lehnert-claude-skills

Analyzes software ideas for feasibility, features, risks, and MVP scope – pure planning, no code generation.

Generates ready-to-copy Mermaid, PlantUML, and ASCII diagrams from any software description, idea, or sw-idea-analyzer output.

Generates a complete user story document with acceptance criteria and priorities from requirements/vision.md or any software description.

Generates a complete use case document with actors, flows, exceptions, and acceptance criteria from user-stories.md, vision.md, or any software description.

Recommends the best modern tech stack for a project and generates a ready-to-use requirements/tech-stack.yaml with Docker-first setup, Testcontainers, and full rationale.

Generates production-ready code scaffolding for selected use cases from tech-stack.yaml and use-cases.md.

Orchestrates all boilerplate sub-skills to scaffold a complete project from tech-stack.yaml directly into the workspace root.

Creates root-level project config files (package.json, tsconfig.json, pom.xml, .gitignore etc.) from tech-stack.yaml.

Creates the source code skeleton (entry points, modules, controllers, app structure) from tech-stack.yaml.

Creates database and ORM foundation files (Prisma schema, Flyway migration, SQLAlchemy setup) from tech-stack.yaml.

Creates Docker infrastructure files (docker-compose.yml, Dockerfiles, .dockerignore, Traefik config) from tech-stack.yaml.

Creates UI foundation files (Tailwind config, shadcn/ui setup, global styles, layout components) from tech-stack.yaml.

Generates production-ready bash scripts for any Linux task from a plain English description.

Audits Linux config files (nginx, Apache, sshd, systemd units, iptables, nftables, fail2ban, sudoers, sysctl) for security issues, misconfigurations, and performance gaps.

Generates or optimizes docker-compose.yml for any self-hosted app or cloud replacement (Google Photos→Immich, Gmail→Mailcow, ChatGPT→Ollama, etc.) — full stacks with health checks, named volumes, and .env setup.

Generates a complete Linux server hardening plan with ready-to-apply scripts and configs covering SSH, firewall, fail2ban, sysctl, auditd, and user security.

Analyzes Linux log files (auth.log, syslog, nginx, Apache, journalctl, Docker, fail2ban) for errors, security threats, brute force attacks, crashes, and anomalies.

Sets up a complete monitoring stack (Prometheus, Grafana, Node Exporter, Loki, Alertmanager, Uptime Kuma, Netdata) for any Linux server, Docker host, or application.

Configures Linux networking — static IP, routing, VLANs, bonding, bridges, WireGuard, OpenVPN, iptables, nftables, firewalld, DNS, and network troubleshooting.

Designs and generates complete Linux backup solutions using restic, BorgBackup, rsync, or tar — with encryption, remote storage, retention policies, database backups, Docker volume backups, and restore procedures.

Creates, debugs, and hardens systemd service, timer, socket, path, and mount units — with sandboxing, resource limits, restart policies, and timer scheduling.

Generates production-ready cron jobs with /etc/cron.d/ entries and wrapper scripts featuring flock locking, logging, log rotation, and failure alerting.

Diagnoses and fixes SELinux denials — file context relabeling, boolean toggles, port labeling, and custom policy modules. Never suggests disabling SELinux.

Generates tuned sysctl, I/O scheduler, CPU governor, and workload-specific configs — measures before tuning.

Lehnert's personal Claude skill shop – skill-shop-manager and more skills