Skills tagged validation: 63 agent skills for Claude Code

• agents-harden — Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle.
• agents-pay — Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments.
• analytics — When the user wants to set up, improve, or audit analytics tracking and measurement.
• asr-transcribe-to-text — Transcribe audio/video to speaker-labeled text — who-said-what by default, plain-text opt-out; MLX-local on Apple Silicon or remote; local files, media URLs.
• aws-cloudformation — Authors, validates, and troubleshoots AWS CloudFormation templates.
• aws-database — Routes any task involving AWS databases — choosing, comparing, recommending, getting started with.
• aws-iam — Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits.
• aws-sdk-js-v3-usage — AWS SDK for JavaScript v3 development patterns.
• aws-sdk-python-usage — AWS SDK for Python (boto3/botocore) development patterns. You MUST use this skill when writing Python code that uses AWS services via boto3 or botocore.
• aws-sdk-swift-usage — AWS SDK for Swift development patterns. Use when writing Swift code that uses AWS services via aws-sdk-swift package.
• aws-security — Covers AWS security services and workflows — Security Hub V2 (OCSF) findings, connectors, aggregators, automation rules, and security posture summaries.
• claude-skills-troubleshooting — Diagnose and resolve Claude Code plugin and skill issues. json.
• codex-1m-context-window-setup — Configures and verifies an expanded, model-aware context window for OpenAI Codex CLI and Codex Desktop by safely updating the shared base config.
• debugging-network-issues — Investigates network, streaming, and protocol failures with falsification-first layered experiments.
• deep-research — Generate format-controlled research reports with evidence tracking, citations, source governance, and multi-pass synthesis.
• devils-advocate — 结构化压力测试一个论点（devil's advocate / 魔鬼代言人）：把论点拆成显性断言与隐性假设（A1/A2 编号）， 逐条在用户给定的证据材料里检索带出处的反方论证，标 High/Medium/Low 风险等级，补基础比率外部视角， 最后给出「可监测的证伪信号」清单；输出结构化 findings +.
• diff-scanning-with-aws-security-agent — Run a fast AWS Security Agent diff scan on only the changed code since a git ref.
• doc-to-markdown — Converts DOCX/PDF/PPTX to high-quality Markdown with automatic post-processing.
• docs-cleaner — Consolidates redundant documentation while preserving all valuable content; keeps a doc set truthful after things change.
• docx-creator — docx) and export existing Word/WPS manuscripts to PDF (Word 转 PDF / 试读版 / 排版修复), preserving revisions, tables and images.
• fact-checker — Verifies factual claims in documents using web search and official sources, then proposes corrections with user confirmation.
• fixing-claude-export-conversations — txt), reconstructing tables, paragraphs, paths, and tool calls that were hard-wrapped at fixed column widths.
• fp-check — Systematically verifies suspected security bugs to eliminate false positives.
• github-review-pr — Reviews or re-reviews one contributor pull request—including an explicitly named closed PR being reconsidered—or a bounded newest-to-oldest sweep of all open.
• i18n-expert — This skill should be used when setting up, auditing, or enforcing internationalization/localization in UI codebases (React/TS, i18next or similar.
• marketplace-health-check — Run a full 6-dimension health check of this Claude Code skills marketplace repo — code/script safety, documentation/SSOT consistency, security/PII leaks.
• openclaw — Manage OpenClaw (龙虾) instance configurations.
• pentesting-with-aws-security-agent — Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain.
• post-patch-validation — Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation.
• prior-work-retrieval — Only for explicit prior-work/reuse/history requests; never for read-only status or inspection.
• prompt-optimizer — Transform vague prompts into precise, well-structured specifications using EARS (Easy Approach to Requirements Syntax) methodology.
• promptfoo-evaluation — Configures and runs LLM evaluation using Promptfoo framework.
• property-based-testing — Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.
• qa-expert — This skill should be used when establishing comprehensive QA testing processes for any software project.
• read-docx-review — 读取 Word/WPS 审阅后的 docx，把批注（comments）与修订（track changes）提取成可逐条裁决的 markdown 对账表或 JSON。触发场景：对方批注完的合同/协议/书稿/报告回来了要读意见；「提取 docx 批注」「审阅意见对账」「读一下修订」「谁批了什么、批在哪」；WPS.
• remediating-with-aws-security-agent — Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.
• resilience-hub-failure-mode-assessment — Runs and interprets AWS Resilience Hub v2 failure mode assessments.
• resilience-hub-getting-started — Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys.
• scanning-with-aws-security-agent — Run an AWS Security Agent scan on the workspace — uploads the source to AWS, scans it with the managed Security Agent service, and returns ranked.
• schema — When the user wants to add, fix, or optimize schema markup and structured data on their site.
• seo — Comprehensive SEO analysis for any website or business type.
• seo-content — Content quality and E-E-A-T analysis with AI citation readiness assessment.
• seo-drift — SEO drift monitoring: capture baselines of SEO-critical elements, detect changes, and track regressions over time.
• seo-geo — Optimize content for AI Overviews (formerly SGE), ChatGPT web search, Perplexity, and other AI-powered search experiences.
• seo-hreflang — Hreflang and international SEO audit, validation, and generation.
• seo-images — Image optimization analysis for SEO and performance.
• seo-local — Local SEO analysis covering Google Business Profile optimization, NAP consistency, citation health, review signals, local schema markup, location page quality.
• seo-page — Deep single-page SEO analysis covering on-page elements, content quality, technical meta tags, schema, images, and performance.
• seo-programmatic — Programmatic SEO planning and analysis for pages generated at scale from data sources.
• seo-schema — org structured data. JSON-LD format preferred. Use when user says "schema", "structured data", "rich results", "JSON-LD", or "markup".
• seo-sitemap — Analyze existing XML sitemaps or generate new ones with industry templates. Validates format, URLs, and structure.
• seo-technical — Technical SEO audit across 9 categories: crawlability, indexability, security, URL structure, mobile, Core Web Vitals, structured data, JavaScript rendering.
• sharp-edges — Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.
• skill-governance — Govern the real Claude Code and Codex Skill surface without losing cold capability.
• skill-reviewer — Reviews and improves Claude Code skills against official best practices.
• stitch::react-components — Converts Stitch designs into modular Vite and React components, or syncs/updates existing React components to align with the latest Stitch designs.
• terminal-screenshot — Render a terminal CLI program's colored output to a PNG so Claude can actually SEE the real visual result — color contrast, alignment, background blocks.
• threat-modeling-with-aws-security-agent — Run an AWS Security Agent threat model review on spec/design documents. md for security posture changes, or STRIDE analysis.
• tibo-reset-codex — 查询 ChatGPT/Codex 重置公告及多个 Pro 账号的剩余额度、备用 Full reset；复用 Google 登录逐个核实并恢复网页账号，换算北京时间。区分 Tibo 官宣、未官宣的平台静默重置、banked reset 与账户级周期重置。Use when.
• transcript-fixer — Corrects speech-to-text transcription errors with dictionary rules and Claude's built-in AI (no external API key required).
• video-comparer — This skill should be used when comparing two videos to analyze compression results or quality differences.
• web-perf — Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.
• wycheproof — Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH.