Skip to content

Browse Secure Claude Skills

Search verified agent skills and review security grades before installing · full A–Z index

Secret SerializationAFinds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump, NamedTuple, JavaScript JSON.stringify and util.inspect, structured logs, tracing spans, and error reports. Use when asked to "check for secret serialization", "credential in repr", "repr=False audit", "secret in spans", "token in logs", or when a change adds a credential field to a dataclass, model, or config object, or adds code that stri...developmentjavascripttypescriptVotes: 0GitHub stars: 1,037
Fluiver UsageASDK gap-fillers via package:fluiver — use instead of reinventing. Grid (non-scroll grid, GridView API), TickerBuilder, ScrollTrackingExpandable (expand/collapse pinned into view), Debounce/Throttle*, Locale/Brightness listeners, DateTime/TimeOfDay predicates, Enum.byNameOrNull, Iterable separated/windowed, Map.entryOf, Object.let, Color darken/lighten/contrastText, ScrollController atTop/animateTo*, Future.timeoutOrNull, TextEditingController.setTextAndCaret, FastHash, NetworkProbe, platformD...developmentrustgoVotes: 0GitHub stars: 4
TasksA**Outcome** The audit method in [`../docs/research/R8-context-economy-for-coding-agents.md`](../docs/research/R8-context-economy-for-coding-agents.md) becomes something another project invokes rather than reads: a skill that runs the sixteen steps in two phases, walks the `F1`–`F5` checklist, and produces the two documents. **Packaging, not rewriting** — if it turns into a rewrite, the shaping rules failed and that is the finding.developmentrustgoVotes: 0GitHub stars: 2
UpstreamA> **Handover record — sent 2026-08-14.** > **Route:** one issue on this project's own repository, > [`uchimata2/handoff-skill#75`](https://github.com/uchimata2/handoff-skill/issues/75). The body is > this document with its links made absolute; the rows are identical. > **The route is retired for anything found after 2026-08-15** ([T-164](../../tasks/T-164-retire-the-cross-repo-register-in-favour-of-a-branch.md)): > the next defect this project finds in the handoff skill arrives as a branch wi...developmentgoshellVotes: 0GitHub stars: 2
Preflight AuditAAudit an app for security holes before it ships, then fix them and prove the fix. Use when the user asks if the app is safe or ready to launch, wants a security review or pre-deploy check, pasted or exported an app from Lovable, Bolt, v0, Cursor or Claude Code, or asks to harden Supabase, Firebase, Stripe, auth, uploads, dependencies or API keys. Reads the whole project, no git history needed.developmentpythonrustVotes: 0GitHub stars: 2
Orchestrate DeliveryADecompose an objective into board cards, dispatch one Harnu session per unit, monitor until each opens a PR, verify every acceptance criterion independently, and hand back a Delivery Report. Use when the operator hands over an objective too large for one session and wants it delivered rather than discussed — "orchestrate this", "break this down and dispatch it", "fan this out across worktrees", "deliver this epic" — or when a Harnu board already holds several ready cards that need to be plann...developmentrustgoVotes: 0GitHub stars: 2
Delivery VerifierAVerify that a finished unit satisfies its acceptance criteria one at a time, from evidence rather than the executor's own report, with a rubric per deliverable kind (code, UI, research, decision), record the verdict on the Mission step with mission_verify_step, then produce the Delivery Report. Use at the end of a dispatched unit or a whole fan-out wave — "check whether it really delivered", "go through the acceptance criteria", "which ACs do I still have to test by hand", "write the delivery...developmentgonodeVotes: 0GitHub stars: 2
Local CiAUse before pushing a branch or opening/updating a PR in this repo, when you need to know whether GitHub Actions will go green — it runs the same gates as the CI `verify` job locally (format:check, i18n parity, the CHANGELOG/self-awareness/user-docs contract gates, typecheck, lint, test:coverage). Also use when CI is unavailable (billing block, offline, rate limits) and a merge decision still has to be made, or when you want to fix every gate failure in one pass instead of one push per red che...developmentgobashVotes: 0GitHub stars: 2
