Skills · category
Engineering skills and plugins
Public Claude skills and plugins for engineering, each with Waxell's security verdict and the findings behind it.
- 11,535 reviewed
- 8,333 no issues
- 2,885 to review
- 229 high risk
2,738 resultsEngineering
system-commandline-cliGitHubUse this skill when adding, modifying, or reviewing CLI commands in a .NET project built with System.CommandLine. Triggers include:… No issuesEngineeringProductivity41k- technology-stack-blueprint-generatorGitHubComprehensive technology stack blueprint generator that analyzes codebases to create detailed architectural documentation. Automatically… No issuesEngineeringDocuments41k
- terraform-azurerm-set-diff-analyzerGitHubAnalyze Terraform plan JSON output for AzureRM Provider to distinguish between false-positive diffs (order-only changes in Set-type… No issuesEngineeringData & analytics41k
- test-gap-auditGitHubRun a read-only audit for missing, weak, stale, or mis-scoped test coverage. If the user does not name a scope, audit the full repository… No issuesEngineeringLegal & compliance41k
- threat-model-analystGitHubFull STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single analysis,… No issuesEngineeringData & analytics41k
- tldr-promptGitHubCreate tldr summaries for GitHub Copilot files (prompts, agents, instructions, collections), MCP servers, or documentation from URLs and… No issuesEngineeringData & analytics41k
- typescript-mcp-server-generatorGitHubGenerate a complete MCP server project in TypeScript using the MCP TypeScript SDK v2 (@modelcontextprotocol/server) with tools, resources,… Review findingsEngineeringAI & agents41k
- typespec-api-operationsGitHubAdd GET, POST, PATCH, and DELETE operations to a TypeSpec API plugin with proper routing, parameters, and adaptive cards No issuesEngineering41k
- typespec-create-api-pluginGitHubGenerate a TypeSpec API plugin with REST operations, authentication, and Adaptive Cards for Microsoft 365 Copilot No issuesEngineeringSecurity41k
- unit-test-vue-piniaGitHubWrite and review unit tests for Vue 3 + TypeScript + Vitest + Pinia codebases. Use when creating or updating tests for components,… No issuesEngineeringWriting & content41k
- update-implementation-planGitHubUpdate an existing implementation plan file with new or update requirements to provide new features, refactoring existing code or… No issuesEngineeringProductivity41k
- update-specificationGitHubUpdate an existing specification file for the solution, optimized for Generative AI consumption based on new requirements or updates to… No issuesEngineeringAI & agents41k
- upstash-redisGitHubUse Redis over HTTP from serverless and edge runtimes with @upstash/redis, and add rate limiting with @upstash/ratelimit. Use when the… Review findingsEngineeringResearch41k
- v-developmentGitHubGuide GitHub Copilot through V language development: installing the toolchain, project layout with v.mod, building, testing, formatting,… No issuesEngineeringProductivity41k
- vardoger-analyzeGitHubUse when the user asks to personalize the GitHub Copilot CLI assistant, adapt Copilot to their style, use vardoger, or analyze their… Review findingsEngineeringData & analytics41k
- vcpkgGitHubGuide for setting up vcpkg in C++ projects, managing dependency versions, and cross-compiling. Covers manifest initialization, CMake and… No issuesEngineeringProductivity41k
- verify-agent-actionGitHubReview a proposed AI-agent action or human-approval packet before execution. Use when an agent wants to run a consequential tool, command,… No issuesEngineeringData & analytics41k
- vscode-ext-commandsGitHubGuidelines for contributing commands in VS Code extensions. Indicates naming convention, visibility, localization and other relevant… No issuesEngineering41k
- vscode-ext-localizationGitHubGuidelines for proper localization of VS Code extensions, following VS Code extension development guidelines, libraries and good practices No issuesEngineering41k
- web-design-reviewerGitHubThis skill enables visual inspection of websites running locally or remotely to identify and fix design issues. Triggers on requests like… No issuesEngineeringDesign41k
- webapp-testingGitHubToolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI… No issuesEngineeringResearch41k
- winmd-api-searchGitHubFind and explore Windows desktop APIs. Use when building features that need platform capabilities, camera, file access, notifications, UI… No issuesEngineeringResearch41k
- winui3-migration-guideGitHubUWP-to-WinUI 3 migration reference. Maps legacy UWP APIs to correct Windows App SDK equivalents with before/after code snippets. Covers… No issuesEngineeringProductivity41k
