Skill UI

Offers a reference structure for Claude Code plugin skills, describing triggers, file layouts, and best practices so you can craft new skills quickly and consistently.

This guide provides a comprehensive pattern for creating robust and scalable FastAPI routers. It covers essential best practices, including implementing proper authentication logic (required/optional dependencies), defining structured response models using Pydantic, and correctly assigning HTTP status codes. Use this skill when building structured and secure Python backend APIs.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

Scans infrastructure-as-code, application, and system configurations via the security-misconfiguration-finder plugin to expose vulnerabilities and compliance gaps, enabling proactive remediation before deployment.

Firecrawl Automation lets you use Claude Code to scrape pages, crawl sites, batch URLs, extract structured data, and monitor jobs via the Composio integration, ideal for terminal-driven web data pipelines.

A comprehensive guide for migrating web scraping pipelines from tools like Puppeteer, Playwright, and Cheerio to Firecrawl. This skill demonstrates how to replace complex, browser-intensive code with simple API calls, handling single-page scraping, structured data extraction using LLMs, and large-scale site crawling, while eliminating the need for manual browser management and anti-bot workarounds.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This comprehensive guide establishes strict architectural and performance standards for senior frontend engineers working with React, TypeScript, and Suspense. It dictates best practices for component design, feature implementation, data fetching (useSuspenseQuery), and code structure (feature-based organization). Use this when building any new component, feature, or handling data mutation to ensure the resulting application is scalable, predictable, and maintainable.

Generates production-ready Terraform, CloudFormation, Pulumi, ARM, or CDK templates via the infrastructure-as-code-generator plugin to automate cloud infrastructure deployment across AWS, Azure, and GCP from user specifications.

Automated DevOps helper for Git workflow manager tasks, triggering on mentions to offer best practices, code and configuration generation, and validation across version control, containerization, CI/CD, and foundational infrastructure topics.

Guides API developers through building well-structured GraphQL mutations with best-practice patterns, production-ready code, and validation help whenever “graphql mutation builder” appears in the request.

Automates helm chart generation, guidance, and validation for advanced DevOps workflows, covering Kubernetes, Terraform, monitoring, and infrastructure-as-code best practices.