A curated collection of skills for Claude Code and Codex — specialized capabilities across development, design, AI, security, and more. Part of the cdd.dev/skills family.
npx skills add https://github.com/ckorhonen/claude-skills --skill security-best-practicesInstallez cette compétence avec la CLI et commencez à utiliser le flux de travail SKILL.md dans votre espace de travail.
A collection of skills for Claude Code and Codex that extend agent capabilities with specialized knowledge and workflows.
Two tightly-scoped packs also live at cdd.dev/skills. Same install convention (npx skills add ckorhonen/<repo>):
swe: skills for engineering judgment work: PR risk review, repo introspection, performance and security audits, incident follow-up, ownership maps. Invoked in conversation.hone: skills that run on a cadence (daily, weekly, per-PR) to fight code entropy: method brevity, naming clarity, duplication, broken-windows detection.This repo is the broad collection — wider in scope, more varied in purpose.
Here are some skills I've found useful for various projects I've been building. Would love feedback if anyone else finds them useful—have at it! If you're interested in some of my writings on AI and software development, follow me at CDD.dev.
Skills are located in the skills/ directory.
agent-browserHeadless browser automation using agent-browser CLI with element refs optimized for AI agents
Scrape a product catalog with accessibility trees instead of CSS selectorsAutomate a multi-step checkout form submissionRun parallel browser sessions to test race conditions in a web appagent-engineeringBattle-tested engineering principles for AI coding agents — plan-first workflow, subagent delegation, self-improvement loops, and verification gates
Set up a plan-first coding workflow that prevents agents from writing code before the design is approvedCreate a self-improvement loop that benchmarks agent performance and iterates on promptsBuild a verification gate that runs tests before any commit is acceptedbabysit-prCreate, monitor, and shepherd a GitHub pull request through CI, review, merge, and best-effort deployment validation
Open a PR that respects the repo's PR template and required reviewer assignmentsWatch CI after each push and summarize failures with fix suggestionsHandle review comments from Greptile and re-request review after fixes are pushedbird-fastInteract with X/Twitter from the terminal using bird CLI with browser session authentication
Post a thread announcing a new open-source release from a scriptSearch for mentions of a product and summarize sentimentSchedule daily tweets from a content queueceo-reviewReview documents and proposals through a CEO lens — technical depth, data-driven decisions, and long-term strategic vision
Review a product spec for whether it aligns with the 3-year platform visionCritique an engineering proposal on ROI and competitive positioningEvaluate a go-to-market plan for defensibility and market timingck-reviewReview documents and proposals through the lens of a senior principal engineer — clarity, pragmatism, and shipping velocity
Review an architecture decision record for over-engineering and hidden complexityCritique a technical spec for ambiguous requirements that will block implementationEvaluate a proposed API design for consistency with existing conventionscodex-advisorGet second opinions from OpenAI Codex CLI for plan reviews, code reviews, and hard problems
Get a second opinion on an implementation plan before starting a large refactorValidate security assumptions in a cryptographic moduleUnblock a tricky bug you've been stuck on for 30+ minutescoreml-optimizerOptimize CoreML models for iOS and macOS deployment with quantization, palettization, pruning, and Neural Engine targeting
Optimize a CoreML model for iPhone 15 Pro Neural Engine with 4-bit palettizationProfile inference latency with Instruments and identify Neural Engine fallbacksDebug accuracy degradation after applying 8-bit quantization to a vision modelcto-reviewReview through a CTO lens — platform thinking, mobile-first craft, and iterative execution
Review a microservices architecture proposal for platform leverage and team scalabilityCritique a mobile app design for offline-first patterns and battery impactEvaluate a technical roadmap for sequencing risk and iterative milestonesgithub-actions-templatesCreate production-ready GitHub Actions workflows for automated testing, building, and deploying
Create a CI/CD pipeline for a monorepo with Nx that only re-tests affected packagesSet up a matrix build for a cross-platform Electron app on macOS, Windows, and LinuxBuild a deploy workflow with blue/green environment promotion and rollbackios-app-testerTest iOS apps using AXe CLI for accessibility auditing, UI automation, and simulator control
Automate a complete onboarding flow test in the iOS Simulator using accessibility identifiersAudit an app for VoiceOver label gaps and generate a remediation reportRecord a test execution video for a critical user journey to attach to a bug reportmacos-appsBuild professional native macOS apps in Swift with SwiftUI and AppKit, CLI-only without Xcode
Build a native macOS menu bar app with SwiftUI and a persistent popoverIntegrate an AppKit NSTableView into a SwiftUI view for complex data displaySet up a Swift Package Manager project with unit tests and a release build pipelinemcp-testerTest and evaluate MCP server tools in the current session — auditing, validation, and test case generation
Audit all tools exposed by an MCP server for schema correctness and edge case handlingGenerate a comprehensive test suite for a new MCP server before shipping itValidate that an MCP server returns structured errors rather than stack traces for bad inputssystematic-debuggingSystematic approach to debugging bugs, test failures, and unexpected behavior before proposing fixes
Reproduce a flaky test failure deterministically before touching any codeIsolate whether a performance regression is in the database layer or application codeTrace a production 500 error back to its root cause using logs and minimal reproductionascii-pixel-artTransform images into animated ASCII art with subject detection, blurred backgrounds, and cinematic effects (pulse, shine, flicker, hover)
Convert a portrait photo into an animated ASCII art piece with phosphor glowGenerate a retro cyberpunk visualization of a city skyline with scanline effectsCreate an interactive web art piece with hover-triggered ASCII animationevangelion-designEvangelion-inspired NERV-like command-center interfaces with sharp geometry, tactical typography, and danger-first palettes
Build a real-time monitoring dashboard styled after NERV's command center with warning-red accentsDesign a terminal UI with sharp hexagonal geometry and alert-state color progressionsCreate a login screen with tactical HUD typography and animated scan-line overlaysgemini-image-generatorGenerate images using Google Gemini API for text-to-image, editing, and multi-image reference
Generate a set of consistent app icons in a flat design style from a text briefCreate marketing banner variants for A/B testing with different color schemesProduce game sprite sheets for a 2D platformer based on character descriptionsgemini-visualFront-end development assistant powered by Google Gemini for UI analysis, design comparison, and screenshot-to-code
Convert a Figma screenshot into production-ready HTML/CSS with accurate spacing and typographyCompare before/after design mockups and identify all layout regressionsExtract a full color palette and typography scale from a brand screenshotimagegenGenerate and edit images via the OpenAI Image API with a bundled CLI
Generate product photography variants on white backgrounds for an e-commerce listingInpaint a person out of a stock photo and replace with a branded backgroundBatch-generate 10 social media card variants from a template descriptionnano-bananaGenerate and edit AI images using Google's Gemini 3 Pro Image model via MCP
Create an illustration for a blog post from a detailed text descriptionEdit a product photo to change the background to an outdoor settingGenerate a logo concept from a brand brief with multiple style variationspractical-typographyProfessional typography guidance based on Matthew Butterick's Practical Typography
Audit a marketing landing page for line-length, leading, and font-pairing violationsChoose a type system for a long-form reading app that maximizes legibilityFix a PDF template that uses body text for headings and has inconsistent spacingshadertoyGLSL fragment shaders and procedural graphics for Shadertoy and WebGL
Write a raymarched SDF scene with ambient occlusion and soft shadows in GLSLImplement a procedural noise-based animated background for a website hero sectionPort a Shadertoy effect to a Three.js ShaderMaterial for a WebGL projectskimmableEnforce code readability and state minimisation before PRs — reduce arguments, remove optionality, and make diffs shorter
Refactor a function with 8 parameters into a well-named options object before opening a PRRemove optional state flags that have been defaulting to the same value for 6 monthsShrink a 400-line diff by extracting pure helper functions into a separate moduletui-designerDesign and implement retro/cyberpunk/hacker-style terminal UIs with CRT effects, neon glow, and scanlines
Build a terminal-aesthetic dashboard in React with Tuimorphic including CRT scanline and phosphor glow effectsImplement a hacker-style progress screen in SwiftUI using Metal shaders for real-time noiseDesign a cyberpunk color palette and typography system for a CLI toolui-designOpinionated constraints for building better interfaces — Tailwind, motion/react, Radix/Base UI, and accessibility
Build an accessible modal dialog with Radix UI and Tailwind that traps focus and announces to screen readersAdd enter/exit animations to a sidebar nav using Framer Motion without layout jankAudit a form for WCAG 2.1 AA compliance and generate a fix listapp-marketing-copyApp Store/Google Play listings, ASO keywords, taglines, screenshot captions, ad copy, landing page copy, and email campaigns
Write a 4000-character App Store description for a productivity app with keyword-optimized headersGenerate 10 screenshot caption variants for A/B testing the onboarding flow screensCraft a launch email sequence (3 emails) for a new iOS app releasecontent-trend-researcherAnalyze trends across Google Analytics, Trends, Substack, Medium, Reddit, LinkedIn, X, and more for data-driven content strategy
Research rising search trends in the "developer tools" niche to plan a quarter's content calendarAnalyze competitor Substack newsletters for topics that drive high engagementGenerate article outlines ranked by search intent and estimated traffic potentialdirect-mail-strategistExpert direct mail marketing strategist for copywriting, design, and measurement
Write a 6×9 postcard mailer for a SaaS product targeting SMB owners with a 30-day trial offerDesign a measurement plan with holdout groups for a 50,000-piece mailingCritique a draft letter for response rate optimization using proven direct mail frameworksfreshdesk-apiFreshdesk helpdesk API for building integrations, managing tickets, contacts, and automating support workflows
Build a webhook integration that auto-creates Freshdesk tickets from Stripe payment failure eventsWrite a script to bulk-close all tickets older than 90 days with a resolved statusCreate a dashboard that pulls open ticket counts by product area via the APIpoke-assistantSend messages and notifications to Poke via webhook API
Notify yourself when a 2-hour model training job completes on a remote serverSend an alert when a production health check fails with a link to the incident dashboardDeliver a daily build summary with pass/fail counts and a link to the CI reportpoplar-direct-mailDesign and send programmatic direct mail using Poplar's HTML templates and API
Build a triggered postcard campaign that mails to users 3 days after they abandon a shopping cartCreate a personalized HTML letter template with dynamic first-name and offer fieldsIntegrate Poplar's API into a CRM workflow to send win-back mailers to churned customersseo-optimizerAnalyze HTML/CSS websites for SEO optimization and implement best practices
Audit a marketing site for missing meta descriptions, duplicate title tags, and broken canonical URLsAdd structured data (JSON-LD) for a recipe blog to enable rich results in Google SearchGenerate a sitemap.xml and robots.txt for a Next.js static siteautopredictPolymarket prediction market trading agent framework — scan markets, evaluate edges, backtest strategies, and tune parameters
Scan all open Polymarket markets and rank by estimated edge vs. current oddsBacktest a news-momentum strategy against 3 months of resolved marketsTune confidence threshold parameters to maximize Sharpe ratio on historical tradeshyperagentSelf-referential self-improving agent loop — meta-agent modifies task-agent code to optimize any measurable target (based on Facebook Research Hyperagents paper)
Set up a hyperagent loop that iteratively improves a code generation agent's pass@1 score on HumanEvalRun a self-improving prompt optimizer that rewrites its own system prompt based on eval feedbackBuild a meta-agent that tunes a classification pipeline to minimize false positives on a labeled datasetllm-advisorConsult other LLMs (GPT-5.2, GPT-5, Gemini 3) for second opinions on complex problems
Get GPT-5 and Gemini's independent assessments of a distributed systems design before committing to itCompare how three frontier models approach a tricky regex edge caseUse a cross-model vote to decide between two competing database schema designsllm-evaluationImplement comprehensive evaluation strategies for LLM applications using automated metrics, human feedback, and benchmarking
Build an automated eval harness for a RAG pipeline using RAGAS metrics (faithfulness, relevance, context recall)Set up a human preference labeling workflow for comparing two prompt variants at scaleCreate a regression benchmark that alerts when a model update degrades performance on golden test casesmcp-builderGuide for creating high-quality MCP servers in Python (FastMCP) or Node/TypeScript
Build a FastMCP server that wraps the Stripe API with typed tool schemas and proper error handlingCreate a TypeScript MCP server that exposes a PostgreSQL database as queryable toolsDesign a multi-tool MCP server for a SaaS product's internal APIs with auth middlewarepaperclipInteract with Paperclip control plane API for task management, agent coordination, and goal tracking
Create and assign tasks to a fleet of specialized agents via the Paperclip APIQuery goal completion status across multiple running agent sessionsCoordinate a multi-agent workflow where downstream agents are triggered by upstream task completionsprompt-factoryGenerate production-ready mega-prompts across 15 professional domains with quality validation
Generate a system prompt for a customer support agent with escalation rules, tone guidelines, and refusal policiesCreate a code review prompt tuned for a TypeScript/React codebase with team-specific conventionsProduce XML-formatted prompts optimized for Claude with chain-of-thought and output schemablockchain-auditorSecurity audit smart contracts for exploitable vulnerabilities from an unprivileged context
Audit a Solidity DEX contract for reentrancy vulnerabilities and flash loan attack surfacesAnalyze an ERC-20 token contract's bytecode for hidden mint/burn backdoorsGenerate a PoC exploit for an integer overflow in an AMM pricing function and test it on a local forksecurity-best-practicesLanguage and framework-specific security reviews for Python, JavaScript/TypeScript, and Go
Review a Python FastAPI service for SQL injection, SSRF, and insecure deserialization vulnerabilitiesAudit a Node.js Express app for prototype pollution and path traversal issuesGenerate a secure-by-default configuration checklist for a new Go microservicesecurity-threat-modelRepository-grounded threat modeling with trust boundaries, assets, attacker capabilities, and mitigations
Generate a STRIDE threat model for a multi-tenant SaaS API with enumerated abuse paths and mitigationsDocument trust boundaries for a mobile app that handles PII and payment dataWrite a threat model document for an OAuth 2.0 integration covering token theft and PKCE bypass scenarioscloudflare-managerComprehensive Cloudflare account management for Workers, KV, R2, Pages, DNS, and Routes
Deploy a Cloudflare Worker with KV storage for edge-side session cachingConfigure DNS records and route rules for a multi-origin application behind CloudflareSet up an R2 bucket with a Worker proxy for private asset serving with signed URL supportgoogleGoogle Workspace assistant via gog CLI — Gmail, Calendar, Drive, Sheets, Tasks, and Contacts
Draft and send a Gmail message with an attachment pulled from Google DriveCreate a recurring Google Calendar event for a weekly team standup with video linkUpdate a Google Sheet with the latest data from a CSV export and share it with a teammarkdown-fetchFetch web content as clean Markdown via markdown.new — 80% fewer tokens than raw HTML
Fetch the Stripe API documentation for webhook events as clean Markdown for analysisConvert a competitor's pricing page to Markdown to compare tier structuresRetrieve a GitHub README as Markdown to summarize a library's featuressubway-infoReal-time NYC subway information via subwayinfo.nyc REST API
Check real-time arrival times for the A train at West 4th StreetGet current service alerts for the L line before commutingFind the nearest station to a given address and show live departuresgsplat-optimizerOptimize 3D Gaussian Splat scenes for real-time rendering on iOS, macOS, and visionOS using Metal
Analyze a 2M-splat .ply file and generate a pruning plan targeting 60fps on iPhone 15Design a LOD scheme for a visionOS experience that switches between detail levels based on distanceBenchmark a Gaussian splat scene with Instruments and identify Metal shader bottlenecksvideo-editorExpert guidance for video editing with ffmpeg, encoding best practices, and quality optimization
Transcode a 4K ProRes file to H.265 with optimal CRF settings for streaming deliveryHardsub an SRT subtitle file onto an MP4 while preserving HDR metadataBatch-convert a folder of MKV files to MP4 with AAC audio for web compatibilityopensea-apiInteract with OpenSea's NFT marketplace API for metadata, listings, and events
Fetch all NFTs owned by a wallet address with their current floor price estimatesTrack real-time sales events for a collection to alert on significant tradesPull collection stats (volume, floor, holders) for a competitive market analysis reportplaydate-devBuild Playdate games in Lua with the Playdate SDK, including game loop, sprites, graphics, input (crank, buttons, accelerometer), and simulator workflow
Build a Playdate puzzle game where the crank controls a rotating mechanism to solve each levelImplement a sprite-based platformer with parallax scrolling on the 1-bit displaySet up a pdxinfo manifest and Simulator build pipeline for submitting to the CatalogautoresearchRun rigorous autonomous experiment loops with explicit hypotheses, repeated trials, structured logs, and local HTML reports
Run 20 iterations of a prompt variant test with structured win/loss logging and a final HTML reportBenchmark two embedding models on a retrieval task with statistical significance testingIterate on a hyperparameter sweep for a classification pipeline with keep/discard decisions per runqmdLocal hybrid search for markdown notes and docs
Search a local Obsidian vault for notes related to "authentication patterns" using semantic + keyword hybrid searchFind all notes that mention a specific project name across a large document collectionRetrieve the most relevant design decisions from a markdown wiki for a given technical questionscientific-critical-thinkingEvaluate research rigor including methodology, experimental design, statistical validity, and biases
Apply GRADE criteria to assess the evidence quality of a clinical study before sharing its findingsIdentify p-hacking and HARKing in a published machine learning paperCritique the experimental design of an A/B test report for confounds and underpoweringcontinuous-learningAuto-monitors interactions to identify learning opportunities and create new skills when patterns repeat
Detect recurring database migration patterns across sessions and auto-generate a migration skillSurface a gap in agent capabilities after three failed attempts at the same task typePropose and scaffold a new skill file when a workflow has been manually repeated 3+ timesidea-mdCreate or expand
Idea.md/IDEA.mdfiles from rough descriptions, repo context, conversation history, or notes
Turn a brainstorm or chat transcript into a durable concept brief before writing a PRDExpand a rough idea draft into a structured document with problem, users, MVP, and validation stepsCreate a repo-grounded Idea.md that reflects existing packages, constraints, and technical leveragebrainstormingStructured exploration of user intent, requirements, and design before implementation
Explore 5 alternative architectures for a feature before picking one to implementScope a vague "add notifications" request into specific user stories and acceptance criteriaMap out edge cases and failure modes for a payment flow before writing a line of codeexecuting-plansExecute written implementation plans in separate sessions with review checkpoints
Run a 12-step database migration plan with a checkpoint after each destructive operationExecute a feature rollout plan across three services with rollback gates between each deploymentImplement a refactoring plan that touches 20 files with progress tracking and diff review at each checkpointwriting-plansCreate implementation plans from specs or requirements before touching code
Turn a 2-page product spec into a phased implementation plan with clear task dependencies and time estimatesCreate an architecture plan for a new microservice that sequences schema, API, and client workDecompose a "migrate from REST to GraphQL" initiative into safe, reviewable milestonesskill-finderProactively discover, install, and create skills from the claude-plugins.dev registry
Install the right skill for an unfamiliar domain on-demand using a "matrix kung-fu" style requestDiscover and compare three candidate skills for a task before selecting the best fitCreate a custom skill when no existing registry match covers a recurring workflowSome skills in this collection originate from external projects:
Design skills (adapt, animate, audit, bolder, clarify, colorize, critique, delight, distill, extract, frontend-design, harden, normalize, onboard, optimize, polish, quieter, teach-impeccable, ui-design) — From Impeccable Design. Systematic, opinionated UI/UX design constraints for building better interfaces with agents. Install the full set from their site.
App Store Connect skills (asc-*) — From app-store-connect-cli-skills by Rudrank Riyam. Skills for managing the full iOS/macOS release pipeline via the asc CLI.
Install any skill with skills.sh:
# Interactive — browse and select skills to install
npx skills add ckorhonen/claude-skills
# Install a specific skill directly
npx skills add ckorhonen/claude-skills --skill <skill-name>
Copy the skill folder to the appropriate location:
# Project-level (share with team via version control)
cp -r skills/<skill-name> /path/to/project/.claude/skills/
# User-level (available across all projects)
cp -r skills/<skill-name> ~/.claude/skills/
cp -r skills/<skill-name> ~/.codex/skills/
To add a new skill:
skills/ with your skill name (use kebab-case)SKILL.md file with YAML frontmatter:---
name: your-skill-name
description: Brief description of what the skill does
---
# Skill Title
Your skill documentation here...
MIT License - see LICENSE for details.