All authors
Claude Skills by backspace-shmackspace
github.com/backspace-shmackspace23 skills1 installs46 views
- Journal RecallSearch, retrieve, and summarize past journal entries. Use when the user says "what did I", "recall", "look up", "find in journal", "journal search", "last week", "weekly review", "what happened on", "summarize my week", "what have I been working on", "review my journal", or asks about past work, decisions, meetings, or notes.Votes: 0GitHub stars: 15
- Journal ReviewPeriodic journal review — scans daily entries to surface unlogged decisions, unlogged learnings, untracked action items, and recurring themes. Use when the user says "journal audit", "review my entries for promotion", "extract decisions", "unlogged items", "what should I formalize", "untracked items", or wants to promote daily notes into formal entries. NOT for weekly summaries — use /journal-recall for "weekly review" or "review my journal".Votes: 0GitHub stars: 15
- JournalWrite entries to the Obsidian work journal. Creates daily logs, meeting notes, project updates, learnings, and decision records. Use when the user says "journal", "log", "daily entry", "meeting notes", "learning", "decision", "ADR", "capture this", "write down", "record this", or wants to document work for future reference.Votes: 0GitHub stars: 15
- ArchitectResearch and create a technical blueprint for a new feature.Votes: 0GitHub stars: 15
- AuditDeep security and performance scan with structured reporting.Votes: 0GitHub stars: 15
- Compliance CheckValidate codebase against code-level compliance signals for regulatory frameworks (FedRAMP, FIPS, OWASP, SOC 2). Scoped to source code analysis only — not a compliance certification.Votes: 0GitHub stars: 15
- Dependency AuditSupply chain security audit — coordinates real CLI vulnerability scanners (npm audit, pip-audit, govulncheck, cargo audit, etc.) and synthesizes findings with license compliance and risk assessment.Votes: 0GitHub stars: 15
- FixApply targeted fixes for specific findings from code reviews, security reviews, QA reports, or audit scans.Votes: 0GitHub stars: 15
- Receiving Code ReviewUse when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementationVotes: 0GitHub stars: 15
- RetroMine review artifacts for recurring patterns and write project learnings.Votes: 0GitHub stars: 15
- Secrets ScanPre-commit secrets detection with pattern-based scanning for API keys, tokens, passwords, private keys, and connection strings. Self-contained — no external tools required.Votes: 0GitHub stars: 15
- Secure ReviewDeep semantic security review of code changes with data flow tracing, taint analysis, and trust boundary validation. Composable building block invoked by /audit when deployed.Votes: 0GitHub stars: 15
- ShipExecute an approved plan using unattended implementation and validation with worktree isolation.Votes: 0GitHub stars: 15
- SyncSynchronize CLAUDE.md and README with recent code changes.Votes: 0GitHub stars: 15
- Threat Model GateUse when planning security-sensitive features — authentication, authorization, data handling, API design, cryptography, or network configuration — requires explicit threat modeling before implementation decisions are madeVotes: 0GitHub stars: 15
- Verification Before CompletionUse when about to claim work is complete, before committing or creating PRs - requires fresh verification evidence before any completion claim. Triggers on phrases like "done", "finished", "ready to commit", "all tests pass", "looks good", "should work", "I think that's it".Votes: 0GitHub stars: 15
- Ai Code ReviewSecurity-focused review of AI-generated or AI-assisted code. Use when reviewing code produced by AI coding assistants, auditing AI-generated patches, verifying AI-assisted contributions before merge, or when a review needs to account for failure modes specific to AI code generation.Votes: 0GitHub stars: 15
- Build Yaml MisconfigurationApply when reviewing or writing GitLab CI (.gitlab-ci.yml), Tekton pipeline/task YAML, or Containerfiles/Dockerfiles used in CI builds. Detects common misconfigurations that expose secrets, weaken isolation, skip security gates, grant excessive privileges, or produce insecure container images.Votes: 0GitHub stars: 15
- Client Side SecurityApply when reviewing or writing browser-facing code that handles user input, renders HTML, sets cookies, or loads third-party scripts. Covers XSS, CSRF, CSP, clickjacking, XS-Leaks, and HTTP security headers.Votes: 0GitHub stars: 15
- Container HardeningHarden container images and runtime configuration. Use when building, reviewing, or auditing Containerfiles, Dockerfiles, container compose files, or Kubernetes pod security settings.Votes: 0GitHub stars: 15
- Input Validation InjectionApply when reviewing or writing code that processes untrusted input, constructs queries or commands, or handles user-supplied data. Covers SQL, LDAP, OS command injection, prototype pollution, and general validation strategy.Votes: 0GitHub stars: 15
- SemgrepRun Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — \"run all\" (full ruleset coverage) and \"important only\" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for vulnerabilities, run a security audit with Semgrep, find bugs, or perform static analysis. Spawns parallel workers for multi-language codebases.Votes: 0GitHub stars: 15
- Threat ModelUse when performing threat modeling for a project, feature, or system architecture. Applies STRIDE threat categorization with DREAD risk rating to produce structured threat models in OTM JSON and markdown formats. Covers system decomposition, trust boundary mapping, data flow analysis, per-subsystem threat identification, cross-cutting synthesis, and mitigation planning.Votes: 0GitHub stars: 15