All Skills

Sets up a Docker MCP server for container management, with installation guidance and upstream references.

Creates and manages gRPC services in Node.js using the official gRPC libraries and tools.

Runs OWASP ZAP security scans against web applications using Java or Docker, with setup guidance and links to upstream documentation.

Sets up the Twilio Node.js library and points to official documentation for building Twilio integrations.

Sets up Datadog tracing for Node.js applications by installing the dd-trace library and linking to official documentation.

Sets up and runs a Jenkins MCP server using official Jenkins distributions, with links to installation and documentation resources.

Scans infrastructure-as-code files for security and compliance misconfigurations using Checkov, with support for Terraform, Kubernetes, and other formats.

Parses and evaluates Content Security Policy headers using csp-parse and csp-evaluator libraries. Identifies overly permissive directives, missing protections, and generates tightened policy recommendations.

Integrates with the OpsGenie API using the official Node.js SDK to manage alerts and incidents.

Sets up a SendGrid MCP server for sending email from Node.js projects, with installation and documentation links.

Audits CircleCI orb versions and configurations using the CircleCI v2 API, flags deprecated orbs, provides pinning recommendations, and checks security advisories from the orb registry.

Enforces ESLint v9 flat config rules across monorepos by scanning changed files via git diff, applying auto-fixable rules, and generating per-package lint reports with severity breakdowns.

Installs the LangChain.js library and points to official documentation for building agents and MCP servers.

Manages Netlify sites through the official CLI, covering installation, local development, and deployment workflows.

Integrates with the PagerDuty REST API using the official pdjs client to manage incidents and on-call data.

Decodes ams-OSRAM MPN encoding patterns, including product families, package suffixes, and series extraction rules, with guidance for the AMSHandler.

Presents a multiple-choice question to the user via the AskUserQuestion tool, parsing up to four options from a slash command.

Provides B2B/B2C SaaS go-to-market strategy, product positioning, IT copywriting, conversion funnel optimization, SEO content strategy, and marketing analytics with 2025/26 benchmarks.

Authenticate to Redpanda Cloud and manage clusters, resource groups, BYOC provisioning, and the MCP server for AI agents using the rpk CLI.

Provisions and manages Redpanda Cloud BYOC clusters via the Control Plane API and the rpk cloud byoc plugin, covering networks, IAM wiring, private connectivity, and enterprise features.

Build, deploy, and manage Redpanda Data Transforms, WebAssembly functions that run inside the broker to transform records from an input topic to one or more output topics. Use when writing or deploying a transform in Go (TinyGo), Rust, JavaScript, or TypeScript; using `rpk transform.

Streams MySQL or MariaDB row-level changes into Redpanda or Kafka via the mysql_cdc input, covering binlog setup, snapshots, checkpointing, per-table routing, AWS RDS IAM auth, and Enterprise lakehouse destinations.

Operate a Redpanda cluster via its HTTP Admin API on port 9644, covering broker lifecycle, partitions, cluster config, health, security, and enterprise features.

Query external data from Oxla — Kafka topics via catalogs, Apache Iceberg tables, and S3/GCS/Azure parquet/ORC files — alongside native Oxla tables. Use when querying Kafka topics with CREATE KAFKA CATALOG or CREATE REDPANDA CATALOG, reading Apache Iceberg tables with the catalog=>path.table syntax, loading or.

Profiles application performance across database queries, API call chains, memory usage, bundle sizes, network waterfalls, and frontend rendering, then produces ranked optimization recommendations with estimated impact.

Auto-detects the project's tech stack, then generates and runs exhaustive end-to-end tests for backend APIs and frontend UI flows, self-healing failures without user input.

Configures a CDN with caching, SSL/TLS, security headers, and cache invalidation, auto-detecting hosting and app type to generate CloudFront, Cloudflare, or Vercel configurations.

Runs a full retrospective and dev cycle analysis, chaining /recall and /new-features to reconstruct what went wrong, extract lessons learned, identify rework patterns, and synthesize feature ideas from the findings.

Analyzes an app from video, screenshots, or URL and produces a structured product breakdown covering features, UX, monetization, market, and recommendations.

Analyzes project memories to detect recurring conventions, rework, and pipeline patterns, then promotes validated patterns to the global CLAUDE.md configuration.

Adds a complete dark mode to any frontend project: auto-detects the theme system, generates a WCAG-compliant dark palette, adds a toggle with system detection and persistence, migrates hardcoded colors to theme tokens, and verifies contrast ratios.

Audits documentation health by scanning for README, changelog, API docs, ADRs, runbooks, onboarding guides, and diagrams, scoring coverage against project maturity, and recommending sub-skills to fill gaps.

Audits codebases for GDPR and CCPA/CPRA compliance by inventorying PII fields, mapping data collection points, reviewing consent mechanisms, verifying data subject rights, tracing third-party data sharing, and checking retention policies.

Audits codebases for leaked secrets and hardcoded credentials, generates .env templates, configures secrets management with AWS Secrets Manager, Vault, Doppler, or GCP Secret Manager, sets up credential rotation, and integrates secrets into CI/CD pipelines via OIDC federation.

Audits codebases against HIPAA Security Rule safeguards, mapping findings to 45 CFR sections and tracing PHI data flows.

Audits and rewrites user-facing copy across web and mobile codebases, improving clarity, tone, and actionability of labels, errors, CTAs, and empty states.