Find the best CLAUDE.md, AGENTS.md and Claude skills

allanninalSkill

pr-review

allanninal/claude-code-skills/skills/pr-review/SKILL.md

Review pull request for code quality, security, performance, and best practices. Use when reviewing PRs, checking code before merge, or providing feedback.

Often used withpr-fix

allanninalSkill

receiving-code-review

allanninal/claude-code-skills/skills/receiving-code-review/SKILL.md

Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation

Often used withchinese-code-review·diagnosing-superpowers·requesting-code-review

allanninalSkill

requesting-code-review

allanninal/claude-code-skills/skills/requesting-code-review/SKILL.md

Use when completing tasks, implementing major features, or before merging to verify work meets requirements

Often used withchinese-code-review·diagnosing-superpowers·workflow-runner

allanninalSkill

root-cause-tracing

allanninal/claude-code-skills/skills/root-cause-tracing/SKILL.md

Trace execution errors to their original triggers using systematic debugging techniques. Use when debugging complex issues, investigating production errors, or analyzing failure chains.

allanninalSkill

ruzzy

allanninal/claude-code-skills/skills/ruzzy/SKILL.md

Ruzzy is a coverage-guided Ruby fuzzer by Trail of Bits. Use for fuzzing pure Ruby code and Ruby C extensions.

allanninalSkill

sarif-parsing

allanninal/claude-code-skills/skills/sarif-parsing/SKILL.md

Parse, analyze, and process SARIF (Static Analysis Results Interchange Format) files. Use when reading security scan results, aggregating findings from multiple tools, deduplicating alerts, extracting specific vulnerabilities, or integrating SARIF data into CI/CD pipelines.

allanninalSkill

secure-workflow-guide

allanninal/claude-code-skills/skills/secure-workflow-guide/SKILL.md

Guide you through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. (project, gitignored)

allanninalSkill

semgrep-rule-creator

allanninal/claude-code-skills/skills/semgrep-rule-creator/SKILL.md

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.

allanninalSkill

semgrep-rule-variant-creator

allanninal/claude-code-skills/skills/semgrep-rule-variant-creator/SKILL.md

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.

allanninalSkill

semgrep

allanninal/claude-code-skills/skills/semgrep/SKILL.md

Run Semgrep static analysis for fast security scanning and pattern matching. Use when asked to scan code with Semgrep, write custom YAML rules, find vulnerabilities quickly, use taint mode, or set up Semgrep in CI/CD pipelines.

allanninalSkill

sentry-commit

allanninal/claude-code-skills/skills/sentry-commit/SKILL.md

Create commits following Sentry conventions - meaningful messages, atomic changes, and proper formatting. Use when making git commits.

allanninalSkill

sentry-find-bugs

allanninal/claude-code-skills/skills/sentry-find-bugs/SKILL.md

Find bugs and security vulnerabilities in code changes. Use when analyzing branch changes, reviewing diffs, or hunting for defects.

allanninalSkill

sharp-edges

allanninal/claude-code-skills/skills/sharp-edges/SKILL.md

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.

allanninalSkill

skill-creator

allanninal/claude-code-skills/skills/skill-creator/SKILL.md

Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.

Often used withtaskflow-inbox-triage·community-led-growth·session-logs

allanninalSkill

slack-gif-creator

allanninal/claude-code-skills/skills/slack-gif-creator/SKILL.md

Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack.

Often used withacademy-guide·skill-share·raffle-winner-picker

allanninalSkill

solana-vulnerability-scanner

allanninal/claude-code-skills/skills/solana-vulnerability-scanner/SKILL.md

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs. (project, gitignored)

allanninalSkill

spec-kit-skill

allanninal/claude-code-skills/skills/spec-kit-skill/SKILL.md

GitHub Spec-Kit integration for constitution-based spec-driven development. 7-phase workflow. Triggers: "spec-kit", "speckit", "constitution", "specify", ".specify/", "规格驱动开发", "需求规格".

allanninalSkill

spec-to-code-compliance

allanninal/claude-code-skills/skills/spec-to-code-compliance/SKILL.md

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.

allanninalSkill

subagent-driven-development

allanninal/claude-code-skills/skills/subagent-driven-development/SKILL.md

Use when executing implementation plans with independent tasks in the current session

Often used withchinese-code-review·diagnosing-superpowers·webhook-subscriptions

allanninalSkill

substrate-vulnerability-scanner

allanninal/claude-code-skills/skills/substrate-vulnerability-scanner/SKILL.md

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets. (project, gitignored)