Claude Skills by domehahn

Design and review PayPal Orders and Captures, PayPal-Request-Id, OAuth boundaries, verified webhooks, refunds, and sandbox tests.

Review load behavior, bottlenecks, caching, database access, queue behavior, scaling, timeouts, and resource limits.

Review modern PHP code for type safety, Composer hygiene, framework boundaries, security, tests, and performance.

Design and review secure CI/CD pipelines with isolated runners, minimal rights, OIDC, signed artifacts, protected environments, and approval gates.

Create and review policies for OPA/Rego, Kyverno, GitLab Policies, Conftest, Checkov, Terraform, Kubernetes, and CI/CD gates.

Review GitLab Security Policies, OPA/Rego, Kyverno, Conftest, Sentinel, admission policies, compliance pipelines, and central guardrails.

Create and update policies, standards, procedures, and control descriptions.

Review privacy, personal data, data classification, deletion concepts, purpose limitation, GDPR risks, and sensitive-data logging.

Review Python code for typing, packaging, async behavior, resource safety, tests, security, and maintainability.

Review Quarkus build-time behavior, CDI, reactive paths, native images, configuration, security, and tests.

Review React components, hooks, state, rendering, accessibility, Server Components, testing, and performance.

Guide controlled refunds, reversals, chargebacks, and disputes with eligibility checks, evidence, deadlines, approval, and audit trails.

Assess release readiness, rollback, migrations, feature flags, monitoring, documentation, and breaking changes.

Analyze requirements, user stories, acceptance criteria, constraints, risks, and open questions before implementation.

Review timeouts, retries, circuit breakers, failover, backpressure, degraded modes, and resilience behavior.

Document and assess conscious risk decisions, impact and likelihood, expiry dates, and compensating measures.

Review Rails models, controllers, jobs, migrations, Active Record behavior, security, tests, and deployment safety.

Review Ruby code for idioms, object design, metaprogramming boundaries, Bundler hygiene, tests, and performance.

Create and review runbooks, operating instructions, incident playbooks, escalation paths, restart procedures, and checklists.

Review Rust ownership, lifetimes, unsafe boundaries, concurrency, error handling, Cargo dependencies, and tests.

Create or modify code, tests, configuration, and project files safely with real file changes.

Review SBOM generation, CVE triage, VEX, exception processes, patch SLAs, and the vulnerability lifecycle.

Review Strong Customer Authentication and 3-D Secure challenge, exemption, liability, fallback, accessibility, and state handling.

Detect and prevent exposure of secrets, tokens, credentials, private keys, CI variables, and sensitive logs.

Review code vulnerabilities such as injection, path traversal, SSRF, XSS, deserialization, crypto misuse, and race conditions.

Review secure-by-design decisions, least privilege, Zero Trust, tenant separation, secure defaults, and abuse scenarios.

Review Internal Developer Platforms for secure golden paths, self-service guardrails, templates, permission models, secrets handling, and auditability.

Derive negative tests and declarative evals from contract capabilities, tools, data flows, approvals, limits, and structured invariants.

Review code, CI/CD, configuration, permissions, dependencies, input validation, and DevSecOps risks.

Review SLSA, provenance, SBOM, signatures, attestations, build integrity, artifact promotion, and trusted builders.

Review Spring Boot dependency injection, transactions, persistence, security, configuration, Actuator, and migrations.

Assess SLOs, SLIs, error budgets, capacity, degradation, timeouts, retries, circuit breakers, load shedding, and operational risks.

Design and review Stripe PaymentIntents or Checkout, idempotency, signed webhooks, Connect or Billing boundaries, versions, and tests.

Design subscription billing for plans, trials, invoices, proration, usage, renewals, dunning, cancellation, and entitlements.

Review Terraform modules, providers, plans, state, drift, lifecycle, IAM, tests, and safe apply or destroy boundaries.

Design and generate unit, integration, regression, security, and end-to-end test strategies.

Identify assets, trust boundaries, abuse cases, attack paths, threats, and required security controls.

Review TypeScript strictness, narrowing, generics, declarations, runtime validation, and compiler configuration.

Create, adapt, validate, and optimize reusable agent skills across agentic platforms.

Review Vagrant environments, providers, networking, provisioning, shared folders, reproducibility, and isolation.

Review diffs, validate acceptance criteria, inspect test results, and find missed requirements.

Review VM and virtualization architecture, images, isolation, networking, storage, snapshots, patching, and capacity.

Review Vue.js Composition API, reactivity, components, state, routing, accessibility, tests, and performance.

Assess CVE triage, prioritization, SLAs, exploitability, asset criticality, exceptions, risk acceptance, and remediation tracking.

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.