All authors
Claude Skills by diegosouzapw
github.com/diegosouzapw10,791 skills97 installs17,650 views
- Generate E2e TestGenerate an end-to-end test for a given feature or user story. Use when the user asks to create E2E tests, automate workflows, test user flows, or convert manual workflows into Playwright tests. Leverages Playwright MCP to perform the workflow interactively before generating test code.Votes: 0GitHub stars: 57
- Grc ComplianceThis skill should be used when the user asks to "GRC", "governance", "risk", "compliance", "audit", "policy", "control", "risk assessment", "SOX", "GDPR", or any ServiceNow GRC development.Votes: 0GitHub stars: 57
- Gtse Ecommerce Seo AuditComprehensive BigCommerce SEO audit for product pages, collection pages, technical SEO, and B2B considerations. Use when GTSE needs SEO audits for their cable ties, safety equipment, and industrial supplies categories. Adapted for B2B ecommerce with trade customer focus.Votes: 0GitHub stars: 57
- HelmHelm chart authoring — library charts, values.schema.json, subcharts, _helpers.tpl, helm-unittest. Use when building complex Helm charts. NOT for basic helm install/upgrade.Votes: 0GitHub stars: 57
- Hive AuthHow authentication works in Hive frameworkVotes: 0GitHub stars: 57
- Hlab Auditor Majiayu000Independent reviewer. Provide PASS/FAIL based on `docs/AUDIT-CHECKLIST.md`.Votes: 0GitHub stars: 57
- Implementing E2e TestingMaster end-to-end testing with Playwright and Cypress to build reliable test suites that catch bugs, improve confidence, and enable fast deployment. Use when implementing E2E tests, debugging flaky tests, or establishing testing standards.Votes: 0GitHub stars: 57
- Implementing End To End Encryption For MessagingEnd-to-end encryption (E2EE) ensures that only the communicating parties can read messages, with no intermediary (including the server) able to decrypt them. This skill implements a simplified versionVotes: 0GitHub stars: 57
- Industry ComplianceUse this skill when you need industry-specific regulatory compliance for Banking & Finance (FFIEC, FINRA, Basel III, PSD2, DORA), Healthcare & Life Sciences (FDA 21 CFR Part 11, HITRUST CSF, HL7 FHIR security, GxP), Hi-Tech & Semiconductors (ITAR, EAR, CMMC), or Retail/Consumer (PCI-DSS, CPRA). Trigger for sector-specific compliance programs, regulated industry deployments, or when standard frameworks alone are insufficient.Votes: 0GitHub stars: 57
- Infinite GratitudeMulti-agent research skill for parallel research execution (10 agents, battle-tested with real case studies).Votes: 0GitHub stars: 57
- Infosec Engineer CrashbytesAct as an Information Security Engineer to conduct security assessments, threat modeling, vulnerability analysis, compliance reviews, and incident response planning. Use when users need help with security architecture review, threat modeling (STRIDE, DREAD, attack trees), vulnerability assessment, OWASP Top 10 remediation, secure code review, compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR), incident response planning, security policy creation, penetration test scoping, or secur...Votes: 0GitHub stars: 57
- Inspequte Rule VerifyPerform isolated, file-based verification of an inspequte rule change using verify-input/. Use when producing a go/no-go verification report from spec.md, patch/diff, and report files without reading plan.md or chat logs.Votes: 0GitHub stars: 57
- Ios PentestComprehensive iOS mobile application penetration testing skill with Frida/Objection integration for jailbroken and non-jailbroken devices. This skill should be used when performing security assessments on iOS applications including static analysis, dynamic analysis, runtime manipulation, traffic interception, keychain analysis, and vulnerability identification. Triggers on requests to pentest iOS apps, test iPhone/iPad security, analyze IPAs, bypass security controls, or perform OWASP MASTG i...Votes: 0GitHub stars: 57
- Iosdev Cn通用 iOS App 开发、构建、签名、测试与 App Store 上架流程（中国区）指南。用于当用户询问 iOS 开发/上架/审核/签名/TestFlight/App Store Connect/隐私合规/订阅配置，或输入触发词 iosdev 时。Votes: 0GitHub stars: 57
- Israeli Corporate LawIsraeli corporate law & compliance assistant for Israel-related matters (Companies Law, Registrar of Companies/Israeli Corporations Authority filings, governance, shareholder/investment docs, M&A diligence, and commercial contract review with Israeli-law implications). Use when questions mention Israel/Israeli entities, Israeli law, ISA/TASE, corporate filings in Israel, חוק החברות, רשם החברות, רשות התאגידים, חוק ניירות ערך.Votes: 0GitHub stars: 57
- Istio Majiayu000Service mesh implementation with Istio for microservices traffic management, security, and observability. Use when implementing service mesh, mTLS, traffic routing, load balancing, circuit breakers, retries, timeouts, canary deployments, A/B testing, or service-to-service communication. Triggers: istio, service mesh, envoy, sidecar, virtualservice, destinationrule, gateway, mtls, peerauthentication, authorizationpolicy, serviceentry, traffic management, traffic splitting, canary, blue-green, ...Votes: 0GitHub stars: 57
- Jules Audit RequestProtocol for escalation to Jules when stuck.Votes: 0GitHub stars: 57
- JwtJWT y auth. Proyecto usa este skill; contenido canónico en .ai-system.Votes: 0GitHub stars: 57
- Legal Compliance AgentGenerate legally compliant privacy policies, terms of service, HIPAA documentation, and compliance pages for healthcare SaaS platforms. Ensures Google Play/App Store approval and GDPR/HIPAA compliance.Votes: 0GitHub stars: 57
- Ln 523 Auto Test PlannerPlans automated tests (E2E/Integration/Unit) using Risk-Based Testing after manual testing. Calculates priorities, delegates to ln-301-task-creator. Worker for ln-520.Votes: 0GitHub stars: 57
- Ln 634 Test Coverage AuditorCoverage Gaps audit worker (L3). Identifies missing tests for critical paths (Money 20+, Security 20+, Data Integrity 15+, Core Flows 15+). Returns list of untested critical business logic with priority justification.Votes: 0GitHub stars: 57
- Load Test DesignerDesign load tests with realistic workload models and performance criteriaVotes: 0GitHub stars: 57
- Managing DependenciesEvaluates packages, manages dependencies, and addresses supply chain security. Use when adding npm/pip/cargo/bundler/go dependencies, auditing packages, reviewing lockfile changes, checking for vulnerabilities, comparing package alternatives, or assessing package trustworthiness.Votes: 0GitHub stars: 57
- Mcp SecurityThis skill should be used when the user asks to "secure Notion MCP", "protect OAuth token", "MCP security best practices", "prevent token exposure", "credential management", or needs guidance on securing Notion MCP integration. Covers credential storage, validation, and security considerations.Votes: 0GitHub stars: 57
- Memory Leak AuditAudit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers addDisposableListener, Event.once, MutableDisposable, DisposableStore, and onWillDispose patterns.Votes: 0GitHub stars: 57
- MemoryThis skill should be used when the user asks to "/gobby memory", "remember", "recall", "forget memory". Manage persistent memories across sessions - store, search, delete, update, and list memories.Votes: 0GitHub stars: 57
- Mesh Security Majiayu000Analyze Istio, Consul, and Linkerd service mesh configurations for security vulnerabilities with NIST 800-53 control mappings. Use when users need to audit mesh security, identify misconfigurations, check mTLS settings, review ACL policies, or prepare for FedRAMP assessments. Triggers on keywords like "mesh config", "istio security", "consul ACL", "linkerd policy", "service mesh audit", or "NIST compliance".Votes: 0GitHub stars: 57
- Message Authentication Code PatternSecurity pattern for implementing Message Authentication Codes (MACs) to ensure data integrity and origin authentication. Use when implementing HMAC, CMAC, or other MAC algorithms, verifying message integrity, authenticating message origin with shared secrets, or when non-repudiation is NOT required. Specialization of Cryptographic action pattern.Votes: 0GitHub stars: 57
- Midnight Dapp Testing PatternsUse when writing unit tests for Midnight contract interaction code, integration testing without ZK proofs, E2E testing with Playwright or Cypress, or setting up CI/CD pipelines for Midnight DApps.Votes: 0GitHub stars: 57
- Mk.OpsMy Kit standalone utilities — handles code audits.Votes: 0GitHub stars: 57
- Moai Foundation Specs Majiayu000SPEC document management - lifecycle, versioning, approval workflows, 50+ references, SPEC-first TDD integrationVotes: 0GitHub stars: 57
- Moai Security Auth0 Majiayu000Auth0 security specialist covering attack protection, multi-factor authentication, token security, sender constraining, and compliance. Use when implementing Auth0 security features, configuring attack defenses, setting up MFA, or meeting regulatory requirements.Votes: 0GitHub stars: 57
- Moai Workflow Testing RdmptvAI-powered enterprise web application testing orchestrator with Context7 integration, intelligent test generation, visual regression testing, cross-browser coordination, and automated QA workflows for modern web applicationsVotes: 0GitHub stars: 57
- Mobile TestingExecutes automated tests on mobile apps via MCP. Use when testing iOS/Android apps, verifying UI states, automating interactions, or performing end-to-end validation. Not for web testing, API validation, or desktop applications.Votes: 0GitHub stars: 57
