Claude Skills by FerroxLabs

Advanced threat modeling covering STRIDE and PASTA methodologies, attack tree construction, threat libraries, DREAD and CVSS risk scoring, security requirements derivation, data flow diagrams, trust boundary analysis, threat modeling for APIs and microservices and cloud architectures, and integration into SDLC. Use when the user asks about threat modeling expert, threat modeling expert best practices, or needs guidance on threat modeling expert implementation. Do NOT use when the user needs a...

Complete guide for setting up and managing two-factor authentication including TOTP apps, FIDO2/WebAuthn hardware keys, recovery strategies, backup codes, and account protection prioritization. Use when the user asks about two factor setup, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of two factor setup or requires a different specialized skill.

Guide for understanding and using VPNs including protocol comparison, provider evaluation criteria, when to use a VPN, setup across devices, and privacy-focused configuration. Use when the user asks about vpn privacy advisor, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of vpn privacy advisor or requires a different specialized skill.

Web Application Firewall configuration expertise covering OWASP Core Rule Set design, rate limiting rules, geo-blocking, bot detection, custom rules for application-specific attacks, logging and monitoring, false positive management, and WAF bypass prevention for protecting web applications at the network edge. Use when the user asks about waf configurer, waf configurer best practices, or needs guidance on waf configurer implementation. Do NOT use when the user needs a different specialized s...

Zero trust architecture expertise covering identity-first security, microsegmentation, policy engines, continuous verification, device trust, network security modernization, ZTNA implementation, service mesh security, identity provider integration, and least-privilege access design for eliminating implicit trust in enterprise environments. Use when the user asks about zero trust architect, zero trust architect best practices, or needs guidance on zero trust architect implementation. Do NOT us...

Guides expert-level android compose patterns implementation: kotlin and frameworks decision frameworks, production-ready patterns, and concrete templates for android compose patterns workflows. Use when the user asks about android compose patterns, android compose patterns configuration, or mobile best practices for android projects. Do NOT use when the user needs a different mobile development capability -- check sibling skills in the mobile development subcategory.

Expert Android/Kotlin development covering Jetpack Compose, MVVM architecture, Room database, Retrofit/OkHttp, Coroutines/Flow, WorkManager, Navigation component, Hilt dependency injection, ProGuard, and Play Store guidelines. Use when the user asks about android developer, android developer best practices, or needs guidance on android developer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

API gateway architecture expert covering gateway patterns, request routing, authentication/authorization, rate limiting, request transformation, response aggregation, circuit breaking, API composition, and gateway selection (Kong, Envoy, AWS API Gateway). Use when the user asks about api gateway designer, api gateway designer best practices, or needs guidance on api gateway designer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated te...

Guides expert-level api gateway patterns implementation: api-design and backend decision frameworks, production-ready patterns, and concrete templates for api gateway patterns workflows. Use when the user asks about api gateway patterns, api gateway patterns configuration, or architecture best practices for api projects. Do NOT use when the user needs a different architecture design capability -- check sibling skills in the architecture design subcategory.

Expert app store optimization covering keyword research, screenshot design, A/B testing listings, review management, localization strategy, app preview videos, rating prompts, category selection, competitive analysis, and ASO tools. Use when the user asks about app store optimizer, app store optimizer best practices, or needs guidance on app store optimizer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Systematic software architecture assessment evaluating scalability, maintainability, security, cost efficiency, and documentation quality to produce a structured architecture scorecard. Use when the user asks about architecture review checklist, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of architecture review checklist or requires a different specialized skill.

Bot development expertise covering Slack, Discord, and Telegram bot architecture, command handling patterns, event-driven design, conversation state management, rate limiting, user permission systems, webhook handling, deployment strategies, monitoring, and bot testing approaches. Use when the user asks about bot builder, bot builder best practices, or needs guidance on bot builder implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated tec...

Browser automation expertise covering Playwright and Puppeteer patterns, element selection strategies, wait mechanisms, network interception, file download and upload handling, multi-tab management, authentication flows, headless vs headed modes, screenshot and PDF generation, and CI integration. Use when the user asks about browser automator, browser automator best practices, or needs guidance on browser automator implementation. Do NOT use when the user needs a different specialized skill o...

Guides expert-level clean architecture patterns implementation: clean-code and design-patterns decision frameworks, production-ready patterns, and concrete templates for clean architecture patterns workflows. Use when the user asks about clean architecture patterns, clean architecture patterns configuration, or architecture best practices for clean projects. Do NOT use when the user needs a different architecture design capability -- check sibling skills in the architecture design subcategory.

Clean code principles covering naming conventions, function design, SOLID principles, DRY vs WET tradeoffs, code organization, complexity metrics, and code review through a clean code lens. Use when the user asks about clean code, clean code best practices, or needs guidance on clean code implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Scaffolding, templates, and code generation strategies with project bootstrapping, boilerplate automation, template engines, AST-based generation, and maintainable codegen pipelines. Use when the user asks about code generation, code generation best practices, or needs guidance on code generation implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Comprehensive codebase quality assessment that evaluates technical debt, code complexity, maintainability, and engineering practices to produce an actionable health scorecard. Use when the user asks about code health scorecard, related techniques, best practices, or needs guidance in this domain. Do NOT use when the request is outside the scope of code health scorecard or requires a different specialized skill.

Code migration specialist covering planning frameworks, strangler fig pattern, compatibility layers, feature flags, database migrations, API versioning, rollback plans, and testing migration completeness. Use when the user asks about code migrator, code migrator best practices, or needs guidance on code migrator implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Guides expert-level code review patterns implementation: clean-code and best-practices decision frameworks, production-ready patterns, and concrete templates for code review patterns workflows. Use when the user asks about code review patterns, code review patterns configuration, or clean-code best practices for code projects. Do NOT use when the user needs a different developer tools capability -- check sibling skills in the developer tools subcategory.

Expert code review methodology with structured checklists, severity classification, actionable feedback patterns, and language-specific anti-pattern detection. Use when the user asks about code reviewer, code reviewer best practices, or needs guidance on code reviewer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Guides expert-level code smell detection implementation: clean-code and refactoring decision frameworks, production-ready patterns, and concrete templates for code smell detection workflows. Use when the user asks about code smell detection, code smell detection configuration, or clean-code best practices for code projects. Do NOT use when the user needs a different developer tools capability -- check sibling skills in the developer tools subcategory.

Guides expert-level conventional commits implementation: version-control and best-practices decision frameworks, production-ready patterns, and concrete templates for conventional commits workflows. Use when the user asks about conventional commits, conventional commits configuration, or version-control best practices for conventional projects. Do NOT use when the user needs a different developer tools capability -- check sibling skills in the developer tools subcategory.

Infrastructure cost modeling and capacity planning expert covering cloud cost estimation, resource right-sizing, growth projection modeling, reserved vs on-demand analysis, cost-per-request calculations, FinOps practices, and total cost of ownership analysis for production systems. Use when the user asks about cost modeling engineer, cost modeling engineer best practices, or needs guidance on cost modeling engineer implementation. Do NOT use when the user needs a different specialized skill o...

CQRS and event sourcing expert covering command/query separation, read model projections, event store design, snapshot strategies, eventual consistency handling, compensating actions, audit trail, temporal queries, and CQRS with messaging. Use when the user asks about cqrs specialist, cqrs specialist best practices, or needs guidance on cqrs specialist implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Cron job scheduling expertise covering crontab syntax, systemd timers, overlap prevention with flock, logging best practices, error notification, timezone handling, distributed scheduling, monitoring cron health, migration from cron to orchestrators, and common scheduling patterns. Use when the user asks about cron scheduler, cron scheduler best practices, or needs guidance on cron scheduler implementation. Do NOT use when the user needs a different specialized skill or is asking about an unr...

Cross-platform mobile architecture covering React Native vs Flutter vs Kotlin Multiplatform comparison, shared business logic patterns, native bridge design, platform-specific UI strategies, performance optimization, navigation architecture, state management, testing strategies, and migration paths between frameworks. Use when the user asks about cross platform architect, cross platform architect best practices, or needs guidance on cross platform architect implementation. Do NOT use when the...

Guides expert-level cross-platform mobile strategy implementation: architecture and best-practices decision frameworks, production-ready patterns, and concrete templates for cross platform strategy workflows. Use when the user asks about cross-platform mobile strategy, cross platform strategy configuration, or mobile best practices for cross-platform projects. Do NOT use when the user needs a different mobile development capability -- check sibling skills in the mobile development subcategory.

Guides expert-level ASP.NET Core development: minimal APIs vs Controllers decision tree, middleware pipeline, filters, configuration binding, health checks, and OpenAPI integration. Use when the user asks about ASP.NET Core, minimal APIs, Controllers, middleware, filters, configuration, health checks, .NET 8. Do NOT use when the user asks about C# project setup (use `csharp-project-setup`), C# async (use `csharp-async-patterns`), C# testing (use `csharp-testing-patterns`).

Guides expert-level C# async programming: async/await pitfalls, ValueTask vs Task decision tree, CancellationToken patterns, IAsyncEnumerable, and ConfigureAwait considerations. Use when the user asks about C# async, await, ValueTask, Task, CancellationToken, IAsyncEnumerable, ConfigureAwait, async patterns. Do NOT use when the user asks about C# modern idioms (use `csharp-modern-idioms`), C# performance (use `csharp-performance`), C# ASP.NET (use `csharp-aspnet-patterns`).

Teaches expert-level modern C# patterns: records, pattern matching, nullable reference types, primary constructors, file-scoped namespaces, and global usings for C# 12+. Use when the user asks about C# records, pattern matching, nullable reference types, primary constructors, C# 12, modern C#. Do NOT use when the user asks about C# project setup (use `csharp-project-setup`), C# async (use `csharp-async-patterns`), C# testing (use `csharp-testing-patterns`).

Guides advanced .NET performance optimization: Span<T> and Memory<T> usage, BenchmarkDotNet, allocation profiling with dotMemory, source generators, and high-performance patterns. Use when the user asks about C# performance, Span, Memory, BenchmarkDotNet, allocation profiling, source generators, high-performance .NET. Do NOT use when the user asks about C# async (use `csharp-async-patterns`), C# modern idioms (use `csharp-modern-idioms`), general performance testing (use `performance-testing`).

Guides expert-level .NET project initialization: SDK-style csproj, solution file structure, NuGet configuration, Directory.Build.props, and .NET 8+ project templates. Use when the user asks about C# project setup, .NET, csproj, solution file, NuGet, Directory.Build.props, .NET 8, dotnet new. Do NOT use when the user asks about C# modern idioms (use `csharp-modern-idioms`), C# testing (use `csharp-testing-patterns`), C# ASP.NET (use `csharp-aspnet-patterns`).

Guides expert-level C# testing: xUnit, Moq, FluentAssertions, WebApplicationFactory for integration testing, and test architecture patterns for .NET applications. Use when the user asks about C# testing, xUnit, Moq, FluentAssertions, WebApplicationFactory, .NET testing, integration testing. Do NOT use when the user asks about C# project setup (use `csharp-project-setup`), C# ASP.NET (use `csharp-aspnet-patterns`), general testing concepts (use `unit-testing-patterns`).

Data-intensive systems architecture expert covering batch vs stream processing, exactly-once semantics, backpressure mechanisms, data pipeline design, event sourcing, change data capture, idempotent processing, and scalable data flow patterns for high-throughput systems. Use when the user asks about data intensive designer, data intensive designer best practices, or needs guidance on data intensive designer implementation. Do NOT use when the user needs a different specialized skill or is ask...

Data cleaning automation expertise covering missing value strategies, outlier detection methods, duplicate detection and deduplication, data type correction, text normalization, date parsing across formats, encoding fixes, validation rules, pipeline design patterns, and data quality reporting. Use when the user asks about data scrubber, data scrubber best practices, or needs guidance on data scrubber implementation. Do NOT use when the user needs a different specialized skill or is asking abo...

Systematic debugging methodology using scientific method, binary search isolation, log analysis, stack trace interpretation, and root cause analysis across languages and ecosystems. Use when the user asks about debugger, debugger best practices, or needs guidance on debugger implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Dependency management expert covering version strategies, vulnerability scanning, update workflows, breaking change detection, monorepo dependencies, and license compliance. Use when the user asks about dependency manager, dependency manager best practices, or needs guidance on dependency manager implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Guides expert-level design patterns catalog implementation: design-patterns and clean-code decision frameworks, production-ready patterns, and concrete templates for design patterns catalog workflows. Use when the user asks about design patterns catalog, design patterns catalog configuration, or design-patterns best practices for design projects. Do NOT use when the user needs a different architecture design capability -- check sibling skills in the architecture design subcategory.

Software design patterns including GoF patterns with modern implementations, when to use each pattern, anti-patterns to avoid, and language-specific idioms across creational, structural, and behavioral categories. Use when the user asks about design patterns, design patterns best practices, or needs guidance on design patterns implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Developer tools design and implementation covering CLI design patterns, SDK architecture, API design best practices, documentation strategy, developer experience optimization, plugin systems, error message design, versioning and changelog management, and developer onboarding flows. Includes code examples, DX audit checklists, and distribution patterns. Use when the user asks about developer tools builder, related techniques, best practices, or needs guidance in this domain. Do NOT use when th...

Distributed systems architecture expert covering CAP theorem application, consensus algorithms (Raft, Paxos, PBFT), partition tolerance strategies, distributed transactions (2PC, saga, outbox pattern), leader election, clock synchronization, CRDTs, and failure mode analysis. Use when the user asks about distributed systems designer, distributed systems designer best practices, or needs guidance on distributed systems designer implementation. Do NOT use when the user needs a different speciali...

Distributed systems patterns expert covering CAP theorem, consensus algorithms (Raft, Paxos), distributed transactions (2PC, saga), consistent hashing, gossip protocols, vector clocks, leader election, distributed locking, and eventual consistency. Use when the user asks about distributed systems, distributed systems best practices, or needs guidance on distributed systems implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology d...

Treating documentation as a first-class engineering artifact with docs-in-repo workflows, automated generation, living documentation, testing, and continuous publishing pipelines. Use when the user asks about documentation as code, documentation as code best practices, or needs guidance on documentation as code implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Guides expert-level domain-driven design implementation: backend and design-patterns decision frameworks, production-ready patterns, and concrete templates for domain driven design workflows. Use when the user asks about domain-driven design, domain driven design configuration, or architecture best practices for domain-driven projects. Do NOT use when the user needs a different architecture design capability -- check sibling skills in the architecture design subcategory.

Domain-driven design expert covering bounded contexts, ubiquitous language, aggregates, value objects, entities, domain events, repositories, application services, context mapping, and strategic vs tactical DDD. Use when the user asks about domain driven designer, domain driven designer best practices, or needs guidance on domain driven designer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Edge computing and CDN architecture expert covering edge workers (Cloudflare Workers, Deno Deploy, Vercel Edge), CDN configuration and cache strategies, latency optimization, edge-side logic patterns, geolocation routing, A/B testing at the edge, and global performance engineering. Use when the user asks about edge computing architect, edge computing architect best practices, or needs guidance on edge computing architect implementation. Do NOT use when the user needs a different specialized s...

Error handling architecture covering error hierarchy design, error codes vs exceptions, retry strategies, graceful degradation, error logging, user-facing messages, and error boundary patterns. Use when the user asks about error handler, error handler best practices, or needs guidance on error handler implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

Guides expert-level event-driven architecture implementation: backend and microservices decision frameworks, production-ready patterns, and concrete templates for event driven architecture workflows. Use when the user asks about event-driven architecture, event driven architecture configuration, or architecture best practices for event-driven projects. Do NOT use when the user needs a different architecture design capability -- check sibling skills in the architecture design subcategory.

Event-driven architecture expert covering event sourcing, CQRS, event storming, event schema design, event versioning, idempotency, ordering guarantees, event replay, dead letter handling, and choreography vs orchestration. Use when the user asks about event driven systems designer, event driven systems designer best practices, or needs guidance on event driven systems designer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technol...

Feature flag system design and progressive rollout strategies with targeting rules, lifecycle management, flag hygiene, kill switches, and experimentation patterns for safe continuous delivery. Use when the user asks about feature flag engineer, feature flag engineer best practices, or needs guidance on feature flag engineer implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.