litsec-skills

claude-code-skills

A collection of Claude Code skills for use in development projects.

Installing Skills

Choose the option that matches your situation.

Scenario	Option
Personal use across all your projects	Option 1 — plugin install (personal)
Whole team on a shared project	Option 2 — project settings file (team)
Offline, CI, or no plugin system available	Option 3 — manual shell script

---

Option 1 — Plugin install (personal)

Installs skills into your personal Claude Code plugin cache, making them available in all your projects.

Register the marketplace (one-time per machine):

claude plugin marketplace add https://github.com/litsec/claude-code-skills

Install whichever skills you want:

claude plugin install maven-dependency-updater@litsec-skills
claude plugin install lombok-remover@litsec-skills
claude plugin install jackson-2-to-3-migration@litsec-skills

---

Option 2 — Project settings file (team)

The recommended approach for teams. Commit a .claude/settings.json file to your project repository. Every developer who clones the repo gets the skills automatically — as long as they have registered the marketplace once on their machine.

Step 1 — each developer registers the marketplace once:

claude plugin marketplace add https://github.com/litsec/claude-code-skills

Step 2 — add this file to your project repository and commit it:

.claude/settings.json:

{
  "enabledPlugins": [
    "litsec-skills:maven-dependency-updater",
    "litsec-skills:lombok-remover",
    "litsec-skills:jackson-2-to-3-migration"
  ]
}

From that point on, cloning the repo is enough — Claude Code reads .claude/settings.json on startup and activates the listed skills automatically.

---

Option 3 — Manual shell script

Copies skills directly into a .claude/skills/ directory without using the plugin system. Useful when the marketplace is not accessible, for CI environments, or for air-gapped setups.

Install into a specific project:

./install-skills.sh -project /path/to/your/project

This copies all skills to <project>/.claude/skills/.

Install globally — skills will be available in every Claude Code project:

./install-skills.sh -global

This copies all skills to ~/.claude/skills/.

Notes

• Running install-skills.sh again will overwrite previously installed versions of the same skills.
• Claude Code picks up newly installed skills at the start of the next conversation — no restart required.
• Skills are matched by their description frontmatter field. Prompt naturally and Claude will consult the relevant skill automatically.

---

Skills

maven-dependency-updater

name: maven-dependency-updater
description: >
  Keep Maven POM files up to date by checking and upgrading all dependencies and plugins
  to their latest versions. Use this skill whenever the user mentions updating, bumping,
  upgrading, or checking Maven dependencies or plugins — even if they just say "update my
  POMs", "are my dependencies up to date?", "bump versions", or "check for newer versions".
  Trigger also when the user shares or references a pom.xml and asks about version currency.
  Handles multi-module Maven projects, asks before applying major version upgrades, and
  keeps a clear audit trail of every change made.

Audits and updates all <dependency> and <plugin> versions across one or more Maven POM files. Queries Maven Central for the latest stable releases, classifies each change as MAJOR / minor / patch, and asks for explicit confirmation before applying any major version bump. Supports multi-module projects, property-based versions, BOMs, and prints a full change log of every update applied.

---

lombok-remover

name: lombok-remover
description: >
  Scan a Java project and replace all Lombok annotations with equivalent hand-written
  Java code. Use this skill whenever the user wants to remove Lombok, de-lombok a project,
  replace Lombok annotations, migrate away from Lombok, or eliminate the Lombok dependency.
  Also trigger when the user says things like "get rid of Lombok", "expand Lombok", or
  "make Lombok explicit". Handles all common Lombok annotations (@Data, @Builder, @Value,
  @Getter, @Setter, @ToString, @EqualsAndHashCode, @RequiredArgsConstructor,
  @AllArgsConstructor, @NoArgsConstructor, @Slf4j, @With, @Accessors, etc.), updates
  POM files to remove the Lombok dependency, and preserves existing code style throughout.