By secondsky
Integrate Cloudflare Turnstile CAPTCHA alternative for bot and spam protection in React, Next.js, Hono, Cloudflare Workers, and mobile apps. Run setup wizards to generate framework-specific widgets, configs, and validation code; diagnose CSP headers, error codes 100*-600*, widget failures interactively; apply fixes via scripts, nginx, or meta tags.
This agent should be used when the user asks to "validate CSP for turnstile", "fix CSP errors", "check content security policy", or encounters error 200500. Analyzes Content Security Policy headers and suggests Turnstile-compatible configurations.
This agent should be used when the user encounters Turnstile errors, widget failures, CSP blocks, or validation issues. Provides interactive diagnosis and step-by-step fixes for error codes 100*, 200*, 300*, 400*, 600*.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
170 production-ready skills for Claude Code CLI
Version 3.2.1 | Last Updated: 2026-04-01
🔌 Platform Support
This repository uses Claude Plugin Patterns — natively supported by:
| Platform | Status | Notes |
|---|---|---|
| Claude Code | ✅ Native | Full marketplace support |
| Factory Droid | ✅ Native | Full marketplace support |
A curated collection of battle-tested skills for building modern web applications with Cloudflare, AI integrations, React, Tailwind, and more.
PS: if skills.sh warns about any skill: Their scan process is a outdated LLM which flags newest versions pins (like in ZOD) as non existent and by that potentially malicous.
# Add the marketplace
/plugin marketplace add https://github.com/secondsky/claude-skills
# Install individual skills as needed
/plugin install cloudflare-d1@claude-skills
/plugin install tailwind-v4-shadcn@claude-skills
/plugin install ai-sdk-core@claude-skills
See MARKETPLACE.md for complete catalog of all 170 skills.
# Clone the repository
git clone https://github.com/secondsky/claude-skills.git
cd claude-skills
# Install all 170 skills at once
./scripts/install-all.sh
# Or install individual skills
./scripts/install-skill.sh cloudflare-d1
This repository contains 170 production-tested skills for Claude Code, each focused on a specific technology or capability.
Individual Skills: Each skill is a standalone unit with:
SKILL.md - Core knowledge and guidanceInstallation Options:
./scripts/install-all.shEach skill is individually installable. Install only the skills you need.
Full Catalog: See MARKETPLACE.md for detailed listings.
| Category | Skills | Examples |
|---|---|---|
| tooling | 29 | turborepo, plan-interview, code-review |
| frontend | 26 | nuxt-v4, nuxt-v5, tailwind-v4-shadcn, tanstack-query, nuxt-studio, maz-ui, threejs |
| cloudflare | 21 | cloudflare-d1, cloudflare-workers-ai, cloudflare-agents |
| ai | 20 | openai-agents, claude-api, ai-sdk-core |
| api | 16 | api-design-principles, graphql-implementation |
| web | 10 | hono-routing, firecrawl-scraper, web-performance |
| mobile | 7 | swift-best-practices, react-native-app, react-native-skills |
| database | 6 | drizzle-orm-d1, neon-vercel-postgres, supabase-postgres-best-practices |
| security | 6 | csrf-protection, access-control-rbac |
| auth | 4 | better-auth |
| testing | 4 | vitest-testing, playwright-testing |
| design | 4 | design-review, design-system-creation |
| woocommerce | 4 | woocommerce-backend-dev |
| cms | 4 | hugo, sveltia-cms, wordpress-plugin-core |
| architecture | 3 | microservices-patterns, architecture-patterns |
| data | 3 | sql-query-optimization, recommendation-engine |
| seo | 2 | seo-optimizer, seo-keyword-cluster-builder |
| documentation | 1 | technical-specification |
Claude Code automatically checks ~/.claude/skills/ for relevant skills before planning tasks:
User: "Set up a Cloudflare Worker with D1 database"
↓
Claude: [Checks skills automatically]
↓
Claude: "Found cloudflare-d1 skills.
These prevent 12 documented errors. Use them?"
↓
User: "Yes"
↓
Result: Production-ready setup, zero errors, ~65% token savings
Note: Due to token limits, not all skills may be visible at once. See ⚠️ Important: Token Limits below.
Each skill includes:
skills/[skill-name]/
├── SKILL.md # Complete documentation
├── .claude-plugin/
│ └── plugin.json # Plugin metadata
├── templates/ # Ready-to-copy templates
├── scripts/ # Automation scripts
└── references/ # Extended documentation
Full-Stack Frameworks:
npx claudepluginhub secondsky/claude-skills --plugin cloudflare-turnstileThis skill provides comprehensive guidance for SAP BTP Job Scheduling Service development, configuration, and operations. It should be used when creating, managing, or troubleshooting scheduled jobs on SAP Business Technology Platform. The skill covers service setup, REST API usage, schedule types and formats, OAuth 2.0 authentication, multitenancy, Cloud Foundry tasks, Kyma runtime integration, and monitoring with SAP Cloud ALM and Alert Notification Service. Keywords: SAP BTP, Job Scheduling, jobscheduler, cron, schedule, recurring jobs, one-time jobs, Cloud Foundry tasks, CF tasks, Kyma, OAuth 2.0, XSUAA, @sap/jobs-client, REST API, asynchronous jobs, action endpoint, run logs, SAP Cloud ALM, Alert Notification Service, multitenancy, tenant-aware, BC-CP-CF-JBS
Production-ready SAP BTP best practices for enterprise architecture, account management, security, and operations. Use when planning BTP implementations, setting up account hierarchies, configuring environments, implementing authentication, designing CI/CD pipelines, establishing governance, building Platform Engineering teams, implementing failover strategies, or managing application lifecycle on SAP BTP. Keywords: SAP BTP, account hierarchy, global account, directory, subaccount, Cloud Foundry, Kyma, ABAP, SAP Identity Authentication, CI/CD, governance, Platform Engineering, failover, multi-region, SAP BTP best practices
Guides development with SAP AI Core and SAP AI Launchpad for enterprise AI/ML workloads on SAP BTP. Use when: deploying generative AI models (GPT, Llama, Gemini, Mistral), building orchestration workflows with templating/filtering/grounding, implementing RAG with vector databases, managing ML training pipelines with Argo Workflows, configuring content filtering and data masking for PII protection, using the Generative AI Hub for prompt experimentation, or integrating AI capabilities into SAP applications. Covers service plans (Free/Standard/Extended), model providers (Azure OpenAI, AWS Bedrock, GCP Vertex AI, Mistral, IBM), orchestration modules, embeddings, tool calling, and structured outputs.
SAP BTP Cloud Integration Automation Service (CIAS) skill for guided integration workflows. Use when: setting up CIAS subscriptions, configuring destinations, assigning roles (CIASIntegrationAdministrator, CIASIntegrationExpert, CIASIntegrationMonitor), planning integration scenarios, working with My Inbox tasks, monitoring scenario execution, troubleshooting CIAS errors, creating OAuth2 instances, configuring identity providers for CIAS, understanding CIAS security architecture, or integrating SAP products (S/4HANA, SuccessFactors, BTP services, SAP Build, IBP).
SAP HANA Machine Learning Python Client (hana-ml) development skill. Use when: Building ML solutions with SAP HANA's in-database machine learning using Python hana-ml library for PAL/APL algorithms, DataFrame operations, AutoML, model persistence, and visualization. Keywords: hana-ml, SAP HANA, machine learning, PAL, APL, predictive analytics, HANA DataFrame, ConnectionContext, classification, regression, clustering, time series, ARIMA, gradient boosting, AutoML, SHAP, model storage
Implements CSRF protection using synchronizer tokens, double-submit cookies, and SameSite attributes. Use when securing web forms, protecting state-changing endpoints, or implementing defense-in-depth authentication.
Validate CSRF protection
Expert agent for form validation using Joi, Yup, Zod, input sanitization, XSS prevention, CSRF protection, and secure file upload validation
Data validation and backend security coding
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
v9.44.1 — Patch release for Gemini environment/version detection and qwen auth gating. Run /octo:setup.