Claude Skills by FerroxLabs

Practical Stoic philosophy guide covering core principles like the dichotomy of control, memento mori, and amor fati, with daily exercises, wisdom from Marcus Aurelius, Epictetus, and Seneca, Stoic journaling practices, and modern applications for resilience and inner peace. Use when the user asks about stoic advisor, or needs help with practical stoic philosophy guide covering core principles like the dichotomy of control, memento mori, and amor fati, with daily exercises, wisdom from marcus...

Synthesizes Hero's Journey, Story Spine, STAR method, Pixar's storytelling rules, and Freytag's Pyramid into The Narrative Engine - a versatile framework for crafting compelling stories for any context from business presentations to personal narratives. Use when the user asks about storytelling architect, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of storytelling architect or requires a different specialized skill.

Strategic thinking frameworks including scenario planning, game theory basics (Nash equilibrium, prisoner's dilemma), long-term thinking, second and third-order effects analysis, strategic frameworks (Blue Ocean Strategy, Wardley Maps), decision journals, pre-mortem analysis, and competitive strategy. Use when the user asks about strategic thinker or needs help with related topics. Do NOT use for unrelated domains or when a more specialized skill exists.

Synthesizes CBT techniques, Acceptance and Commitment Therapy (ACT), Stoic philosophy, Polyvagal Theory, and Stress Inoculation Training into The Resilience Operating System - a comprehensive framework for building stress resilience and emotional durability. Use when the user asks about stress resilience builder, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of stress resilience builder or requires a different specialize...

Understanding complex systems through feedback loops (reinforcing and balancing), stocks and flows, Donella Meadows' 12 leverage points, causal loop diagrams, systems archetypes (tragedy of the commons, fixes that fail, shifting the burden), modeling tools, and application to organizational and real-world systems. Use when the user asks about systems thinker or needs help with related topics. Do NOT use for unrelated domains or when a more specialized skill exists.

Applied systems thinking guide covering feedback loops, leverage points, causal loop diagrams, system archetypes, mental models, stocks and flows, and practical tools for understanding and intervening in complex systems. Use when the user asks about systems thinking practitioner, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of systems thinking practitioner or requires a different specialized skill.

Builds a complete task capture system with inbox location, capture criteria, two-minute rule, and processing cadence. Produces a deployable system specification the user can immediately adopt. Use when the user asks about capturing tasks, organizing incoming work, setting up a task inbox, or building a system to track everything they need to do. Do NOT use for prioritizing existing tasks (use task-prioritization), scheduling tasks into time blocks (use time-blocking), or enterprise project in...

Builds a delegation protocol with decision criteria for what to delegate, a handoff template, follow-up schedule, and quality check process. Produces a complete delegation system document the user can use immediately. Use when the user asks about delegating tasks, deciding what to hand off, creating handoff procedures, or building a follow-up system for delegated work. Do NOT use for team project management (use business project-management skills), hiring or staffing decisions (use business H...

Design personal and team task management systems using GTD, Eisenhower Matrix, Kanban, and other proven methodologies, with guidance on tool selection and workflow optimization. Use when the user asks about task management master, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of task management master or requires a different specialized skill.

Applies a structured prioritization method (RICE, MoSCoW, or weighted scoring) to a list of tasks or features. Produces a ranked list with scoring rationale for each item and a clear action sequence. Use when the user asks about prioritizing a backlog, ranking tasks by impact, deciding which features to build first, or applying a scoring framework to competing priorities. Do NOT use for sorting tasks by urgency/importance (use eisenhower-matrix), scheduling tasks into time blocks (use time-bl...

Builds a personal template library by identifying recurring document types, defining reusable structures, and creating fill-in-ready templates with variable placeholders. Use when the user wants to create templates for documents they write repeatedly, build a personal template collection, or standardize recurring written outputs. Do NOT use for enterprise template management systems, email template sequences (use `email-template-system`), or business process documentation (use business operat...

Applied Theory of Constraints guide covering bottleneck identification, the Five Focusing Steps, Drum-Buffer-Rope scheduling, Thinking Processes, throughput accounting, and practical techniques for finding and exploiting system constraints. Use when the user asks about theory of constraints coach, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of theory of constraints coach or requires a different specialized skill.

Design effective time-blocked calendars with deep work sessions, batching strategies, buffer time, energy management, and realistic scheduling that protects priorities from reactive work. Use when the user asks about time blocking specialist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of time blocking specialist or requires a different specialized skill.

Builds a time-blocked weekly schedule from the user's working hours, fixed commitments, and task list. Produces a day-by-day block schedule with task assignments, buffer rules, and energy-level matching. Use when the user asks about time blocking, scheduling their day, creating a weekly plan with specific time slots, or structuring their workday around focused blocks. Do NOT use for prioritizing tasks without scheduling (use eisenhower-matrix or task-prioritization), building a full GTD syste...

Practical guide to value stream mapping covering current state analysis, waste identification, future state design, improvement planning, and conducting mapping workshops for process optimization. Use when the user asks about value stream mapper, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of value stream mapper or requires a different specialized skill.

Remote team culture and trust-building guidance covering virtual rituals, remote team bonding activities, inclusion practices for distributed teams, communication norms, conflict resolution at distance, and strategies for creating belonging without a shared physical space. Use when the user asks about virtual team builder, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of virtual team builder or requires a different speci...

Practical guide to Wardley Mapping for strategic planning covering value chain visualization, component evolution, situational awareness, strategic plays, and using maps to make better technology and business decisions. Use when the user asks about wardley mapping strategist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of wardley mapping strategist or requires a different specialized skill.

Guide the weekly review process with structured reflection templates, planning rhythms, accountability systems, and habit-building strategies to maintain productivity systems over time. Use when the user asks about weekly review facilitator, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of weekly review facilitator or requires a different specialized skill.

Produces a complete weekly review session guide with a step-by-step checklist, time estimates per step, review questions, and output artifacts. Delivers the actual review protocol, not advice about doing reviews. Use when the user asks about weekly reviews, planning their week, reflecting on what was accomplished, or building a regular review practice. Do NOT use for daily planning (use daily-planning), quarterly or annual planning (use quarterly-planning or annual-review), or team retrospect...

Builds and populates a weighted decision matrix for a specific choice. Identifies criteria from user priorities, assigns weights, scores each option, and computes weighted totals with a clear recommendation. Use when the user asks about making a decision between multiple options, building a decision matrix, comparing options with weighted criteria, or applying a structured scoring framework to a choice. Do NOT use for business strategic decisions or resource allocation (use business strategy ...

Structured evaluation of time allocation, role satisfaction, burnout indicators, and boundary effectiveness across work and personal domains. Produces a balance scorecard with specific recommendations for sustainable adjustment. Use when the user asks about work life balance audit, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of work life balance audit or requires a different specialized skill.

Design sustainable work-life boundaries for remote workers through intentional schedules, dedicated workspaces, shutdown rituals, burnout prevention strategies, and communication protocols that protect personal time without sacrificing productivity Use when the user asks about work life boundary designer, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of work life boundary designer or requires a different specialized skill.

Designs personal workflow automation plans by identifying repetitive tasks, mapping trigger-action-output structures, and prioritizing by time savings. Use when the user wants to automate personal repetitive work, streamline daily routines, or eliminate manual steps from recurring processes. Do NOT use for enterprise workflow automation, Zapier/Make integration configuration, or business process reengineering (use business operations skills instead).

Synthesizes Ramsey envelope method, YNAB philosophy, 50/30/20 rule, Pay Yourself First, and Kakeibo into The Intentional Money System - a flexible budgeting framework that adapts to any income level or financial situation. Use when the user asks about zero based budgeter, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of zero based budgeter or requires a different specialized skill.

API security expertise covering OWASP API Security Top 10, API authentication and authorization patterns, API key management, rate limiting and throttling, JWT security best practices, OAuth 2.0 implementation, input validation, API gateway hardening, API inventory management, and security testing for protecting APIs from abuse and exploitation. Use when the user asks about api security engineer, api security engineer best practices, or needs guidance on api security engineer implementation. ...

Secrets management expertise covering HashiCorp Vault and AWS Secrets Manager patterns, secret rotation strategies, environment variable management, config file handling, git secret scanning, CI/CD secret injection, zero-trust secret access, and audit logging for keeping sensitive credentials secure throughout the software lifecycle. Use when the user asks about application secrets security, application secrets security best practices, or needs guidance on application secrets security impleme...

Compliance framework audit expertise covering SOC 2 Type II controls, GDPR technical requirements, HIPAA security rule, PCI DSS for developers, ISO 27001 controls, audit evidence collection, compliance-as-code, and continuous compliance monitoring for meeting regulatory and industry security standards. Use when the user asks about compliance checker, compliance checker best practices, or needs guidance on compliance checker implementation. Do NOT use when the user needs a different specialize...

Cryptography implementation expertise covering symmetric vs asymmetric encryption, password hashing (bcrypt, argon2), digital signatures, key management, TLS configuration, secure random generation, common cryptographic pitfalls, and practical usage of libsodium and OpenSSL for building secure systems. Use when the user asks about crypto engineer, crypto engineer best practices, or needs guidance on crypto engineer implementation. Do NOT use when the user needs a different specialized skill o...

Design and implement resilient backup strategies using the 3-2-1 rule, encryption best practices, cloud vs local tradeoffs, and restore testing procedures to protect personal and small business data from loss Use when the user asks about data backup strategist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of data backup strategist or requires a different specialized skill.

Systematically secure personal devices through OS hardening, router and network security, IoT device isolation, firmware management, and attack surface reduction for home and small office environments Use when the user asks about device hardening guide, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of device hardening guide or requires a different specialized skill.

Security integration in CI/CD pipelines covering SAST and DAST tooling, container image scanning, dependency vulnerability auditing, infrastructure-as-code security scanning, secret detection, security gates with policy-as-code, compliance automation, supply chain security, and developer security enablement. Use when the user asks about devsecops engineer, devsecops engineer best practices, or needs guidance on devsecops engineer implementation. Do NOT use when the user needs a different spec...

Email security expertise covering SPF, DKIM, and DMARC configuration for domain protection, phishing detection techniques, email encryption with PGP and S/MIME, secure email provider evaluation, email header analysis, business email compromise prevention, and building organizational email security policies. Use when the user asks about email security hardener, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of email securi...

Digital forensics and incident investigation expertise covering evidence acquisition and preservation, chain of custody procedures, timeline analysis, memory forensics, disk forensics, log analysis, network traffic analysis, malware triage, forensic reporting, and legal admissibility requirements for thorough and defensible incident investigations. Use when the user asks about forensics analyst, forensics analyst best practices, or needs guidance on forensics analyst implementation. Do NOT us...

Identity and access management deep dive covering OAuth 2.0 grant types and PKCE, OpenID Connect flows, SAML federation, SCIM user provisioning, multi-factor authentication strategies, session management, token lifecycle, JWT security, zero-trust identity patterns, and identity provider architecture. Use when the user asks about identity engineer, identity engineer best practices, or needs guidance on identity engineer implementation. Do NOT use when the user needs a different specialized ski...

Protect personal identity through credit monitoring, credit freeze management, identity theft recovery planning, dark web exposure checks, and systematic reduction of personal data exposure across digital and physical channels Use when the user asks about identity theft protector, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of identity theft protector or requires a different specialized skill.

Mobile privacy expertise covering app permission management, tracking prevention on iOS and Android, secure messaging app selection, device encryption, privacy-focused browser and DNS configuration, location tracking minimization, app audit methodology, and building a privacy-conscious mobile setup without sacrificing usability. Use when the user asks about mobile privacy guide, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the sc...

OAuth 2.0 and OpenID Connect implementation expertise covering Authorization Code with PKCE, Client Credentials flow, token management, scope design, consent flows, token introspection, revocation, JWT validation, provider integration patterns, and security considerations for building secure authentication and authorization systems. Use when the user asks about oauth specialist, oauth specialist best practices, or needs guidance on oauth specialist implementation. Do NOT use when the user nee...

Systematic process to audit, identify weak passwords, check for breaches, update credentials, and establish a secure password management workflow. Use when the user asks about password audit runner, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of password audit runner or requires a different specialized skill.

Complete guide for setting up and using password managers including vault setup, migration strategies, password best practices, secure sharing, and emergency access planning. Use when the user asks about password vault manager, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of password vault manager or requires a different specialized skill.

Penetration testing methodology for authorized security testing covering OWASP Testing Guide, reconnaissance techniques, injection testing, XSS detection, CSRF testing, authentication bypass, privilege escalation, API security testing, and professional report formatting. For defensive and authorized testing purposes only. Use when the user asks about penetration tester, penetration tester best practices, or needs guidance on penetration tester implementation. Do NOT use when the user needs a ...

Comprehensive personal privacy audit covering browser hardening, phone privacy settings, social media exposure reduction, data broker removal, and ongoing privacy maintenance routines. Use when the user asks about privacy audit guide, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of privacy audit guide or requires a different specialized skill.

Security vulnerability assessment expertise covering OWASP Top 10 deep dive, code review for security, dependency vulnerability scanning, SAST/DAST tools, security headers audit, authentication and authorization audit, and security assessment report writing for identifying and documenting application security weaknesses. Use when the user asks about security auditor, security auditor best practices, or needs guidance on security auditor implementation. Do NOT use when the user needs a differe...

System security hardening expertise covering CIS benchmarks, OS hardening for Linux and Windows, container hardening, network hardening, application hardening, database hardening, cloud hardening for AWS/Azure/GCP, hardening automation, and compliance scanning for reducing the attack surface of infrastructure and applications. Use when the user asks about security hardener, security hardener best practices, or needs guidance on security hardener implementation. Do NOT use when the user needs ...

Security incident response expertise covering NIST incident response lifecycle, containment strategies, evidence preservation, forensic analysis basics, communication templates, post-incident review, incident classification and severity levels, and playbook creation for handling security incidents efficiently and effectively. Use when the user asks about security incident responder, security incident responder best practices, or needs guidance on security incident responder implementation. Do...

Comprehensive security posture evaluation covering vulnerability management, access controls, policy compliance, incident readiness, and security culture to produce an actionable security scorecard. Use when the user asks about security posture assessment, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of security posture assessment or requires a different specialized skill.

Security operations center expertise covering SIEM query writing, alert triage workflows, incident investigation procedures, IOC analysis, threat hunting techniques, playbook design, log analysis patterns, Splunk and Elastic SIEM queries, alert fatigue reduction, escalation procedures, and shift handoff practices. Use when the user asks about soc analyst, soc analyst best practices, or needs guidance on soc analyst implementation. Do NOT use when the user needs a different specialized skill o...

Recognize and defend against social engineering attacks including phishing emails, vishing phone calls, pretexting scenarios, and manipulation tactics through verification protocols, awareness training, and incident response procedures Use when the user asks about social engineering defender, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of social engineering defender or requires a different specialized skill.

Complete guide to SSH key generation, configuration, agent setup, multi-account management, and troubleshooting for GitHub, GitLab, and server access. Use when the user asks about ssh key manager, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of ssh key manager or requires a different specialized skill.

Software supply chain security expertise covering SBOM generation and analysis, dependency vulnerability scanning, Sigstore signing and verification, SLSA framework compliance, artifact provenance, build integrity, package manager security, container image signing, and CI/CD pipeline hardening for establishing trust in the software delivery process. Use when the user asks about supply chain security, supply chain security best practices, or needs guidance on supply chain security implementati...

Threat modeling expertise covering STRIDE methodology, attack trees, data flow diagrams, trust boundaries, threat prioritization with DREAD scoring, mitigation strategies, threat modeling for APIs and microservices, and automated threat modeling tools for proactively identifying security risks during system design. Use when the user asks about threat modeler, threat modeler best practices, or needs guidance on threat modeler implementation. Do NOT use when the user needs a different specializ...