Claude Skills by adrien-barret

Validate completed work against acceptance criteria, architecture design, and customer requirements. Use as a quality gate before marking stories as passed.

Audit frontend code for WCAG 2.1 AA compliance including ARIA, keyboard navigation, contrast, and screen reader compatibility.

Generate API documentation from code endpoints. Use when APIs are added or changed to produce Markdown or OpenAPI docs.

Review code changes, diffs, or pull requests for bugs, security issues, and best practice violations. Use after code changes or before merging PRs.

Review database schema, indexing strategy, query performance, and migration safety for relational and NoSQL databases.

Audit project dependencies for vulnerabilities, outdated versions, license compatibility, and supply-chain risk. Use before releases or periodically.

Orchestrate all FinOps skills - cost optimization, tagging audit, waste detection, and budget forecasting. Use for a full cloud cost assessment.

Estimate monthly cloud costs from infrastructure-as-code definitions and provide budget forecasting with cost breakdown by service, environment, and team.

Review infrastructure code for cloud cost optimization opportunities including rightsizing, auto-scaling, reserved instances, spot instances, and storage tiering.

Audit cloud resources for cost allocation tag compliance. Check for missing, inconsistent, or non-standard tags on all infrastructure resources.

Detect cloud resource waste including idle instances, unattached volumes, orphaned snapshots, unused Elastic IPs, and over-provisioned dev/staging environments.

Generate conventional commit messages from staged git changes. Use after staging files before committing.

Audit application code for performance issues including N+1 queries, bundle size, caching, lazy loading, and connection pooling.

Update project README based on current project structure and code. Use when project structure changes.

Orchestrate all security skills - code audit, infra audit, auth review, secret rotation, and pentest. Use for a full security assessment.

Review authentication and authorization design including OAuth, JWT, token expiration, RBAC/ABAC, and privilege escalation risks.

Scan application code for OWASP Top 10 vulnerabilities, injection flaws, XSS, CSRF, hardcoded secrets, and unsafe cryptography.

Audit cloud and infrastructure configurations for open security groups, missing encryption, excessive permissions, and missing WAF or rate limiting.

Simulate web penetration testing for auth bypass, IDOR, privilege escalation, SSRF, rate-limit bypass, JWT attacks, API abuse, and business logic flaws.

Validate secret storage practices and rotation policies. Check for secrets in code, Vault usage, and rotation schedules.

Perform STRIDE threat modeling on application architecture to identify spoofing, tampering, repudiation, info disclosure, DoS, and elevation of privilege threats.

Meta-skill to generate new SKILL.md files for the BMAD template system. Creates well-structured skills with proper frontmatter and instructions.

Review Terraform code for module structure, state management, provider versioning, security, and operational best practices.

Generate unit and integration tests for project code. Use when new code is written or test coverage needs improvement.