- Mqtt ExpertMaster of MQTT protocol, focusing on message brokering, QoS levels, and efficient IoT communication. Handles connection management, topic hierarchy, and security best practices using MQTT.Votes: 0GitHub stars: 57
- Nchan Expert TailugeExpert guidance for Nchan, a scalable pub/sub server for Nginx. Use this skill when you need to configure Nchan endpoints (publisher/subscriber), set up horizontal scaling with Redis, implement security patterns (authorization, X-Accel-Redirect), or troubleshoot Nchan performance and metrics.Votes: 0GitHub stars: 57
- NetworkNetwork penetration testing skills for service exploitation and protocol attacks.Votes: 0GitHub stars: 57
- Nobrainer Fast AuditUniversal security diagnostic skill for Claude Code. Audits system security posture, vets skills/plugins before installation, scans for indicators of compromise, and provides OWASP Agentic Top 10 hardening guidance. Cross-platform: macOS, Linux, Windows, VPS. Use on: /safety-audit, /safety-check-skill, /safety-scan.Votes: 0GitHub stars: 57
- Oauth 2 0 SetupImplement OAuth 2.0 authentication flows including authorization code with PKCE, client credentials, and device code for secure API integration.Votes: 0GitHub stars: 57
- Oauth Platform IntegrationAdd new OAuth platform connectors to Twin Me Soul Signature Platform. Use when the user wants to integrate a new platform (Spotify, Netflix, LinkedIn, TikTok, etc.) for soul signature data extraction.Votes: 0GitHub stars: 57
- Openclaw Codex Oauth ProxyOpenClaw 用 openai-codex（ChatGPT OAuth）跑 GPT-5.x Codex/Spark 的配置与排障（网关进程、代理、模型、thinking、JSON 输出）。Votes: 0GitHub stars: 57
- Openclaw MemoryProduction-grade memory management for OpenClaw. Search, compress, encrypt, authenticate, rate limit, and audit OpenClaw memory (MEMORY.md, AGENTS.md, memory/) with enterprise-grade security.Votes: 0GitHub stars: 57
- Openspec Bulk Archive Change Yangyus8一次归档多个已完成的变更。用于归档多个并行变更。Votes: 0GitHub stars: 57
- OrchestrationMulti-phase AI workflow pipeline with quality gates, cognitive tiering, context scoping, and mandatory security remediation loops. Use when orchestrating idea-to-ship workflows: arm (brief), design, adversarial review, plan, drift detection, build, static/test gates, post-build quality, and release-readiness. Choose configuration from user prompt.Votes: 0GitHub stars: 57
- Oss Contributor SwarmAutonomous 9-agent swarm that continuously contributes to open source projects on GitHub. Finds good-first-issues, analyzes requirements, writes code/tests/docs, creates PRs, and responds to reviews - all automatically with learning.Votes: 0GitHub stars: 57
- Owasp Mobile Security Checker Majiayu000Analyze Flutter and mobile applications for OWASP Mobile Top 10 (2024) security compliance. Use this skill when performing security audits, vulnerability assessments, or compliance checks on mobile applications. Performs automated scans for hardcoded secrets, insecure storage, weak cryptography, network security issues, and provides detailed remediation guidance.Votes: 0GitHub stars: 57
- Owasp Security ReviewReview code and architectures against the OWASP Top 10:2025 — the ten most critical web application security risks. Use when: (1) reviewing code for security vulnerabilities, (2) auditing a feature or codebase against OWASP categories, (3) providing remediation guidance for identified vulnerabilities, (4) writing new code and needing secure coding patterns. Triggers: 'review for security', 'OWASP audit', 'check for vulnerabilities','security checklist', 'is this code secure', 'security review...Votes: 0GitHub stars: 57
- Owasp Security TestingOWASP Top 10 security testing patterns and vulnerability scanningVotes: 0GitHub stars: 57
- Partners Stackhawk Security OnboardingAutomatically set up StackHawk security testing for your repository with generated configuration and GitHub Actions workflow Use when: the task directly matches stackhawk security onboarding responsibilities within plugin partners. Do not use when: a more specific framework or task-focused skill is clearly a better match.Votes: 0GitHub stars: 57
- Pci Compliance PeixotormsUse when building payment processing, handling credit card data, PAN, CVV, cardholder data environment (CDE), implementing checkout flows, tokenization, Stripe, Braintree, or any code that touches cardholder information — PCI DSS v4.0 coding patterns, SAQ selection, data classification, AES-256 encryption, TLS 1.2, audit log, data masking, Luhn validation, payment gateway integration, 3-D Secure, scope reduction, network segmentationVotes: 0GitHub stars: 57