MCP App StoreMCP App Store
from tech-debt-skill503
Run a deliberate, file-cited technical debt and architecture audit that outputs a TECH_DEBT_AUDIT.md with prioritized findings and remediation recommendations.
This skill runs a structured, opinionated technical-debt audit of a codebase and produces a written audit (TECH_DEBT_AUDIT.md) with file:line-cited findings, severity tags, effort estimates, and prioritized remediation steps. It mandates orientation (read manifests, map modules) before judgment and uses concrete tooling where available to ground findings.
Use when you need a comprehensive snapshot of code health: architecture decay, test coverage gaps, dependency issues, performance hotspots, and security hygiene. Ideal for repo maintainers preparing refactors, release readiness checks, or pre-onboarding audits.
Designed for Claude Code or similar code-aware agents that can invoke repo tooling, run commands, and write files. Works best when the agent can spawn subagents for very large repos.
Well-crafted static-analysis skill for Claude Code that walks through a 3-phase tech debt audit (orient, audit, deliver). No bundled scripts — it's a pure prompt skill relying on the agent's tool use (git, rg, npm audit, etc.). The SKILL.md is thorough, opinionated, and well-structured with clear anti-patterns called out (no sycophancy, no rewrites, required citations). Installation uses curl | file redirect (not curl | bash), which is minor. No malicious behavior detected.
Impressive skill design. The 'looks bad but is actually fine' required section is a clever anti-sycophancy measure. Phase 1 orientation before judgment is well-structured. Subagent dispatch for large repos is smart. The only ding is the curl-based installation without checksum verification and the fact that as a pure prompt skill with no scripts, its effectiveness is entirely model-dependent.
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Flutter & Firebase Integration Stack
Advanced integration patterns for Flutter, Firebase (Auth, Firestore, Functions), and Riverpod state management.
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy