ProxiBlue

@proxiblue source repo

34 skills
0 followers
1 week ago last updated

▌
Workflow Add Test Coverage · proxiblue
Coverage-fill workflow for untested code. Use when you have legacy/inherited Magento custom code that has no tests (or low coverage) and you want to systematically add unit + integration tests before refactoring or extending it. Process: identify target scope (a module, a class, or coverage gaps from var/coverage.xml), use mcp__gitnexus-mageos__find_symbol + impact to map all public methods needing coverage, build a mini-plan of test tasks per uncovered method, then invoke /pb-gitnexus:plan-orchestrate to drive tdd-worker through writing characterisation tests (RED-GREEN, no behaviour change), then re-run coverage to verify. Stops at 'tests written + green + coverage improved' — does NOT touch the production code being tested. Composable: can be chained from workflow-build-feature when the build touches a file with coverage < threshold.

1 install
▌
Magento Controller Refactor · proxiblue
Scans and refactors deprecated Magento 2 controller patterns to modern HTTP verb interfaces. Use when modernizing controllers that extend deprecated Action base class or need PHP 8.3+ compatibility.

2 installs
▌
Analyze M1 Module For Migration · proxiblue
Systematically analyze a Magento 1 module to determine its purpose, usage, and migration requirements for Magento 2. Use when you need to decide whether to migrate a M1 module, find alternatives, or skip it.

0 installs
▌
Cache Diagnostic · proxiblue
Specialized Magento 2 cache diagnostic skill for analyzing cache configuration, performance, hit rates, and optimization opportunities across all cache layers (Full Page Cache, Application Cache, Redis, Varnish).

0 installs
▌
Manual Test Plan · proxiblue bundle
Derive a user-story manual test plan from an implementation plan's Success Criteria and task Requirements, post it as a phased comment on the GitHub ticket, and write a machine-readable companion YAML at .claude/test-plans/<ticket>.yml that links each story to a Playwright spec via a @story: slug. Invoke after hcf:plan-create produces an implementation plan, or when the user asks to "generate a manual test plan" for a ticket.

0 installs
▌
Uat Deploy Verify · proxiblue
Reproduce-push-verify cycle for shipping a fix to UAT — confirms the bug still reproduces on UAT (reusing the local test that proves the fix, pointed at the UAT host), merges + pushes the feature branch to `uat` (structurally authorized to clear push-guard.sh's uat block for that one push), confirms via the buddy-mcp Buddy.works MCP server that the deploy pipeline actually completed, then reruns the same test against UAT to confirm the bug is gone. Invoke explicitly (e.g. "/uat-deploy-verify") — never auto-triggered, since it performs an authorized push.

0 installs
▌
Code Quality Audit · proxiblue
Automated code quality audit skill that runs PSR-12 compliance checks, phpstan static analysis, phpcs code style validation, and phpmd mess detection for Magento 2 code.

0 installs
▌
Magento Diagnostic · proxiblue
Comprehensive Magento 2 system diagnostic skill that gathers cache status, index status, module information, configuration, logs, and performance metrics for rapid troubleshooting.

0 installs
▌
Email Theme Styling · proxiblue
Comprehensive guide for theming and styling Magento 2 transactional emails via theme files, including Hyvä-specific considerations, CSS inlining architecture, and template override patterns.

0 installs
▌
Publish Test Reports · proxiblue
Set up and publish Playwright test report artifacts to GitHub Pages via a per-client test-reports repo (forked from ProxiBlue/test-reports template). Use when the user asks to publish test results, set up test reporting, wire up report publishing, or check published reports. Also use after running a full test suite on the live branch.

0 installs
▌
Status Page Monitoring · proxiblue
Check status pages for down monitors and alert immediately. Uses curl + jq for accurate API parsing. Supports UptimeRobot, PayPal, and other status page providers.

0 installs
▌
Workflow Build Feature · proxiblue
PER-TICKET BUILD workflow for shipping a Magento feature through plan + implement + review + verify + quality-gate stages — but STOPS at 'ready to deploy'. Does NOT push or deploy. The user runs /deploy-check separately when they're ready. Flow: prereq check (wires.json registry-driven, scales to N per-domain playbooks) → branch creation → /hcf:plan-create (devils-advocate consults wired playbooks: gitnexus, graphiti, …) → /manual-test-plan posts GitHub ticket comment → /hcf:plan-orchestrate (HCF native — gitnexus-reviewer runs as a pipeline.md post-implementation agent rather than per-task wrapper gate, after pb-gitnexus wrapper was retired in favour of pb-hcf wires) → handoff to /verify-feature (in a fresh thread per skill convention) → CHAINS /proxiblue-skills:workflow-security-audit as a quality gate → completion summary listing all gates passed/failed. Maintains visible TodoWrite list throughout. Pauses at every user-decision boundary. Assumes /proxiblue-skills:workflow-onboard-project has already run. C

1 install
▌
Database Query Analysis · proxiblue
Rapid database query execution skill for common Magento 2 data analysis tasks. Leverages database and magento2-dev MCP servers for catalog, order, configuration, and system data retrieval.

