cuioss
186 verified skills880 total stars
manage-ci-artifacts
Persist CI run artifacts (logs + manifest) under the plan directory for offline retrospectives
testing5
ref-agentfile-hygiene
Agentfile context-hygiene rubric — objective criteria classifying every CLAUDE.md/AGENTS.md section as always-on-justified, demotable-to-skill, or inert/deletable, plus the always-on line budget and directory-tree anti-pattern; the shared source of truth for the recipe and the plugin-doctor backstop rules
tools5
ext-self-review-plan-marshall
Plan-marshall-domain implementor of the ext-self-review-{domain} extension point. Surfaces deterministic candidates (regexes, user-facing strings, markdown sections, symmetric-pair functions, flag-guard pairs, contract sources, schema-bearing files) for pre-submission structural self-review.
tools5
manage-adr
Manage Architectural Decision Records (ADRs) with CRUD operations, automatic numbering, and AsciiDoc formatting
development5
workflow-pr-doctor
Diagnose and fix PR issues (build, reviews, Sonar) — thin wrapper around verification-feedback with producer=pr-state
development5
lint-config
ESLint flat config, Prettier, and Stylelint configuration, rule customization, and build integration standards for JavaScript projects
development5
arch-gate-python
Use when running or interpreting the Python arch-gate — the import-linter-based architectural-fitness-function check that runs as a per-deliverable read-only structural-boundary gate and emits arch-constraint findings. A thin pointer to the central arch-gate model in plan-marshall:manage-architecture; carries only the Python/import-linter binding.
development5
oci-standards
Use when writing, reviewing, or debugging Dockerfiles and Containerfiles — covers base image selection, multi-stage builds, version pinning, .dockerignore (including excluding secrets from the build context), multi-platform builds, OCI labels, certificate management, secrets management (never embedding secrets in image layers, BuildKit build-time secrets, runtime secret injection), and Quarkus distroless health probes. Activate for any container image building or build-context hardening task.
development5
plugin-architecture
Architecture principles, skill patterns, and design guidance for building goal-based marketplace components
tools5
cui-javascript-project
JavaScript project structure, package.json configuration, dependency management, and Maven integration standards for consistent project setup and builds
development5
recipe-agentfile-hygiene
Domain-invariant cognitive sweep recipe that classifies every CLAUDE.md/AGENTS.md section against the shared ref-agentfile-hygiene rubric and emits one remediation deliverable per offending section
testing5
css
Modern CSS standards covering native nesting, cascade layers, Container Queries, custom properties, responsive design, accessibility, and PostCSS/Stylelint tooling
tools5
plan-marshall-plugin
JavaScript domain extension with skill domains, module applicability, and workflow integration
tools5
javascript-security
Use when reviewing or hardening JavaScript security — DOM trust boundaries, XSS sinks (innerHTML/outerHTML/insertAdjacentHTML), safe text rendering, sanitization (DOMPurify), and Trusted Types. The focused JavaScript security surface resolved via skills_by_profile.security; a thin pointer that delegates cross-cutting foundations upward to plan-marshall:persona-security-expert.
development5
jest-testing
JavaScript unit testing standards covering Jest framework, DOM and web component testing, mocking patterns, async testing, and coverage configuration
development5
java-quarkus
Quarkus-specific CDI standards with testing, native image support, GraalVM reflection configuration, and inbound REST input validation
development5
java-maintenance
Java code maintenance standards including prioritization, refactoring triggers, and compliance verification
development5
javadoc
JavaDoc documentation standards including class, method, and code example patterns
development5
java-lombok
Lombok patterns including @Delegate, @Builder, @Value, @Data, @UtilityClass for reducing boilerplate
tools5
arch-gate-js
Use when running or interpreting the JavaScript arch-gate — the dependency-cruiser-based architectural-fitness-function check that runs as a per-deliverable read-only structural-boundary gate and emits arch-constraint findings. A thin pointer to the central arch-gate model in plan-marshall:manage-architecture; carries only the JavaScript/dependency-cruiser binding.
