Find the best CLAUDE.md, AGENTS.md and Claude skills

zebbernSkill

academic-paper-reviewer

zebbern/claude-code-guide/skills/academic-paper-reviewer/SKILL.md

Simulates academic peer review, evaluating papers across Originality, Methodology, Results, and Writing to provide Major/Minor Revision recommendations with actionable feedback. Triggers when a user asks to \"review my paper,\" \"simulate peer review,\" or \"give my paper a peer review.

Often used withacademic-pipeline·deep-research·academic-paper

zebbernSkill

active-directory-attacks

zebbern/claude-code-guide/skills/active-directory-attacks/SKILL.md

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

zebbernSkill

api-fuzzing-bug-bounty

zebbern/claude-code-guide/skills/api-fuzzing-bug-bounty/SKILL.md

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API penetration testing", "bug bounty API testing", or needs guidance on API security assessment techniques.

zebbernSkill

api-shape-explorer

zebbern/claude-code-guide/skills/api-shape-explorer/SKILL.md

Generate multiple radically different interface designs for a module using parallel sub-agents. Use when user wants to design an API, explore interface options, compare module shapes, or mentions "design it twice".

zebbernDeletes or force-pushesSkill

audit-flow

zebbern/claude-code-guide/skills/audit-flow/SKILL.md

Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document flow, security review, debug flow, brainstorm, architecture review, post-mortem, incident review.

zebbernReads credentialsSkill

authentication-patterns

zebbern/claude-code-guide/skills/authentication-patterns/SKILL.md

Authentication patterns: session vs JWT vs OAuth comparison, provider selection (NextAuth, Clerk, Supabase Auth), security checklist, and common mistakes. Use when implementing auth, reviewing auth flows, or choosing auth providers.

zebbernSkill

aws-penetration-testing

zebbern/claude-code-guide/skills/aws-penetration-testing/SKILL.md

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.

zebbernSkill

broken-authentication

zebbern/claude-code-guide/skills/broken-authentication/SKILL.md

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.

zebbernSkill

burp-suite-testing

zebbern/claude-code-guide/skills/burp-suite-testing/SKILL.md

This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.

zebbernReads credentialsSkill

caching

zebbern/claude-code-guide/skills/caching/SKILL.md

Caching strategies — invalidation, TTL guidelines, cache keys, cache layers, and when not to cache. Use when implementing or reviewing caching logic.

zebbernSkill

chart-image

zebbern/claude-code-guide/skills/chart-image/SKILL.md

Generate publication-quality PNG chart images from data, supporting line, bar, area, candlestick, pie, and heatmap charts. Triggers when the user asks to visualize data, create a graph, plot a time series, or generate a chart for a report, alert, or dashboard. Runs as a lightweight, headless Node.js process without a browser.

zebbernPipes a download into a shellSkill

cloud-penetration-testing

zebbern/claude-code-guide/skills/cloud-penetration-testing/SKILL.md

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

zebbernSkill

code-documenter

zebbern/claude-code-guide/skills/code-documenter/SKILL.md

Use when adding docstrings, creating API documentation, or building documentation sites. Invoke for OpenAPI/Swagger specs, JSDoc, doc portals, tutorials, user guides.

zebbernSkill

code-to-diagram

zebbern/claude-code-guide/skills/code-to-diagram/SKILL.md

Analyze codebases and automatically generate architecture diagrams, flowcharts, and org charts. Uses AST parsing to map import dependencies for Python, JS/TS, Go, and Java, outputting Mermaid or SVG files. Triggered when users ask to visualize code architecture, understand dependencies, draw a flowchart, or create a module diagram from source code.

zebbernSkill

code-vuln-audit

zebbern/claude-code-guide/skills/code-vuln-audit/SKILL.md

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection. Use when the user mentions security scans, vulnerability detection, secret leaks, API keys, OWASP, npm audit, pip-audit, hardcoded passwords, or code security checks.

zebbernAGENTS.md

claude-code-guide / composition-patterns

zebbern/claude-code-guide/skills/composition-patterns/AGENTS.md

Version 1.0.0 Engineering January 2026 Note: This document is mainly for agents and LLMs to follow when maintaining, generating, or refactoring React codebases using composition. Humans may also find it useful, but guidance here is optimized for automation and consistency by AI-assisted workflows. Composition patterns for building flexible, maintainable React components. Avoid boolean prop proliferation by using compound components, lifting state, and composing internals. These patterns make codebases easier for both humans and AI agents to work with as they…

zebbernSkill

vercel-composition-patterns

zebbern/claude-code-guide/skills/composition-patterns/SKILL.md

React composition patterns that scale. Use when refactoring components with

Often used withvercel-react-native-skills·building-components·deploy-to-vercel

zebbernSkill

cross-examine

zebbern/claude-code-guide/skills/cross-examine/SKILL.md

Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".

zebbernSkill

cv-tailor

zebbern/claude-code-guide/skills/cv-tailor/SKILL.md

Optimize resumes by matching keywords to the job description, rewriting experience with the quantified STAR method, and checking ATS compatibility. Triggered when users ask for resume help, review, or polishing, mention JD matching, STAR method, ATS, or want to tailor their resume for a specific role.

zebbernSkill

database-optimizer

zebbern/claude-code-guide/skills/database-optimizer/SKILL.md

Use when investigating slow queries, analyzing execution plans, or optimizing database performance. Invoke for index design, query rewrites, configuration tuning, partitioning strategies, lock contention resolution.

Often used withshopify-expert·monitoring-expert·fine-tuning-expert