Claude Skills by Canhada-Labs

SMB and startup finance tracking — cash-flow projection, runway calculation, burn-rate diagnostics, founder-finance literacy, monthly close-light cadence, and founder-friendly tooling (Brex / Mercury / Stripe Atlas / Conta Azul / Omie). Distinct from `domains/finance-accounting/skills/bookkeeper-controller` (full-stack accounting) and `domains/finance-accounting/skills/fpa-analyst` (enterprise planning cycles) — this skill addresses founder-side financial awareness at the pre-scale stage. Use...

Customer support response discipline covering ticket triage, severity assessment, response template and macro discipline, escalation path ownership, voice-of-customer feedback loops, and multi-channel support operations across email, chat, phone, and social. Applies CSAT, NPS, FCR, first-response-time, and time-to-resolution diagnostics with clear leading vs. lagging distinctions. Use when: triaging incoming support tickets; setting or auditing SLA targets per severity tier; designing escalat...

Civil engineering practice spanning structural analysis, geotechnical assessment, hydraulic and hydrologic design, transportation engineering, construction project management, and multi-jurisdiction code compliance (IBC / ASCE-7 / AISC / ACI / AASHTO; Eurocodes EN 1990–1999; NBR-ABNT 6118 / 8800 / 6122). Applies engineering judgment with explicit safety factors and limit-state verification across strength, serviceability, and stability at every design stage. Use when any task involves structu...

Production-grade patterns for LLM-as-judge evaluation systems, covering approach selection (direct scoring, pairwise comparison, reference-based, G-Eval, and Constitutional), systematic bias mitigation (position swap-symmetry, verbosity length-control, self-enhancement separation, order randomization), calibration against human ground truth with inter-rater agreement thresholds, rubric design with falsifiable criteria, statistical discipline for sample sizing and confidence intervals, and aut...

Rigorous testing and benchmarking of LLM agents—covering behavioral contract verification, capability boundary probing, reliability metric collection, and production monitoring. The empirical reality is sobering: even top-ranked agents achieve below 50% on real-world task benchmarks such as SWE-bench Verified and GAIA (Jimenez et al., 2024; Mialon et al., 2023). Evaluation must be deterministic, version-pinned, and contamination-aware to produce claims that compound across releases. Use when:...

Static security analysis for GitHub Actions workflows that invoke AI coding agents (Claude Code Action, Gemini CLI, OpenAI Codex, GitHub AI Inference). Traces attacker- controlled input through trigger events, env blocks, and configuration fields to detect nine injection and misconfiguration vectors; produces structured, severity-graded findings.

Modern CMake and C++ build/toolchain discipline for C++17/20/23 projects. Enforces target-based CMake (usage requirements with PRIVATE / PUBLIC / INTERFACE visibility, no global flag mutation), pinned dependency management (FetchContent with immutable refs, vcpkg manifests with a builtin-baseline, Conan lockfiles), per-target warning and hardening flag sets, compile_commands.json plus clang-tidy / clang-format wiring, build acceleration (ccache, IPO/LTO via CheckIPOSupported), and reproducibl...

Modern C++ (C++17/20/23) coding standard grounded in the public C++ Core Guidelines. Enforces resource safety (RAII), immutability by default, strong static typing, value semantics, and intent-revealing interfaces. Covers ownership and smart-pointer discipline, the Rule of Zero / Rule of Five, const-correctness, scoped enums, exception-safety, concept-constrained templates, concurrency locking discipline, header hygiene, and naming. Use when authoring, reviewing, or refactoring C++ — when dec...

Testing workflow for modern C++ (C++17/20) with GoogleTest / GoogleMock driven through CMake and CTest. Covers the red-green-refactor loop, unit and integration test layout, fixtures, mocks vs fakes, dependency injection for isolation, stable test discovery with gtest_discover_tests, coverage collection (gcov/lcov and llvm-cov), the AddressSanitizer / UBSan / ThreadSanitizer builds, and guardrails that keep tests deterministic and non-flaky. Use when writing or fixing C++ tests, wiring a CMak...

Evaluation and data-split hygiene for ML systems: train/validation/test discipline, temporal and grouped splits, the leakage taxonomy (target, feature, preprocessing, and split leakage) with concrete checks for each, metric selection matched to task and class balance, trivial baselines before models, seeded reproducible evaluation harnesses, and statistical treatment of model deltas (multi-seed runs, mean and spread, significance before celebration). Front-loads the evaluation-invalidating an...

