Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
chrome-extensionsamberBuild Chrome extensions with Manifest V3. Use this skill whenever the user mentions Chrome extension, browser extension, manifest.json,… Review findingsEngineeringResearch242- crxjssamberCRXJS Chrome extension development: true HMR for popup, options, content scripts, side panels, manifest-driven builds, dynamic content… Review findingsEngineeringProductivity242
- promql-clisamberCLI for querying Prometheus and PromQL-compatible engines (Thanos, Cortex, VictoriaMetrics, Grafana Mimir, Grafana Tempo...), instant… Review findingsEngineeringData & analytics242
- snyk-agent-scan-compliancesamberCompliance expert for snyk-agent-scan: the agent skill file scanner, NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac,… High riskEngineeringLegal & compliance242
better-auth-best-practicesbetter-authConfigure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use… Review findingsEngineeringSecurity229- create-authbetter-authScaffold and implement authentication in TypeScript/JavaScript apps using Better Auth. Detect frameworks, configure database adapters, set… Review findingsEngineeringSecurity229
opentuimsmpsOpenTUI skill for building terminal user interfaces with the Core, React, or Solid APIs. Use for any TUI task including components,… Review findingsEngineeringDesign229
fixed-income-sovereignjoellewisAnalyze US Treasury securities and interest rate risk: bond pricing, yield curve construction, duration, convexity, TIPS, and forward/spot… Review findingsEngineeringFinance220- forward-riskjoellewisEstimate potential future losses using VaR, Expected Shortfall, Monte Carlo simulation, and stress testing. Use when the user asks about… Review findingsEngineeringFinance220
resendresendSend and receive emails, build with React Email, follow deliverability best practices High riskEngineeringWriting & content209- react-emailresendUse when building HTML email templates with React components, adding a visual email editor to an application using the React Email visual… Review findingsEngineeringWriting & content209
- resendresendUse when working with the Resend email API: sending transactional emails (single or batch), receiving inbound emails via webhooks,… Review findingsEngineeringDocuments209
- resend-cliresendOperate the Resend platform from the terminal: send emails (including React Email .tsx templates via --react-email), manage domains,… Review findingsEngineeringDocuments209
coderabbitcoderabbitaiAI-powered code review in Claude Code, powered by CodeRabbit High riskEngineeringAI & agents208- code-reviewcoderabbitaiRun CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use… High riskEngineeringSecurity208
skywork-music-makerskyworkaiCreate professional music with Mureka AI API: songs, instrumentals, and lyrics from natural language descriptions in any language. Use… Review findingsEngineeringImages, video & audio207- Skywork-pptskyworkaiUse this skill when the user wants to work with PowerPoint presentations. Triggers include: - Generating a new PPT from a topic: 'generate… Review findingsEngineeringDocuments207
review-skillmongodbReview a proposed Agent Skill for structural validity and content quality before publishing. Runs the skill-validator CLI to check for… High riskEngineeringWriting & content195
sanitysanity-ioSanity plugin for Claude Code with MCP server, agent skills, agent rules, and slash commands. Review findingsEngineeringAI & agents195- portable-text-serializationsanity-ioRender and serialize Portable Text to React, Svelte, Vue, Astro, HTML, Markdown, and plain text. Use when implementing Portable Text… Review findingsEngineeringImages, video & audio195
- sanity-best-practicessanity-ioSanity development best practices for schema design, GROQ queries, TypeGen, Visual Editing, images, Portable Text, Studio structure,… Review findingsEngineeringData & analytics195
- sanity-migrationsanity-ioPlans, implements, and reviews migrations from other CMSes and content systems into Sanity. Use when migrating or replatforming to Sanity… Review findingsEngineeringData & analytics195
autoshipmblodeRuns a changesets npm release through the version PR, CI publish, and registry verification. Use when asked to "release this package",… Review findingsEngineeringAI & agents181- ci-speedupmblodeSpeeds up CI and the merge path: finds where changes wait between push and deploy, then fixes the critical path, check placement, merge… Review findingsEngineeringAI & agents181
- codebase-architecturemblodeDesigns module interfaces, deepens shallow modules, and installs enforceable repository guardrails and agent wayfinding. Use when asked to… Review findingsEngineeringAI & agents181
- scaffold-climblodeScaffolds a TypeScript CLI and npm package with the house toolchain, dual tsdown outputs, CLI contracts, changesets, and publishing… Review findingsEngineeringDocuments181
- scaffold-nextjsmblodeScaffolds a Next.js turborepo with Blode UI, icons, Ultracite (oxlint/shadcn), workspace hooks, and GitHub/Vercel setup. Use when asked to… Review findingsEngineeringDesign181
devcontainerjwyniaDiagnose devcontainer configuration problems and guide development environment setup. This skill should be used when the user asks to 'set… High riskEngineeringAI & agents180
design-doc-mermaidspillwavesolutionsCreate Mermaid diagrams (flowchart, sequence, class, ER, state, C4, architecture) from text or source code. Default for GitHub wiki. Use… Review findingsEngineeringDesign180
wonda-clidegausaiUsing the Wonda CLI to generate images, videos, music, and audio from the terminal, plus LinkedIn, Reddit, and X/Twitter research and… Review findingsEngineeringImages, video & audio159
adspower-browseradspowerAdsPower profile operation via adspower-browser CLI. open/launch/start browser or profile, environment, config profile, AdsPower;… Review findingsEngineeringResearch151
firecrawlfirecrawlSkills and MCP configuration for using the Firecrawl CLI and integrating Firecrawl scrape, search, and interact into apps and agents. Review findingsEngineeringResearch144- firecrawlfirecrawlAny live-web task via the Firecrawl CLI: including ordinary web research: searching the web, reading or extracting pages, gathering… Review findingsEngineeringResearch144
minerunebutraAn AI-Native skill for parsing PDF / Office / image files into clean Markdown with MinerU, a fast, zero-config document parser for AI… Review findingsEngineeringDocuments132- minerunebutraAn AI-Native skill for parsing PDF / Office / image files into Markdown with MinerU, a fast, zero-config document parser for AI agents.… Review findingsEngineeringDocuments132
mcp-builderdkyazzentwatwaPlan and build MCP servers with agent-friendly tools, schemas, error handling, and evaluation. Use when creating or refactoring MCP… Review findingsEngineeringProductivity128
agentic-walletcoinbaseCrypto wallet operations via the awal CLI: sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402… Review findingsEngineeringData & analytics127
convex-componentsigorwarzochaUse Convex Components to add isolated backend features and compose component APIs. Use for installing components, calling component APIs,… Review findingsEngineeringProductivity122- vite-shadcn-tailwind4igorwarzochaInitialize shadcn/ui + Tailwind CSS v4 in Vite projects (Vite-specific, not Next.js/Remix). Use proactively for Vite project setup, shadcn… Review findingsEngineeringDesign122
agent-cli-developertravisjneumanSpecialist subagent: Command-line tool development, argument parsing, interactive prompts, and terminal UI specialist. Use when building… High riskEngineeringAI & agents107
mastramastra-aiComprehensive Mastra framework guide for building agents, workflows, tools, memory, workspaces, and storage with current APIs. Use for… Review findingsEngineeringDocuments101
base44base44Build and deploy Base44 full-stack apps with CLI project management and JavaScript/TypeScript SDK development skills Review findingsEngineeringProductivity92- base44-clibase44The base44 CLI is used for EVERYTHING related to base44 projects: resource configuration (entities, backend functions, realtime actors, ai… Review findingsEngineeringProductivity92
- base44-sdkbase44The base44 SDK is the library to communicate with base44 services. In projects, you use it to communicate with remote resources (entities,… Review findingsEngineeringImages, video & audio92
parallelparallel-webSearch the web, read pages, research questions, and assess claims through Parallel's MCP server. Search, Fetch, and Decisions work without… Review findingsEngineeringResearch91- parallel-cli-setupparallel-webSet up and maintain the Parallel CLI (install, auth, balance, skills install) Review findingsEngineeringSecurity91
clerkclerkAdd authentication and user management with Clerk. Skills for setup, framework patterns, organizations, billing, webhooks, and testing,… High riskEngineeringFinance90- clerk-backend-apiclerkClerk Backend REST API explorer and executor. Browse tags, inspect endpoint schemas, and execute authenticated requests. Use when listing… High riskEngineeringResearch90
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF