agent-skills

Brings a Laravel project that was scaffolded from CleaniqueCoders Kickoff up to the latest Kickoff baseline. Detects which Kickoff version a project started from (no marker exists — uses feature fingerprinting plus a git-date heuristic, then asks you to confirm), reads the latest Kickoff from the REQUIRED local install (composer global require cleaniquecoders/kickoff) and the original-version base from a git tag when available, and performs a category-grouped 3-way merge (base = original Kickoff, theirs = latest Kickoff, mine = your files) — falling back to a 2-way compare when the base cannot be obtained, never a blind overwrite. Patches packages, vendor:publish tags, navigation menu, config, Livewire and Blade components, layouts and theme, routes, bin scripts, CI workflows, docs, docker, and .env.example keys, while protecting project-owned code, .env, product config, and custom routes. Previews every change and applies only what you approve per category, then stamps a version marker so future runs are det

Senior SOC Analyst skill — stack-agnostic security operations for any web application. Auto-detects the project stack (Laravel/PHP, Node.js/Express, Python/Django/Flask/FastAPI, Ruby/Rails, Go, Rust, Java/Spring, .NET) then triages security alerts by severity (P1-P4) with MITRE ATT&CK categorization, investigates suspicious activity by tracing attack paths and correlating events, performs incident response with containment and eradication, actively remediates vulnerabilities in code (SQL injection, XSS, CSRF, insecure deserialization, auth bypass, file upload flaws, command injection, path traversal, SSRF, mass assignment), hardens applications proactively (security headers, rate limiting, input validation, dependency audit, secrets rotation), and generates incident reports with post-mortem documents. Use this skill whenever the user asks to analyze security issues, fix vulnerabilities, investigate incidents, harden their application, or audit for threats — including requests like "check for security vulnerab

SVG business card designer that takes contact details and brand preferences, then produces 12 front design concepts with optional back designs, interactive HTML preview galleries, individual card showcases with front/back flip animation, and print-ready SVG exports with bleed area and crop marks. Supports horizontal and vertical orientations, six layout styles (minimal, corporate, creative, elegant, bold, tech), multiple color schemes, QR code placeholders, social media icons, and logo integration. Use this skill whenever the user asks to design a business card, create a name card, make visiting cards, or says "design business card", "buat kad bisnes", "create name card", "reka kad perniagaan", "design kad nama", "I need a business card for X".

Pragmatic Domain-Driven Design for Laravel projects — business-first, not academic. Helps restructure Laravel apps from default flat structure into domain-based organisation with clear bounded contexts, domain layers (Models, Events, Contracts, Value Objects), application layers (Actions, Jobs, Services), and infrastructure layers (Registrars, Exports, Integrations). Focuses on what matters to the business: reducing OPEX through maintainable code, increasing velocity through clear ownership, and enabling teams to work independently on bounded contexts. Includes domain discovery interview, migration planner, scaffolding, service provider wiring, autoloading config, and architecture test updates. Use this skill whenever the user asks to restructure a Laravel app into domains, apply DDD, organise by business context, migrate to modular structure, or says "restructure app guna DDD", "nak buat domain-based structure", "organise code ikut business domain", "migrate to DDD", "buat bounded context", "refactor monolit

Complete API lifecycle management for Laravel applications — from OpenAPI design through governance and security hardening. Covers seven phases: design (OpenAPI 3.1 spec generation via interview), develop (controller/request/resource scaffolding with Sanctum/Passport auth), test (Pest API test generation with contract testing), deploy (versioned deployment with feature flags and zero-downtime migration), docs (auto-generated documentation with Scribe/Scramble), govern (breaking change detection, deprecation policy, API review), and security (OWASP API Top 10, input validation, rate limiting tiers). Use this skill whenever the user asks to design an API, generate OpenAPI specs, scaffold API endpoints, write API tests, deploy API versions, generate API documentation, review API changes, or harden API security — including requests like "design a REST API for X", "scaffold CRUD endpoints", "generate Pest tests for my API", "set up API versioning", "check my API for breaking changes", "generate API docs", "secure

Living document practice — Claude automatically updates CLAUDE.md whenever a user corrects a mistake, expresses a preference, a better pattern is discovered, or a gotcha is found during implementation. Use this skill whenever Claude is working inside a project that has a CLAUDE.md file, or whenever the user says things like "jangan guna X, pakai Y", "aku tak suka pattern ni", "ingat ni untuk lepas ni", "update CLAUDE.md", "catat ni", "tambah dalam CLAUDE.md", or any correction/preference that should persist across future sessions. Also triggers when Claude discovers an edge case or architectural insight worth preserving. The goal: CLAUDE.md should always reflect the current, correct, agreed-upon way of working — never let a correction live only in conversation history.

Multi-audience FAQ generator that researches a codebase (and optionally related repositories) end-to-end, then produces categorized FAQ documents for different stakeholder perspectives: business/executive, marketing/sales, project manager, administrator, developer, devops, and end user. Use this skill whenever the user asks to create FAQs, generate a knowledge base, build support documentation by audience, or produce stakeholder-specific Q&A documents — including: "generate FAQ for my project", "create FAQ for different audiences", "buat FAQ untuk projek ni", "FAQ for sales team", "developer FAQ", "devops FAQ", "admin FAQ", "knowledge base for my product", "support FAQ", "create Q&A docs", or "FAQ by persona".

Generates project roadmaps in Nasrul's exact style — always produces BOTH a ROADMAP.md (phase-based markdown with checkboxes, exit criteria, dependency map, and quick reference) AND a beautiful custom-styled HTML visual roadmap. Use this skill whenever the user asks for a roadmap, project plan, implementation plan, development phases, or says "buat roadmap", "plan for this project", "phase out the implementation", "apa first step", or "how should I build this". Also triggers when a CLAUDE.md exists and the user wants a matching roadmap, or when an existing roadmap needs updating based on new decisions. Always generates both files together — never just one. The HTML roadmap is styled uniquely per project type (not a generic template). Compatible with the nasrulhazim/claude-docs project structure.

Syncs CLAUDE.md across multiple Kickoff-based Laravel projects by intelligently merging shared conventions from a source of truth while preserving project-specific content. Scans local directories or GitHub accounts to discover Kickoff projects, maintains a project registry, and provides diff/update/report commands. Use this skill whenever the user asks to sync CLAUDE.md across projects, update conventions in multiple repos, check which projects are outdated, scan for Kickoff projects, or says "sync semua project", "update CLAUDE.md everywhere", "mana project outdated", "scan my repos", "diff CLAUDE.md", "project-sync", or any multi-project convention management task.

Interactive HTML courseware builder — turns any technical topic, flow, or process into a CD-Courseware-style interactive slide deck with animated diagrams, step-by-step simulation, syntax-highlighted code examples, and key points panels. Use this skill whenever the user wants to create teaching materials, interactive slides, animated flow diagrams, or step-by-step technical walkthroughs — even if they say "buatkan slides untuk topik X", "jadikan courseware", "buat interactive tutorial", or "create a lesson on X". Also triggers for "convert my diagram to interactive slides" or "build a visual walkthrough for my training".

GitHub CLI (gh) workflow automation for repository management, issue tracking, pull request workflows, GitHub Actions debugging, GitHub Projects (multi-repo boards with custom fields, views, and workflows), label management, secrets handling, and advanced API operations. Complements git-workflow by covering GitHub-specific operations via the gh CLI. Trigger: "create issue", "list PRs", "check workflow status", "manage labels", "set up repo", "manage secrets", "gh api", "review PR", "merge PR", "create release with assets", "debug actions", "fork repo", "create project", "manage project board", "add to project", "project status", "generate report", "repo report", "activity report", "contributor report". BM: "buat issue", "senarai PR", "semak status workflow", "urus label", "sediakan repo", "urus secrets", "semak PR", "gabung PR", "buat release", "debug actions", "fork repo", "buat project", "urus project board", "tambah ke project", "status project", "jana laporan", "laporan repo", "laporan aktiviti".

Professional SVG logo designer with granular control over logo category, color palette, container frame, and rendering style. Produces 25 SVG concepts (5 concepts x 5 variations), interactive grid gallery preview on dark background, individual showcase pages on branded color background, and production-ready exports in dark/light modes. Supports six logo categories (mascot, emblem, lettermark, icon, wordmark, combination), eight color palettes (monochrome, duotone, tricolor, full-color, gradient, split-tone, metallic, pastel), twelve container frames (circle, squircle, shield, hexagon, diamond, oval, square, triangle, organic, arch, banner, frameless), and fifteen rendering styles (line-art, negative-space, flat, geometric, hand-drawn, minimal, detailed, stencil, engraving, halftone, silhouette, layered, stipple, pixel, doodle). Use this skill whenever the user asks to design a logo, create a mascot, build a brand mark, generate emblem, design lettermark, or says "design me a logo", "I need a mascot for X", "b

Complete SVG logo system designer that takes a brand brief and produces 25 diverse logo concepts, dark/light wordmarks, icon marks, interactive HTML preview galleries, real-world mockup pages, and multi-platform export assets. Use this skill whenever the user asks to design a logo, create brand identity, generate SVG logos, build a logo system, or wants to explore logo concepts for a product, company, or project — even if they just say "design me a logo for X" or "I need a logo". Also triggers for refinement tasks like "improve my logo", "generate icon alternatives", or "export my logo for all platforms". For Laravel projects, auto-deploys to Blade components and public/ directory. Outputs follow the same file structure as the nasrulhazim/claude-design-logo Claude Code slash command.

Multi-repo development summary and timeline skill — scans one or more git repositories and produces a combined summary table with first commit date, latest commit date, total commits, duration, and per-repo breakdowns. Optionally generates a detailed report with file counts, contributor stats, commit frequency, and an HTML timeline dashboard. Use this skill whenever the user asks for development stats, project timeline, commit history summary, how long a project has been in development, or wants a combined view across multiple repos — including: "berapa lama dah develop", "development summary", "commit stats", "project timeline", "how many commits", "summarise all repos", "ringkasan development", "statistik commit", "berapa commit semua repo", "timeline projek ni", "development report".

Production log analysis and issue tracking skill — analyzes Laravel log files (daily or single), categorizes errors by type and severity, generates structured reports (summary, error-type, todo per day and per project), creates prioritized GitHub issues with proper labels, and adds them to a GitHub Project board for unified tracking across multiple repositories. Use this skill whenever the user asks to analyze production logs, triage errors, monitor application health, create issues from log findings, or set up error tracking — including: "analyze these logs", "check production errors", "triage the errors", "buat report dari log ni", "tengok error apa dalam production", "summarize the log files", "create issues from logs", "monitor app health", "apa error dalam server ni", or "tolong check log production".

Deep repository research and analysis skill — studies any codebase end-to-end and produces a comprehensive research/ folder with 10 structured documents covering architecture, workflows, algorithms, frontend, configuration, deployment, testing, limitations, and SaaS opportunity analysis. Every document includes Mermaid.js diagrams (flowcharts, sequence diagrams, class diagrams, ER diagrams, mindmaps, Gantt charts). Use this skill whenever the user asks to study a repo, analyze a codebase, reverse-engineer architecture, create technical documentation from source, or plan a competing/improved product — including: "study this repo", "analyze this codebase", "reverse engineer this", "buat research pasal repo ni", "nak faham architecture dia", "document how this works", "study & analysis", "I want to build a better version of this", or "SaaS opportunity for this tool".

Discovers and inventories all Claude Code and AI-integrated projects across specified directories. Scans for CLAUDE.md files, .claude/ directories, AI SDK imports, and MCP configurations, then generates structured reports in Markdown, JSON, and a self-contained HTML portfolio dashboard with AI collaboration metrics. Use this skill whenever the user asks to list all their Claude Code projects, discover AI-powered repos, audit which projects use Claude, generate a project inventory, build an AI portfolio dashboard, or export project data — including: "list semua project Claude Code", "scan for AI projects", "inventory my repos", "which projects use Claude", "export project list", "cari semua project yang guna AI", "senarai project Claude", "audit Claude Code usage", "buat dashboard AI", "generate AI portfolio", "show my AI stats".

Complete Laravel package development skill — scaffolds package directory structure with src, config, migrations, tests, README, and CHANGELOG; generates service providers, facades, config publishing patterns; sets up Pest test suites with Orchestra Testbench integration; manages release workflows including version bumps, changelog updates, git tags, and Packagist publishing; generates professional README files with badges, installation instructions, usage examples, testing commands, and changelog sections. Use this skill whenever the user asks to create a Laravel package, scaffold a PHP package, set up a Composer library, generate a service provider, add facade support, configure Testbench tests, prepare a package release, write a package README, publish to Packagist, or manage package versioning — including: "create a new Laravel package", "scaffold package structure", "set up package tests", "prepare a release", "generate package README", "add a facade to my package", "configure Testbench", "publish my pack

Git workflow automation for Laravel and JavaScript projects. Covers conventional commits, semantic versioning, changelog generation, release workflows, branch strategies, pre-commit hooks, PR templates, and .gitignore scaffolding. Trigger: "set up git conventions", "generate commit message", "create changelog", "prepare release", "branch strategy", "set up git hooks", "create PR template", "generate gitignore". BM: "sediakan konvensyen git", "jana mesej commit", "buat changelog", "sediakan release", "strategi branch", "sediakan git hooks", "buat templat PR", "jana gitignore".

Laravel project conventions enforcer and code scaffolder for Kickoff-based projects — ensures all generated code follows Kickoff's opinionated conventions including UUID models extending Base, Enums with Contract and InteractsWithEnum, modular routes with require_all_in(), helper functions in support/, Spatie permission with config-driven access control, architecture test rules, and Docker-based local development. Covers model generation, enum creation, action classes with Builder pattern, route modules, helper files, and full module scaffolding. Use this skill whenever the user asks to scaffold code, generate models, create enums, add routes, write helpers, check conventions, or build new modules in a Kickoff Laravel project — including: "scaffold a new module", "generate a model", "create an enum", "buat model baru", "tambah enum", "scaffold module untuk users", "buat action class", "tambah route", "buat helper function", "check convention", "audit code ni", or "ikut convention kickoff". Assumes Laravel Kic

Full SDLC documentation toolchain for software projects — pre-development through post-release. Scaffolds numbered folder structures, generates Product Specs via interview, creates versioned roadmaps (Markdown table + Mermaid Gantt + GitHub Milestones + phase-based), builds support clusters (FAQ, triage workflow, SLA, post-mortem, deprecation), validates documentation, generates health reports with SDLC coverage scoring, and creates release notes from git logs. Use this skill whenever the user asks to create, scaffold, validate, or health-check project documentation — including: "set up docs for my Laravel package", "write a product spec", "generate a roadmap", "create an FAQ", "write a post-mortem", "generate a release note", "check my docs health", "add badges", "scaffold a support runbook", or "deprecate my package". Compatible with the nasrulhazim/claude-docs Claude Code slash command.

Product pricing, sales, quotation, marketing copy, and financial planning assistant for developers and solo founders. Use this skill whenever the user wants to figure out how to price their product or service, generate a quotation, calculate partner/reseller margins, plan revenue targets, write marketing copy or elevator pitches, or build a product pricing config. Triggers for requests like "how much should I charge", "help me price my SaaS", "generate a quotation for a government project", "what should my reseller margin be", "write a tagline for my product", "how many sales do I need to hit RM X", "build a pricing framework for my product", or "help me with my sales strategy". Works with or without an existing product-config.md — if none exists, interviews the user first to build one. Compatible with the nasrulhazim/claude-sales Claude Code slash command file structure.

CI/CD pipeline builder for Laravel projects — extends Kickoff's existing GitHub Actions CI with continuous deployment pipelines (staging/production), Docker containerisation, secret management, and failure notifications. Generates Dockerfiles, docker-compose.yml, deployment configs for VPS via SSH, container registry push workflows, and leverages Kickoff's /bin scripts (deploy.sh, backup.sh, setup.sh) in automated workflows. Use this skill whenever the user asks to set up deployment pipelines, containerise a Laravel app, configure CD for staging or production, push Docker images to a registry, manage deployment secrets, add failure notifications to CI, or integrate /bin scripts with GitHub Actions. Triggers for requests like "set up CD pipeline", "deploy to staging automatically", "dockerise my Laravel app", "add Docker to my project", "push image to registry", "manage secrets in CI", "notify on failure", "extend CI with deployment", "setup deploy pipeline", "nak deploy guna GitHub Actions", "tambah Docker da

Livewire 4 + Flux UI component scaffolder and pattern guide for Laravel projects. Generates Livewire components using Flux UI primitives — forms, data tables, modals, notifications, file uploads with Spatie Media Library, and role-gated UI with Spatie Permission. Supports both full-class and Volt single-file components. Use this skill whenever the user asks to create a Livewire component, build a form, scaffold a data table, add a modal, wire up file uploads, or integrate Spatie packages with Livewire — including: "buat Livewire form untuk user", "create a data table component", "scaffold CRUD with Livewire", "tambah modal delete confirmation", "buat file upload guna Media Library", "wire up role-based UI", "tolong buat component pakai Flux", "generate Volt component", or "I need a Livewire page with filters and sorting". Also triggers when the user mentions Flux UI components, Livewire patterns, or asks about best practices for reactive Laravel UIs. Assumes Livewire 4 and Flux are already installed with dark