development5
recipe-cui-logging-enforce
Recipe for enforcing CUI logging standards across all modules — migrate loggers, implement LogRecords, add test coverage
testing5
arch-gate-java
Use when running or interpreting the Java arch-gate — the ArchUnit-based architectural-fitness-function check that runs as a per-deliverable read-only structural-boundary gate and emits arch-constraint findings. A thin pointer to the central arch-gate model in plan-marshall:manage-architecture; carries only the Java/ArchUnit binding.
development5
plan-marshall-plugin
Python domain manifest for plan-marshall workflow integration
tools5
java-security
Use when reviewing or hardening Java application security — inbound input validation at trust boundaries, secure logging, secrets handling, startup configuration validation, and security anti-patterns. The focused Java security surface resolved via skills_by_profile.security; a thin pointer that delegates cross-cutting foundations upward to plan-marshall:persona-security-expert.
development5
junit-weld-testing
Weld Testing standards for CDI unit testing with @EnableAutoWeld, @AddBeanClasses, and auto-discovery patterns
testing5
oci-security
Use when hardening container runtime configuration, scanning for vulnerabilities, securing the image supply chain, or auditing against OWASP Docker Top 10. Covers capability dropping, read-only filesystems, image signing, SBOMs, and Trivy/Cosign/Syft workflows. Cross-references the cross-cutting foundations in plan-marshall:persona-security-expert.
testing5
python-security
Use when reviewing or hardening Python security — injection sinks (subprocess, eval/exec, unsafe deserialization, SQL), path-traversal prevention, and untrusted-input handling at stdlib boundaries. The focused Python security surface resolved via skills_by_profile.security; a thin pointer that delegates cross-cutting foundations upward to plan-marshall:persona-security-expert.
development5
junit-core
JUnit 5 core testing patterns with AAA structure, test organization, and coverage standards
testing5
python-core
Use when writing, reviewing, or refactoring Python 3.10+ code — covers type annotations, data structures, error handling, resource management, async patterns, naming conventions, and imports. Activate for any Python production code task. Also use when working with pathlib, dataclass, pydantic, match statements, or structural pattern matching, or when hardening untrusted input (secure subprocess, deserialization, eval, and SQL injection sinks).
development5
recipe-verify-architecture-diagrams
Recipe for verifying and updating PlantUML diagrams to reflect current codebase state and regenerating PNG images
development5
plan-marshall-plugin
Java domain extension with skill domains, module applicability, and workflow integration
tools5
recipe-verify-ascii-diagrams
Recipe for verifying and fixing alignment of ASCII box diagrams across .md skill source and .adoc documentation, one deliverable per offending file
testing5
junit-integration
Maven integration testing with Failsafe plugin, IT naming conventions, and profile configuration
tools5
persona-code-reviewer
Code-review persona that composes other personas as evaluation lenses
development5
recipe-simplify-codebase
Domain-invariant recipe for deliberate wide-scope simplification campaigns across a scope x thoroughness cell, with a T4+ relation-graph pre-deliverable
development5
recipe-code-review
On-demand code-review recipe that runs a diff-aware structural/quality review over the current footprint and emits lint-issue findings into the triage pipeline
development5
recipe-doc-verify
Recipe for verifying documentation quality across project — validates AsciiDoc format, links, and documentation drift
development5
untrusted-ingestion
The single shared contract every untrusted-external-content ingestion surface loads — reader/orchestrator/writer isolation, the deterministic validator script as the containment boundary, and the output-schema discipline for candidate structs parsed from web pages, GitHub issue/PR/comment bodies, and Sonar issue messages
development5
manage-references
Manage references.json files with field-level access and list management
tools5
ext-triage-java
Triage extension for Java findings during plan-finalize phase
tools5
manage-files
Generic file I/O operations for plan directories
tools5
tools-permission-fix
Write operations for fixing and managing host-platform permissions - add, remove, consolidate, ensure, apply-fixes, executor migration, wildcard generation.
tools5
tools-input-validation
Shared input validation module for plan-marshall scripts — validates plan IDs, file paths, enums, and skill notation
tools5
pytest-testing
Use when writing, reviewing, or debugging Python tests — covers pytest framework, AAA pattern, fixtures, parametrization, isolation, mocking, assertions, coverage configuration, and property-based / adversarial testing (Hypothesis). Activate for any Python testing task.
development5
persona-module-tester
Language-agnostic testing methodology covering AAA pattern, test structure, organization, coverage, property-based testing, test doubles, determinism, constructed-argv assertion at the lowest subprocess primitive, and real-resolver E2E testing for path-resolver/create side effects
testing5
manage-adr
Manage Architectural Decision Records (ADRs) with CRUD operations, progressive-disclosure metadata, scan-by-tag/affects, automatic numbering, and AsciiDoc formatting
development5
workflow-integration-git
Git commit workflow with conventional commits, artifact cleanup, optional push, and consolidated branch/worktree verbs (force-push, branch-sync-state parity, worktree lifecycle)
tools5
platform-runtime
Platform abstraction layer routing operations to Claude Code or OpenCode implementations
development5
cui-http-testing
CUI MockWebServer standards for HTTP testing with JUnit 5 — @MockResponseConfig setup, request verification, HTTPS/TLS testing, @ModuleDispatcher routing, timeout/resilience testing, and generator-driven adversarial attack-database testing (path/header/query)
development5
execute-task
Execute a single plan task with profile-based workflow selection (implementation, module_testing, verification)
testing5
ref-asciidoc
AsciiDoc formatting, validation, link verification, and template creation workflows
development5
cui-logging
CUI logging standards with CuiLogger, LogRecord patterns, and DSL-style LogMessages classes
tools5
cui-http
CUI HTTP standards for de.cuioss:cui-http — HttpHandler client configuration, HttpResult error handling, async adapters with ETag caching and resilient retry, custom content converters, SSL/TLS context, HTTP status classification, and inbound HTTP security input-sanitization (de.cuioss.http.security validation pipelines)
tools5
script-shared
Shared Python modules consumed by other plan-marshall scripts via PYTHONPATH
development5
recipe-lesson-cleanup
Domain-invariant recipe for converting a single lesson-learned into a slim, deterministic plan with surgical-style cascades
testing5
cui-testing
CUI test library standards for test data generation, value object contracts, and JUL log testing
development5
manage-logging
Unified logging infrastructure for script execution, work progress, and decision tracking across the plan, global, and main-anchored orchestrator stores
testing5
tools-file-ops
Base module providing reusable file operations patterns and parameterized store-root resolution (plans, orchestrator) for workflow scripts
tools5
cross-skill-references-test
Test skill with cross-skill reference notation
testing5
skill-no-refs
Skill without references directory
tools5
skill-with-noun-suffix
Fixture whose parent directory ends in -executor to trigger skill-naming-noun-suffix
tools5
code-block-examples-test
Test skill with example code blocks that should NOT be detected as real references
development5
test-skill
A test skill for README generation
testing5
test-skill
A test skill with existing references
testing5
persona-auditor
Audit persona that composes other personas as evaluation lenses across a wide scope
testing5
ref-documentation
Content quality, tone analysis, organization standards, and review orchestration for technical documentation
testing5
build-maven
Maven build operations — compile, test, verify with JaCoCo coverage and multi-module profile management
development5
manage-execution-manifest
Compose, read, and validate the per-plan execution manifest that drives Phase 5 verification and Phase 6 finalize step selection
testing5
phase-3-outline
Two-lane solution outline creation - light lane for bounded localized changes, deep lane for codebase-wide discovery
development5
phase-5-execute
Execute phase skill for plan management. Manifest-driven task runner that executes tasks from TASK-*.json files sequentially and runs the per-deliverable plus end-of-phase verification sweep from manifest.phase_5.verification_steps.
tools5
manage-tasks
Manage implementation tasks with sequential sub-steps within a plan
tools5
workflow-permission-web
Analyze and consolidate WebFetch domain permissions across projects with security research and validation
development5
javascript
Core JavaScript development standards covering ES modules, modern patterns, web component patterns (Lit), DOM trust boundaries / XSS prevention, code quality, async programming, JSDoc documentation, and tooling
tools5
plan-marshall-plugin
CUI JavaScript domain manifest for plan-marshall workflow integration
tools5
plan-marshall-plugin
Plugin development domain manifest with module discovery for plan-marshall workflow integration
tools5
manage-interface
Manage Interface specifications with CRUD operations, automatic numbering, and AsciiDoc formatting
development5
ref-ascii-diagrams
Authoring standards for ASCII box diagrams in skill and doc source — box-drawing conventions, right-border alignment, and a deterministic check/fix validator over fenced/literal code blocks in .md and .adoc files
development5
recipe-surgical-fix
Micro-lane recipe for a pre-diagnosed surgical fix — composes a deterministic surgical outline for a root-cause-known change bounded to a single module
testing5
manage-maven-profiles
Maven build profile classification and user workflow for unmatched profiles
development5
workflow-integration-sonar
SonarQube/SonarCloud provider - two pure verbs (fetch_findings files new-code issues to the ledger, post_responses transmits triaged dismissals) via the REST client
tools5
tools-marketplace-inventory
Scans and reports complete marketplace inventory (bundles, agents, commands, skills, scripts)
tools5
plugin-script-architecture
Script development standards covering implementation patterns, testing, and output contracts
tools5
plugin-maintain
Comprehensive maintenance skill for marketplace components - update components, manage knowledge, maintain READMEs, restructure, and apply orchestration compliance
tools5
phase-4-plan
Domain-agnostic task planning from deliverables with skill resolution and optimization
data-ai5
plugin-apply-lessons-learned
Apply accumulated lessons learned to component documentation
tools5
plan-doctor
Diagnose plan artifacts (TASK-*.json) for unresolved lesson-ID references and other plan-level data integrity defects
documentation5
extension-api
Extension API for domain bundle discovery, module detection, and canonical command generation
tools5
plugin-doctor
Diagnose and fix quality issues in marketplace components with automated safe fixes and prompted risky fixes
tools5
dev-agent-behavior-rules
Foundational agent behavior rules covering user interaction, tool usage, research, dependency management, and document proliferation
tools5
dev-general-code-quality
Language-agnostic code quality principles covering SRP, CQS, complexity thresholds, refactoring triggers, error handling, and documentation standards
development5
ref-narrative-styles
Reference library of narrative styles for technical documentation — tone, voice, and structural arc for the engineering-narrative, reference-spec, and tutorial-walkthrough styles
development5
setup
Standards for setting up requirements and specification documentation in new projects with proper directory structure and initial documents
testing5
manage-providers
Provider management for external tool authentication — secure storage, interactive configuration, and REST client infrastructure
tools5
recipe-fix-argparse-rejection
Remediation recipe for the exit_code=2 / argparse_rejection defect class — invented or paraphrased manage-* subcommands and flags that do not exist in the script's argparse choices
development5
recipe-security-audit
On-demand security-audit recipe that runs the shared five-stage audit engine over the current footprint and emits findings into the triage pipeline
testing5
verification-mode
Verification mode that stops and analyzes on failures, workarounds, or resolution issues
data-ai5
traceability
Standards for linking specifications to implementation code and maintaining bidirectional traceability between documentation and source code
development5
plugin-security
Use when reviewing or hardening the security of marketplace meta-project components — the Python script surface (subprocess, path traversal, environment trust, unvalidated config-key handling) and the markdown trust surface (new external-content ingestion that bypasses the untrusted-ingestion boundary, trust-boundary erosion, prompt-injection-susceptible prose). The plan-marshall-plugin-dev security surface resolved via skills_by_profile.security; owns the two marketplace-specific surfaces and delegates cross-cutting foundations upward to plan-marshall:persona-security-expert.
tools5
requirements-authoring
Comprehensive standards for creating and maintaining requirements and specification documents with SMART principles, proper structure, integrity, and traceability
testing5
manage-architecture
LLM-based architectural analysis that transforms raw project data into meaningful structure
data-ai5
manage-build-server
Operator control surface for the marshalld build server — enrol/drop a project in the machine-global registry (the opt-in enable signal and anti-laundering wall), manage the daemon lifecycle (start, stop, drain, status, install, upgrade) version-pinned to the verified bundle copy, and inspect the daemon's per-project interaction-audit log (read-only)
development5
manage-locks
Cross-session coordination primitives — the unified file-based merge mutex fronted by a FIFO admission queue for fair merge ordering, and the build-queue concurrency limiter, on one shared, TOCTOU-safe read-modify-write + plan-liveness core
development5
ext-triage-oci
Triage extension for OCI container findings during plan-finalize phase
tools5
build-gradle
Gradle build operations — Java/Kotlin builds with JaCoCo coverage, quality task detection, and multi-project discovery
development5
build-server-client
The tiny build-consumption client for the marshalld build server — submit a build job, bounded long-poll for its result, ping the daemon identity, and preflight registry-plus-liveness in one call; consumption only, never provisioning or enrolment
tools5
manage-config
Project-level infrastructure configuration for marshal.json
devops5
marshall-orchestrator
Resumable epic-orchestration skill - decomposes epics into workstreams and staged plans, emits ready-to-run /plan-marshall commands, tracks plan lifecycles, analyzes landings, owns the append-only inbox channel executing plans write their structured messages to, and reconciles the persisted orchestrator ledger; orchestrates, never implements
testing5
manage-plan-documents
Manage request documents within plan directories with schema validation and template-based creation
documentation5
marketplace/bundles/plan-marshall/skills/automatic-review
--- lane: class: adversarial cost_size: L name: automatic-review description: CI automated review — drives the pr-comment findings pipeline for the configured review bots user-invocable: true mode: workflow allowed-tools: Read, Bash, Skill order: 30 requires: [ci-complete] mutates_source: true default_on: true presets: - standard - full implements: - plan-marshall:extension-api/standards/ext-point-execution-context-workflow - plan-marshall:extension-api/standards/ext-point-finalize-s
tools5
manage-status
Manage status.json files with phase tracking, metadata, and lifecycle operations for plans, plus the lean kind=orchestrator status store for orchestrator epics
data-ai5
build-npm
npm/npx build operations — TypeScript, Jest, ESLint, TAP parsing with workspace discovery, per-file JS coverage analysis, and automatic npm/npx routing
development5
manage-terminal-title
Pure platform-agnostic terminal-title composition consumed by platform-runtime via PYTHONPATH — plan-scoped pm:{phase} bodies and orchestrator Orchestrator-{SlugName} bodies
development5
plan-marshall
Unified plan lifecycle management - create, outline, execute, verify, and finalize plans
testing5
phase-6-finalize
Complete plan execution with git workflow and PR management
tools5
persona-plan-marshall-agent
Foundational agent behavior rules covering user interaction, tool usage, research, dependency management, and document proliferation
tools5
manage-run-config
Run configuration handling for persistent command configuration storage
data-ai5
build-pyproject
Python/pyprojectx build operations — mypy type-checking, ruff linting, pytest with Cobertura coverage, and test-directory-based module discovery
development5
phase-1-init
Init phase skill. Creates plan directory, request.md, references, and status, runs the Tier 1 recipe-match routing tier (registry-wide recipe scoring + request-aspect classification) ahead of planning-lane routing. Runs inline in the orchestrator context to complete initialization.
testing5
plan-retrospective
Opt-in plan quality audit — analyzes artifacts, logs, metrics, chat, and invariants; compiles report and seeds lessons
development5
ext-triage-js
Triage extension for JavaScript findings during plan-finalize phase
tools5
ref-code-quality
Language-agnostic code quality principles covering SRP, CQS, complexity thresholds, refactoring triggers, error handling, and documentation standards
development5
manage-solution-outline
Manage solution outline documents - standards, examples, validation, and deliverable extraction
documentation5
parse-rewrite-log
Domain-owned OpenRewrite log-line finding parser for the java-cui domain — parses the
development5
search-markers
Domain-owned OpenRewrite marker detection for the java-cui domain — scans Java/Kotlin sources for cui-rewrite TODO markers, categorizes them by recipe, and fails the gate on any detected marker
development5
workflow-integration-gitlab
GitLab provider for MR review workflows — fetch comments, triage, and respond to review feedback via glab CLI
tools5
plan-marshall-plugin
CUI Java domain manifest for plan-marshall workflow integration
tools5
workflow-integration-github
GitHub provider for PR review workflows — three pure verbs (fetch_findings files comments to the ledger, post_responses transmits triaged dispositions, bot_completion reports a review bot's completion state) via gh CLI
tools5
ext-triage-plugin
Triage extension for marketplace plugin findings during plan-finalize phase
tools5
marshall-steward
Project configuration wizard for planning system. Manages executor generation, health checks, executor/config staleness signaling, build systems, skill domains, and the upgrade verb for one-flow post-change reconciliation.
development5
persona-marshall-orchestrator
Epic-orchestration persona — the work identity for decomposing epics into workstreams and plans, tracking plan lifecycles, analyzing landings, and reconciling the persisted orchestrator ledger; orchestrates, never implements
testing5
ext-triage-reqs
Triage extension for requirements findings during plan-finalize phase
tools5
ext-triage-python
Triage extension for Python findings during plan-finalize phase
tools5
tools-script-executor
Universal script execution pattern via execute-script.py proxy
tools5
ext-triage-docs
Triage extension for documentation findings during plan-finalize phase
tools5
manage-findings
Unified JSONL storage for plan-scoped findings, phase-scoped Q-Gate findings, and component assessments
data-ai5
ref-workflow-architecture
Centralized architecture documentation for the plan-marshall bundle with visual diagrams
documentation5
tools-integration-ci
CI provider abstraction with unified API for GitHub and GitLab operations (PR, issues, CI status, repo merge-queue)
tools5
plan-marshall-plugin
Build system module discovery consolidating Maven, Gradle, npm, and Python detection
tools5
manage-change-ledger
The single append-only change-ledger — one worktree_sha-stamped substrate for kind=build, kind=change, and kind=job entries — plus the first-class worktree-sha freshness API
development5
ext-self-review-plan-marshall
Plan-marshall-domain implementor of the ext-self-review-{domain} extension point. Surfaces deterministic candidates (regexes, user-facing strings, markdown sections, symmetric-pair functions, flag-guard pairs, contract sources, schema-bearing files, keep markers, producer-consumer pairs, source-of-truth duplicates, same-document normative directives, description-vs-body frontmatter, lone-unguarded-boundary calls, stale count-prose, near-identical-hunk touched claims, advertised-form help strings, same-document ordinal references) for pre-submission structural self-review.
