Menu
Skills in this repository
SkillsMP has collected 156 skills from kumaran-is/claude-code-onboarding. Open a skill to review its source and details.
kumaran-is/claude-code-onboardingShowing 36 of 156 collected skills.
Static Application Security Testing (SAST) configuration skill. Use when setting up security scanning, configuring Semgrep rules, running SAST in CI/CD, reviewing SAST findings, or writing custom security rules. Triggers: SAST, static analysis, Semgrep,…
Use when implementing new features or logic that requires tests — before writing implementation code. Covers Red-Green-Refactor cycle, stack-specific test patterns, test naming conventions, and mocking. Triggers: "write tests first", "TDD", "test-driven",…
Master TypeScript's advanced type system — generics, conditional types, mapped types, template literals, and utility types — for building type-safe Angular 21.x components, NestJS 11.x APIs, and MCP Builder integrations. Use when implementing complex type…
TypeScript infrastructure specialist for monorepo project references, type performance diagnostics (tsc --extendedDiagnostics), ESM/CJS interop, strict mode migration, and .d.ts authoring — use for project-level TypeScript decisions, not implementation…
Impact-prioritized Angular 21.x best practices — CRITICAL: OnPush+Signals, async waterfalls, bundle optimization. HIGH: rendering performance, SSR hydration. MEDIUM: template optimization, state management. LOW: memory management. Load when reviewing Angular…
Use when evaluating ADK agents, running adk eval, writing evalsets, configuring eval metrics, or debugging evaluation results. Covers all 8 criteria (tool_trajectory_avg_score, response_match_score, final_response_match_v2,…
This skill provides coding standards for Python agentic AI services with LangChain/LangGraph. Use when reviewing or writing Python agentic AI code. Covers state management, tool definitions, graph structure, error handling, and observability.
Deep architectural review specialist — assesses system design changes, identifies anti-patterns, evaluates distributed systems compliance, and produces improvement recommendations. Use when reviewing architecture before implementation, assessing microservice…
Guidance for using the asc CLI in App Store Connect automation (flags, output formats, pagination, auth, discovery, timeouts). Use when asked to run or design asc commands, interact with App Store Connect via CLI, set up authentication, configure environment…
Resolve App Store Connect IDs (app IDs, build IDs, version IDs, group IDs, tester IDs, submission IDs) from human-friendly names using asc CLI commands. Use when commands require IDs, when you only know the app name or bundle ID, or when you need to look up…
End-to-end release workflows for TestFlight and App Store using asc publish, builds, versions, and submit commands. Use when uploading a build to App Store Connect, distributing to TestFlight beta testers, submitting to App Store review, managing…
Set up bundle IDs, capabilities, signing certificates, and provisioning profiles with the asc CLI. Use when onboarding a new iOS or macOS app, rotating expired certificates, creating provisioning profiles, configuring app capabilities (iCloud, push, etc.), or…
Preflight App Store submissions, submit builds, and monitor review status with asc CLI. Use when shipping to App Store review, troubleshooting review submission failures, checking encryption compliance, verifying version metadata, monitoring review status,…
Orchestrate TestFlight beta distribution, groups, testers, and What to Test notes using asc CLI. Use when rolling out beta builds, creating TestFlight groups, adding or inviting testers, distributing builds to groups, setting What to Test notes, or exporting…
Code duplication detection and technical debt analysis skill. Provides methodology for finding duplicate code, dead code, and dependency bloat.
Preflight Google Play releases, validate edits, and verify listing completeness with gpd CLI. Use when shipping to production, troubleshooting a failed Play Store release, validating edit lifecycle before commit, checking release status and version code,…
This skill should be activated when reviewing Java code or enforcing coding standards in Spring Boot services. It covers naming conventions, immutability patterns, Optional usage, streams, and exception handling.
This skill should be used when creating API documentation, generating SDKs, or ensuring API contract compliance. It generates and maintains OpenAPI 3.1 specifications.
Threat modeling skill for STRIDE analysis, attack tree construction, and security requirement extraction. Use when designing new features, reviewing architecture, conducting threat modeling sessions, creating security documentation, or training teams on…
Build complete AI applications with Weaviate — Query Agent chatbots, data explorers, multimodal PDF RAG, basic/advanced/agentic RAG pipelines, and DSPy tool-calling agents. Use when scaffolding a full-stack Weaviate application from scratch. Triggers: 'build…
Search, query, and manage Weaviate vector database collections. Use when running semantic search, hybrid search, keyword search, natural language Q&A with source citations, collection schema inspection, data exploration, filtered fetching, bulk imports, or…
Advanced prompt engineering for production LLM applications with LangGraph and Google ADK. Covers few-shot learning, chain-of-thought, Tree-of-Thought, self-consistency, system prompt design, prompt optimization, and reusable templates. Use when designing…
Direct Gemini API development with google-genai (Python) and @google/genai (TypeScript). Use when building multimodal applications, function calling, structured output, context caching, embeddings, or code execution with Gemini models — without the ADK…
Architectural reference for multi-agent system design — covers Supervisor/Orchestrator, Peer-to-Peer/Swarm, and Hierarchical patterns with token economics, context isolation strategies, consensus mechanisms, and failure mitigation. Primary use: building…
Simulate a structured peer-review process using 5 constrained sequential agent roles to validate designs, surface hidden assumptions, and identify failure modes before implementation. Produces a mandatory Decision Log and APPROVED/REVISE/REJECT verdict.
Reusable GCP Terraform module patterns for Cloud Run v2, Cloud SQL PostgreSQL, Artifact Registry, VPC, Secret Manager, and Workload Identity Federation. Load when creating or consuming reusable Terraform modules for GCP. Triggers: terraform module, reusable…
Audit AI-generated or rapidly-prototyped code for structural flaws, hallucinated imports, fragility, and production risks before committing or handing off. Use when code was generated with AI assistance, evolved without deliberate architecture, or a prototype…
Audit and fix animation performance issues in Angular 21.x — layout thrashing, compositor properties, scroll-linked motion, will-change, blur effects, FLIP technique, and View Transitions API. Use when Angular animations stutter, transitions jank,…
Audit UI code against Vercel's Web Interface Guidelines — fetches live rules, reads specified files, outputs findings as file:line violations. Use when asked to review UI, check accessibility, audit design, review UX, or verify a component against web…
Expert guidance for distributed NoSQL databases (Cassandra, DynamoDB, ScyllaDB). Covers query-first modeling, partition key design, hot partition prevention, single-table design, and BASE vs ACID tradeoffs. Triggers on: 'Cassandra', 'DynamoDB', 'NoSQL',…
Pydantic v2 multi-model pattern for clean API contracts — Base, Create, Update, Response variants with camelCase aliases and PATCH support. Use when defining FastAPI request/response schemas or data validation models.
Python architecture decision-making for framework selection (FastAPI/Django/Flask), async vs sync patterns, type hint strategy, project structure, and background task selection. Use BEFORE implementing Python features to choose the right approach for the…
GCP Cloud Run deployment skill. Use for Cloud Run Functions (event-driven Pub/Sub, Storage, HTTP webhooks), cold start optimization, and Cloud Run anti-pattern prevention. For Cloud Run service deployment use deployment-engineer agent. Triggers: cloud run,…
GCP cost optimization and resilience skill. Use for GCP billing budget alerts, committed use discounts, sustained use discounts, cost allocation labels, GCP Recommender, Cloud SQL PITR, multi-region DR, and RTO/RPO planning. Triggers: GCP cost, billing,…
Audits GitHub Actions workflows for security vulnerabilities in Claude Code Action integrations. Detects 9 attack vectors where attacker-controlled GitHub event data reaches Claude running in CI/CD — including env var intermediaries, direct expression…
Use when challenging ideas, plans, decisions, or proposals using structured critical reasoning. Invoke to play devil's advocate, run a pre-mortem, red team, or audit evidence and assumptions.