0 installs
▌
Workflow Security Audit · proxiblue
Security audit workflow for Magento custom code. Invokable standalone (audit the whole project's custom code) OR chained from /proxiblue-skills:workflow-build-feature as a quality gate (audit only the current branch's diff). Checks for: SQL injection (raw query strings without binding, $resource->getConnection()->query() with concatenation), XSS (unescaped output in .phtml, missing escapeHtml/escapeUrl), CSRF (form keys, missing form_key inputs), authentication bypass (admin controllers missing _isAllowed), file upload risks, command injection (shell_exec / exec / system / passthru / `backticks` with user input), insecure deserialization (unserialize on user data), hardcoded secrets/credentials, insecure direct object reference (route params reaching $resource->load without ACL), CSP violations, weak crypto. Returns structured STATUS (PASS / PASS-WITH-NOTES / BLOCKING) + findings list with file:line + severity + suggested fix. Uses gitnexus impact() to chase callers of risky symbols across the project. Compos

1 install
▌
Magento2 Widget Creation · proxiblue
Comprehensive guide for creating custom widget modules in Magento 2 that can be inserted into CMS pages and blocks. Covers module structure, widget configuration, templates, JavaScript, CSS, and form submission handling for non-Hyvä themes.

0 installs
▌
Workflow Investigate Bug · proxiblue
Forensic-only bug investigation workflow. Use when a bug is reported but you don't yet know the root cause. Strictly READ-ONLY: reproduces the bug with Playwright, captures video + screenshots + console + network logs, runs git log/blame to identify candidate regression commits, uses mcp__gitnexus-mageos__impact to enumerate everything that touches the suspect code path, scans var/log/ for related errors, optionally chains workflow-security-audit if security implications suspected. Output: a comprehensive .claude/investigations/<ticket>-<date>.md doc with reproduction steps, log evidence, candidate root causes ranked by likelihood, and a recommended fix-workflow handoff. Does NOT write a fix. After investigation completes, user decides whether to invoke workflow-build-feature (treats fix as a feature plan), do a hotfix, or escalate.

1 install
▌
Workflow Onboard Project · proxiblue
IN-DDEV onboarding workflow that brings a Mage-OS project's claude-code session into the full ProxiBlue stack. Runs ENTIRELY inside the DDEV web container — does NOT do host-side prep (image build, ddev add-on get, build-mount.sh, ddev restart). Those are hard prerequisites the skill verifies upfront and refuses if missing, with exact host-side commands the user must run first. Once prereqs satisfied: installs the 4 ProxiBlue plugins (pb-hcf, pb-hcf-playwright-tdd, proxiblue-skills, hyva-ai-tools), runs /hcf:project-setup, configures Playwright+pcov TDD via /pb-hcf-playwright-tdd:setup, and wires all per-domain playbooks via /pb-hcf:wire (one wire skill, multi-playbook installer — replaces the per-plugin /pb-gitnexus:wire of v0.x). Visible TodoWrite list throughout. Idempotent — re-runnable, skips already-done steps.

1 install
▌
Hyva Module Compatibility · proxiblue
Identify and fix Magento 2 module compatibility issues with Hyvä Themes. Covers block plugin bypasses, RequireJS/Knockout replacements, ViewModels, and Alpine.js integration for modules that work in admin but fail on Hyvä frontend.

0 installs
▌
Hyva Tailwind Integration · proxiblue
Comprehensive guidance on integrating Tailwind CSS and JavaScript in Hyvä Themes, including configuration merging, module registration, and build processes for Magento 2.

0 installs
▌
Workflow Reindex Gitnexus · proxiblue
Maintenance workflow to re-index the per-project GitNexus knowledge graph after a major refactor, dependency update, or when impact/find_symbol queries stop matching reality. Use when: a recent merge added new modules, you ran composer update with significant version bumps, the gitnexus-reviewer is reporting symbols that don't match the actual code, or it's been a long time since the last reindex (index is a snapshot — drift accumulates). Workflow: detects the project, derives the correct mount alias from the .ddev/docker-compose.gitnexus.yaml, clears the existing lbug, runs build-mount.sh on the host (with crash auto-recovery if a tree-sitter Napi error fires), restarts the per-project gitnexus container, verifies the new index via mcp__gitnexus-mageos__list_repos. Crosses host/container boundary: host steps are explicitly handed off with copy-paste commands when invoked from inside the DDEV web container.

1 install
▌
Caveman · proxiblue
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.

0 installs
▌
Magecli Skill · proxiblue
Query a live Magento 2 store's REST API (catalog, orders, customers, CMS, config) from the command line — no SSH, no DB access, no local booted app needed.

0 installs
▌
Wiki Docs · proxiblue
Document custom Magento 2 site functionality in the project wiki. Systematically captures custom features, modules, configurations, and business logic for client handover and developer onboarding.

0 installs
▌
Audit Loop · proxiblue
Iterative audit-fix loop using Ralph Wiggum. Spawns parallel performance, security, and code quality audits on currently edited files, fixes Critical/High issues, and re-audits until clean. Invoke with /audit-loop.

0 installs
▌
Agent Teams · proxiblue
Spawn a pre-configured team of Claude Code agents for parallel Magento 2 development. Available teams: issue-resolution, feature-development, module-development, audit, quorum-analysis, team_security (21-agent security quorum). Each team has specialized teammates working in parallel. Use when the user wants to run parallel agents, assemble a dev team, resolve Magento issues with multiple agents, or coordinate parallel module development.

0 installs
▌
Debt Ledger · proxiblue
Harvest deferred-shortcut markers (`DEBT: <reason>`) left in code across the current repo into a tracked ledger at `.claude/debt-ledger.md`, so a scope cut made to keep a change minimal doesn't silently become permanent. Use when the user says "harvest debt markers", "check deferred debt", "what shortcuts did we defer", "update debt ledger", or invokes /debt-ledger. Language-agnostic (matches the marker text, not any one comment syntax) — works across PHP, JS, Python, shell, etc.

0 installs
▌
Server Scan · proxiblue
Comprehensive Magento 2 server security investigation and compromise detection. Use when investigating a potentially compromised server, scanning for malware, detecting webshells, or performing post-incident forensics.

0 installs
▌
Deploy Check · proxiblue
The sanctioned pre-push verification gate. Runs tests, type-check, shows diff stat against the target branch, and EXPLICITLY asks for user confirmation before any push. Required by CLAUDE.md's Deployment & Git Safety cardinal rules — the push-guard.sh hook blocks direct pushes to live/uat without this skill (or an explicit CLAUDE_PUSH_ALLOWED=1 session env var).

0 installs
▌
Security Scan · proxiblue
Comprehensive Magento 2 security scanning skill that checks for vulnerabilities, misconfigurations, outdated dependencies, security patches, and compliance with security best practices.

0 installs
▌
Verify Feature · proxiblue
Execute Playwright verification of a feature by reading a test-plan YAML, running each linked spec one at a time with video + trace + screenshot capture, tracking progress via TodoWrite, stopping on first failure for human review, and on full pass publishing artifacts via proxiblue-skills:publish-test-reports and posting a summary ticket comment.

0 installs
▌
Write As Lucas · proxiblue bundle
Write text in Lucas van Staden's (ProxiBlue) personal writing style — his voice, mannerisms, and usage of English, with spelling corrected. Use when user says "write as me", "write as lucas", "in my style", "my voice", "sound like me", or asks for text (ticket, README, doc, forum post, email, chat reply) written as if he typed it himself. NOT for code, commit messages, or AI-posted ticket comments (those follow their own rules).

1 install
▌
Billing Skill · proxiblue
Skill to help with the xero billing generation

1 install
▌
Github Analysis · proxiblue
Systematically analyze GitHub tickets with proper local reproduction. Automatically substitutes production URLs with local DDEV hosts, ensures database sync, downloads missing assets, and reproduces issues locally before proposing solutions.

0 installs
▌
Gold Buy Signal · proxiblue
Answer "should I buy gold now" for a short-term micro trade (stop-loss/take-profit style, either direction) with a BUY/SELL/HOLD call and a short reason, weighted across 8 independent sources — 3 scraped prediction sites (GoldPriceWatch, LiteFinance, BeCoin), TradingAgents (local multi-agent LLM debate), and 4 market drivers (real yields via TIP, dollar index, CFTC positioning, intraday momentum). Runs a deterministic host-side engine at ~/.config/gold-signal/.

0 installs

34 published skills