Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
chatgpt-app-buildershubhamsabooDEPRECATED: This skill has been replaced by `mcp-app-builder`. Check if `mcp-app-builder` is available in the skills folder. If not,… No issuesEngineeringDesign144k- mcp-apps-buildershubhamsaboo**MANDATORY for ALL MCP server work** - mcp-use framework best practices and patterns. **READ THIS FIRST** before any MCP server work,… No issuesEngineeringDesign144k
migrate-radix-to-baseshadcn-uiMigrates React projects and components from Radix UI to Base UI. Use when asked to migrate from radix, move to base-ui, convert radix… No issuesEngineeringDesign127k- shadcnshadcn-uiManages shadcn components and projects: adding, searching, fixing, debugging, styling, and composing UI, including chat interfaces.… Review findingsEngineeringDesign127k
browser-usebrowser-useDirect browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work. Also covers hosted… No issuesEngineeringResearch120k- cloudbrowser-useDocumentation reference for using Browser Use Cloud, the hosted API and SDK for browser automation. Use this skill whenever the user needs… High riskEngineeringResearch120k
- open-sourcebrowser-useDocumentation reference for writing Python code using the browser-use open-source library. Use this skill whenever the user needs help… High riskEngineeringResearch120k
- qabrowser-useQA-test a website or web app and return a 1-5 quality score (5 = flawless, 1 = broken) with evidence. Use when the user wants to test, QA,… High riskEngineeringResearch120k
- remote-browserbrowser-useControls an isolated Browser Use Cloud browser from a sandboxed machine with the current Browser Use CLI. No issuesEngineeringResearch120k
- x402browser-useSet up Browser Use Cloud payments with x402: pay per request from a crypto wallet (USDC on Base mainnet), no signup or API key. Two setups… Review findingsEngineeringResearch120k
cavecrewjuliusbrusseeWhen to delegate to `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit) or `cavecrew-reviewer` (diff review) instead… No issuesEngineeringResearch117k- caveman-statsjuliusbrusseeShow recorded output and cache-read token usage and mode attribution for the current Claude Code session, or locate the host's native… No issuesEngineeringDocuments117k
- cavecrewjuliusbrusseeWhen to delegate to `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit) or `cavecrew-reviewer` (diff review) instead… No issuesEngineeringResearch117k
- caveman-commitjuliusbrusseeWrite a Conventional Commits message compressed to intent only. Use for "write a commit", "commit message", /commit or /caveman-commit. No issuesEngineeringWriting & content117k
- caveman-discoverjuliusbrusseeFind and label every LLM workflow in the repository so Caveman Cloud groups spend by workflow instead of one bucket. Use for "discover… No issuesEngineeringFinance117k
- caveman-explorejuliusbrusseeRead-only repository explorer for cold-start orientation, broad cross-file localization, or when a direct search failed. Skip it when the… No issuesEngineeringResearch117k
- caveman-reviewjuliusbrusseeCompressed code review - one line per finding with location, problem and fix. Use for /caveman-review, "review this PR", or "review the… No issuesEngineering117k
- caveman-setupjuliusbrusseeWire a repository through the Caveman Cloud gateway so every LLM request is measured, with no behavior change. Use for "set up caveman" or… No issuesEngineeringFinance117k
- caveman-statsjuliusbrusseeShow recorded output and cache-read token usage and mode attribution for the current Claude Code session, or locate the host's native… No issuesEngineeringDocuments117k
- lean-buildjuliusbrusseeBuild feature work with high overbuilding risk. Use for new behavior, product slices, or integrations where repository reuse, strict… No issuesEngineering117k
- migrationjuliusbrusseeImplement reversible compatibility-safe transitions. Use for schema, data, API, protocol, configuration, or dependency migrations… No issuesEngineeringData & analytics117k
- safe-refactorjuliusbrusseeRestructure code while preserving behavior. Use for extraction, consolidation, ownership moves, or cleanup where verification must bracket… No issuesEngineering117k
- surgical-patchjuliusbrusseeFix bugs and small behavior changes at the narrowest responsible layer. Use when regression proof, preserved surrounding behavior, and… No issuesEngineeringProductivity117k
agent-skillsaddyosmaniProduction-grade engineering skills for AI coding agents, covering the full software development lifecycle from spec to ship. Review findingsEngineeringAI & agents113k- api-and-interface-designaddyosmaniGuides stable API and interface design. Use when designing APIs, module boundaries, or any public interface. Use when creating REST or… No issuesEngineeringDesign113k
- browser-testing-with-devtoolsaddyosmaniTests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to… No issuesEngineeringResearch113k
- ci-cd-and-automationaddyosmaniAutomates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality… No issuesEngineeringSales & marketing113k
- code-review-and-qualityaddyosmaniConducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human.… No issuesEngineeringAI & agents113k
- code-simplificationaddyosmaniSimplifies code for clarity. Use when refactoring code for clarity without changing behavior. Use when code works but is harder to read,… No issuesEngineeringAI & agents113k
- constraint-driven-developmentaddyosmaniEstablishes a project's quality bar as a written contract and stops agents quietly lowering it. Interviews the user on which dimensions… Review findingsEngineeringAI & agents113k
- debugging-and-error-recoveryaddyosmaniGuides systematic root-cause debugging. Use when tests fail, builds break, something that worked yesterday broke, behavior doesn't match… No issuesEngineeringAI & agents113k
- deprecation-and-migrationaddyosmaniManages deprecation and migration. Use when removing old systems, APIs, or features. Use when migrating users from one implementation to… No issuesEngineeringData & analytics113k
- documentation-and-adrsaddyosmaniRecords decisions and documentation. Use when you need to document an architecture decision (ADR) or the reasoning behind a design choice,… No issuesEngineeringDocuments113k
- doubt-driven-developmentaddyosmaniSubjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption… No issuesEngineeringSecurity113k
- frontend-ui-engineeringaddyosmaniBuilds production-quality, accessible, responsive user-facing UIs. Use when building or modifying interfaces and pages, creating… No issuesEngineeringDesign113k
- git-workflow-and-versioningaddyosmaniStructures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, splitting… No issuesEngineeringProductivity113k
- idea-refineaddyosmaniRefines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague,… No issuesEngineeringProductivity113k
- incremental-implementationaddyosmaniDelivers changes incrementally in thin, verifiable slices. Use when implementing any feature or change that touches more than one file, or… No issuesEngineeringProductivity113k
- interview-meaddyosmaniExtracts what the user actually wants instead of what they think they should want. Achieves this through one-question-at-a-time interview… No issuesEngineeringProductivity113k
- observability-and-instrumentationaddyosmaniInstruments code so production behavior is visible and diagnosable. Use when adding logging, metrics, tracing, or alerting. Use when… No issuesEngineeringData & analytics113k
- performance-optimizationaddyosmaniOptimizes application performance across frontend, backend, queries, and databases. Use when performance requirements exist, when you… No issuesEngineeringData & analytics113k
- shipping-and-launchaddyosmaniPrepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use… No issuesEngineeringProductivity113k
- source-driven-developmentaddyosmaniGrounds every implementation decision in official documentation. Use when you want to verify an approach against the official docs before… No issuesEngineeringDocuments113k
- spec-driven-developmentaddyosmaniCreates specs before coding. Use when starting a new project, feature, or significant change and no specification exists yet. Use when… No issuesEngineeringDocuments113k
- test-driven-developmentaddyosmaniDrives development with tests using the red-green-refactor loop. Use when implementing any logic, fixing any bug, or changing any… No issuesEngineeringDocuments113k
Agent Cost ReportthedotmackBelievable agent cost report for any period, default the last 7 full days PT, not counting today. Measured tokens from Claude Code… Review findingsEngineeringDocuments112k- claude-memthedotmackMemory compression system for Claude Code - persist context across sessions High riskEngineeringDocuments112k
- Agent Cost ReportthedotmackBelievable agent cost report for any period, default the last 7 full days PT, not counting today. Measured tokens from Claude Code… Review findingsEngineeringDocuments112k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF