MCP App StoreMCP App Store
from claude-skill-registry539
Checklist-driven reviewer for PRs that add or modify Prowler compliance frameworks — validates JSON structure, checks, IDs, dashboard patterns, and changelog en
This skill codifies a review workflow for Prowler compliance frameworks (CIS/NIST/PCI-DSS style JSON files). It provides a decision tree and concrete commands to validate JSON syntax, ensure required checks exist, detect duplicate IDs, verify changelog entries, and confirm dashboard file patterns. The guidance is designed for PR reviewers to make deterministic approve/request-changes decisions.
Invoke this skill when a pull request introduces or modifies compliance framework JSON files under prowler/compliance/, or when contributing new frameworks or dashboard integrations. It’s useful during CI checks, manual PR review, and before merging frameworks that ship checks to production scans.
Useful for repository automation agents, CI-integrated reviewers, and human maintainers familiar with Python-based validation tooling and Prowler’s framework layout.
Prowler Compliance Review is a checklist-driven reviewer skill for PRs that add or modify Prowler compliance frameworks (CIS, NIST, PCI-DSS). It validates JSON structure, checks for missing/duplicate IDs, dashboard patterns, and changelog entries. No bundled scripts were present — the skill references an external validate_compliance.py in assets/ but doesn't include it. The SKILL.md itself is well-structured with clear decision trees and common issues, but is niche and Prowler-specific.
No security concerns — no network calls, no credential handling, no destructive commands. The skill is purely a review checklist for Prowler compliance PRs. Architecture follows the skill spec reasonably well with frontmatter, structured sections, and references. Usefulness is limited to Prowler contributors — a narrow audience. Code quality is decent but the referenced validation script isn't bundled, reducing practical usability.
Uloop: Execute Dynamic Code
Run small C# snippets in the Unity Editor via the uloop CLI for editor automation tasks like prefab wiring, AddComponent flows, and scene edits—without writing
Bookmarklet Creation
Generates browser-executable JavaScript bookmarklets with strict formatting (IIFE wrapper, block comments) and provides ready-to-install links or installer inst
Overnight — Autonomous Long-Running Coding
Orchestrates long-running coding goals: decomposes objectives into atomic tasks, dispatches isolated worktree workers, verifies acceptance criteria, and merges
Bexio API (Swiss CRM & Invoicing)
Integrate and manage Bexio contacts, quotes, invoices, orders and products via the Bexio API. Useful for CRM and Swiss business document workflows.
Content Research Writer
A writing-partner skill that helps research, outline, draft, cite, and iteratively improve articles, tutorials, and thought pieces.
Agent Hierarchy Diagram
Generate visual hierarchy diagrams (ASCII, Mermaid, GraphML) that show agent roles, levels, and delegation for documentation and onboarding.
Review Pull Request
Automated, structured PR reviewer: gathers metadata, diffs, CI results, dependency changes and provides a concise verdict with testing and documentation recomme
Agent Ops — Testing Workflow
Guidance for designing, running, and analyzing test suites for agents: test isolation, execution patterns, and coverage-based enforcement.
libagent
Agent orchestration library for conversational AI — coordinates LLM completions, memory, tool execution, and multi-turn flows; useful for building chat agents a
Raindrop.io API
Manage Raindrop.io bookmarks, collections, tags and highlights via the Raindrop REST API with helper scripts and examples.
Development Worktree
Create an isolated git worktree for feature work, auto-run project setup, and verify a clean test baseline before development.
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
RemoFirst — Core Workflow A
Onboarding workflow for RemoFirst: create employee records, upload compliance documents, and track country-specific onboarding status.