By zcaceres
Code-quality analysis: chaos-monkey bug hunting, dead-code/duplication detection, perf review, docs audits, CLI agent-friendliness, and project-health scoring.
Trace code paths to find bugs, logic errors, race conditions. Static analysis first, then runtime browser testing for frontend. Triggers on "quality-chaos-monkey", "chaos monkey", "probe for edge cases".
Audit a CLI tool against the agent-friendliness checklist from Zbigniew Sobiecki's "Building Agent-Friendly CLIs". Use when the user says "quality-cli-agent-friendly-audit", "cli-agent-friendly-audit", "audit this cli", "is my cli agent-friendly", or asks to check a CLI for agent ergonomics.
Analyze a codebase for dead code, duplicates, and circular dependencies using knip, jscpd, and madge, then validate findings to filter false positives. Use when user says "quality-dead-code-analyzer", "analyze code", "find dead code", "code cleanup", "find duplicates", "unused exports", or "static analysis".
Audit project documentation against the current state of the codebase and produce a revision plan. Reads README and all docs, launches parallel Explore agents to verify claims, diffs documentation vs reality, and applies approved fixes. Use when user says "quality-docs-update", "update docs", "docs update", "check documentation", "audit docs", "fix readme", "documentation is outdated", or "sync docs with code".
Analyze a codebase for performance bottlenecks in full-stack web applications. Use when user says "quality-perf-review", "perf review", "performance review", "find bottlenecks", "optimize performance", "slow code", "performance audit", or "why is my app slow". Interactive workflow that discusses each finding before moving on.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Open-source AI agent skills focused on engineering and personal productivity.
Skills conform to skills.sh / Agent Skills standard and are versioned/released independently.
Skills install via the skills CLI. The CLI auto-detects
your agent (Claude Code, Codex, Cursor, etc.) and drops files in the right place.
# Install every skill in this repo (project-local)
npx skills add zcaceres/skills
# Install globally (~/.claude/skills/ for Claude Code)
npx skills add zcaceres/skills -g
# Browse without installing
npx skills add zcaceres/skills --list
Install one or more specific skills with -s <name>:
npx skills add zcaceres/skills -s acid-trip
npx skills add zcaceres/skills -s quality-chaos-monkey
npx skills add zcaceres/skills -s checkpoint
npx skills add zcaceres/skills -s cleanup-computer
npx skills add zcaceres/skills -s clean-ai-slop
npx skills add zcaceres/skills -s quality-cli-agent-friendly-audit
npx skills add zcaceres/skills -s quality-dead-code-analyzer
npx skills add zcaceres/skills -s quality-perf-review
npx skills add zcaceres/skills -s copywriting
npx skills add zcaceres/skills -s decompose
npx skills add zcaceres/skills -s find-docs
npx skills add zcaceres/skills -s gemini-deep-research
npx skills add zcaceres/skills -s investigate-repo
npx skills add zcaceres/skills -s optimize-permissions
npx skills add zcaceres/skills -s pr
npx skills add zcaceres/skills -s quality-project-health
npx skills add zcaceres/skills -s record-gif
npx skills add zcaceres/skills -s reflect-on-conversation
npx skills add zcaceres/skills -s review-code
npx skills add zcaceres/skills -s safety-dotenv-guard
npx skills add zcaceres/skills -s safety-git-reset-guard
npx skills add zcaceres/skills -s safety-op-creds
npx skills add zcaceres/skills -s safety-rm-rf-guard
npx skills add zcaceres/skills -s storage-cleanup
npx skills add zcaceres/skills -s transcribe-youtube
npx skills add zcaceres/skills -s trip-planner
npx skills add zcaceres/skills -s zoom
Add -g for global, or -a <agent> to target a specific agent (e.g. -a claude-code).
Hook skills. safety-dotenv-guard, safety-git-reset-guard,
safety-op-creds, safety-rm-rf-guard, and pr each ship a
scripts/install.sh that idempotently wires
the hook into ~/.claude/settings.json (with a timestamped backup).
Two-step install:
npx skills add zcaceres/skills -s <hook-skill>
~/.claude/skills/<hook-skill>/scripts/install.sh
Why two steps: the skills CLI is a pure file copier and runs no
publisher code on install. The SKILL.md frontmatter hooks: block only
fires while the skill is active in context — not always-on. install.sh
gets the hook onto every matching tool call. Requires jq. See each
skill's SKILL.md for --project / --target flags and manual wiring
as an alternative. The script self-locates, so the same command works
whether the skill was installed at user scope or project scope.
The prefix-grouped skills are also bundled as Claude Code plugins in a marketplace, so a whole group installs at once and its skills are namespaced under the group name:
/plugin marketplace add zcaceres/skills
/plugin install security@zcaceres-skills # then /security:openssf, /security:gitleaks, …
/plugin install quality@zcaceres-skills # /quality:chaos-monkey, /quality:perf-review, …
Same skills as npx skills add, grouped and namespaced. The plugin tree under
plugins/ and the catalog at .claude-plugin/marketplace.json are generated
from skills/ — see Workflow. The safety-* guards aren't bundled
yet: their hooks run a compiled binary that a file-copy marketplace can't ship
(see the deferral note in scripts/build-plugins.ts).
npx claudepluginhub zcaceres/skills --plugin qualityRepo + endpoint security setup: OpenSSF Scorecard, gitleaks, Snyk, Socket, and the bumblebee endpoint scanner. User-triggered via /security:<tool>.
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Tools to maintain and improve CLAUDE.md files - audit quality, capture session learnings, and keep project memory current.
Develop, test, build, and deploy Godot 4.x games with Claude Code. Includes GdUnit4 testing, web/desktop exports, CI/CD pipelines, and deployment to Vercel/GitHub Pages/itch.io.
Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.
A growing collection of Claude-compatible academic workflow bundles. Covers scientific figures, manuscript writing and polishing, reviewer assessment, citation retrieval, data availability, paper reading, literature search, response letters, paper-to-PPTX conversion, and evidence-grounded Chinese invention patent drafting. Rules are organized as reusable skill folders with explicit workflows and quality checks.
Create new skills, improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, update or optimize an existing skill, run evals to test a skill, or benchmark skill performance with variance analysis.