PHP and Laravel design pattern advisor — suggests, implements, refactors, and reviews design patterns in your codebase. Use this skill whenever the user asks about which pattern to use, wants to refactor code to follow a pattern, needs a pattern implemented, or wants a code review focused on architecture and patterns. Triggers for requests like "suggest a pattern for this", "refactor this to use repository pattern", "implement the action pattern", "review my code architecture", "which pattern should I use here", "is this a good use of singleton", "how do I decouple this", "tolong suggest pattern", "refactor guna pattern", "review architecture code ni", "pattern mana sesuai untuk ni", "nak implement strategy pattern", or "code ni dah jadi god controller, macam mana nak fix". Covers GoF patterns adapted for PHP/Laravel, Laravel-specific patterns (Actions, Services, DTOs, Value Objects, Query Scopes, Form Requests, API Resources), SOLID principles, and anti-pattern detection. Works with cleaniquecoders/laravel-a

Interview-driven requirements engineering toolchain — SRS documents, user stories, client proposals, ASCII wireframes, and traceability matrices. Use this skill whenever the user asks to write requirements, create an SRS, generate user stories, build a project proposal, sketch wireframes, or trace requirements to tests — including: "buat SRS untuk sistem ni", "tulis proposal untuk client", "user stories untuk projek ni", "wireframe untuk login page", "generate requirements spec", "write a proposal for this project", "create acceptance criteria", "trace my requirements", "I need a traceability matrix", or "help me with project requirements". Supports bilingual (BM/EN) proposals and government RFP response format for Malaysian context. Integrates with the sales-planner skill for pricing sections in proposals.

PHP and Laravel code quality toolchain — static analysis with Larastan/PHPStan, code style enforcement with Pint, automated refactoring with Rector, baseline management for legacy codebases, and CI pipeline integration via GitHub Actions. Use this skill whenever the user asks to check code quality, fix linting errors, run static analysis, modernise PHP code, set up CI quality gates, manage PHPStan baselines, configure Pint presets, or apply Rector rules. Triggers for requests like "run quality check", "fix my code style", "analyse with larastan", "update phpstan baseline", "modernise my PHP code", "set up CI for quality", "check code quality", "pint tak jalan", "nak fix phpstan error", "setup rector", "betulkan code style", "tambah quality gate dalam CI", or "baseline phpstan untuk legacy code". Assumes Laravel Kickoff as the baseline — PHPStan, Pint, Rector, and GitHub Actions CI are already configured. This skill extends and customises that baseline.

Comprehensive Pest PHP testing skill for Laravel projects — auto-detects models, controllers, services, and Livewire components then scaffolds matching Pest test files with proper assertions, factories, and database testing patterns. Supports feature tests with actingAs(), API endpoint tests, Livewire::test() component testing, Spatie Permission role-based helpers, architecture testing (extending Kickoff baseline), and coverage gap analysis. Use this skill whenever the user asks to write tests, generate test files, scaffold test suites, check test coverage, or create architecture rules — including: "write tests for this model", "test this controller", "generate feature tests", "add Livewire tests", "scaffold Pest tests", "check test coverage", "add arch tests", "test this API endpoint", "tulis test untuk model ni", "buat feature test", "tambah test untuk controller", "scaffold test suite", "semak coverage", "buat arch test", or "test Livewire component ni". Assumes Pest is already installed with arch testing

PHP modernization, refactoring, code review, and standards enforcement assistant for PHP 8.2+ projects. Use this skill whenever the user wants to modernize legacy PHP code, refactor messy classes or controllers, review code for smells and anti-patterns, enforce PSR-12 and strict typing standards, or integrate Rector for automated upgrades. Triggers for requests like "modernize my PHP code", "refactor this controller", "review this class for code smells", "enforce strict types", "suggest Rector rules", "upgrade to PHP 8.2 features", "replace this array with a DTO", "decompose this fat controller", or "help me write better PHP". Also triggers for Malay requests like "tolong review code PHP ni", "refactor class ni", "nak upgrade ke PHP 8.2", "code ni messy, tolong clean up", "macam mana nak pakai enum dalam PHP", or "nak buang code smell dalam project ni". Assumes Rector is already installed in the project as a baseline.