All authors
Claude Skills by AppVerk
github.com/AppVerk101 skills0 installs117 views
- Architecture AnalysisAnalyzes codebase for SOLID principles violations, DDD patterns compliance, Clean Architecture layer dependencies, and common anti-patterns. Works with Python and TypeScript, with language-agnostic pattern detection.Votes: 0GitHub stars: 5
- Dependency ScanningScans project dependencies for known vulnerabilities (CVEs). Supports Python (uv, pip, poetry), JavaScript, Go, Java, and other languages. Addresses OWASP A03:2025 - Software Supply Chain Failures.Votes: 0GitHub stars: 5
- Developer Plugins IntegrationDetects installed developer plugins (python-developer, frontend-developer, php-developer) and project stack, then provides a list of relevant skills to load for code review and fix workflows. Supports Python (FastAPI, SQLAlchemy, Pydantic, Django, Celery, asyncio, uv), Frontend (React, Tailwind, Zustand, TanStack, pnpm), and PHP (Symfony, Doctrine, DDD).Votes: 0GitHub stars: 5
- Linter IntegrationAuto-detects and runs project-specific linters, formatters, and typecheckers. Supports Python (ruff, mypy, black, flake8, pylint) and TypeScript (eslint, tsc, prettier). Uses existing project configuration.Votes: 0GitHub stars: 5
- Sast AnalysisStatic Application Security Testing (SAST) for multi-language codebases. Uses Semgrep and language-specific tools to detect vulnerabilities across Python, JavaScript, TypeScript, Go, Java, and more.Votes: 0GitHub stars: 5
- Secret ScanningDetects and handles sensitive information in code. Use when reviewing code for secret leaks and hard-coded credentials.Votes: 0GitHub stars: 5
- Standards DiscoveryDiscovers and parses project coding standards, style guides, and architecture documentation. Searches for CONTRIBUTING, CODING_STANDARDS, STYLE_GUIDE, CONVENTIONS, ARCHITECTURE files and extracts rules for code review.Votes: 0GitHub stars: 5
- Coding StandardsTypeScript + React coding standards, architecture patterns, naming conventions, ESLint configurationVotes: 0GitHub stars: 5
- Form PatternsReact Hook Form with Zod validation, server-side error handling, mutation integration, and reusable form componentsVotes: 0GitHub stars: 5
- Pnpm Package Managerpnpm package management, workspace setup, dependency updates, and CI integrationVotes: 0GitHub stars: 5
- Tailwind PatternsTailwind CSS v4, CVA component variants, shadcn/ui patterns, semantic tokens, responsive designVotes: 0GitHub stars: 5
- Tanstack Query PatternsTanStack Query v5 server state management with queryOptions, mutations, caching, and error handlingVotes: 0GitHub stars: 5
- Tanstack Router PatternsTanStack Router type-safe routing with file-based conventions, loaders, search params validation, and protected routesVotes: 0GitHub stars: 5
- Tdd WorkflowTest-driven development workflow with Vitest, React Testing Library, MSW v2, and PlaywrightVotes: 0GitHub stars: 5
- Zustand PatternsZustand store management with slices, middleware, selectors, and TypeScript patternsVotes: 0GitHub stars: 5
- ComposerManages PHP dependencies and environments with Composer: adds packages, syncs lockfiles, configures autoload. Activates when setting up projects, managing dependencies, or working with autoload.Votes: 0GitHub stars: 5
- Ddd PatternsEnforces DDD patterns: Bounded Contexts, 4-layer architecture, Aggregate Roots, Value Objects, Domain Events, repository interfaces. Activates when working with domain models, services, or cross-context communication.Votes: 0GitHub stars: 5
- Doctrine Orm PatternsEnforces Doctrine ORM patterns: mapping (YAML/XML/Attributes), repositories, migrations, QueryBuilder, filters, performance. Activates when working with database models, repositories, queries, or migrations.Votes: 0GitHub stars: 5
- Symfony PatternsEnforces Symfony patterns with DDD: thin controllers, Messenger CQRS, autowiring, security, routing attributes. Activates when working with Symfony controllers, services, or configuration.Votes: 0GitHub stars: 5
- Async Python PatternsGuides async/await implementation: asyncio patterns, concurrent I/O, task management, synchronization. Activates when building async APIs, concurrent systems, or non-blocking applications.Votes: 0GitHub stars: 5
- Celery PatternsEnforces Celery task patterns: idempotent design, retry strategies, error handling, testing with eager mode. Activates when working with Celery tasks, background jobs, or async workers.Votes: 0GitHub stars: 5
- Django Orm PatternsEnforces Django ORM patterns with Pragmatic DDD: rich domain models, Managers, QuerySets, migrations, signals, performance. Activates when working with Django models, queries, or migrations.Votes: 0GitHub stars: 5
- Django Web PatternsEnforces Django REST Framework patterns with Pragmatic DDD: ViewSets, Serializers, Permissions, exception handling, settings, middleware. Activates when working with Django views, endpoints, or DRF serializers.Votes: 0GitHub stars: 5
- Fastapi PatternsEnforces FastAPI patterns with DDD and Clean Architecture: endpoint structure, UoW dependency injection, domain exception handling, pure ASGI middleware, testing. Activates when working with FastAPI routers, endpoints, or middleware.Votes: 0GitHub stars: 5
- Pydantic PatternsEnforces Pydantic patterns with DDD and Clean Architecture: Value Objects, request/response schemas, from_domain() mapping, TypeAdapter, settings management. Activates when working with data models, validation, or configuration.Votes: 0GitHub stars: 5
- Sqlalchemy PatternsEnforces SQLAlchemy patterns with DDD and Clean Architecture: domain entities, Repository Protocol, Unit of Work, async sessions, Alembic migrations. Activates when working with database models, repositories, queries, or migrations.Votes: 0GitHub stars: 5
- Uv Package ManagerManages Python dependencies and environments with uv: adds packages, syncs lockfiles, pins versions. Activates when setting up projects, managing dependencies, or working with virtual environments.Votes: 0GitHub stars: 5
- Be TestingBackend testing patterns — API request construction, response verification, database state checks, error handling testing, and adaptive tool detection.Votes: 0GitHub stars: 5
- Fe TestingFrontend testing patterns using Playwright MCP — navigation, interaction, assertions, screenshots on failure, and common UI testing scenarios.Votes: 0GitHub stars: 5
- Report FormatTest report format with QA-XXX issue IDs compatible with code-review plugin. Defines report structure, severity levels, issue format, and detailed results.Votes: 0GitHub stars: 5
- Test Plan FormatTest plan structure, naming conventions, edge case generation rules, and file saving conventions for QA test plans.Votes: 0GitHub stars: 5
- Pipeline SecuritySecurity scanning templates and HARD-RULES for CI/CD pipeline configuration. Covers Semgrep SAST and TruffleHog secret scanning across Bitbucket, GitHub Actions, GitLab CI, and Azure DevOps.Votes: 0GitHub stars: 5
- Api Security ChecklistChecklist for passive API security assessment. Covers endpoint discovery, CORS, rate limiting, authentication, GraphQL, and response security.Votes: 0GitHub stars: 5
- Compliance ChecklistChecklist for passive compliance and privacy assessment. Covers cookie consent, cookie inventory, privacy policy, data exposure, analytics and tracking, and third-party resources.Votes: 0GitHub stars: 5
- Infrastructure ChecklistChecklist for passive infrastructure security assessment. Covers SSL/TLS, DNS, subdomains, server fingerprinting, CDN/WAF detection, port scanning, and exposed paths.Votes: 0GitHub stars: 5
- Performance ChecklistChecklist for passive web performance assessment. Covers Core Web Vitals, images, fonts, JavaScript, CSS, caching, compression, and resource hints.Votes: 0GitHub stars: 5
- Seo ChecklistChecklist for passive technical SEO assessment. Covers indexability, metadata quality, structured data, rendering, internal linking, OpenGraph, internationalization, and sitemap analysis.Votes: 0GitHub stars: 5
- Supply Chain ChecklistChecklist for passive supply chain security assessment. Covers JavaScript library identification, known CVEs, SRI, source maps, and exposed dependency files.Votes: 0GitHub stars: 5
- Web Security ChecklistChecklist for passive web application security assessment. Covers HTTP security headers, cookies, TLS, secrets exposure, error handling, and common web vulnerabilities.Votes: 0GitHub stars: 5
- Decision GateUse when resolving code-review findings flagged needs-decision in bulk — the analysis fan-out, the decision sweep and its five outcomes, the dispatch contract, orchestrator-run verification, and the decision record written into the report. Loaded by /fix-report and /fix-all; /fix loads it for the Alternatives render format and, in composite mode, stage 3's dispatch-copy rule.Votes: 0GitHub stars: 5
- Docs Fact RegistryUse when checking or reporting docs↔code drift — a declarative registry (claim → source of truth → policy) with a three-way classification: mechanical facts auto-fixable, judgment calls escalated, dead references flagged as inconsistencies whose fix is a decision.Votes: 0GitHub stars: 5
- Finding FalsificationUse when authoring or reviewing any code-review reporting agent, or when a code-review agent is about to report findings — mandates a self-falsification pass: every finding survives a refutation battery before reporting; rejected findings and doctrine-gap candidates are recorded in dedicated sections, never silently dropped.Votes: 0GitHub stars: 5
- Verdict ProtocolUse when writing or reviewing the definition of a reporting agent or command (a review, audit, verification, or test-run agent), before its closing contract is finalized.Votes: 0GitHub stars: 5
- Bun Package ManagerBun package management, lockfile policy, workspaces, CI integration, and Bun-native toolingVotes: 0GitHub stars: 5
- State Combination ModelingUse when a component or view is driven by two or more independent boolean inputs (flags, permissions, connection states) — enumerate the full 2^N product, confirm which combinations are real, never collapse independent axes into one exclusive switch.Votes: 0GitHub stars: 5
- Loop EngineeringUse when designing, authoring, or reviewing a closed agent loop (test→fix→retest, audit→fix→re-audit, generate→verify→correct) in this marketplace — the minimum-bar checklist, the ground-truth oracle taxonomy, and the anti-patterns, anchored to /qa:loop as the reference implementation.Votes: 0GitHub stars: 5
- Reader Context HygieneUse when authoring or reviewing a fan-out reader/scout agent that ingests an external source (a design board, a live site, a large document) on behalf of a consumer.Votes: 0GitHub stars: 5
- Lens CatalogLens roster, panel-selection rules, and severity/needs-decision anchors for the /superutils:spec-review triage pipeline. Load when composing a review panel or grading findings.Votes: 0GitHub stars: 5
- Spec Report FormatReport structure, SR-id rules, reviewer/challenger/verifier/fixer output shapes, outcome enum, and terminal statuses for the /superutils:spec-review triage pipeline. Load when reading or writing a spec-review report. (Distinct from qa:report-format, which is the QA test-report format.)Votes: 0GitHub stars: 5
- Coding StandardsEnforces PHP coding rules: strict types, type hints, imports, naming, error handling, and PSR-12 conventions. Activates when writing or reviewing PHP code.Votes: 0GitHub stars: 5