||
'userid' => new external_value(PARAM_INT, 'User ID'),
|
||||
'courseid' => new external_value(PARAM_INT, 'Course ID')
|
||||
]);
|
||||
}
|
||||
|
||||
public static function execute($userid, $courseid) {
|
||||
global $DB;
|
||||
|
||||
self::validate_parameters(self::execute_parameters(), [
|
||||
'userid' => $userid,
|
||||
'courseid' => $courseid
|
||||
]);
|
||||
|
||||
$sql = "SELECT COUNT(*) AS quiz_attempts
|
||||
FROM {quiz_attempts} qa
|
||||
JOIN {quiz} q ON qa.quiz = q.id
|
||||
WHERE qa.userid = :userid AND q.course = :courseid";
|
||||
|
||||
$attempts = $DB->get_field_sql($sql, [
|
||||
'userid' => $userid,
|
||||
'courseid' => $courseid
|
||||
]);
|
||||
|
||||
return ['quiz_attempts' => (int)$attempts];
|
||||
}
|
||||
|
||||
public static function execute_returns() {
|
||||
return new external_single_structure([
|
||||
'quiz_attempts' => new external_value(PARAM_INT, 'Total number of quiz attempts')
|
||||
]);
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### Complex Write API (Create Quiz from Categories)
|
||||
|
||||
See attached `create_quiz_from_categories.php` for a comprehensive example including:
|
||||
- Multiple database insertions
|
||||
- Course module creation
|
||||
- Quiz instance configuration
|
||||
- Random question selection with tags
|
||||
- Group-based access restrictions
|
||||
- Extensive error logging
|
||||
- Transaction management
|
||||
|
||||
## Quick Reference: Common Moodle Tables
|
||||
|
||||
| Table | Purpose |
|
||||
|-------|---------|
|
||||
| `{user}` | User accounts |
|
||||
| `{course}` | Courses |
|
||||
| `{course_modules}` | Activity instances in courses |
|
||||
| `{modules}` | Available activity types (quiz, forum, etc.) |
|
||||
| `{quiz}` | Quiz configurations |
|
||||
| `{quiz_attempts}` | Quiz attempt records |
|
||||
| `{question}` | Question bank |
|
||||
| `{question_categories}` | Question categories |
|
||||
| `{grade_items}` | Gradebook items |
|
||||
| `{grade_grades}` | Student grades |
|
||||
| `{groups}` | Course groups |
|
||||
| `{groups_members}` | Group memberships |
|
||||
| `{logstore_standard_log}` | Activity logs |
|
||||
|
||||
## Additional Resources
|
||||
|
||||
- [Moodle External API Documentation](https://moodledev.io/docs/5.2/apis/subsystems/external/functions)
|
||||
- [Moodle Coding Style](https://moodledev.io/general/development/policies/codingstyle)
|
||||
- [Moodle Database API](https://moodledev.io/docs/5.2/apis/core/dml)
|
||||
- [Web Services API Documentation](https://moodledev.io/docs/5.2/apis/subsystems/external)
|
||||
|
||||
## Guidelines
|
||||
|
||||
- Always validate input parameters using `validate_parameters()`
|
||||
- Check user context and capabilities before operations
|
||||
- Use parameterized SQL queries (never string concatenation)
|
||||
- Implement comprehensive error handling and logging
|
||||
- Follow Moodle naming conventions (lowercase, underscores)
|
||||
- Document all parameters and return values clearly
|
||||
- Test with different user roles and permissions
|
||||
- Consider transaction safety for write operations
|
||||
- Purge caches after service registration changes
|
||||
- Keep API methods focused and single-purpose
|
||||
@@ -1,16 +1,16 @@
|
||||
[
|
||||
{
|
||||
"id": "3d-web-experience",
|
||||
"path": "skills/3d-web-experience",
|
||||
"name": "3d-web-experience",
|
||||
"description": "\"Expert in building 3D experiences for the web - Three.js, React Three Fiber, Spline, WebGL, and interactive 3D scenes. Covers product configurators, 3D portfolios, immersive websites, and bringing depth to web experiences. Use when: 3D website, three.js, WebGL, react three fiber, 3D experience.\""
|
||||
},
|
||||
{
|
||||
"id": "api-fuzzing-bug-bounty",
|
||||
"path": "skills/api-fuzzing-bug-bounty",
|
||||
"name": "API Fuzzing for Bug Bounty",
|
||||
"description": "This skill should be used when the user asks to \"test API security\", \"fuzz APIs\", \"find IDOR vulnerabilities\", \"test REST API\", \"test GraphQL\", \"API penetration testing\", \"bug bounty API testing\", or needs guidance on API security assessment techniques."
|
||||
},
|
||||
{
|
||||
"id": "aws-penetration-testing",
|
||||
"path": "skills/.disabled/aws-penetration-testing",
|
||||
"name": "AWS Penetration Testing",
|
||||
"description": "This skill should be used when the user asks to \"pentest AWS\", \"test AWS security\", \"enumerate IAM\", \"exploit cloud infrastructure\", \"AWS privilege escalation\", \"S3 bucket testing\", \"metadata SSRF\", \"Lambda exploitation\", or needs guidance on Amazon Web Services security assessment."
|
||||
},
|
||||
{
|
||||
"id": "aws-penetration-testing",
|
||||
"path": "skills/aws-penetration-testing",
|
||||
@@ -53,12 +53,6 @@
|
||||
"name": "Cross-Site Scripting and HTML Injection Testing",
|
||||
"description": "This skill should be used when the user asks to \"test for XSS vulnerabilities\", \"perform cross-site scripting attacks\", \"identify HTML injection flaws\", \"exploit client-side injection vulnerabilities\", \"steal cookies via XSS\", or \"bypass content security policies\". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications."
|
||||
},
|
||||
{
|
||||
"id": "ethical-hacking-methodology",
|
||||
"path": "skills/.disabled/ethical-hacking-methodology",
|
||||
"name": "Ethical Hacking Methodology",
|
||||
"description": "This skill should be used when the user asks to \"learn ethical hacking\", \"understand penetration testing lifecycle\", \"perform reconnaissance\", \"conduct security scanning\", \"exploit vulnerabilities\", or \"write penetration test reports\". It provides comprehensive ethical hacking methodology and techniques."
|
||||
},
|
||||
{
|
||||
"id": "ethical-hacking-methodology",
|
||||
"path": "skills/ethical-hacking-methodology",
|
||||
@@ -89,12 +83,6 @@
|
||||
"name": "Linux Privilege Escalation",
|
||||
"description": "This skill should be used when the user asks to \"escalate privileges on Linux\", \"find privesc vectors on Linux systems\", \"exploit sudo misconfigurations\", \"abuse SUID binaries\", \"exploit cron jobs for root access\", \"enumerate Linux systems for privilege escalation\", or \"gain root access from low-privilege shell\". It provides comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems."
|
||||
},
|
||||
{
|
||||
"id": "linux-shell-scripting",
|
||||
"path": "skills/.disabled/linux-shell-scripting",
|
||||
"name": "Linux Production Shell Scripts",
|
||||
"description": "This skill should be used when the user asks to \"create bash scripts\", \"automate Linux tasks\", \"monitor system resources\", \"backup files\", \"manage users\", or \"write production shell scripts\". It provides ready-to-use shell script templates for system administration."
|
||||
},
|
||||
{
|
||||
"id": "linux-shell-scripting",
|
||||
"path": "skills/linux-shell-scripting",
|
||||
@@ -113,12 +101,6 @@
|
||||
"name": "Network 101",
|
||||
"description": "This skill should be used when the user asks to \"set up a web server\", \"configure HTTP or HTTPS\", \"perform SNMP enumeration\", \"configure SMB shares\", \"test network services\", or needs guidance on configuring and testing network services for penetration testing labs."
|
||||
},
|
||||
{
|
||||
"id": "pentest-checklist",
|
||||
"path": "skills/.disabled/pentest-checklist",
|
||||
"name": "Pentest Checklist",
|
||||
"description": "This skill should be used when the user asks to \"plan a penetration test\", \"create a security assessment checklist\", \"prepare for penetration testing\", \"define pentest scope\", \"follow security testing best practices\", or needs a structured methodology for penetration testing engagements."
|
||||
},
|
||||
{
|
||||
"id": "pentest-checklist",
|
||||
"path": "skills/pentest-checklist",
|
||||
@@ -179,12 +161,6 @@
|
||||
"name": "Shodan Reconnaissance and Pentesting",
|
||||
"description": "This skill should be used when the user asks to \"search for exposed devices on the internet,\" \"perform Shodan reconnaissance,\" \"find vulnerable services using Shodan,\" \"scan IP ranges with Shodan,\" or \"discover IoT devices and open ports.\" It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance."
|
||||
},
|
||||
{
|
||||
"id": "top-web-vulnerabilities",
|
||||
"path": "skills/.disabled/top-web-vulnerabilities",
|
||||
"name": "Top 100 Web Vulnerabilities Reference",
|
||||
"description": "This skill should be used when the user asks to \"identify web application vulnerabilities\", \"explain common security flaws\", \"understand vulnerability categories\", \"learn about injection attacks\", \"review access control weaknesses\", \"analyze API security issues\", \"assess security misconfigurations\", \"understand client-side vulnerabilities\", \"examine mobile and IoT security flaws\", or \"reference the OWASP-aligned vulnerability taxonomy\". Use this skill to provide comprehensive vulnerability definitions, root causes, impacts, and mitigation strategies across all major web security categories."
|
||||
},
|
||||
{
|
||||
"id": "top-web-vulnerabilities",
|
||||
"path": "skills/top-web-vulnerabilities",
|
||||
@@ -215,6 +191,12 @@
|
||||
"name": "address-github-comments",
|
||||
"description": "Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI."
|
||||
},
|
||||
{
|
||||
"id": "agent-evaluation",
|
||||
"path": "skills/agent-evaluation",
|
||||
"name": "agent-evaluation",
|
||||
"description": "\"Testing and benchmarking LLM agents including behavioral testing, capability assessment, reliability metrics, and production monitoring\u2014where even top agents achieve less than 50% on real-world benchmarks Use when: agent testing, agent evaluation, benchmark agents, agent reliability, test agent.\""
|
||||
},
|
||||
{
|
||||
"id": "agent-manager-skill",
|
||||
"path": "skills/agent-manager-skill",
|
||||
@@ -222,10 +204,40 @@
|
||||
"description": "Manage multiple local CLI agents via tmux sessions (start/stop/monitor/assign) with cron-friendly scheduling."
|
||||
},
|
||||
{
|
||||
"id": "algorithmic-art",
|
||||
"path": "skills/.disabled/algorithmic-art",
|
||||
"name": "algorithmic-art",
|
||||
"description": "Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations."
|
||||
"id": "agent-memory-systems",
|
||||
"path": "skills/agent-memory-systems",
|
||||
"name": "agent-memory-systems",
|
||||
"description": "\"Memory is the cornerstone of intelligent agents. Without it, every interaction starts from zero. This skill covers the architecture of agent memory: short-term (context window), long-term (vector stores), and the cognitive architectures that organize them. Key insight: Memory isn't just storage - it's retrieval. A million stored facts mean nothing if you can't find the right one. Chunking, embedding, and retrieval strategies determine whether your agent remembers or forgets. The field is fragm\""
|
||||
},
|
||||
{
|
||||
"id": "agent-tool-builder",
|
||||
"path": "skills/agent-tool-builder",
|
||||
"name": "agent-tool-builder",
|
||||
"description": "\"Tools are how AI agents interact with the world. A well-designed tool is the difference between an agent that works and one that hallucinates, fails silently, or costs 10x more tokens than necessary. This skill covers tool design from schema to error handling. JSON Schema best practices, description writing that actually helps the LLM, validation, and the emerging MCP standard that's becoming the lingua franca for AI tools. Key insight: Tool descriptions are more important than tool implementa\""
|
||||
},
|
||||
{
|
||||
"id": "ai-agents-architect",
|
||||
"path": "skills/ai-agents-architect",
|
||||
"name": "ai-agents-architect",
|
||||
"description": "\"Expert in designing and building autonomous AI agents. Masters tool use, memory systems, planning strategies, and multi-agent orchestration. Use when: build agent, AI agent, autonomous agent, tool use, function calling.\""
|
||||
},
|
||||
{
|
||||
"id": "ai-product",
|
||||
"path": "skills/ai-product",
|
||||
"name": "ai-product",
|
||||
"description": "\"Every product will be AI-powered. The question is whether you'll build it right or ship a demo that falls apart in production. This skill covers LLM integration patterns, RAG architecture, prompt engineering that scales, AI UX that users trust, and cost optimization that doesn't bankrupt you. Use when: keywords, file_patterns, code_patterns.\""
|
||||
},
|
||||
{
|
||||
"id": "ai-wrapper-product",
|
||||
"path": "skills/ai-wrapper-product",
|
||||
"name": "ai-wrapper-product",
|
||||
"description": "\"Expert in building products that wrap AI APIs (OpenAI, Anthropic, etc.) into focused tools people will pay for. Not just 'ChatGPT but different' - products that solve specific problems with AI. Covers prompt engineering for products, cost management, rate limiting, and building defensible AI businesses. Use when: AI wrapper, GPT product, AI tool, wrap AI, AI SaaS.\""
|
||||
},
|
||||
{
|
||||
"id": "algolia-search",
|
||||
"path": "skills/algolia-search",
|
||||
"name": "algolia-search",
|
||||
"description": "\"Expert patterns for Algolia search implementation, indexing strategies, React InstantSearch, and relevance tuning Use when: adding search to, algolia, instantsearch, search api, search functionality.\""
|
||||
},
|
||||
{
|
||||
"id": "algorithmic-art",
|
||||
@@ -233,12 +245,6 @@
|
||||
"name": "algorithmic-art",
|
||||
"description": "Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations."
|
||||
},
|
||||
{
|
||||
"id": "app-store-optimization",
|
||||
"path": "skills/.disabled/app-store-optimization",
|
||||
"name": "app-store-optimization",
|
||||
"description": "Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store"
|
||||
},
|
||||
{
|
||||
"id": "app-store-optimization",
|
||||
"path": "skills/app-store-optimization",
|
||||
@@ -252,10 +258,22 @@
|
||||
"description": "\"Design patterns for building autonomous coding agents. Covers tool integration, permission systems, browser automation, and human-in-the-loop workflows. Use when building AI agents, designing tool APIs, implementing permission systems, or creating autonomous coding assistants.\""
|
||||
},
|
||||
{
|
||||
"id": "backend-dev-guidelines",
|
||||
"path": "skills/.disabled/backend-dev-guidelines",
|
||||
"name": "backend-dev-guidelines",
|
||||
"description": "Comprehensive backend development guide for Node.js/Express/TypeScript microservices. Use when creating routes, controllers, services, repositories, middleware, or working with Express APIs, Prisma database access, Sentry error tracking, Zod validation, unifiedConfig, dependency injection, or async patterns. Covers layered architecture (routes \u2192 controllers \u2192 services \u2192 repositories), BaseController pattern, error handling, performance monitoring, testing strategies, and migration from legacy patterns."
|
||||
"id": "autonomous-agents",
|
||||
"path": "skills/autonomous-agents",
|
||||
"name": "autonomous-agents",
|
||||
"description": "\"Autonomous agents are AI systems that can independently decompose goals, plan actions, execute tools, and self-correct without constant human guidance. The challenge isn't making them capable - it's making them reliable. Every extra decision multiplies failure probability. This skill covers agent loops (ReAct, Plan-Execute), goal decomposition, reflection patterns, and production reliability. Key insight: compounding error rates kill autonomous agents. A 95% success rate per step drops to 60% b\""
|
||||
},
|
||||
{
|
||||
"id": "aws-serverless",
|
||||
"path": "skills/aws-serverless",
|
||||
"name": "aws-serverless",
|
||||
"description": "\"Specialized skill for building production-ready serverless applications on AWS. Covers Lambda functions, API Gateway, DynamoDB, SQS/SNS event-driven patterns, SAM/CDK deployment, and cold start optimization.\""
|
||||
},
|
||||
{
|
||||
"id": "azure-functions",
|
||||
"path": "skills/azure-functions",
|
||||
"name": "azure-functions",
|
||||
"description": "\"Expert patterns for Azure Functions development including isolated worker model, Durable Functions orchestration, cold start optimization, and production patterns. Covers .NET, Python, and Node.js programming models. Use when: azure function, azure functions, durable functions, azure serverless, function app.\""
|
||||
},
|
||||
{
|
||||
"id": "backend-dev-guidelines",
|
||||
@@ -269,12 +287,6 @@
|
||||
"name": "blockrun",
|
||||
"description": "Use when user needs capabilities Claude lacks (image generation, real-time X/Twitter data) or explicitly requests external models (\"blockrun\", \"use grok\", \"use gpt\", \"dall-e\", \"deepseek\")"
|
||||
},
|
||||
{
|
||||
"id": "brainstorming",
|
||||
"path": "skills/.disabled/brainstorming",
|
||||
"name": "brainstorming",
|
||||
"description": "\"You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.\""
|
||||
},
|
||||
{
|
||||
"id": "brainstorming",
|
||||
"path": "skills/brainstorming",
|
||||
@@ -293,6 +305,24 @@
|
||||
"name": "brand-guidelines",
|
||||
"description": "Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply."
|
||||
},
|
||||
{
|
||||
"id": "browser-automation",
|
||||
"path": "skills/browser-automation",
|
||||
"name": "browser-automation",
|
||||
"description": "\"Browser automation powers web testing, scraping, and AI agent interactions. The difference between a flaky script and a reliable system comes down to understanding selectors, waiting strategies, and anti-detection patterns. This skill covers Playwright (recommended) and Puppeteer, with patterns for testing, scraping, and agentic browser control. Key insight: Playwright won the framework war. Unless you need Puppeteer's stealth ecosystem or are Chrome-only, Playwright is the better choice in 202\""
|
||||
},
|
||||
{
|
||||
"id": "browser-extension-builder",
|
||||
"path": "skills/browser-extension-builder",
|
||||
"name": "browser-extension-builder",
|
||||
"description": "\"Expert in building browser extensions that solve real problems - Chrome, Firefox, and cross-browser extensions. Covers extension architecture, manifest v3, content scripts, popup UIs, monetization strategies, and Chrome Web Store publishing. Use when: browser extension, chrome extension, firefox addon, extension, manifest v3.\""
|
||||
},
|
||||
{
|
||||
"id": "bullmq-specialist",
|
||||
"path": "skills/bullmq-specialist",
|
||||
"name": "bullmq-specialist",
|
||||
"description": "\"BullMQ expert for Redis-backed job queues, background processing, and reliable async execution in Node.js/TypeScript applications. Use when: bullmq, bull queue, redis queue, background job, job queue.\""
|
||||
},
|
||||
{
|
||||
"id": "bun-development",
|
||||
"path": "skills/bun-development",
|
||||
@@ -301,15 +331,21 @@
|
||||
},
|
||||
{
|
||||
"id": "canvas-design",
|
||||
"path": "skills/.disabled/canvas-design",
|
||||
"path": "skills/canvas-design",
|
||||
"name": "canvas-design",
|
||||
"description": "Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations."
|
||||
},
|
||||
{
|
||||
"id": "canvas-design",
|
||||
"path": "skills/canvas-design",
|
||||
"name": "canvas-design",
|
||||
"description": "Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations."
|
||||
"id": "clerk-auth",
|
||||
"path": "skills/clerk-auth",
|
||||
"name": "clerk-auth",
|
||||
"description": "\"Expert patterns for Clerk auth implementation, middleware, organizations, webhooks, and user sync Use when: adding authentication, clerk auth, user authentication, sign in, sign up.\""
|
||||
},
|
||||
{
|
||||
"id": "computer-use-agents",
|
||||
"path": "skills/computer-use-agents",
|
||||
"name": "computer-use-agents",
|
||||
"description": "\"Build AI agents that interact with computers like humans do - viewing screens, moving cursors, clicking buttons, and typing text. Covers Anthropic's Computer Use, OpenAI's Operator/CUA, and open-source alternatives. Critical focus on sandboxing, security, and handling the unique challenges of vision-based control. Use when: computer use, desktop automation agent, screen control AI, vision-based agent, GUI automation.\""
|
||||
},
|
||||
{
|
||||
"id": "concise-planning",
|
||||
@@ -324,10 +360,16 @@
|
||||
"description": "Create SEO-optimized marketing content with consistent brand voice. Includes brand voice analyzer, SEO optimizer, content frameworks, and social media templates. Use when writing blog posts, creating social media content, analyzing brand voice, optimizing SEO, planning content calendars, or when user mentions content creation, brand voice, SEO optimization, social media marketing, or content strategy."
|
||||
},
|
||||
{
|
||||
"id": "core-components",
|
||||
"path": "skills/.disabled/core-components",
|
||||
"name": "core-components",
|
||||
"description": "Core component library and design system patterns. Use when building UI, using design tokens, or working with the component library."
|
||||
"id": "context-window-management",
|
||||
"path": "skills/context-window-management",
|
||||
"name": "context-window-management",
|
||||
"description": "\"Strategies for managing LLM context windows including summarization, trimming, routing, and avoiding context rot Use when: context window, token limit, context management, context engineering, long context.\""
|
||||
},
|
||||
{
|
||||
"id": "conversation-memory",
|
||||
"path": "skills/conversation-memory",
|
||||
"name": "conversation-memory",
|
||||
"description": "\"Persistent memory systems for LLM conversations including short-term, long-term, and entity-based memory Use when: conversation memory, remember, memory persistence, long-term memory, chat history.\""
|
||||
},
|
||||
{
|
||||
"id": "core-components",
|
||||
@@ -336,10 +378,10 @@
|
||||
"description": "Core component library and design system patterns. Use when building UI, using design tokens, or working with the component library."
|
||||
},
|
||||
{
|
||||
"id": "claude-d3js-skill",
|
||||
"path": "skills/.disabled/claude-d3js-skill",
|
||||
"name": "d3-viz",
|
||||
"description": "Creating interactive data visualisations using d3.js. This skill should be used when creating custom charts, graphs, network diagrams, geographic visualisations, or any complex SVG-based data visualisation that requires fine-grained control over visual elements, transitions, or interactions. Use this for bespoke visualisations beyond standard charting libraries, whether in React, Vue, Svelte, vanilla JavaScript, or any other environment."
|
||||
"id": "crewai",
|
||||
"path": "skills/crewai",
|
||||
"name": "crewai",
|
||||
"description": "\"Expert in CrewAI - the leading role-based multi-agent framework used by 60% of Fortune 500 companies. Covers agent design with roles and goals, task definition, crew orchestration, process types (sequential, hierarchical, parallel), memory systems, and flows for complex workflows. Essential for building collaborative AI agent teams. Use when: crewai, multi-agent team, agent roles, crew of agents, role-based agents.\""
|
||||
},
|
||||
{
|
||||
"id": "claude-d3js-skill",
|
||||
@@ -348,10 +390,10 @@
|
||||
"description": "Creating interactive data visualisations using d3.js. This skill should be used when creating custom charts, graphs, network diagrams, geographic visualisations, or any complex SVG-based data visualisation that requires fine-grained control over visual elements, transitions, or interactions. Use this for bespoke visualisations beyond standard charting libraries, whether in React, Vue, Svelte, vanilla JavaScript, or any other environment."
|
||||
},
|
||||
{
|
||||
"id": "dispatching-parallel-agents",
|
||||
"path": "skills/.disabled/dispatching-parallel-agents",
|
||||
"name": "dispatching-parallel-agents",
|
||||
"description": "Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies"
|
||||
"id": "discord-bot-architect",
|
||||
"path": "skills/discord-bot-architect",
|
||||
"name": "discord-bot-architect",
|
||||
"description": "\"Specialized skill for building production-ready Discord bots. Covers Discord.js (JavaScript) and Pycord (Python), gateway intents, slash commands, interactive components, rate limiting, and sharding.\""
|
||||
},
|
||||
{
|
||||
"id": "dispatching-parallel-agents",
|
||||
@@ -372,10 +414,10 @@
|
||||
"description": "\"Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks\""
|
||||
},
|
||||
{
|
||||
"id": "executing-plans",
|
||||
"path": "skills/.disabled/executing-plans",
|
||||
"name": "executing-plans",
|
||||
"description": "Use when you have a written implementation plan to execute in a separate session with review checkpoints"
|
||||
"id": "email-systems",
|
||||
"path": "skills/email-systems",
|
||||
"name": "email-systems",
|
||||
"description": "\"Email has the highest ROI of any marketing channel. $36 for every $1 spent. Yet most startups treat it as an afterthought - bulk blasts, no personalization, landing in spam folders. This skill covers transactional email that works, marketing automation that converts, deliverability that reaches inboxes, and the infrastructure decisions that scale. Use when: keywords, file_patterns, code_patterns.\""
|
||||
},
|
||||
{
|
||||
"id": "executing-plans",
|
||||
@@ -383,12 +425,6 @@
|
||||
"name": "executing-plans",
|
||||
"description": "Use when you have a written implementation plan to execute in a separate session with review checkpoints"
|
||||
},
|
||||
{
|
||||
"id": "file-organizer",
|
||||
"path": "skills/.disabled/file-organizer",
|
||||
"name": "file-organizer",
|
||||
"description": "Intelligently organizes files and folders by understanding context, finding duplicates, and suggesting better organizational structures. Use when user wants to clean up directories, organize downloads, remove duplicates, or restructure projects."
|
||||
},
|
||||
{
|
||||
"id": "file-organizer",
|
||||
"path": "skills/file-organizer",
|
||||
@@ -396,10 +432,10 @@
|
||||
"description": "Intelligently organizes files and folders by understanding context, finding duplicates, and suggesting better organizational structures. Use when user wants to clean up directories, organize downloads, remove duplicates, or restructure projects."
|
||||
},
|
||||
{
|
||||
"id": "finishing-a-development-branch",
|
||||
"path": "skills/.disabled/finishing-a-development-branch",
|
||||
"name": "finishing-a-development-branch",
|
||||
"description": "Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup"
|
||||
"id": "file-uploads",
|
||||
"path": "skills/file-uploads",
|
||||
"name": "file-uploads",
|
||||
"description": "\"Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.\""
|
||||
},
|
||||
{
|
||||
"id": "finishing-a-development-branch",
|
||||
@@ -408,10 +444,10 @@
|
||||
"description": "Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup"
|
||||
},
|
||||
{
|
||||
"id": "frontend-design",
|
||||
"path": "skills/.disabled/frontend-design",
|
||||
"name": "frontend-design",
|
||||
"description": "Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications (examples include websites, landing pages, dashboards, React components, HTML/CSS layouts, or when styling/beautifying any web UI). Generates creative, polished code and UI design that avoids generic AI aesthetics."
|
||||
"id": "firebase",
|
||||
"path": "skills/firebase",
|
||||
"name": "firebase",
|
||||
"description": "\"Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong. Firestore queries are limited, and you learn this after you've designed your data model. This skill covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Storage, and Firebase Hosting. Key insight: Firebase is optimized for read-heavy, denormalized data. I\""
|
||||
},
|
||||
{
|
||||
"id": "frontend-design",
|
||||
@@ -425,6 +461,12 @@
|
||||
"name": "frontend-dev-guidelines",
|
||||
"description": "Frontend development guidelines for React/TypeScript applications. Modern patterns including Suspense, lazy loading, useSuspenseQuery, file organization with features directory, MUI v7 styling, TanStack Router, performance optimization, and TypeScript best practices. Use when creating components, pages, features, fetching data, styling, routing, or working with frontend code."
|
||||
},
|
||||
{
|
||||
"id": "gcp-cloud-run",
|
||||
"path": "skills/gcp-cloud-run",
|
||||
"name": "gcp-cloud-run",
|
||||
"description": "\"Specialized skill for building production-ready serverless applications on GCP. Covers Cloud Run services (containerized), Cloud Run Functions (event-driven), cold start optimization, and event-driven architecture with Pub/Sub.\""
|
||||
},
|
||||
{
|
||||
"id": "git-pushing",
|
||||
"path": "skills/git-pushing",
|
||||
@@ -437,6 +479,30 @@
|
||||
"name": "github-workflow-automation",
|
||||
"description": "\"Automate GitHub workflows with AI assistance. Includes PR reviews, issue triage, CI/CD integration, and Git operations. Use when automating GitHub workflows, setting up PR review automation, creating GitHub Actions, or triaging issues.\""
|
||||
},
|
||||
{
|
||||
"id": "graphql",
|
||||
"path": "skills/graphql",
|
||||
"name": "graphql",
|
||||
"description": "\"GraphQL gives clients exactly the data they need - no more, no less. One endpoint, typed schema, introspection. But the flexibility that makes it powerful also makes it dangerous. Without proper controls, clients can craft queries that bring down your server. This skill covers schema design, resolvers, DataLoader for N+1 prevention, federation for microservices, and client integration with Apollo/urql. Key insight: GraphQL is a contract. The schema is the API documentation. Design it carefully.\""
|
||||
},
|
||||
{
|
||||
"id": "hubspot-integration",
|
||||
"path": "skills/hubspot-integration",
|
||||
"name": "hubspot-integration",
|
||||
"description": "\"Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs. Use when: hubspot, hubspot api, hubspot crm, hubspot integration, contacts api.\""
|
||||
},
|
||||
{
|
||||
"id": "inngest",
|
||||
"path": "skills/inngest",
|
||||
"name": "inngest",
|
||||
"description": "\"Inngest expert for serverless-first background jobs, event-driven workflows, and durable execution without managing queues or workers. Use when: inngest, serverless background job, event-driven workflow, step function, durable execution.\""
|
||||
},
|
||||
{
|
||||
"id": "interactive-portfolio",
|
||||
"path": "skills/interactive-portfolio",
|
||||
"name": "interactive-portfolio",
|
||||
"description": "\"Expert in building portfolios that actually land jobs and clients - not just showing work, but creating memorable experiences. Covers developer portfolios, designer portfolios, creative portfolios, and portfolios that convert visitors into opportunities. Use when: portfolio, personal website, showcase work, developer portfolio, designer portfolio.\""
|
||||
},
|
||||
{
|
||||
"id": "internal-comms-anthropic",
|
||||
"path": "skills/internal-comms-anthropic",
|
||||
@@ -462,10 +528,16 @@
|
||||
"description": "Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements."
|
||||
},
|
||||
{
|
||||
"id": "kaizen",
|
||||
"path": "skills/.disabled/kaizen",
|
||||
"name": "kaizen",
|
||||
"description": "Guide for continuous improvement, error proofing, and standardization. Use this skill when the user wants to improve code quality, refactor, or discuss process improvements."
|
||||
"id": "langfuse",
|
||||
"path": "skills/langfuse",
|
||||
"name": "langfuse",
|
||||
"description": "\"Expert in Langfuse - the open-source LLM observability platform. Covers tracing, prompt management, evaluation, datasets, and integration with LangChain, LlamaIndex, and OpenAI. Essential for debugging, monitoring, and improving LLM applications in production. Use when: langfuse, llm observability, llm tracing, prompt management, llm evaluation.\""
|
||||
},
|
||||
{
|
||||
"id": "langgraph",
|
||||
"path": "skills/langgraph",
|
||||
"name": "langgraph",
|
||||
"description": "\"Expert in LangGraph - the production-grade framework for building stateful, multi-actor AI applications. Covers graph construction, state management, cycles and branches, persistence with checkpointers, human-in-the-loop patterns, and the ReAct agent pattern. Used in production at LinkedIn, Uber, and 400+ companies. This is LangChain's recommended approach for building agents. Use when: langgraph, langchain agent, stateful agent, agent graph, react agent.\""
|
||||
},
|
||||
{
|
||||
"id": "llm-app-patterns",
|
||||
@@ -473,12 +545,6 @@
|
||||
"name": "llm-app-patterns",
|
||||
"description": "\"Production-ready patterns for building LLM applications. Covers RAG pipelines, agent architectures, prompt IDEs, and LLMOps monitoring. Use when designing AI applications, implementing RAG, building agents, or setting up LLM observability.\""
|
||||
},
|
||||
{
|
||||
"id": "loki-mode",
|
||||
"path": "skills/.disabled/loki-mode",
|
||||
"name": "loki-mode",
|
||||
"description": "Multi-agent autonomous startup system for Claude Code. Triggers on \"Loki Mode\". Orchestrates 100+ specialized agents across engineering, QA, DevOps, security, data/ML, business operations, marketing, HR, and customer success. Takes PRD to fully deployed, revenue-generating product with zero human intervention. Features Task tool for subagent dispatch, parallel code review with 3 specialized reviewers, severity-based issue triage, distributed task queue with dead letter handling, automatic deployment to cloud providers, A/B testing, customer feedback loops, incident response, circuit breakers, and self-healing. Handles rate limits via distributed state checkpoints and auto-resume with exponential backoff. Requires --dangerously-skip-permissions flag."
|
||||
},
|
||||
{
|
||||
"id": "loki-mode",
|
||||
"path": "skills/loki-mode",
|
||||
@@ -491,18 +557,54 @@
|
||||
"name": "mcp-builder",
|
||||
"description": "Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK)."
|
||||
},
|
||||
{
|
||||
"id": "micro-saas-launcher",
|
||||
"path": "skills/micro-saas-launcher",
|
||||
"name": "micro-saas-launcher",
|
||||
"description": "\"Expert in launching small, focused SaaS products fast - the indie hacker approach to building profitable software. Covers idea validation, MVP development, pricing, launch strategies, and growing to sustainable revenue. Ship in weeks, not months. Use when: micro saas, indie hacker, small saas, side project, saas mvp.\""
|
||||
},
|
||||
{
|
||||
"id": "neon-postgres",
|
||||
"path": "skills/neon-postgres",
|
||||
"name": "neon-postgres",
|
||||
"description": "\"Expert patterns for Neon serverless Postgres, branching, connection pooling, and Prisma/Drizzle integration Use when: neon database, serverless postgres, database branching, neon postgres, postgres serverless.\""
|
||||
},
|
||||
{
|
||||
"id": "nextjs-supabase-auth",
|
||||
"path": "skills/nextjs-supabase-auth",
|
||||
"name": "nextjs-supabase-auth",
|
||||
"description": "\"Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected route.\""
|
||||
},
|
||||
{
|
||||
"id": "notebooklm",
|
||||
"path": "skills/notebooklm",
|
||||
"name": "notebooklm",
|
||||
"description": "Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. Browser automation, library management, persistent auth. Drastically reduced hallucinations through document-only responses."
|
||||
},
|
||||
{
|
||||
"id": "notion-template-business",
|
||||
"path": "skills/notion-template-business",
|
||||
"name": "notion-template-business",
|
||||
"description": "\"Expert in building and selling Notion templates as a business - not just making templates, but building a sustainable digital product business. Covers template design, pricing, marketplaces, marketing, and scaling to real revenue. Use when: notion template, sell templates, digital product, notion business, gumroad.\""
|
||||
},
|
||||
{
|
||||
"id": "pdf-official",
|
||||
"path": "skills/pdf-official",
|
||||
"name": "pdf",
|
||||
"description": "Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale."
|
||||
},
|
||||
{
|
||||
"id": "personal-tool-builder",
|
||||
"path": "skills/personal-tool-builder",
|
||||
"name": "personal-tool-builder",
|
||||
"description": "\"Expert in building custom tools that solve your own problems first. The best products often start as personal tools - scratch your own itch, build for yourself, then discover others have the same itch. Covers rapid prototyping, local-first apps, CLI tools, scripts that grow into products, and the art of dogfooding. Use when: build a tool, personal tool, scratch my itch, solve my problem, CLI tool.\""
|
||||
},
|
||||
{
|
||||
"id": "plaid-fintech",
|
||||
"path": "skills/plaid-fintech",
|
||||
"name": "plaid-fintech",
|
||||
"description": "\"Expert patterns for Plaid API integration including Link token flows, transactions sync, identity verification, Auth for ACH, balance checks, webhook handling, and fintech compliance best practices. Use when: plaid, bank account linking, bank connection, ach, account aggregation.\""
|
||||
},
|
||||
{
|
||||
"id": "planning-with-files",
|
||||
"path": "skills/planning-with-files",
|
||||
@@ -521,12 +623,6 @@
|
||||
"name": "pptx",
|
||||
"description": "\"Presentation creation, editing, and analysis. When Claude needs to work with presentations (.pptx files) for: (1) Creating new presentations, (2) Modifying or editing content, (3) Working with layouts, (4) Adding comments or speaker notes, or any other presentation tasks\""
|
||||
},
|
||||
{
|
||||
"id": "product-manager-toolkit",
|
||||
"path": "skills/.disabled/product-manager-toolkit",
|
||||
"name": "product-manager-toolkit",
|
||||
"description": "Comprehensive toolkit for product managers including RICE prioritization, customer interview analysis, PRD templates, discovery frameworks, and go-to-market strategies. Use for feature prioritization, user research synthesis, requirement documentation, and product strategy development."
|
||||
},
|
||||
{
|
||||
"id": "product-manager-toolkit",
|
||||
"path": "skills/product-manager-toolkit",
|
||||
@@ -534,10 +630,16 @@
|
||||
"description": "Comprehensive toolkit for product managers including RICE prioritization, customer interview analysis, PRD templates, discovery frameworks, and go-to-market strategies. Use for feature prioritization, user research synthesis, requirement documentation, and product strategy development."
|
||||
},
|
||||
{
|
||||
"id": "prompt-engineering",
|
||||
"path": "skills/.disabled/prompt-engineering",
|
||||
"name": "prompt-engineering",
|
||||
"description": "Expert guide on prompt engineering patterns, best practices, and optimization techniques. Use when user wants to improve prompts, learn prompting strategies, or debug agent behavior."
|
||||
"id": "prompt-caching",
|
||||
"path": "skills/prompt-caching",
|
||||
"name": "prompt-caching",
|
||||
"description": "\"Caching strategies for LLM prompts including Anthropic prompt caching, response caching, and CAG (Cache Augmented Generation) Use when: prompt caching, cache prompt, response cache, cag, cache augmented.\""
|
||||
},
|
||||
{
|
||||
"id": "prompt-engineer",
|
||||
"path": "skills/prompt-engineer",
|
||||
"name": "prompt-engineer",
|
||||
"description": "\"Expert in designing effective prompts for LLM-powered applications. Masters prompt structure, context management, output formatting, and prompt evaluation. Use when: prompt engineering, system prompt, few-shot, chain of thought, prompt design.\""
|
||||
},
|
||||
{
|
||||
"id": "prompt-engineering",
|
||||
@@ -552,10 +654,16 @@
|
||||
"description": "\"Curated collection of high-quality prompts for various use cases. Includes role-based prompts, task-specific templates, and prompt refinement techniques. Use when user needs prompt templates, role-play prompts, or ready-to-use prompt examples for coding, writing, analysis, or creative tasks.\""
|
||||
},
|
||||
{
|
||||
"id": "react-ui-patterns",
|
||||
"path": "skills/.disabled/react-ui-patterns",
|
||||
"name": "react-ui-patterns",
|
||||
"description": "Modern React UI patterns for loading states, error handling, and data fetching. Use when building UI components, handling async data, or managing UI states."
|
||||
"id": "rag-engineer",
|
||||
"path": "skills/rag-engineer",
|
||||
"name": "rag-engineer",
|
||||
"description": "\"Expert in building Retrieval-Augmented Generation systems. Masters embedding models, vector databases, chunking strategies, and retrieval optimization for LLM applications. Use when: building RAG, vector search, embeddings, semantic search, document retrieval.\""
|
||||
},
|
||||
{
|
||||
"id": "rag-implementation",
|
||||
"path": "skills/rag-implementation",
|
||||
"name": "rag-implementation",
|
||||
"description": "\"Retrieval-Augmented Generation patterns including chunking, embeddings, vector stores, and retrieval optimization Use when: rag, retrieval augmented, vector search, embeddings, semantic search.\""
|
||||
},
|
||||
{
|
||||
"id": "react-ui-patterns",
|
||||
@@ -563,12 +671,6 @@
|
||||
"name": "react-ui-patterns",
|
||||
"description": "Modern React UI patterns for loading states, error handling, and data fetching. Use when building UI components, handling async data, or managing UI states."
|
||||
},
|
||||
{
|
||||
"id": "receiving-code-review",
|
||||
"path": "skills/.disabled/receiving-code-review",
|
||||
"name": "receiving-code-review",
|
||||
"description": "Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation"
|
||||
},
|
||||
{
|
||||
"id": "receiving-code-review",
|
||||
"path": "skills/receiving-code-review",
|
||||
@@ -577,15 +679,27 @@
|
||||
},
|
||||
{
|
||||
"id": "requesting-code-review",
|
||||
"path": "skills/.disabled/requesting-code-review",
|
||||
"path": "skills/requesting-code-review",
|
||||
"name": "requesting-code-review",
|
||||
"description": "Use when completing tasks, implementing major features, or before merging to verify work meets requirements"
|
||||
},
|
||||
{
|
||||
"id": "requesting-code-review",
|
||||
"path": "skills/requesting-code-review",
|
||||
"name": "requesting-code-review",
|
||||
"description": "Use when completing tasks, implementing major features, or before merging to verify work meets requirements"
|
||||
"id": "salesforce-development",
|
||||
"path": "skills/salesforce-development",
|
||||
"name": "salesforce-development",
|
||||
"description": "\"Expert patterns for Salesforce platform development including Lightning Web Components (LWC), Apex triggers and classes, REST/Bulk APIs, Connected Apps, and Salesforce DX with scratch orgs and 2nd generation packages (2GP). Use when: salesforce, sfdc, apex, lwc, lightning web components.\""
|
||||
},
|
||||
{
|
||||
"id": "scroll-experience",
|
||||
"path": "skills/scroll-experience",
|
||||
"name": "scroll-experience",
|
||||
"description": "\"Expert in building immersive scroll-driven experiences - parallax storytelling, scroll animations, interactive narratives, and cinematic web experiences. Like NY Times interactives, Apple product pages, and award-winning web experiences. Makes websites feel like experiences, not just pages. Use when: scroll animation, parallax, scroll storytelling, interactive story, cinematic website.\""
|
||||
},
|
||||
{
|
||||
"id": "segment-cdp",
|
||||
"path": "skills/segment-cdp",
|
||||
"name": "segment-cdp",
|
||||
"description": "\"Expert patterns for Segment Customer Data Platform including Analytics.js, server-side tracking, tracking plans with Protocols, identity resolution, destinations configuration, and data governance best practices. Use when: segment, analytics.js, customer data platform, cdp, tracking plan.\""
|
||||
},
|
||||
{
|
||||
"id": "senior-architect",
|
||||
@@ -599,30 +713,24 @@
|
||||
"name": "senior-fullstack",
|
||||
"description": "Comprehensive fullstack development skill for building complete web applications with React, Next.js, Node.js, GraphQL, and PostgreSQL. Includes project scaffolding, code quality analysis, architecture patterns, and complete tech stack guidance. Use when building new projects, analyzing code quality, implementing design patterns, or setting up development workflows."
|
||||
},
|
||||
{
|
||||
"id": "shopify-apps",
|
||||
"path": "skills/shopify-apps",
|
||||
"name": "shopify-apps",
|
||||
"description": "\"Expert patterns for Shopify app development including Remix/React Router apps, embedded apps with App Bridge, webhook handling, GraphQL Admin API, Polaris components, billing, and app extensions. Use when: shopify app, shopify, embedded app, polaris, app bridge.\""
|
||||
},
|
||||
{
|
||||
"id": "shopify-development",
|
||||
"path": "skills/shopify-development",
|
||||
"name": "shopify-development",
|
||||
"description": "|"
|
||||
},
|
||||
{
|
||||
"id": "skill-creator",
|
||||
"path": "skills/.disabled/skill-creator",
|
||||
"name": "skill-creator",
|
||||
"description": "Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations."
|
||||
},
|
||||
{
|
||||
"id": "skill-creator",
|
||||
"path": "skills/skill-creator",
|
||||
"name": "skill-creator",
|
||||
"description": "Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations."
|
||||
},
|
||||
{
|
||||
"id": "skill-developer",
|
||||
"path": "skills/.disabled/skill-developer",
|
||||
"name": "skill-developer",
|
||||
"description": "Create and manage Claude Code skills following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns, file paths, content patterns), enforcement levels (block, suggest, warn), hook mechanisms (UserPromptSubmit, PreToolUse), session tracking, and the 500-line rule."
|
||||
},
|
||||
{
|
||||
"id": "skill-developer",
|
||||
"path": "skills/skill-developer",
|
||||
@@ -630,10 +738,10 @@
|
||||
"description": "Create and manage Claude Code skills following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns, file paths, content patterns), enforcement levels (block, suggest, warn), hook mechanisms (UserPromptSubmit, PreToolUse), session tracking, and the 500-line rule."
|
||||
},
|
||||
{
|
||||
"id": "slack-gif-creator",
|
||||
"path": "skills/.disabled/slack-gif-creator",
|
||||
"name": "slack-gif-creator",
|
||||
"description": "Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like \"make me a GIF of X doing Y for Slack.\""
|
||||
"id": "slack-bot-builder",
|
||||
"path": "skills/slack-bot-builder",
|
||||
"name": "slack-bot-builder",
|
||||
"description": "\"Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration. Focus on best practices for production-ready Slack apps. Use when: slack bot, slack app, bolt framework, block kit, slash command.\""
|
||||
},
|
||||
{
|
||||
"id": "slack-gif-creator",
|
||||
@@ -648,10 +756,10 @@
|
||||
"description": "Guide for quality focused software architecture. This skill should be used when users want to write code, design architecture, analyze code, in any case that relates to software development."
|
||||
},
|
||||
{
|
||||
"id": "subagent-driven-development",
|
||||
"path": "skills/.disabled/subagent-driven-development",
|
||||
"name": "subagent-driven-development",
|
||||
"description": "Use when executing implementation plans with independent tasks in the current session"
|
||||
"id": "stripe-integration",
|
||||
"path": "skills/stripe-integration",
|
||||
"name": "stripe-integration",
|
||||
"description": "\"Get paid from day one. Payments, subscriptions, billing portal, webhooks, metered billing, Stripe Connect. The complete guide to implementing Stripe correctly, including all the edge cases that will bite you at 3am. This isn't just API calls - it's the full payment system: handling failures, managing subscriptions, dealing with dunning, and keeping revenue flowing. Use when: stripe, payments, subscription, billing, checkout.\""
|
||||
},
|
||||
{
|
||||
"id": "subagent-driven-development",
|
||||
@@ -665,48 +773,54 @@
|
||||
"name": "systematic-debugging",
|
||||
"description": "Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes"
|
||||
},
|
||||
{
|
||||
"id": "telegram-bot-builder",
|
||||
"path": "skills/telegram-bot-builder",
|
||||
"name": "telegram-bot-builder",
|
||||
"description": "\"Expert in building Telegram bots that solve real problems - from simple automation to complex AI-powered bots. Covers bot architecture, the Telegram Bot API, user experience, monetization strategies, and scaling bots to thousands of users. Use when: telegram bot, bot api, telegram automation, chat bot telegram, tg bot.\""
|
||||
},
|
||||
{
|
||||
"id": "telegram-mini-app",
|
||||
"path": "skills/telegram-mini-app",
|
||||
"name": "telegram-mini-app",
|
||||
"description": "\"Expert in building Telegram Mini Apps (TWA) - web apps that run inside Telegram with native-like experience. Covers the TON ecosystem, Telegram Web App API, payments, user authentication, and building viral mini apps that monetize. Use when: telegram mini app, TWA, telegram web app, TON app, mini app.\""
|
||||
},
|
||||
{
|
||||
"id": "test-driven-development",
|
||||
"path": "skills/test-driven-development",
|
||||
"name": "test-driven-development",
|
||||
"description": "Use when implementing any feature or bugfix, before writing implementation code"
|
||||
},
|
||||
{
|
||||
"id": "test-fixing",
|
||||
"path": "skills/.disabled/test-fixing",
|
||||
"name": "test-fixing",
|
||||
"description": "Run tests and systematically fix all failing tests using smart error grouping. Use when user asks to fix failing tests, mentions test failures, runs test suite and failures occur, or requests to make tests pass."
|
||||
},
|
||||
{
|
||||
"id": "test-fixing",
|
||||
"path": "skills/test-fixing",
|
||||
"name": "test-fixing",
|
||||
"description": "Run tests and systematically fix all failing tests using smart error grouping. Use when user asks to fix failing tests, mentions test failures, runs test suite and failures occur, or requests to make tests pass."
|
||||
},
|
||||
{
|
||||
"id": "testing-patterns",
|
||||
"path": "skills/.disabled/testing-patterns",
|
||||
"name": "testing-patterns",
|
||||
"description": "Jest testing patterns, factory functions, mocking strategies, and TDD workflow. Use when writing unit tests, creating test factories, or following TDD red-green-refactor cycle."
|
||||
},
|
||||
{
|
||||
"id": "testing-patterns",
|
||||
"path": "skills/testing-patterns",
|
||||
"name": "testing-patterns",
|
||||
"description": "Jest testing patterns, factory functions, mocking strategies, and TDD workflow. Use when writing unit tests, creating test factories, or following TDD red-green-refactor cycle."
|
||||
},
|
||||
{
|
||||
"id": "theme-factory",
|
||||
"path": "skills/.disabled/theme-factory",
|
||||
"name": "theme-factory",
|
||||
"description": "Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly."
|
||||
},
|
||||
{
|
||||
"id": "theme-factory",
|
||||
"path": "skills/theme-factory",
|
||||
"name": "theme-factory",
|
||||
"description": "Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly."
|
||||
},
|
||||
{
|
||||
"id": "trigger-dev",
|
||||
"path": "skills/trigger-dev",
|
||||
"name": "trigger-dev",
|
||||
"description": "\"Trigger.dev expert for background jobs, AI workflows, and reliable async execution with excellent developer experience and TypeScript-first design. Use when: trigger.dev, trigger dev, background task, ai background job, long running task.\""
|
||||
},
|
||||
{
|
||||
"id": "twilio-communications",
|
||||
"path": "skills/twilio-communications",
|
||||
"name": "twilio-communications",
|
||||
"description": "\"Build communication features with Twilio: SMS messaging, voice calls, WhatsApp Business API, and user verification (2FA). Covers the full spectrum from simple notifications to complex IVR systems and multi-channel authentication. Critical focus on compliance, rate limits, and error handling. Use when: twilio, send SMS, text message, voice call, phone verification.\""
|
||||
},
|
||||
{
|
||||
"id": "ui-ux-pro-max",
|
||||
"path": "skills/ui-ux-pro-max",
|
||||
@@ -714,10 +828,10 @@
|
||||
"description": "\"UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient. Integrations: shadcn/ui MCP for component search and examples.\""
|
||||
},
|
||||
{
|
||||
"id": "using-git-worktrees",
|
||||
"path": "skills/.disabled/using-git-worktrees",
|
||||
"name": "using-git-worktrees",
|
||||
"description": "Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification"
|
||||
"id": "upstash-qstash",
|
||||
"path": "skills/upstash-qstash",
|
||||
"name": "upstash-qstash",
|
||||
"description": "\"Upstash QStash expert for serverless message queues, scheduled jobs, and reliable HTTP-based task delivery without managing infrastructure. Use when: qstash, upstash queue, serverless cron, scheduled http, message queue serverless.\""
|
||||
},
|
||||
{
|
||||
"id": "using-git-worktrees",
|
||||
@@ -727,15 +841,15 @@
|
||||
},
|
||||
{
|
||||
"id": "using-superpowers",
|
||||
"path": "skills/.disabled/using-superpowers",
|
||||
"path": "skills/using-superpowers",
|
||||
"name": "using-superpowers",
|
||||
"description": "Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions"
|
||||
},
|
||||
{
|
||||
"id": "using-superpowers",
|
||||
"path": "skills/using-superpowers",
|
||||
"name": "using-superpowers",
|
||||
"description": "Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions"
|
||||
"id": "vercel-deployment",
|
||||
"path": "skills/vercel-deployment",
|
||||
"name": "vercel-deployment",
|
||||
"description": "\"Expert knowledge for deploying to Vercel with Next.js Use when: vercel, deploy, deployment, hosting, production.\""
|
||||
},
|
||||
{
|
||||
"id": "react-best-practices",
|
||||
@@ -750,10 +864,22 @@
|
||||
"description": "Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always"
|
||||
},
|
||||
{
|
||||
"id": "web-artifacts-builder",
|
||||
"path": "skills/.disabled/web-artifacts-builder",
|
||||
"name": "web-artifacts-builder",
|
||||
"description": "Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts."
|
||||
"id": "viral-generator-builder",
|
||||
"path": "skills/viral-generator-builder",
|
||||
"name": "viral-generator-builder",
|
||||
"description": "\"Expert in building shareable generator tools that go viral - name generators, quiz makers, avatar creators, personality tests, and calculator tools. Covers the psychology of sharing, viral mechanics, and building tools people can't resist sharing with friends. Use when: generator tool, quiz maker, name generator, avatar creator, viral tool.\""
|
||||
},
|
||||
{
|
||||
"id": "voice-agents",
|
||||
"path": "skills/voice-agents",
|
||||
"name": "voice-agents",
|
||||
"description": "\"Voice agents represent the frontier of AI interaction - humans speaking naturally with AI systems. The challenge isn't just speech recognition and synthesis, it's achieving natural conversation flow with sub-800ms latency while handling interruptions, background noise, and emotional nuance. This skill covers two architectures: speech-to-speech (OpenAI Realtime API, lowest latency, most natural) and pipeline (STT\u2192LLM\u2192TTS, more control, easier to debug). Key insight: latency is the constraint. Hu\""
|
||||
},
|
||||
{
|
||||
"id": "voice-ai-development",
|
||||
"path": "skills/voice-ai-development",
|
||||
"name": "voice-ai-development",
|
||||
"description": "\"Expert in building voice AI applications - from real-time voice agents to voice-enabled apps. Covers OpenAI Realtime API, Vapi for voice agents, Deepgram for transcription, ElevenLabs for synthesis, LiveKit for real-time infrastructure, and WebRTC fundamentals. Knows how to build low-latency, production-ready voice experiences. Use when: voice ai, voice agent, speech to text, text to speech, realtime voice.\""
|
||||
},
|
||||
{
|
||||
"id": "web-artifacts-builder",
|
||||
@@ -777,7 +903,7 @@
|
||||
"id": "workflow-automation",
|
||||
"path": "skills/workflow-automation",
|
||||
"name": "workflow-automation",
|
||||
"description": "\"Design and implement automated workflows combining visual logic with custom code. Create multi-step automations, integrate APIs, and build AI-native pipelines. Use when designing automation flows, integrating APIs, building event-driven systems, or creating LangChain-style AI workflows.\""
|
||||
"description": "\"Workflow automation is the infrastructure that makes AI agents reliable. Without durable execution, a network hiccup during a 10-step payment flow means lost money and angry customers. With it, workflows resume exactly where they left off. This skill covers the platforms (n8n, Temporal, Inngest) and patterns (sequential, parallel, orchestrator-worker) that turn brittle scripts into production-grade automation. Key insight: The platforms make different tradeoffs. n8n optimizes for accessibility\""
|
||||
},
|
||||
{
|
||||
"id": "writing-plans",
|
||||
@@ -791,10 +917,22 @@
|
||||
"name": "writing-skills",
|
||||
"description": "Use when creating new skills, editing existing skills, or verifying skills work before deployment"
|
||||
},
|
||||
{
|
||||
"id": "moodle-external-api-development",
|
||||
"path": "skills/moodle-external-api-development",
|
||||
"name": "moodle-external-api-development",
|
||||
"description": "Create custom external web service APIs for Moodle LMS. Use when implementing web services for course management, user tracking, quiz operations, or custom plugin functionality. Covers parameter validation, database operations, error handling, service registration, and Moodle coding standards."
|
||||
},
|
||||
{
|
||||
"id": "xlsx-official",
|
||||
"path": "skills/xlsx-official",
|
||||
"name": "xlsx",
|
||||
"description": "\"Comprehensive spreadsheet creation, editing, and analysis with support for formulas, formatting, data analysis, and visualization. When Claude needs to work with spreadsheets (.xlsx, .xlsm, .csv, .tsv, etc) for: (1) Creating new spreadsheets with formulas and formatting, (2) Reading or analyzing data, (3) Modify existing spreadsheets while preserving formulas, (4) Data analysis and visualization in spreadsheets, or (5) Recalculating formulas\""
|
||||
},
|
||||
{
|
||||
"id": "zapier-make-patterns",
|
||||
"path": "skills/zapier-make-patterns",
|
||||
"name": "zapier-make-patterns",
|
||||
"description": "\"No-code automation democratizes workflow building. Zapier and Make (formerly Integromat) let non-developers automate business processes without writing code. But no-code doesn't mean no-complexity - these platforms have their own patterns, pitfalls, and breaking points. This skill covers when to use which platform, how to build reliable automations, and when to graduate to code-based solutions. Key insight: Zapier optimizes for simplicity and integrations (7000+ apps), Make optimizes for power \""
|
||||
}
|
||||
]
|
||||
]
|
||||
|
||||
Reference in New Issue
Block a user