Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
rea-changelog-updatemorlutoPrepare or rewrite REA release changelogs and GitHub release notes from pinned Git history, with verified contributor thanks and Release… No issuesEngineeringProductivity426k
rea-ci-tests-auditmorlutoAudit REA CI and test suites for correctness, fixture drift, false passes, and measured performance; use for suite or workflow… No issuesEngineeringProductivity426k
rea-tool-designmorlutoAudit, investigate, design, or change REA investigation tools, CLI/MCP contracts, provider capabilities, and Evidence semantics. No issuesEngineeringDesign426k
reverse-engineer-anythingmorlutoReverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA, and build agent environments… No issuesEngineeringData & analytics426k
openclaw-release-validationopenclawGuide human release testing on an isolated OCM copy or approved in-place gateway, collect feedback, or refresh the release campaign. High riskEngineeringSales & marketing394k
finishing-a-development-branchobraUse when implementation is complete, all tests pass, and you need to decide how to integrate the work No issuesEngineering312k
receiving-code-reviewobraUse when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable… No issuesEngineering312k
requesting-code-reviewobraUse when completing tasks, implementing major features, or before merging to verify work meets requirements No issuesEngineeringProductivity312k
systematic-debuggingobraUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes No issuesEngineering312k
test-driven-developmentobraUse when implementing any feature or bugfix, before writing implementation code No issuesEngineeringWriting & content312k
using-git-worktreesobraUse when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated… No issuesEngineering312k
verification-before-completionobraUse when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands… No issuesEngineering312k
writing-plansobraUse when you have a spec or requirements for a multi-step task, before touching code No issuesEngineeringWriting & content312k
writing-skillsobraUse when creating new skills, editing existing skills, or verifying skills work before deployment Review findingsEngineeringWriting & content312k
superpowersobraCore skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques Review findingsEngineeringAI & agents312k
mattpocock-skillsmattpocockMatt Pocock's agent skills for real engineering: grilling, spec/ticket flows, TDD, code review, domain modelling and more. Plug-and-play,… Review findingsEngineeringAI & agents311k
code-reviewmattpocockReview the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does the code follow this repo's… No issuesEngineeringDocuments311k
codebase-designmattpocockShared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening… No issuesEngineeringDesign311k
diagnosing-bugsmattpocockDiagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something… No issuesEngineeringDocuments311k
domain-modelingmattpocockBuild and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a GLOSSARY.md, or recording or… No issuesEngineeringWriting & content311k
implement-specmattpocockImplement the result of /to-spec and /to-tickets in code. No issuesEngineering311k
improve-codebase-architecturemattpocockScan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick. No issuesEngineeringDocuments311k
researchmattpocockInvestigate a question against high-trust primary sources and capture the findings as a Markdown file in the repo. Use when the user wants… No issuesEngineeringResearch311k
retromattpocockConduct a retrospective on a coding session. No issuesEngineering311k
tddmattpocockTest-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants… No issuesEngineering311k
wizardmattpocockGenerate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting… No issuesEngineeringData & analytics311k
setup-ts-deep-modulesmattpocockWire dependency-cruiser into a TypeScript repo so each package is a deep module, with implementation hidden in subfolders and reachable… No issuesEngineering311k
git-guardrails-claude-codemattpocockSet up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user… No issuesEngineeringAI & agents311k
migrate-to-shoehornmattpocockMigrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in… Review findingsEngineeringData & analytics311k
scaffold-exercisesmattpocockCreate exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold… No issuesEngineering311k
setup-pre-commitmattpocockSet up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add… No issuesEngineering311k
grillingmattpocockGrill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill'… No issuesEngineeringProductivity311k
tdd-workflowaffaan-mTest-driven development workflow: write a failing test first, watch it fail, implement the smallest change to green, then refactor with… High riskEngineeringProductivity296k
github-opsaffaan-mGitHub repository operations, automation, and management. Issue triage, PR management, CI/CD operations, release management, and security… High riskEngineeringProductivity296k
ponytaildietrichgebertLazy senior dev mode for any coding task: the smallest change that fully solves it, and a reply a busy human understands in one read. No issuesEngineeringProductivity184k
ponytail-auditdietrichgebertQuality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most important first. No issuesEngineeringSecurity184k
ponytail-gaindietrichgebertShow ponytail measured impact as a scoreboard: less code, less cost, more speed, from the agentic benchmark averages. One-shot display. No issuesEngineeringAI & agents184k
ponytail-reviewdietrichgebertQuality review of a diff: bugs, security, real load, missing tests, speed, and what to delete. Each finding says what goes wrong and how… No issuesEngineeringSecurity184k
ponytaildietrichgebertLazy senior dev mode: the smallest change that fully solves the task, and a reply a busy human understands in one read. Use on any coding… No issuesEngineeringProductivity184k
ponytail-auditdietrichgebertQuality audit of a whole repo: bugs, security holes, what breaks under real load, risky code without tests, slow paths, and what to… No issuesEngineeringDocuments184k
ponytail-gaindietrichgebertShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail… No issuesEngineering184k
ponytail-reviewdietrichgebertQuality review of a change: is the logic right, is it safe, does it hold under real load, is risky code tested, is it fast enough, and is… No issuesEngineering184k
ui-stylingnextlevelbuilderCreate beautiful, accessible user interfaces with shadcn/ui components (built on Radix UI + Tailwind), Tailwind CSS utility-first styling,… Review findingsEngineeringDesign145k
commit-archaeologistshubhamsabooReconstructs why code exists from local git history, including the introducing commit, later changes, current authors, repeated companion… No issuesEngineeringAI & agents144k
dependency-doctorshubhamsabooChecks requirements.txt, pyproject.toml, and package.json dependency manifests for surface-level direct-dependency footguns:… No issuesEngineeringProductivity144k
first-readershubhamsabooBeta readers for any draft, run by simulating how a real reader experiences it, moment by moment. A skim gate, a no-lookahead timed read… No issuesEngineeringDocuments144k
project-graveyardshubhamsabooScans the developer's machine for dead side projects, autopsies each one from its git history (died at the payments wall, killed by a… No issuesEngineeringProductivity144k
scope-creep-detectorshubhamsabooAnalyzes git diffs against a stated intent to detect scope creep, unrelated files, broad pull requests, changes that grew beyond a fix,… No issuesEngineeringAI & agents144k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF