Browse Secure Claude Skills
Search verified agent skills and review security grades before installing · full A–Z index
- Db Move Table SchemaRelocating a live, still-used table to another Postgres schema with every reference intact. Use when asked to move or rehome a table into a schema, or to pull a table out of public into a domain schema. NOT for retiring a table (use db-deprecate-table).Votes: 0GitHub stars: 3
- Db Deprecate TableRetiring a dead table by moving it to the deprecated schema and clearing every reference in both repos. Use when asked to deprecate or retire a table, when a table is no longer used, or to take a table offline without dropping it. NOT for relocating a still-used table (use db-move-table-schema).Votes: 0GitHub stars: 3
- Db ChangeEntry point and shared rules for structural changes to the live Matrx database. Use before any DDL: dropping, merging, or renaming a table, changing a function, RPC, trigger, or policy, hunting straggler tables, or starting a deprecated, schema move, or canonicalization (it routes to those skills).Votes: 0GitHub stars: 3
- Sqlite Durable Agent StateDesign durable local SQLite state for multi-agent developer tooling that survives package upgrades, concurrent writers, and crashes: canonical env-pinned paths, WAL/busy_timeout discipline, idempotent verified migrations, and safe writer topology. Use when a daemon, CLI, or agent fleet needs a persistent local DB, when reviewing a schema/path change before it ships, or when diagnosing an already-fragmented multi-.db mess. NOT for relational schema/query design (use daemon-development for the ...Votes: 0GitHub stars: 2
- Angular Upgrade Angularjs Angularjs Template Syntax MigrationMigrate AngularJS template syntax such as ng-repeat, ng-if, ng-click, ng-class, and ng-model to Angular-compatible templates during a staged migration.Votes: 0GitHub stars: 4
- Angular Upgrade Angularjs Angularjs Service To Injectable MigrationMove AngularJS services to Angular injectable services during migration. Use when stateful or shared business logic should leave the AngularJS dependency graph.Votes: 0GitHub stars: 4
- Angular Upgrade Angularjs Angularjs Routing Hybrid MigrationMove routing from AngularJS to a hybrid Angular and AngularJS setup when both frameworks must coexist during migration. Use when route ownership is split and navigation needs explicit bridge handling.Votes: 0GitHub stars: 4
- Angular Docs Angular Upgrade Report TemplateProduce a concise upgrade report that records the current stack, hop taken, gates passed, blockers, and next safe step.Votes: 0GitHub stars: 4
- Yugabytedb App DevBuild production-grade applications that connect to YugabyteDB across any language runtime or framework. Covers JDBC/Spring Boot, Spring Boot Reactive (WebFlux + R2DBC), Quarkus (SmallRye Fault Tolerance + Agroal), Python, Node.js, Go, .NET, and more — with correct driver config, pool tuning (HikariCP/Agroal/Npgsql), transaction retry logic, Flyway migrations, and topology-aware load balancing. Use this skill whenever the user is writing NEW application code that talks to YugabyteDB, integrat...Votes: 0GitHub stars: 3
- OnboardOnboard an engineer on a repository, directory, feature, or function with one zoomable HTML map - the stack, each package's role, how the data flows, and links to the code.Votes: 0GitHub stars: 18
- SqlalchemyUse when working with SQLAlchemy 2.0 in Python - declarative models, queries, sessions, async engines, Alembic migrations, relationship loading strategies, N+1 detection, pool exhaustion, or 2.0 migrationVotes: 0GitHub stars: 21
- DjangoUse when building Django applications - security hardening, authentication and permissions, ORM optimization, PostgreSQL features, Django 6.0, migrations, testing, and ecosystem librariesVotes: 0GitHub stars: 21
- Django TransactionUse when handling Django transactions and concurrency - atomic, select_for_update, on_commit, upserts, M2M orderingVotes: 0GitHub stars: 21
- Django FilterUse when filtering Django querysets - FilterSet, custom filters, Django REST Framework integration, explicit fieldsVotes: 0GitHub stars: 21
- Django CeleryUse when integrating Celery with Django - task definition and calling, django-celery-beat scheduling, worker deployment, Flower monitoring, testing tasks, batch processing, or choosing between cron and beatVotes: 0GitHub stars: 21
- Otopcy SoftstartUse when starting a new web project, or when making a structural decision on an existing one — folder layout, where server code lives, which provider to add, what to check before shipping. This is the router for the Otopcy SoftStart playbook; it carries the ten non-negotiable rules and points to the specialised skills (otopcy-architecture, otopcy-securite, otopcy-paiements, otopcy-performance, otopcy-admin, otopcy-outils, otopcy-audit). Reference stack is Next.js App Router + Prisma + Postgre...Votes: 0GitHub stars: 2
- Otopcy SecuriteUse when writing or reviewing anything touching authentication, sessions, cookies, CSRF, rate limiting, roles and permissions, security headers or CSP, file uploads, or the browser HTTP client. Also use when asked to "secure", "harden" or review an endpoint. Covers enumeration-resistant signup, double-submit CSRF and its one documented exception, two-tier rate limiting, role precedence, origin-list CSP (and why not a nonce), magic-byte upload validation.Votes: 0GitHub stars: 2
- Otopcy PerformanceUse when a site or page is slow, when nothing is being cached, when adding ISR or cache tags, when a stale value keeps being served, when choosing a deployment region, or when writing background/scheduled work. Covers the dynamic-root-layout trap that makes an entire app uncacheable, cache tags plus TTL invalidation, splitting cached display reads from to-the-second reads, region placement, and why setInterval does not work on serverless.Votes: 0GitHub stars: 2
- Otopcy PaiementsUse when touching money — adding a payment provider (Stripe, PayPal, Notch Pay, Moneroo, Bictorys, PayTech, mobile money), handling a payment webhook, computing or converting an amount, displaying a price in a visitor's currency, implementing withdrawals or balances, or debugging an order stuck in PENDING. Covers raw-body HMAC ordering, idempotency by DB constraint, the transactional outbox, reconciliation when a webhook never arrives, advisory-lock withdrawals, minor units, and display-curre...Votes: 0GitHub stars: 2
- Otopcy OutilsUse when choosing or connecting a third-party service — hosting, database, Redis, email, file storage, error tracking, analytics, real-time, video conferencing, payments — or when setting up Google properties (Cloud Console OAuth credentials, Search Console, Merchant Center, Tag Manager, Analytics, Ads), DNS and email authentication. Also use when asked "what should I use for X", when something works locally but not on serverless, or when planning the order in which to open accounts.Votes: 0GitHub stars: 2