Eisland Dev Update DocsAUpdate or create documentation in the eIsland VuePress docs site (web/eisland-web-docs). Use this skill whenever the user asks to update docs, add documentation, write a doc article, document a feature, update the tech stack docs, update plugin docs, update command docs, or any task involving files under web/eisland-web-docs/src/. This skill ensures all documentation follows the project's CLAUDE.md constraints, uses correct admonition syntax, maintains consistent style with existing articles,...developmentjavascripttypescriptVotes: 0GitHub stars: 320
Eisland Dev Refactor Module SplitARefactor a monolithic React component file into a standardized module structure with components/, hooks/, utils/, types/, and config/ subdirectories. Use this skill whenever the user asks to "split", "refactor", "拆分", "拆解", or "restructure" a component file into subdirectories, or when they mention organizing code into modules.developmenttypescriptgoVotes: 0GitHub stars: 320
Eisland Dev Generate Release WorklogAGenerate a release announcement markdown for eIsland. Use this skill whenever the user asks to "generate release notes", "create announcement", "写更新日志", "生成发布公告", "draft release notes", or mentions preparing a new version release document.developmentbashgitVotes: 0GitHub stars: 320
Eisland Dev Add Svg IconAAdd a new SVG icon to the project's icon enum system with matching test assertions. Use this skill whenever the user asks to "add SVG icon", "添加图标", "add icon enum", "注册图标", "补齐图标枚举", "add SVG enum", or wants to register a new .svg file in the SvgIcon utility. Also trigger when the user provides a path to an .svg file and asks to create enum/test for it.developmentjavascriptgoVotes: 0GitHub stars: 320
Eisland Dev Update DocsAUpdate or create documentation in the eIsland VuePress docs site (web/eisland-web-docs). Use this skill whenever the user asks to update docs, add documentation, write a doc article, document a feature, update the tech stack docs, update plugin docs, update command docs, or any task involving files under web/eisland-web-docs/src/. This skill ensures all documentation follows the project's AGENTS.md constraints, uses correct admonition syntax, maintains consistent style with existing articles,...developmenttypescriptgoVotes: 0GitHub stars: 320
Eisland Dev Refactor Module SplitARefactor a monolithic React component file into a standardized module structure with components/, hooks/, utils/, and config/ subdirectories. Use this skill whenever the user asks to "split", "refactor", "拆分", "拆解", or "restructure" a component file into subdirectories, or when they mention organizing code into utils/hooks/config/components folders.developmenttypescriptgoVotes: 0GitHub stars: 320
Eisland Dev Git CommitAAnalyze the current git status, review all staged and unstaged changes, and create a commit with a proper English commit message following conventional commit format. Use this skill whenever the user asks to "commit", "提交", "git commit", "analyze and commit", "check git status and commit", or wants to save their current changes to git.developmentgobashVotes: 0GitHub stars: 320
Eisland Dev Generate Release WorklogAGenerate a release announcement markdown for eIsland. Use this skill whenever the user asks to "generate release notes", "create announcement", "写更新日志", "生成发布公告", "draft release notes", or mentions preparing a new version release document.developmentbashgitVotes: 0GitHub stars: 320
Eisland Dev Add Svg IconAAdd a new SVG icon to the project's icon enum system with matching test assertions. Use this skill whenever the user asks to "add SVG icon", "添加图标", "add icon enum", "注册图标", "补齐图标枚举", "add SVG enum", or wants to register a new .svg file in the SvgIcon utility. Also trigger when the user provides a path to an .svg file and asks to create enum/test for it.developmentjavascriptgoVotes: 0GitHub stars: 320
Eisland Dev Add Maxexpand TabA为 eIsland 灵动岛的 MaxExpand（全展开）模式添加一个新的 Tab 页面。当用户要求创建新的 MaxExpand 页面、添加全展开界面组件（如计算器、时钟、天气面板、便签、日历等）时使用此 skill。即使用户只说"新建一个 maxexpand 界面"、"加个全展开页面"、"在 maxexpand 里加个 XX"，也应触发。此 skill 覆盖从类型注册、设置配置、懒加载/即时加载渲染到 i18n 国际化的全部 8 个修改点，确保新 Tab 完整可用且可在设置中拖拽排序与切换可见性。developmenttypescriptbashVotes: 0GitHub stars: 320
Eisland Dev Add Guide StepA创建 eIsland 引导配置窗口的新步骤页面。当用户要求在引导界面（Guide）中新增配置步骤、引导页面、引导分页时使用此 skill。触发关键词：guide 步骤、引导页面、引导分页、Guide step、新建引导页、添加引导配置。适用于 src/renderer/components/components/ 目录下的 Guide 模块。developmenttypescriptreactVotes: 0GitHub stars: 320
Eisland Dev Add Empty StateA为 eIsland 灵动岛添加一个新的空白状态机（IslandState）。当用户要求创建新状态、新页面、新界面（如登录页、设置子页面、独立面板）时使用此 skill。即使用户只说"加个新状态"或 "创建一个 XX 页面"，也应触发。此 skill 覆盖从类型注册、窗口尺寸、CSS 样式到鼠标交互行为的全部 12 个修改点，确保状态机完整可用。developmenttypescriptshellVotes: 0GitHub stars: 320