- workiq-copilotGitHubGuides the Copilot CLI on how to use the WorkIQ CLI/MCP server to query Microsoft 365 Copilot data (emails, meetings, docs, Teams, people)… Review findingsEngineeringData & analytics41k
- workshop-createGitHubCreate a new workshop or use an existing directory as one. Handles two paths: (A) use an existing local directory the operator points at,… No issuesEngineering41k
- write-coding-standards-from-fileGitHubWrite a coding standards document for a project using the coding styles from the file(s) and/or folder(s) passed as arguments in the prompt. No issuesEngineeringWriting & content41k
- x-twitter-scraperGitHubBuild GitHub Copilot workflows with Xquik X API SDKs, REST endpoints, hosted Apify Actor runs, MCP tools, TweetClaw OpenClaw plugin… No issuesEngineeringResearch41k
pr-labelingVercelClassify a skills CLI pull request from its description and patch, while respecting existing labels. No issuesEngineering38k- triageVercelIdentify focused, evidence-backed skills CLI bug fixes worth quuu's attention. No issuesEngineering38k
instrument-data-to-allotropeAnthropicConvert laboratory instrument output files (PDF, CSV, Excel, TXT) to Allotrope Simple Model (ASM) JSON format or flattened 2D CSV. Use… Review findingsEngineeringData & analytics35k- cowork-plugin-customizerAnthropicCustomize a Claude Code plugin for a specific organization's tools and workflows. Use when: customize plugin, set up plugin, configure… No issuesEngineeringProductivity35k
- create-vizAnthropicCreate publication-quality visualizations with Python. Use when turning query results or a DataFrame into a chart, selecting the right… No issuesEngineeringData & analytics35k
- data-visualizationAnthropicCreate effective data visualizations with Python (matplotlib, seaborn, plotly). Use when building charts, choosing the right chart type… No issuesEngineeringData & analytics35k
- statistical-analysisAnthropicApply statistical methods including descriptive stats, trend analysis, outlier detection, and hypothesis testing. Use when analyzing… No issuesEngineeringData & analytics35k
- design-handoffAnthropicGenerate developer handoff specs from a design. Use when a design is ready for engineering and needs a spec sheet covering layout, design… No issuesEngineeringDesign35k
- research-synthesisAnthropicSynthesize user research into themes, insights, and recommendations. Use when you have interview transcripts, survey results, usability… No issuesEngineeringDesign35k
- user-researchAnthropicPlan, conduct, and synthesize user research. Trigger with "user research plan", "interview guide", "usability test", "survey design",… No issuesEngineeringDesign35k
- engineeringAnthropicStreamline engineering workflows: standups, code review, architecture decisions, incident response, and technical documentation. Works… No issuesEngineeringProductivity35k
- code-reviewAnthropicReview code changes for security, performance, and correctness. Trigger with a PR URL or diff, "review this before I merge", "is this code… No issuesEngineeringData & analytics35k
- debugAnthropicStructured debugging session: reproduce, isolate, diagnose, and fix. Trigger with an error message or stack trace, "this works in staging… No issuesEngineering35k
- deploy-checklistAnthropicPre-deployment verification checklist. Use when about to ship a release, deploying a change with database migrations or feature flags,… No issuesEngineeringData & analytics35k
- documentationAnthropicWrite and maintain technical documentation. Trigger with "write docs for", "document this", "create a README", "write a runbook",… No issuesEngineeringDocuments35k
- standupAnthropicGenerate a standup update from recent activity. Use when preparing for daily standup, summarizing yesterday's commits and PRs and ticket… No issuesEngineeringProductivity35k
- system-designAnthropicDesign systems, services, and architectures. Trigger with "design a system for", "how should we architect", "system design for", "what's… No issuesEngineeringDesign35k
- tech-debtAnthropicIdentify, categorize, and prioritize technical debt. Trigger with "tech debt", "technical debt audit", "what should we refactor", "code… No issuesEngineering35k
- testing-strategyAnthropicDesign test strategies and test plans. Trigger with "how should we test", "test strategy for", "write tests for", "test plan", "what tests… No issuesEngineeringDesign35k
- audit-supportAnthropicSupport SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing… No issuesEngineeringFinance35k
- sox-testingAnthropicGenerate SOX sample selections, testing workpapers, and control assessments. Use when planning quarterly or annual SOX 404 testing,… No issuesEngineeringFinance35k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF