Bootstrap a complete security pipeline (Dependabot + OSV + Semgrep + gitleaks + pre-commit hooks + Codex review + pr-review-gate) on any GitHub repo. Designed for free user-private repos where GitHub Advanced Security is unavailable. Reusable across…
xtrm-dev/core
SkillsMP has collected 60 skills from xtrm-dev/core. Open a skill to review its source and details.
- Latest recorded source activity
- SkillsMP catalog refreshed
- skills collected
- 60
- GitHub stars
- 1
- GitHub forks
- 1
Skills in this repository
Showing 40 of 60 collected skills.
How to start, sustain, and hand off work in an xtrm-equipped session — orienting on a live board, choosing whether to work solo or delegate, arming continuity so long work survives session death, coordinating panes and specialists, and writing a handoff a…
Cross-stack health verification with runtime-inferred routing. Queries Prometheus + Grafana live via the `mcpq` CLI (sidecar registry lives in `.mcpq.json` — `mcpq servers` lists them) to enumerate firing alerts, down containers, and stale freshness feeds;…
Structured planning skill for xtrm ecosystem projects. Creates a well-documented bd issue board from any task, feature, spec, or idea — with phases, dependencies, rich descriptions, and integrated test coverage via test-planning. MUST activate whenever the…
Help the operator coordinate work across N concurrent tmux sessions (Claude Code, pi, raw shells, vim, REPLs). Inventory state, hand off tasks cleanly, prevent messy-run failure modes, keep hygiene. Not an agent harness; not a /using-specialists replacement;…
Audit, clean, and rewrite CLAUDE.md / AGENTS.md / agent instruction templates so they stay compact, current, and routing-oriented instead of becoming dumped CLI manuals. Use whenever the user asks to update CLAUDE.md or AGENTS.md, clean bloated agent docs,…
Author dynamic multi-agent workflows (the Workflow tool) that inherit specialist semantics without inheriting a fixed chain. Use when work needs fan-out over a discovered work-list, a set-computation barrier, adversarial self-correction, or gates whose…
Portable PR-review discipline usable from any harness (Claude Code, pi, Codex, raw shell). Fetches the PR narrative, the diff, existing review threads, and Codex findings via `gh`; produces a structured issue list under a confidence rubric; and either prints…
Proactively delegates tasks to cost-optimized agents before working in main session. MUST suggest for: tests, typos, formatting, docs, refactors, code reviews, feature implementation, debugging, commit validation. Skips main session token usage by routing to…
Post-merge deploy verification helper. Use whenever a PR has been merged, a service/container has been rebuilt or redeployed, or an orchestrator asks for a 30-60 minute observability window. Enforces the deploy-gap guard (running artifact must be newer than…
Retrieves up-to-date documentation, API references, and code examples for any developer technology. Use this skill whenever the user asks about a specific library, framework, SDK, CLI tool, or cloud service -- even for well-known ones like React, Next.js,…
Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: "Index this repo", "Reanalyze the codebase", "Generate a wiki"
Use when the user is debugging a bug, tracing an error, or asking why something fails. Examples: "Why is X failing?", "Where does this error come from?", "Trace this bug"
Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"
Use when the user asks about GitNexus itself — available tools, how to query the knowledge graph, MCP resources, graph schema, or workflow reference. Examples: "What GitNexus tools are available?", "How do I use GitNexus?"
Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: "Is it safe to change X?", "What depends on this?", "What will break?"
Use when the user wants to review a pull request, understand what a PR changes, assess risk of merging, or check for missing test coverage. Examples: "Review this PR", "What does PR #42 change?", "Is this PR safe to merge?"
Use when the user wants to rename, extract, split, move, or restructure code safely. Examples: "Rename this function", "Extract this into a module", "Refactor this class", "Move this to a separate file"
This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use ${CLAUDE_PLUGIN_ROOT}", "set up event-driven automation", "block dangerous commands", or…
Board hygiene pass for a beads project. Walks every open issue, detects duplicates via mechanical `bd find-duplicates`, graph signals via `bv`, and semantic clusters via explorer/overthinker specialists, then rewires the dependency graph using the full `bd…
Deep research engine covering the last 30 days across 10+ sources - Reddit, X/Twitter, YouTube, TikTok, Instagram, Hacker News, Polymarket, and the web. AI synthesizes findings into grounded, cited reports.
Team-member operating guide for delegated tmux pane agents working under an orchestrator/judge. Teaches subordinate agents how to identify their contract from pane metadata, report back through beads and xtmux messages (short pointer, not payload), inspect…
PR review helper for multiplexed sprints. You are a HELPER, not an orchestrator. Fetch Codex (openai-codex / chatgpt-codex-connector) review comments on the PR, weigh them as high-signal-but-not-authoritative, cross-check against the actual diff, emit one…
Run a premortem on any plan, launch, product, hire, strategy, or decision. Assumes it already failed 6 months from now and works backward to find every reason why. Produces a revised plan with blind spots exposed. MANDATORY TRIGGERS: 'premortem this',…
Prompt Improver (Trigger: /prompt-improving "raw prompt"). Applies Claude XML best practices to user prompts before execution. Use when the user specifically invokes /prompt-improving.
Cut a release end-to-end. Promotes the existing [Unreleased] CHANGELOG block to a dated [vX.Y.Z] section, bumps the version (if the repo has a version manifest), rebuilds (if there's a build step), commits, tags, pushes, and publishes to a package registry…
Bootstrap a complete security pipeline (Dependabot + OSV + Semgrep + gitleaks + pre-commit hooks + Codex review) on any GitHub repo. Designed for free user-private repos where GitHub Advanced Security is unavailable. Reusable across Python/TypeScript/Go/Rust…
Generate or update the structured technical handoff report at session close. Prefer one same-day SSOT report: update the latest report for today when it exists, otherwise run `xt report generate`, then fill every `<!-- FILL -->` section from orchestrator…
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or…
Turn a spec, PRD, or vague ambition into a runnable bd issue board with sprints, fan-out, cross-repo gates, and specialist orchestration — without over-engineering the plan itself. Ponytail-first: the plan is only as big as it has to be. Use when the user…
Single-doc documentation sync specialist for xtrm projects. Each invocation operates on exactly one doc named in the bead's SCOPE. Source files are off-limits to every tool — context comes from a pre-script (xt report excerpt + commits) and per-commit `git…
Update an xtrm-initialized project to match the current canonical install state, and run one-time migrations to the global scope. Use this skill whenever the user asks to update, upgrade, repair, or re-sync xtrm in a project — or when they say "xt is out of…
Evidence-first dependency-bump and vulnerability-scan capability. Turns a Dependabot/Renovate/manual bump into a deterministic case, researches it against a 4-tier source matrix, and emits an upgrade dossier + verdict from a fixed taxonomy (PASS /…
Audit a file, subsystem, or repo for over-engineering and inefficiency, and verify every candidate cut with call-graph impact analysis before proposing it. Use whenever the user says "audit this", "what can I delete", "find slop", "find bloat", "is this…
Capacity forecasting, safe reclaim, and post-reclaim verification for a host that is running out of a resource — disk, tmpfs, swap, inodes. Use when a volume crosses a fill threshold, when swap free reaches zero, when a capacity alert fires or fails to fire…
Behavioral operating manual for an xtrm-equipped Claude Code session. Covers when to use which tool, how to handle questions and triggers, workflow examples, and skill routing. Reference material (hook list, gate rules, full bd commands, git workflow) lives…
Generate or update the structured technical handoff report at session close. Prefer one same-day SSOT report: update the latest report for today when it exists, otherwise run `xt report generate`, then fill every `<!-- FILL -->` section from orchestrator…
PR review helper for multiplexed sprints. You are a HELPER, not an orchestrator. Fetch Codex (openai-codex) review comments and threads on every PR under review, weigh them as high-signal-but-not-authoritative, cross-check against the actual diff, and emit a…
Merges queued PRs from xt worktree sessions in the correct order (FIFO), maintaining linear history by rebasing remaining PRs after each merge. Use this skill whenever the user has multiple open PRs from xt worktrees, asks to "merge my PRs", "process the PR…
Operational service-knowledge system for a project's services. One skill that creates, discovers, activates, updates, and scopes per-service expert skill packages (SKILL.md + diagnostic scripts + references), kept in sync with the code via a GitNexus-aware…