Agent skills for Claude Desktop

Route Node.js/TypeScript backend security questions to the matching OWASP Top 10 category and the correct library reference (express…

OWASP Top 10 vulnerability scanning and remediation

This skill should be used when running or interpreting an OWASP ZAP baseline DAST scan of the Expo web export — after changes to HTTP…

Migrate a corpus built with an older pack version without losing application knowledge or local extensions.

Manage package.json dependencies, scripts, and metadata with best practices.

Prevent destructive package operations by blocking --force flags and requiring human approval.

Use when hardening JavaScript npm dependencies against fresh package publishes, supply-chain attacks, typosquatting windows, compromised…

Retro arcade-inspired design with pixel fonts, dotted borders, playful high-contrast colors, and 8-bit game aesthetics.

Takes one live URL and a target keyword and returns a ranked fix list: intent match, first 100 words, claim quality, keyword and semantic…

Use when the user says "/pagefoo", "PageFoo", "Page Foo", "A2UI page", "define_page", "canvas vs structured", "show this page", "export…

Use for \"interrogate\", \"adversarial review\", \"multi-model review\", \"challenge this\", \"stress test this code\", \"find blind…

Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session…

Apply when designing commands, lifecycle steps, or processing loops that run amid crashes, restarts, and retries.

Apply when introducing a new internal API while old callers still exist.

Apply when reviewing or shaping code that's hard to trace.

Use before review when the user asks to strip, remove, or clean up comments in code.

Apply after completing a task, before declaring done.

Apply when concurrent actors might write to the same file, branch, key, or state object.

Explain a body of work plainly so a person actually understands it.

Apply when designing types, reviewing a function signature, or writing code in any statically-typed language.

Cut AI tells from any writing. Must always apply.