MCP App StoreMCP App Store
from my-cc-harness122
Performs a dual-pass code review of the current branch using Codex (GPT) and Claude, producing structured findings and severity classifications.
This skill automates a thorough code-review workflow: it runs a Codex-based first pass and a Claude second pass, aggregates findings into structured categories (CRITICAL/WARNING/INFO), and outputs a file-by-file report with suggested fixes. It includes commands to collect diffs, run static checks, and scan for secrets.
Use this skill when evaluating changes in the current branch or a pull request: functional correctness, security checks, performance patterns, tests coverage, and code-quality issues. It's intended for PR gating and developer feedback loops.
Designed for agents that can run shell commands and call LLM-based review tools (Codex/GPT-style and Claude). It expects Git access and local tooling (madge, gitleaks).
Korean-language dual-pass code review skill (Codex + Claude). Well-structured checklist-based review process with severity classifications and structured output. No bundled scripts — all analysis is instruction-based within SKILL.md. Clean from a security perspective: only local git/dev tool commands, no network calls or exfiltration risks.
Solid review skill with clear step progression and good output format. Korean-only content reduces breadth. No scripts to test. Architecture is decent but could benefit from separating checklists into references/ directory.
Harness Health Audit
Assess and score the overall health of a Claude Code harness across architecture, skills coverage, hooks, rules, MCP servers, eval pipelines, and team setup.
Code Evaluation Harness
Spawns an independent evaluator agent to score code outputs on functionality, code quality, originality, and usability/security, producing a structured EVAL_REP
SPEC-driven Development Interview
Conducts a structured, in-depth interview to produce a detailed SPEC.md requirements document for a feature or project.
Plan
Create structured implementation plans for multi-step or architectural changes before coding — defines success criteria, trade-offs, and stepwise tasks.
Vercel React Best Practices
Practical performance and bundle-size guidelines for React and Next.js apps — prioritized rules and patterns to avoid common performance pitfalls.
Development Worktree
Create an isolated git worktree for feature work, auto-run project setup, and verify a clean test baseline before development.
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
Apollo Security Basics
Practical security best-practices for integrating with the Apollo.io API: safe key storage, PII redaction, minimal permissions, rotation, and automated audit ch
Attack Surface Analyzer
Provides step-by-step guidance and configurations for attack surface analysis, threat modeling, and advanced security assessments.