Skill UI

A comprehensive, multi-phase checklist for ensuring the quality, security, and deployment readiness of Django applications. It covers linting (ruff, mypy), unit testing (pytest), database migrations, security audits (bandit, pip-audit), and performance checks, making it an essential quality gate for CI/CD pipelines before merging or deploying to production.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This tool simplifies the process of detecting structural drift by combining audit listing, fresh auditing, and trend diffing into a single command. It finds the most recent audit record, runs a current audit against the repository, and compares the two using structural similarity metrics. It alerts when the structural distance falls below a specified threshold, helping maintain code consistency over time.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This skill generates an enterprise-grade threat model report using the `harness threat-model` command. It categorizes threats across the MCP surface, providing a detailed report including the overall worst severity (clean, low, medium, high) and specific findings. Ideal for pre-launch security reviews and periodic audits when sharing findings with an InfoSec team.

A comprehensive guide detailing architectural patterns for developing robust Electronic Medical Record (EMR) and Electronic Health Record (EHR) systems. Covers critical areas like patient safety protocols, structured clinical workflows, drug interaction checking, audit trail implementation, and WCAG accessibility standards. Essential for building highly reliable and compliant healthcare IT solutions.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

A comprehensive pipeline designed for Laravel projects to ensure code quality and stability before deployment. It systematically executes environment checks, linting, static analysis, full testing with coverage, security audits, migration validation, and cache preparation. Essential for robust CI/CD pipelines and pre-Pull Request validation.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.

A comprehensive tool designed to audit the quality, relevance, and redundancy of all Claude skills and commands. It supports two modes: a rapid incremental scan for recently changed skills, and a deep full stocktake using AI judgment and expert checklists to assess viability (Keep, Improve, Update, Retire, Merge).