Claude skills and agent skills

zebbernSkill

design-system-builder

zebbern/claude-code-guide/skills/design-system-builder/SKILL.md

Extract design systems from reference UI images and generate implementation-ready UI design prompts. Use when users provide UI screenshots/mockups and want to create consistent designs, generate design systems, or build MVP UIs matching reference aesthetics.

zebbernSkill

html-injection-testing

zebbern/claude-code-guide/skills/html-injection-testing/SKILL.md

This skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applications", or "test content injection vulnerabilities". It provides comprehensive HTML injection attack techniques and testing methodologies.

zebbernSkill

http-load-profiler

zebbern/claude-code-guide/skills/http-load-profiler/SKILL.md

Run stepped HTTP load tests with ab/wrk, ramping concurrency levels to collect p50/p90/p99 latency, detect performance inflection points, and recommend optimal concurrency. Triggered by requests like 'load test this URL', 'benchmark my API', 'find the max concurrency', or mentions of p99 latency, throughput saturation, or capacity planning.

zebbernSkill

idor-testing

zebbern/claude-code-guide/skills/idor-testing/SKILL.md

This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references," or "bypass authorization to access other users' data." It provides comprehensive guidance for detecting, exploiting, and remediating IDOR vulnerabilities in web applications.

zebbernPipes a download into a shellSkill

linux-privilege-escalation

zebbern/claude-code-guide/skills/linux-privilege-escalation/SKILL.md

This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". It provides comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems.

zebbernSkill

linux-shell-scripting

zebbern/claude-code-guide/skills/linux-shell-scripting/SKILL.md

This skill should be used when the user asks to "create bash scripts", "automate Linux tasks", "monitor system resources", "backup files", "manage users", or "write production shell scripts". It provides ready-to-use shell script templates for system administration.

zebbernSkill

localization-toolkit

zebbern/claude-code-guide/skills/localization-toolkit/SKILL.md

This skill should be used when setting up, auditing, or enforcing internationalization/localization in UI codebases (React/TS, i18next or similar, JSON locales), including installing/configuring the i18n framework, replacing hard-coded strings, ensuring en-US/zh-CN coverage, mapping error codes to localized messages, and validating key parity, pluralization, and formatting.

zebbernSkill

log-error-digest

zebbern/claude-code-guide/skills/log-error-digest/SKILL.md

Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports. Supports JSON, syslog, and Nginx formats with automatic detection. Use when a user uploads a .log file and asks to analyze errors, find patterns, debug issues, or get distribution stats.

zebbernSkill

metasploit-framework

zebbern/claude-code-guide/skills/metasploit-framework/SKILL.md

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.

zebbernSkill

network-101

zebbern/claude-code-guide/skills/network-101/SKILL.md

This skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.

zebbernSkill

nextjs-developer

zebbern/claude-code-guide/skills/nextjs-developer/SKILL.md

Use when building Next.js 14+ applications with App Router, server components, or server actions. Invoke for full-stack features, performance optimization, SEO implementation, production deployment.

zebbernSkill

pentest-checklist

zebbern/claude-code-guide/skills/pentest-checklist/SKILL.md

This skill should be used when the user asks to "plan a penetration test", "create a security assessment checklist", "prepare for penetration testing", "define pentest scope", "follow security testing best practices", or needs a structured methodology for penetration testing engagements.

zebbernSkill

playwright-ci

zebbern/claude-code-guide/skills/playwright/ci/SKILL.md

Production-ready CI/CD configurations for Playwright — GitHub Actions, GitLab CI, CircleCI, Azure DevOps, Jenkins, Docker, parallel sharding, reporting, code coverage, and global setup/teardown.

zebbernSkill

playwright-core

zebbern/claude-code-guide/skills/playwright/core/SKILL.md

Battle-tested Playwright patterns for E2E, API, component, visual, accessibility, and security testing. Covers locators, assertions, fixtures, network mocking, auth flows, debugging, and framework recipes for React, Next.js, Vue, and Angular. TypeScript and JavaScript.

zebbernSkill

playwright-migration

zebbern/claude-code-guide/skills/playwright/migration/SKILL.md

Step-by-step migration guides for moving to Playwright from Cypress or Selenium/WebDriver — command mappings, architecture changes, and incremental adoption strategies.

zebbernSkill

playwright-cli

zebbern/claude-code-guide/skills/playwright/playwright-cli/SKILL.md

Automates browser interactions for web testing, form filling, screenshots, and data extraction using playwright-cli. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, extract information from web pages, mock network requests, manage browser sessions, or generate test code.

Often used withfabric-sdk·schema-discovery·app-validation

zebbernSkill

playwright-pom

zebbern/claude-code-guide/skills/playwright/pom/SKILL.md

Page Object Model patterns for Playwright — when to use POM, how to structure page objects, and when fixtures or helpers are a better fit.

zebbernSkill

playwright-skill

zebbern/claude-code-guide/skills/playwright/SKILL.md

Battle-tested Playwright patterns for E2E, API, component, visual, accessibility, and security testing. Covers locators, fixtures, POM, network mocking, auth flows, debugging, CI/CD (GitHub Actions, GitLab, CircleCI, Azure, Jenkins), framework recipes (React, Next.js, Vue, Angular), and migration guides from Cypress/Selenium. TypeScript and JavaScript.

zebbernSkill

project-sizing-guide

zebbern/claude-code-guide/skills/project-sizing-guide/SKILL.md

Software project effort estimation assistant. Outputs three-point estimates (optimistic/most-likely/pessimistic values with confidence intervals), T-shirt sizes, or Function Point Analysis (FPA) counts. Triggered when users ask 'how long will this feature take,' need to assess project workload, perform PERT estimation, T-shirt sizing, FPA, sprint planning, or quote-based effort breakdowns.

zebbernSkill

r2-upload

zebbern/claude-code-guide/skills/r2-upload/SKILL.md

Upload files to Cloudflare R2, AWS S3, or any S3-compatible storage (like MinIO) and generate secure, time-limited presigned download links with configurable expiration, typically set to 5 minutes. Use when the user needs to upload a file to cloud storage and get a shareable link, or mentions R2, S3, presigned URLs, temporary links, or file uploads with expiration.