Claude Skills by paulpas

Prevents XML External Entity (XXE) injection, entity expansion attacks, and DTD abuse by securing XML parsers with safe configurations, input validation, and defense-in-depth patterns across Python, Java, PHP, Node.js, and Go.

Enforces YAGNI at the code level to eliminate dead functions, premature abstractions, and unused configuration by writing only what is immediately required.

Applies the YAGNI principle to prevent over-engineering by eliminating premature abstractions, unused features, and speculative complexity from codebases.

Applies YAGNI to project planning and backlog management to prevent scope creep, enforce MVP boundaries, and reject features not needed for current delivery goals.

Applies the You-Aren't-Gonna-Need-It principle to prevent over-engineering

Creates reusable YAML anchor and alias patterns with merge keys to eliminate

Implements YAML anchor and alias patterns (& and *) for configuration reuse, merge keys, and value referencing across Docker Compose, Kubernetes, and Helm files.

Implements YAML configuration management patterns including schema validation, anchor/alias reuse, hierarchical merging, and linting for robust infrastructure and application configuration.

Implements modern features of the Zendesk API, enabling automation, ticket management, and integration with various tools.

Integrates Zoom API v2 (Meetings, Webinars, Recordings, Phone, Users) using the zoom-python-client SDK v0.2+ with Server-to-Server OAuth, proper pagination, and rate-limit handling.

Integrates Square Payments API for handling payment transactions, refunds, and reporting.

Develops integration patterns for messaging bots across platforms, focusing on automated interactions.

Integrates various messaging channels to enable seamless communication with users about multiple platforms.

Integrates Microsoft Teams for chat and collaboration solutions, enabling bot interactions via the Microsoft Graph API including channel management, message posting with adaptive cards, and tab configurations.

Provides comprehensive training on ORM patterns, the N+1 problem, and strategies to mitigate it, complete with code examples and workflows.

Implements best practices for containerization in the DevOps lifecycle, focusing on deployment, orchestration, and management of containerized applications.

Implements best practices for Infrastructure as Code (IaC) management and automation in the DevOps workflow, focusing on tools and methodologies.

Implements advanced IaC engineering patterns including modular Terraform architecture, policy-as-code with OPA, GitOps with ArgoCD, Terratest-driven testing, and cross-cloud multi-account resource management for production infrastructure.

Implements best practices for logging strategies in observability to improve performance monitoring and troubleshooting in applications.

Implements best practices for metrics collection and monitoring in observability, enhancing application performance and incident response capabilities.

Implements best practices for distributed tracing in observability, improving application performance monitoring and debugging capabilities.

Python reference for ops teams — shelling out, file manipulation, structured data parsing, CLI tools, testing, cloud SDKs, Kubernetes API, IaC and CI/CD patterns.

Implements modern KiCad 9+ PCB design workflows covering schematic capture,

Implements STM32 firmware development using HAL/LL drivers, DMA peripheral

Applies advanced Go patterns including generics, reflection, functional

Enforces Go idioms and best practices including error handling, interface

Develops cloud-native Go applications with context propagation, graceful

Implements Go concurrency patterns including goroutines, channels, worker pools, context cancellation, and synchronization for high-performance applications.

Implements concurrency patterns in Go programming using goroutines and channels along with insights on the Go standard library and module system.

Implements database access patterns in Go with connection pooling, transaction

Deploys Go applications with build optimization, multi-stage Docker builds,

Manages application configuration in Go with environment variables, YAML/JSON

Designs robust error handling in Go with custom error types, error wrapping,

Develops cross-platform mobile applications with Go using Fyne and Go

Designs modular Go applications with clean architecture, dependency injection,

Implements comprehensive testing strategies for Go including unit tests,

Builds production Go web applications with HTTP handlers, routing, middleware,

Implements modern Java language features (JDK 21–26) including virtual threads, pattern matching switch expressions, records, sequenced collections, and scoped values for production application development.

Implements idiomatic Kotlin 2.0–2.4 patterns including coroutines, sealed interfaces, data classes, context receivers, and kotlinx libraries for production applications.

Reference guide for Bash language constructs, parameter expansion, arrays, control flow, functions, and scripting discipline.

Implements step-by-step diagnosis and optimization of the modern Linux boot process from UEFI through GRUB, initramfs, and systemd target initialization for production servers.

Engineers Linux systems for cloud-native environments with cloud-init

Configures GRUB2 bootloader for UEFI firmware boot processes including

Plans and provisions Linux systems for cloud instances and on-prem hardware

Tunes Linux kernel parameters for workload optimization across cloud

Consolidated reference for the essential Linux CLI tools and utilities used daily by engineers at the command line.

Hardens Linux systems against common attack vectors with security baselines,

Manages Linux services with systemd for reliable operation, dependency

Implements GNU Make build automation including dependency graphs, phony targets, variable scoping, pattern rules, automatic variables, cross-compilation, and CI/CD integration for reproducible software builds.

Implements portable, maintainable Makefiles with proper variable scope, dependency management, error handling, and parallel execution patterns for reliable build automation across Unix-like systems.