Skill reviews

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design R

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• The response is described with custom markup (3 tags): a typed call is more reliable

Comprehensive REST API design review with automated linting, breaking-change detection, and design scorecards. Catches inconsistent conventions, missing versioning, and design smel

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 19 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

When the user wants to optimize signup, registration, account creation, or trial activation flows. Also use when the user mentions "signup conversions," "registration friction," "s

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Runs a full inbox triage using the knowledge base created by the 'inbox-setup' skill. Light-intake by design (most invocations skip questions and run with KB-default preferences);

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 20 top-level sections: this looks like several domains in one skill
• The response is described with custom markup (4 tags): a typed call is more reliable

Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, and response formats. Use when C-suite agents need to query

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Loads and manages company context for all C-suite advisor skills. Reads ~/.claude/company-context.md, detects stale context (>90 days), enriches context during conversations, and e

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans, generates CVE reme

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• Does not say what the result is

One-time setup skill that builds a personalized inbox triage knowledge base via interactive interview. Interviews the user about their email patterns, business context, reply style

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 19 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides quality system governance, management review leadership, regulatory compliance oversi

• References files that are not bundled: ../quality-manager-qms-iso13485/, ../capa-officer/, ../qms-audit-expert/
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill

Use when designing a prospective clinical study before submission — selecting and classifying endpoints (primary / key-secondary / exploratory, with surrogate-endpoint flagging), e

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 12 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Use when the user asks to design database schemas, plan data migrations, optimize queries, choose between SQL and NoSQL, or model data relationships.

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 11 top-level sections: this looks like several domains in one skill
• Does not say what the result is

When the user wants to plan, design, or implement an A/B test or experiment. Also use when the user mentions "A/B test," "split test," "experiment," "test this change," "variant co

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 18 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Use when planning and synthesizing product/user research as a method-and-repository discipline — selecting the right method for the goal (generative interviews vs usability test vs

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 12 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Use when managing the money for an internal R&D program or portfolio — building a multi-period program budget with the F&A (indirect) split, tracking burn rate and runway against v

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 12 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response l

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• No condition that starts the skill

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique m

• References files that are not bundled: ../threat-detection/SKILL.md, ../incident-response/SKILL.md, ../cloud-security/SKILL.md
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill

Build immersive, cinematic 2.5D interactive websites using scroll storytelling, parallax depth, text animations, and premium scroll effects — no WebGL required. Use this skill for

• References files that are not bundled: assets/hero-section.html, assets/hero-section.css, assets/hero-section.js
• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 16 top-level sections: this looks like several domains in one skill

Compact the current conversation into a handoff document for another agent to pick up. Save to a user-configured location (OS temp, home folder, or per-project .handoff/), redact s

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 15 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Use when coordinating project-delivery work across the 8 project-management sub-skills — sprint/velocity analytics, portfolio health, Jira/JQL, Confluence, Atlassian admin, templat

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests with Art. 12(3) one-month deadline

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• No condition that starts the skill

Use when doing upstream market-research methodology — sizing a market as TAM/SAM/SOM computed BOTH top-down and bottoms-up (never a single unsourced number), planning a survey samp

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 12 top-level sections: this looks like several domains in one skill
• Does not say what the result is

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE ev

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• No condition that starts the skill
• Does not say what the process needs to start

When the user wants to write, rewrite, or improve marketing copy for any page — including homepage, landing pages, pricing pages, feature pages, about pages, or product pages. Also

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 13 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Use when coordinating product work across the 12 bundled product sub-skills (RICE, OKRs, UX research, design tokens, competitive teardown, analytics, experiments, discovery, roadma

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• 10 top-level sections: this looks like several domains in one skill
• Does not say what the process needs to start

Merge the winning agent's branch into base, archive losers, and clean up worktrees. Use when the user runs /hub:merge or asks to land the winning AgentHub result and tidy the sessi

• Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
• Does not say what the result is
• Does not say what the process needs to start