From checkpoint to production inference: safe model export and loading (state_dict with weights_only, safetensors for distribution, TorchScript/ONNX trade-offs), eval-mode and no-grad inference discipline, training-serving preprocessing parity via a shared transform module plus golden-batch tests, inference-server shape (health/readiness, versioned model registry, warmup), dynamic batching under an explicit latency budget, GPU memory measured at peak load before rollout, staged rollout (shado...

Idiomatic PyTorch for robust, reproducible, memory-conscious training pipelines: device-agnostic placement, full seed control, explicit tensor shape tracking, clean nn.Module construction, weight initialisation, correct train/eval mode discipline, the standard training and validation loops, efficient Dataset/DataLoader configuration, variable-length collation, resumable checkpointing, and the performance levers (mixed precision, gradient checkpointing, torch.compile). Front-loads the autograd...

Developer relations and advocacy discipline covering technical content production (tutorials, cookbooks, deep-dives, quickstarts, migration guides), documentation engineering with CI runnability gates, sample app authorship grounded in production patterns, conference and meetup proposal craft, community operations across Discord/Slack/GitHub/forums, developer-experience feedback synthesis routed to product, and internal evangelism including new-feature dogfood and release-note authorship. Dis...

Build zero-dependency, animation-rich HTML presentations — from a topic, from rough notes, or by converting an existing PowerPoint deck to the web. The distinguishing discipline is two hard gates most slide generators skip: (1) every slide must fit exactly one viewport with no internal scroll, and (2) non-designers are guided to a distinctive look through visual exploration (real preview slides they can react to) instead of abstract style questionnaires. Produces a single self-contained .html...

Record a polished demo/walkthrough video of a web application with a browser automation driver (Playwright). Produces a WebM with a visible arrow cursor, natural human pacing, on-screen step subtitles, and a storytelling flow — not a jittery instant-fill capture. The defining discipline is a three-phase method: Discover the real page (dump the actual interactive elements before scripting), Rehearse (verify every selector resolves, failing loudly), then Record. Use when someone asks for a demo...

Engineering anti-cheat, proctoring, and grade-tamper resistance for K-12 and higher-ed assessment platforms. Covers question randomization, secure-browser integration, time-attack detection, grade audit trails (append-only), question-bank access control, proctoring governance with accessibility allowlist, and the double-grading invariant. Use when designing assessment delivery, gradebook writes, proctoring features, or question-bank tooling. Combines with security-and-auth (core) for RLS/RBAC...

Engagement metrics, dropout prediction, and early-warning systems for K-12 and higher-ed with explicit fairness and privacy trade-off discipline. Covers aggregation floors (N≥5 FERPA de-identification), privacy-preserving aggregation (k-anonymity, differential privacy), disparate-impact audit per protected subgroup, opt-out propagation through training data, model calibration display, and retrain-schedule fairness re-evaluation. Use when designing any staff-facing or student-facing dashboard,...

Privacy engineering for K-12 and higher-ed student data under FERPA (US), LGPD-educational (BR), and COPPA (US under-13). Covers parental consent state machine, age-gate enforcement, minimum-necessary collection, purpose limitation, directory-information opt-out lifecycle, SIS roster integrity, and PII handling in grade exports. Use when designing signup, SSO, roster sync, export/portability, or any endpoint that serves student records. Combines with consent-lifecycle (lgpd reference) and pii...

End-to-end advisory doctrine for international study pathways covering destination selection, profile assessment, school-list construction, essay coaching, application timeline management, standardized test strategy, visa preparation, and post-arrival adaptation. Multi-jurisdiction expertise spanning the US, UK, Canada, Australia, Continental Europe, Hong Kong, and Singapore at undergraduate, master's, and PhD levels. Handles PII-touching workflows — student transcripts, family financials, pa...

Governance and hard-rules for embedded firmware development on resource-constrained microcontrollers. Covers RTOS selection and task architecture (FreeRTOS / Zephyr / NuttX), MCU target selection across ESP32 / STM32 / Nordic / RP2040, peripheral driver architecture with HAL abstraction, power-state hierarchy and current budgeting, dual-bank OTA update pipelines with signed verification and rollback, secure boot chain from ROM to application image, and MISRA-C / CERT-C compliance gating. Use ...

SMB bookkeeping and controller discipline covering chart of accounts design, double-entry transaction recording, bank and credit-card reconciliation, accounts-receivable and accounts-payable cycles, month-end close management, financial statement preparation (P&L, Balance Sheet, Cash Flow), SOX-lite internal controls, payroll integration, and multi-entity consolidation. GAAP-aware across US-GAAP, IFRS, and BR-GAAP; flags standard divergence when a treatment differs across regimes. PII-touchin...

Corporate FP&A and financial analyst discipline covering variance analysis, KPI dashboard architecture, business-unit P&L review, scenario modelling, capital-allocation evaluation, and board-pack preparation. Applies price / volume / mix decomposition, hurdle-rate discipline, and SOX-aligned reporting integrity to all analytical outputs. Distinct from `domains/fintech/skills/equity-research` (sell-side / public-markets focus). Use when: investigating actuals- vs-budget shortfalls and decompos...

Senior FP&A discipline for annual planning, rolling forecast cycles, driver-based modelling, capital-expenditure governance, headcount and workforce planning, cost-centre management, and cross-functional finance partnership. Distinct from `financial-analyst` (variance execution, period close) — FP&A is forward-looking and cross-functional: it translates strategic priorities into financial reality and surfaces trade-offs before commitments are made. Use when: building or reviewing an annual op...

Corporate tax strategy across multi-jurisdiction portfolios — US federal and state nexus, EU corporate income tax, VAT, Digital Services Tax, Pillar 2 GloBE minimum tax, and Brazil Lucro Real / Presumido / Simples Nacional plus ICMS, PIS-COFINS, and the Reforma Tributária transition. Covers transfer pricing (OECD Guidelines, Section 482, RFB IN 1.312); R&D credits (US Section 41, UK R&D Tax Credit, Brazil Lei do Bem); M&A tax structuring from entity selection through reorganisation elections;...

Audit-grade security review for EVM smart contracts and DeFi protocols

Fundamental and quantitative equity research discipline for public markets. Covers the full research lifecycle: universe screening, industry framing, company deep-dive, intrinsic valuation, risk registration, and investment memo production. Applies multi-method valuation (DCF, comparable multiples, sum-of-parts, asset-based, EVA), quality-of-earnings forensics, and factor screens (Value, Quality, Momentum, Low-Volatility). Enforces MNPI firewall and Reg FD / CVM Resolution 44 compliance throu...

Integrating with cryptocurrency exchange APIs (REST and WebSocket),

Step-by-step operational playbook for adding new cryptocurrency

Ensuring mathematical correctness and determinism in financial systems.

Financial data display correctness for a crypto trading platform frontend. Covers

Fintech-specific frontend data-layer patterns — Financial Display Rules

Fintech-specific frontend patterns — financial data formatting (BRL/USD/USDT/

Prediction market integration and trading strategy for a crypto trading platform. Covers

Designing, reviewing, and evolving real-time market data systems,

Governance and hard-rules for authoring, reviewing, and deploying Solidity smart contracts on EVM-compatible chains. Covers reentrancy discipline, storage layout, gas optimization constraints, upgradeability pattern selection, access control hierarchies, and emergency circuit-breaker design. Anchored to Solidity ^0.8.24 and OpenZeppelin v5 as the canonical baseline; pin an exact patch version in foundry.toml / hardhat.config.ts for reproducible deployments, and benchmark gas-cost figures per ...

Trading execution architecture for a crypto trading platform. Covers CEX gateway design

Idiomatic Go engineering discipline: writing, reviewing, and refactoring Go so it stays boring, predictable, and easy to maintain. Covers the core Go proverbs (clear over clever, accept interfaces return structs, useful zero values), error-handling contracts (wrap with %w, sentinel + typed errors, errors.Is / errors.As, never silently drop), concurrency safety (worker pools, context-driven cancellation and timeout, errgroup, goroutine-leak avoidance, graceful shutdown), interface and package ...

Production Go service patterns: the wiring that turns a correct package into a service that survives deploys, load, and 3 a.m. incidents. Covers the hardened net/http server shape (all four timeouts, no default client/server), middleware chains, graceful shutdown under SIGTERM with bounded drain, timeouts at every boundary (inbound, outbound, database), gRPC and JSON API structure, config and env wiring read once in main, structured logging with slog (request IDs, no secrets), liveness versus...

Go testing workflow that keeps suites deterministic, parallel-safe, and honest about what they prove. Covers table-driven tests with named subtests, the stdlib-testing-versus-testify decision, test doubles (fakes over mocks, never mock what you don't own), httptest for HTTP handlers and clients, golden files behind an -update flag, fuzz targets for parser-shaped code, t.Parallel and race-detector discipline, the unit-versus-integration split (build tags, testing.Short, testcontainers-go), ben...

Section 508 + WCAG 2.1 AA compliance for public-sector software. Covers VPAT authoring, screen-reader verification (NVDA/JAWS/VoiceOver), keyboard-only flows, color contrast, captions, ARIA labeling, focus indicators, and reduced-motion respect. In government procurement contexts a failing Section 508 check is a legal block — not an aspirational polish pass. Use when designing any citizen-facing or employee-facing UI, any procurement-responsive RFP response, or any VPAT refresh. Cross-referen...

Presales engineering for government and public-sector digital transformation engagements. Covers the full lifecycle from policy signal interpretation and opportunity qualification through solution architecture, bid documentation, proof-of-concept validation, and post-award handoff. Operates across multiple procurement jurisdictions — FedRAMP / GovRAMP / FISMA (US), eIDAS 2 / GDPR / NIS2 (EU), LGPD / Lei das Estatais 13.303 / Lei 14.133 (Nova Lei de Licitações) + ICT procurement instructions (...

FOIA (5 USC §552) compliance engineering — records lifecycle, retention schedules, redaction audit trails, and request fulfillment. State equivalents (state sunshine laws, public records acts) follow the same pattern with tighter SLAs. Covers retention classification, tombstoning vs hard delete, exemption-based redaction with legal basis, requester-identity confidentiality, SLA clock machinery, and the "default open" posture for public records. Use when designing any records-producing subsyst...

Public-sector procurement engineering — bid confidentiality until award, contractor vetting against debarment lists, conflict-of-interest declarations, audit trails for every contract decision, and set-aside compliance. Federal FAR / DFARS patterns with state/local equivalents (state procurement codes, local small-business ordinances). Use when designing RFP-publication, bid-intake, bid-opening, evaluation, award, or contract-administration subsystems. The "why not the lowest bid?" audit trai...

Healthcare patient-facing customer service discipline covering appointment scheduling, billing inquiries, complaint handling, insurance navigation, and escalation across clinical, billing, privacy-breach, and safety paths. Governs PHI disclosure under multi-jurisdiction health-data law: HIPAA Privacy + Security + Breach Notification (US) / 42 CFR Part 2 / LGPD Art. 11 + Resolução CFM 2.314 (BR) / GDPR Art. 9 special-category (EU). Never provides medical advice — every clinical question routes...

Healthcare marketing compliance discipline covering the full pre-publication review lifecycle: claim substantiation against clinical-evidence hierarchy, FDA / FTC / Anvisa RDC 96 / EMA / EFPIA promotional rules, off-label use prohibition, fair-balance obligations (efficacy and safety in proportion), testimonial and HCP-engagement restrictions under Sunshine Act / Open Payments / EFPIA Disclosure Code, and PII / PHI handling in campaign analytics (HIPAA marketing authorisation, tracking-pixel ...

Operating doctrine for hospitality guest services across hotel, vacation rental, and restaurant operations — covering check-in and check-out flow, complaint resolution, special-request fulfillment, multi-channel communication, online review management, and service recovery. Regional norms are encoded for the Middle East, Europe, Asia-Pacific, and the Americas. Use when executing pre-arrival messaging sequences, triaging and resolving in-stay complaints, determining compensation tier for servi...

Employee onboarding doctrine covering pre-boarding paperwork and document collection, day-one orientation, first-30 / first-60 / first-90 plans, role and mission induction, team and culture integration, system and access provisioning under least-privilege discipline, benefits enrolment with window enforcement, compliance training completion tracking, and manager check-in cadence. Operates at the employment threshold where regulatory obligations intersect with retention risk: SSN, CPF, banking...

End-to-end talent acquisition across the full hiring lifecycle. Covers job description and scorecard authoring, multi-channel sourcing strategy (inbound, outbound boolean, referral, community, agency), structured interviewing (Toggl 4-stage / Bock-style rubric), debias-by-design bias mitigation, reference and background check discipline, offer negotiation, and candidate-experience NPS. Enforces minimum-necessary PII handling at each stage with documented retention schedules and LGPD Art. 7 / ...

Cross-cultural business strategy discipline for international operations, partnerships, and multicultural teams. Covers Hofstede six-dimension model, Trompenaars seven-dimension model, and Lewis triangle — calibrated to business contexts (negotiation, leadership, team structure, conflict). Applies high-context vs. low-context communication frameworks to meeting design, written communication, and escalation paths. Enforces cultural-bias awareness: own-culture default is a failure mode, not a b...

France-specific business consulting covering Convention Collective navigation, RGPD compliance specifics distinct from generic GDPR guidance, Bpifrance funding programmes, Crédit Impôt Recherche eligibility, French professional formality and relationship register, syndicat and CSE labour relations, and droit du travail obligations. Multi-jurisdiction-aware companion for operating in France. Use when: structuring employment in France; selecting or negotiating a Convention Collective; filing a ...