Claude Skills by Dev-Toolbelt

Bitbucket Pipelines — build, test, and deploy workflows.

GitHub Actions — build, test, lint, deploy, and release workflows.

GitLab CI — .gitlab-ci.yml for build, test, lint, and deploy.

Jenkins — declarative Jenkinsfile for build, test, and deploy.

Cloudflare — DNS, Workers, Pages, Tunnels, WAF, R2, KV.

Docker dev — docker-compose, local Dockerfiles, container debugging.

Docker prod — image optimization, multi-stage builds, best practices.

GCP — Cloud Run, GKE, Artifact Registry, Cloud SQL, Storage, IAM.

Graphify — autonomous setup: graphify.json, Stop hook, CLAUDE.md.

Terraform/OpenTofu — remote state, modules, CI/CD, drift detection.

Right-sizing infrastructure — capability tiers, scaling triggers, anti-overengineering.

Observability stack — Prometheus/Grafana, Datadog, metrics, alerting.

Sentry — error tracking, APM, SDK setup, source maps.

SonarQube/SonarCloud — quality gates, SAST, CI/CD integration.

SSH remote access — key gen, authorized_keys, config, test.

Cross-OS install/verify knowledge base for the closed tool set /devteam:install supports.

Vercel — env vars, edge functions, caching, preview, monorepo.

VPS Linux — Docker, reverse proxy, SSL, security hardening.

DB debug — slow queries, index inspection, lock detection.

Multi-tenancy DB — RLS, schema-per-tenant, database-per-tenant.

Production DB — zero-downtime migrations, pooling, backup, retention.

GoTrue auth — user management, JWT, refresh tokens, custom claims.

Jira via Atlassian MCP — issue ops, JQL, branch naming, PR comment.

JWT — structure, signing algorithms, refresh, security pitfalls.

Kong API Gateway — routes, services, plugins, Admin API.

Linear — issue ops, status transitions, cycle management.

Offline-first — local storage schema, sync queue, conflict resolution.

Web Push — service worker, VAPID, permission UX, subscriptions, browser support, security.

PWA — manifest, service worker caching strategies, update lifecycle.

Supabase Realtime/WebSocket — broadcast, presence, Postgres changes.

Supabase — Postgres, Auth, Storage, Edge Functions, RLS, CLI.

WordPress core, plugin/theme development, and security hardening reference.

jQuery — legacy, server-rendered, WordPress, pre-framework codebases.

Android engineering rules — permissions, release signing, Kotlin/Compose. Load for Android.

Flutter/Dart rules, patterns, and checklists. Load when Flutter is detected.

Apple Human Interface Guidelines for iOS and iPadOS. Load for iOS or iPadOS design tasks.

iOS engineering rules — permissions, code signing, Swift/SwiftUI. Load for iOS targets.

Material Design 3 (Material You) UI guidelines. Load for Android or cross-platform design.

React Native and Expo rules, patterns, and checklists. Load when react-native is detected.

Running the right security scanners for the detected stack — secrets, SAST, deps, images.

Dependency vulnerabilities — scanning, CVE triage, update strategy.

IDOR — detection, authorization enforcement, ID strategy.

ISO 27001/SGSI — CIA triad, controls, risk assessment.

OWASP Top 10 — injection, broken auth, XSS, misconfig checklist.

SAST — tool selection, CI integration, severity thresholds.

Secret management — env vars, vaults, rotation, no secrets in code.

Security review — OWASP Top 10, LGPD/GDPR, API, infrastructure.

Supply chain security — dependency audit, CI pinning, typosquatting.

Architecture Decision Records — MADR format.

Architecture context before implementing — rendering model, service boundaries, layer depth.