tools5
plan-marshall-plugin
OCI container domain manifest for plan-marshall workflow integration
tools5
plugin-plan-implement
Implement plugin tasks from plan with step iteration and progress tracking
tools5
plugin-task-plan
Create implementation tasks from deliverables using skill delegation
tools5
java-core
Core Java development standards for patterns, modern features, and performance optimization. Inbound input validation at trust boundaries is owned by pm-dev-java:java-security
development5
plan-marshall-plugin
Documentation domain manifest for plan-marshall workflow integration
tools5
plugin-create
Create new marketplace components (agents, commands, skills, bundles) with proper structure and standards compliance
tools5
table-references-test
Test skill with table-format references
development5
ref-svg-diagrams
Authoring standards for SVG technical diagrams — uniform visual language, theme handling, AsciiDoc embedding, per-diagram-type patterns
testing5
planning
Standards for creating and maintaining project planning documentation with task tracking, status indicators, and traceability to requirements
documentation5
manage-lessons
Manage lessons learned with global scope
tools5
java-cdi
Core CDI patterns including constructor injection, scopes, producers, events, observers, and interceptors
development5
java-null-safety
JSpecify null safety annotations with @NullMarked, @Nullable, and package-level configuration
development5
phase-2-refine
Request clarification toward a confidence threshold via a single bounded operator escalation
tools5
dev-general-module-testing
Language-agnostic testing methodology covering AAA pattern, test structure, organization, coverage, property-based testing, test doubles, determinism, constructed-argv assertion at the lowest subprocess primitive, and real-resolver E2E testing for path-resolver/create side effects
development5
ext-outline-workflow
Shared workflow steps and verification knowledge for plugin development outline, loaded by phase-3-outline skill
tools5
plan-marshall-plugin
Requirements domain manifest for plan-marshall workflow integration
tools5
persona-security-expert
Security-expert persona — the work identity for security review and hardening, and the central authoritative home for cross-cutting security knowledge (OWASP Top 10, STRIDE, secrets, secure logging, trust boundaries, authn/authz, secure design)
development5
recipe-refactor-to-profile-standards
Domain-invariant recipe for refactoring code to comply with configured profile standards, package by package
development5
persona-documenter
Documentation persona — the work identity for authoring and maintaining project documentation
documentation5
persona-integration-tester
Integration-testing persona — the work identity for cross-component and end-to-end test authoring
testing5
persona-implementer
Production-code implementation persona — the work identity for building and modifying production code
development5
ref-toon-format
TOON format knowledge and usage patterns for agent communication and memory persistence in plan-marshall marketplace
development5
manage-metrics
Plan metrics collection and reporting for duration and token usage per phase
business5
manage-personas
Resolve a persona's composition DAG into a flat, deduped skills[] for dispatch
tools5
tools-permission-doctor
Diagnose permission issues across settings files (read-only analysis)
tools5
manage-worktree
Manage per-plan git worktrees under <project_root>/.claude/worktrees/
tools4
dev-general-practices
Foundational development practices covering user interaction, tool usage, research, dependency management, and document proliferation
tools4
tools-self-review
Deterministic candidate surfacing for pre-submission structural self-review (regexes, user-facing strings, markdown sections, symmetric-pair functions)
tools4
build-python
Python/pyprojectx build operations — mypy type-checking, ruff linting, pytest with Cobertura coverage, and test-directory-based module discovery
development4
finalize-step-plugin-doctor
Finalize-phase wrapper that runs plugin-doctor against skills touched by the plan, reading modified_files from references.json and passing skill paths directly via --paths
tools3
deploy
Build, deploy, and test NiFi E2E environment (Docker containers)
development3
manage-memories
Memory layer operations for persistent session storage
data-ai3
update-guide-screenshots
Verify NiFi custom UI tabs via Chrome and update doc/guides screenshots and guides
testing3
finalize-step-sync-plugin-cache
Finalize-phase wrapper that syncs marketplace bundles to the Claude plugin cache by delegating to the sync-plugin-cache skill
tools3
tools-permission-sync
Synchronize marketplace permissions - generate wildcards, manage executor permissions, and migrate to executor pattern.
tools2
manage-lifecycle
Plan lifecycle operations - discovery, phase transitions, archiving, and routing
tools2
recipe-plugin-compliance
Recipe skill that sweeps marketplace bundles for plugin architecture compliance
tools2
sync-plugin-cache
Synchronize all marketplace bundles to the Claude plugin cache
tools2
verify-workflow
Verify workflow outputs using hybrid script + LLM assessment
testing2
manage-assessments
Component evaluation storage with certainty/confidence assessments in JSONL persistence
data-ai2
task-implementation
Domain-agnostic implementation task execution with two-tier skill loading
data-ai2
task-standalone
Implement GitHub issues or standalone tasks with full verification
tools2
task-verification
Verification-only task execution — runs commands without modifying files
tools2
tools-permission-web
Analyze and consolidate WebFetch domain permissions across projects with security research and validation
tools2
task-module-testing
Domain-agnostic module testing task execution with two-tier skill loading
testing2
workflow-integration-ci
PR review response workflow - fetch comments, triage, and respond to review feedback (GitHub and GitLab)
testing2