Claude Skills by tonone-ai

Frontend audit — bundle size, dependencies, accessibility, performance, component quality. Use when asked for "frontend review", "performance audit", "accessibility check", or "bundle size".

Use when asked to implement a chart, select a visualization type, or build a data display component. Examples: "implement chart for time series", "best visualization for comparison data", "chart component for analytics"

Implement a reusable, accessible, typed component from a design spec. Use when asked to "create a component", "build a widget", "implement this design", or "reusable UI element".

Build an internal dashboard with data tables, filters, detail views, and CRUD. Use when asked to build an "admin panel", "internal dashboard", "back office", or "data dashboard UI".

Frontend reconnaissance — map the component tree, routing, state management, build config, and assess quality. Use when asked to "understand this frontend", "frontend assessment", or "what's the UI built with".

Use when asked for framework-specific best practices, implementation guidelines for React/Vue/Svelte/Next.js, or stack-specific patterns. Examples: "React best practices", "Vue component patterns", "Next.js performance"

Implement a complete UI screen or feature from a Form visual spec. Use when asked to "build a page", "implement this screen", "build the frontend for this feature", or "create this UI".

Design production prompts — system prompt architecture, instruction clarity, few-shot selection.

Audit prompt library — duplication, quality, coverage gaps, version drift, eval alignment.

Build prompt versioning systems — storage, A/B testing, regression tracking, rollback.

Build API test suites — endpoint testing, contract testing, load testing for REST/GraphQL/gRPC APIs. Use when asked to "test this API", "API tests", "endpoint testing", "contract tests", or "load test".

Design a message queuing or streaming architecture for a workload.

Audit existing queue and streaming infrastructure — find missing DLQs, scaling gaps, and reliability issues.

Design a backpressure and scaling strategy for a queue consumer system.

Design ranking pipelines — reranker selection, score fusion, cross-encoder patterns, latency trade-offs.

Build ranking evaluation — NDCG/MRR measurement, human relevance labeling, offline eval harness.

Audit ranking quality — metric trends, failure modes, dataset coverage, reranker performance.

Design a penetration testing plan — scope, methodology, attack surface, and rules of engagement.

Design a reconnaissance plan — OSINT, attack surface mapping, and enumeration methodology.

Write a penetration test or red team finding report — CVSS scores, business impact, and remediation.

Design containment procedures for an active incident — isolation, quarantine, and credential rotation.

Write an incident response playbook for a threat scenario — detection, containment, eradication, recovery.

Audit existing incident response capability — playbook coverage, tooling gaps, and readiness.

Survey existing code samples — coverage, language parity, and freshness.

Review existing code samples for correctness, runnability, and developer experience.

Write a working code sample or tutorial for an API feature or integration pattern.

Analyze and fix a SAST finding — root cause, exploitability, and secure code alternative.

Audit existing application security tooling and code for OWASP Top 10 coverage.

Design a SAST/DAST scanning pipeline — tooling selection, CI integration, and triage workflow.

Design an API schema — OpenAPI spec, GraphQL schema, or gRPC proto for a feature.

Audit existing API schemas across a codebase — find inconsistencies and coverage gaps.

Review an API schema for consistency, completeness, and developer ergonomics.

Open source license compliance audit — flag GPL, LGPL, AGPL, copyleft risks.

Survey project IP assets — trademarks, patents, OSS licenses, assignments.

Trademark clearance research and filing preparation for a name or mark.

Compare two or more models statistically — significance testing and error analysis.

Design an evaluation framework for a ML model — metrics, splits, and reporting.

Audit existing model evaluation code — find metric misuse, missing CIs, and evaluation leakage.

Diagnose and optimize Lambda/serverless cold start performance.

Design a serverless architecture for a workload — runtime selection, event wiring, and scaling config.

Audit existing serverless functions — find misconfigurations, cold start issues, and cost inefficiencies.

Regulatory exposure assessment for a described product or geography.

Survey product features and data flows for regulatory exposure.

Draft regulatory response letter or regulator communication.

Tune a SIEM alert — reduce false positives, add context, and improve analyst experience.

Audit existing SIEM deployment — log coverage, rule quality, and alert volume.

Write SIEM detection rules for a threat or TTP — SIGMA format, MITRE mapping, and test cases.

Draft a GDPR-compliant privacy policy for the described product and data flows.

Survey existing privacy and legal docs for completeness and GDPR compliance.

Draft Terms of Service for the described product.