By 0xdeafcafe
Twelve Claude Code skills covering planning, driving, and shipping the PR lifecycle.
Use when the user says "drive the code", "/drive-code", "clean up the code in this PR", "make sure the touched files follow best practices", or asks Claude to do a code-quality pass on the files a PR (or working tree) touches. Evaluates each touched file for single-responsibility, modularity, service/repository pattern compliance, utility placement, naming, length, and runs the project's linter + formatter. Applies mechanical fixes automatically; proposes (with diff) any structural refactor before changing it. Does NOT verify the feature's behaviour (use /drive-feature) or its UX (use /drive-ux).
Use when the user says "drive the feature", "/drive-feature", "audit the feature logic", "is this feature complete", "check edge cases", or asks Claude to verify that a feature (typically the one in the current PR) is well built end-to-end. Reads any ADRs and specs that exist for the feature, traces the data flow from entry to exit, and checks edge cases, error handling, loading states, and side effects against the spec. Does NOT pass judgment on code style (use /drive-code) or click through the UX (use /drive-ux) - focuses on logic and completeness.
Use when the user says "drive this PR", "/drive-pr", asks to resolve all PR comments, get a PR green, address review feedback, or otherwise wants Claude to iterate on an open pull request until every trusted comment is resolved, CI is passing, and the PR description matches the code. Operates only on the current branch's PR or an explicitly passed PR number/URL.
Use when the user says "drive the security", "/drive-security", "security review", "is this safe", "check for vulnerabilities", or asks Claude to do a security-focused audit of the files a PR (or working tree) touches. Audits authn/authz on touched routes, scans for hardcoded secrets, checks input validation and output encoding at trust boundaries, runs dependency-vulnerability tools (npm audit / pip-audit / cargo audit / govulncheck) where available, and flags OWASP-top-10 smells. Applies safe mechanical fixes inline; surfaces judgment calls. Companion to /drive-code (code shape), /drive-feature (logic), /drive-test (tests).
Use when the user says "drive the tests", "/drive-test", "review the tests", "are the tests any good", "check test coverage", or asks Claude to audit test quality across the files a PR (or working tree) touches. Evaluates each touched file's tests for level (unit vs integration vs e2e), assertion quality, mock health, coverage of new code paths, and the classic smells (mocking the unit under test, snapshot churn, tests-that-can't-fail, etc.). Runs the test suite to confirm green, fixes mechanical issues, surfaces judgment calls. Companion to /drive-code (which checks code shape) and /drive-feature (which checks logic).
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Twelve Claude Code skills for the parts of shipping software I'd rather not do myself. The ADR, the Gherkin spec, the review pass, the PR description, the back-and-forth on the review comments. You get the picture.
They compose. plan-feature writes the ADR and the spec before any
code gets touched. The drive-* family audits the work while it's
happening (code quality, the feature against its spec, tests,
security, the UX in a real browser). open-pr opens the PR.
drive-pr iterates until CI is green and the description matches
what actually shipped. tone-of-voice keeps anything I publish from
sounding like an LLM wrote it, which, to be clear, an LLM did.
Roughly chronological. plan-feature at the start of a piece of
work, drive-pr at the end.
| Skill | One-liner |
|---|---|
plan-feature | Drives the discussion that produces an ADR and a Gherkin spec for whatever you're about to build. |
write-adr | Standalone: capture an architecture decision. MADR / Nygard / Y-statement, matched to whatever the repo already does. |
write-spec | Standalone: write a Gherkin .feature file. Matches the repo's existing specs folder and naming. |
review-spec | Audits a new spec or ADR against the existing corpus for duplicates, conflicts, overlap, and missing cross-links. Read-only. |
| Skill | One-liner |
|---|---|
drive-code | Quality pass on every file the PR touched. SRP, modularity, service/repo pattern, utilities placement, lint, format, readability. |
drive-feature | Audits the feature itself against its ADR or spec. Edge cases, error handling, loading states, side effects, the bits that bite in production. |
drive-test | Test quality on touched files. Right level (unit / integration / e2e), real assertions, no mocking the unit under test, coverage of new paths. |
drive-security | Authz on touched routes, secrets scan, input validation, output encoding, dep vulnerabilities, the OWASP-top-10 smells. |
drive-ux | Walks the changed UX surface in a real browser via chrome-devtools or Playwright. Screenshots, a11y audit, the works. |
| Skill | One-liner |
|---|---|
open-pr | Composes a PR (title, body, draft state) from commits, diff, and linked ADR / spec / ticket. Runs final sanity checks (lint, format, type-check, tslsp), opens via gh pr create, then asks whether to drive it now or wait for review. |
drive-pr | Iterates on the open PR until every trusted comment is resolved, CI is green, and the description matches what actually shipped. |
| Skill | One-liner |
|---|---|
tone-of-voice | Ghost-writes in my voice for anything that goes out under my name. Bans em-dashes and the usual LLM tells (yes, this README too). |
npx skills add 0xdeafcafe/skills
That's it. Works with Claude Code, Cursor, Codex, OpenCode, and the rest of the agent zoo via the skills.sh CLI. Interactive by default; it asks which skills and which agents you want.
# a few, not all
npx skills add 0xdeafcafe/skills --skill drive-pr --skill drive-ux
# list without installing
npx skills add 0xdeafcafe/skills --list
# everything, globally, into Claude Code, no prompts
npx skills add 0xdeafcafe/skills --all -a claude-code -g -y
# later
npx skills update
npx skills remove drive-pr
Full reference at the skills.sh docs.
If you're hacking on these locally, point the CLI at the checkout. Symlinks rather than copies, so edits land instantly:
npx skills add .
If you're on Claude Code and prefer its plugin system over npx,
the repo doubles as a marketplace:
/plugin marketplace add 0xdeafcafe/skills
/plugin install skills@alex
Shows up in the plugin manager as skills @ alex. For selective
installs, use the npx skills add 0xdeafcafe/skills --skill <name>
path above instead.
PR comments come from anyone with a GitHub account. If a skill follows their instructions, anyone with a GitHub account has shell on my laptop. Every skill that reads them runs the same filter:
npx claudepluginhub 0xdeafcafe/skills --plugin skillsType-aware TypeScript/JavaScript code intelligence skill for Claude Code. Routes symbol-level work (find usages, jump-to-def, rename, move file with import rewrites, hover, diagnostics, call hierarchy) through tsgo (Microsoft's native TypeScript LSP) instead of Grep/Edit/mv.
Ultra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.
Frontend design skill for UI/UX implementation
Comprehensive UI/UX design plugin for mobile (iOS, Android, React Native) and web applications with design systems, accessibility, and modern patterns
Memory compression system for Claude Code - persist context across sessions
Marketing skills for AI agents — conversion optimization, copywriting, SEO, paid ads, ad creative, and growth
Standalone image generation plugin using Nano Banana MCP server. Generates and edits images, icons, diagrams, patterns, and visual assets via Gemini image models. No Gemini CLI dependency required.