Skills tagged code-quality: 63 agent skills for Claude Code

• antfu — Anthony Fu's opinionated tooling and conventions for JavaScript/TypeScript projects.
• audit-context-building — Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.
• audit-prep-assistant — Prepares codebases for security review using Trail of Bits' checklist.
• aws-transform — Performs code upgrades, migrations, and transformations using the AWS Transform (ATX) CLI.
• c-review — Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.
• check-compiler-errors — Run compile and type-check commands and report failures
• claude-md-progressive-disclosurer — Optimize, slim, or restructure CLAUDE.md/AGENTS.md with progressive disclosure and zero information loss. Use when the user explicitly asks to audit, 精简, 瘦身.
• code-improver — Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names.
• code-maturity-assessor — Systematic code maturity assessment using Trail of Bits' 9-category framework.
• code-reviewer — Analyzes code diffs and files to identify bugs, security vulnerabilities (SQL injection, XSS, insecure deserialization), code smells, N+1 queries.
• codebase-design — Shared vocabulary for designing deep modules.
• constant-time-analysis — Detects timing side-channel vulnerabilities in cryptographic code.
• deslop — Remove AI-generated code slop and clean up code style
• deslop-shared-libs — Find worthwhile shared-code extractions in recent work. (gstack)
• differential-review — Performs security-focused differential review of code changes.
• dimensional-analysis — Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling.
• docs-cleaner — Consolidates redundant documentation while preserving all valuable content; keeps a doc set truthful after things change.
• dwarf-expert — Analyzes DWARF debug information in compiled binaries.
• emil-design-eng — This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.
• expo-migrate-module — Framework (OSS). Migrate an existing Apple/Swift Expo native module from the Expo Modules API 1.0 definition DSL to the 2.0 macro API (sometimes called v2).
• genotoxic — Graph-informed mutation testing triage.
• gstack-openclaw-retro — Weekly engineering retrospective. Analyzes commit history, work patterns, and code quality metrics with persistent history and trend tracking.
• harness-writing — Designs and improves fuzzing harnesses for C/C++ and Rust.
• health — Code quality dashboard. (gstack)
• improve-animations — Survey a codebase's animation and motion code as a senior motion advisor.
• migrate-to-shoehorn — Migrate test files from `as` type assertions to @total-typescript/shoehorn.
• modern-cpp — Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or working on security-critical C++.
• modern-python — Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip/Poetry/mypy/black.
• mutation-testing — Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps.
• pr-improver — Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean.
• principle-encode-lessons-in-structure — Apply when you catch yourself writing the same instruction a second time, or notice a recurring correction.
• principle-laziness-protocol — Apply when refactoring, evaluating diff size, or tempted to add abstractions, layers, or signal threading.
• principle-minimize-reader-load — Apply when reviewing or shaping code that's hard to trace.
• principle-subtract-before-you-add — Apply when sequencing an addition, refactor, or rewrite. Remove dead code, redundant validators, and stub references first, then build on the simpler base.
• principle-test-behavior-not-implementation — Apply when you write, change, or keep a test. Call the code the way its users do and assert the result they observe against a literal expected value.
• principle-type-system-discipline — Apply when designing types, reviewing a function signature, or writing code in any statically-typed language.
• property-based-testing — Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.
• python-pro — Use when building Python 3.11+ applications requiring type safety, async programming, or robust error handling. Generates type-annotated Python code.
• reflect — Spawn three parallel review subagents over the active transcript, surface learnings, and route each to a concrete edit on an existing skill.
• remediating-with-aws-security-agent — Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.
• review-animations — Reviews animation and motion code against a high craft bar derived from Emil Kowalski's design engineering philosophy. Default to flagging; approval is earned.
• rust-engineer — Writes, reviews, and debugs idiomatic Rust code with memory safety and zero-cost abstractions.
• rust-review — Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS.
• safe-refactor — Restructure code while preserving behavior. Use for extraction, consolidation, ownership moves, or cleanup where verification must bracket structural edits.
• semgrep-rule-creator — Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.
• semgrep-rule-variant-creator — Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages.
• setup-ts-deep-modules — Wire dependency-cruiser into a TypeScript repo so each package is a deep module.
• skill-improver — Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger.
• skill-reviewer — Reviews and improves Claude Code skills against official best practices.
• slicing-code-context — Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent.
• spec-miner — Reverse-engineering specialist that extracts specifications from existing codebases.
• spec-to-code-compliance — Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent.
• stitch::code-to-design — Convert frontend code (Vite, React, Angular, Vue, etc.) to a Stitch Design by chaining static HTML extraction, design system extraction.
• stitch::extract-design-md — Extract a comprehensive design system (DESIGN.md) directly from frontend source code — React, Vue, Svelte, Angular, plain HTML/CSS.
• test-audit — Find low-value or duplicate tests and the test-only code they keep alive. (gstack)
• thermo-nuclear-code-quality-review — Run an extremely strict maintainability review for abstraction quality, giant files, and spaghetti-condition growth.
• typescript-best-practices — TypeScript best practices. Use when reading or editing any .ts or .tsx file.
• typescript-pro — Implements advanced TypeScript type systems, creates custom type guards, utility types, and branded types, and configures tRPC for end-to-end type safety.
• variant-analysis — Hunts for the other instances of a bug already found — the variants of one root cause across a codebase.
• vue-best-practices — MUST be used for Vue.js tasks. Strongly recommends Composition API with `<script setup>` and TypeScript as the standard approach. Covers Vue 3, SSR, Volar.
• workers-best-practices — Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.
• write-swift — How to write modern Swift well — modeling with value types, Swift 6 data-race safety and approachable concurrency (@concurrent, main-actor-by-default, actors.
• writing-lean-proofs — Writes and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions.