laravel-specialist

An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: api, database, laravel, php, testing, web.

What it does

Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers, implementing Sanctum auth flows, building Livewire components, optimising Eloquent queries, or writing Pest/PHPUnit tests for Laravel features.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add Jeffallan/claude-skills --skill laravel-specialist

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/laravel-specialist ~/.claude/skills/laravel-specialist

Safety box score

Grade B, low risk: 19 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a documentation-only Laravel skill: it mainly tells the agent to generate and edit app code, migrations, routes, tests, and queue/config files, then run Artisan and test commands. The main risks are ordinary code execution within the project, plus references to queue/cloud credentials and remote services; there are no binaries or system-level install steps.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	1 (low)	It explicitly directs the agent to run project commands such as `php artisan make:model`, `php artisan migrate:status`, `php artisan route:list`, `php artisan queue:work --once`, and `php artisan test`, which execute local application code and tests.
Network access	1 (low)	The queue reference configures remote backends and cloud-facing integration points (`SQS`, `Redis`, Horizon, and `Http::fake` for external APIs), so implementations can contact remote services through the app.
Filesystem reach	1 (low)	The skill is meant to create and modify Laravel source across `app/`, `database/`, `routes/`, `resources/`, `tests/`, and `config/`, with examples like `php artisan make:model` and edits to `config/horizon.php`.
Secrets & credentials	1 (low)	`references/queues.md` includes secret-backed env vars such as `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`, so the agent may wire credentials into app configuration, though it does not access keychains or stored logins.
Privilege & persistence	0 (none)	There is no use of `sudo`, service registration, shell startup edits, or other privilege-changing behavior.
Instruction hijack surface	0 (none)	The files do not instruct the agent to ignore higher-priority rules, hide actions, or fetch and follow remote prompt content.
Irreversible actions	1 (low)	It covers queued jobs, workers, and data-mutating examples like `destroy(Post $post)` and `$post->images()->delete()`, which can change application state, but it does not autonomously publish, pay, deploy, or message outside the app.
Transparency	0 (none)	All shipped files are plain markdown with readable code snippets; there are no binaries, obfuscated blobs, or downloaded installers.

Before installing

Read `references/queues.md` and `config/queue.php` snippets first if you do not want SQS/Redis-backed queue wiring.
Try it in a scratch Laravel app and confirm `php artisan test` and migrations are safe in your environment.
Check that generated files under `app/`, `routes/`, `database/`, `resources/`, and `config/` will not overwrite existing work.

Rated 2026-10-19 by an automated review of 6 files from the skill's repository.

Source

Repository: Jeffallan/claude-skills (all skills from this repository)
Path: skills/laravel-specialist/SKILL.md
Branch: main
Updated: 2026-09-19

php-pro — Use when building PHP applications with modern PHP 8.3+ features, Laravel, or Symfony frameworks. Invokes strict typing, PHPStan level 9.
running-release-tests — Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile.
django-expert — Use when building Django web applications or REST APIs with Django REST Framework.
fullstack-guardian — Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level.
nestjs-expert — Creates and configures NestJS modules, controllers, services, DTOs, guards, and interceptors for enterprise-grade TypeScript backend applications.
wordpress-pro — Develops custom WordPress themes and plugins, creates and registers Gutenberg blocks and block patterns, configures WooCommerce stores.