Explore AI Agent Skills & Claude Prompts

Static analysis security vulnerability scanner for Ruby on Rails applications. Use when analyzing Rails code for security issues, running security audits, reviewing code for vulnerabilities, setting up security scanning in CI/CD, managing security warnings, or investigating specific vulnerability types (SQL injection, XSS, command injection, etc.). Also use when configuring Brakeman, reducing false positives, or integrating with automated workflows.

schedule Updated 5 months ago

rails-generators

Create expert-level Ruby on Rails generators for models, services, controllers, and full-stack features. Use when building custom generators, scaffolds, or code generation tools for Rails applications, or when the user mentions Rails generators, Thor DSL, or automated code generation.

sandi

A specialized object-oriented design advisor channeling Sandi Metz's approach (from "Practical Object-Oriented Design in Ruby" and "99 Bottles of OOP"). Acts as a planner, code reviewer, refactoring guide, and OOP teacher — language-agnostic. Use this skill whenever the user invokes the `/sandi` command, OR whenever they ask about object-oriented design, software architecture, how to structure or plan a feature, how to refactor code, code review of classes/objects, dependency management, code smells, SOLID principles, design patterns, duck typing, or mention Sandi Metz, POODR, "99 Bottles", "shameless green", "flocking rules", "squint test", "Law of Demeter", or "tell don't ask". Trigger this even when the user doesn't say "Sandi" explicitly but is wrestling with how to design, structure, or improve OO code, plan a feature's architecture, or evaluate a PR's design.

schedule Updated 17 days ago

review-ruby-code

Comprehensive Ruby and Rails code review using Sandi Metz rules and SOLID principles. Analyzes changed files in current branch vs base branch, runs rubycritic and simplecov, identifies OOP violations, Rails anti-patterns, security issues, code smells, and test coverage gaps. Outputs REVIEW.md with VSCode-compatible file links. Use when reviewing Ruby/Rails code, conducting code reviews, checking for design issues, pull request review, code quality analysis, or when user mentions Sandi Metz, POODR, 99 Bottles, SOLID, Law of Demeter, or "Tell Don't Ask".

github-actions

Create, evaluate, and optimize GitHub Actions workflows and custom actions. Use when building CI/CD pipelines, creating workflow files, developing custom actions, troubleshooting workflow failures, performing security analysis, optimizing performance, or reviewing GitHub Actions best practices. Covers Ruby/Rails, TypeScript/Node.js, Heroku and Fly.io deployments.

kamal

Deploy containerized web applications to any Linux server using Kamal 2. Use when users need to deploy, configure, debug, or manage Kamal deployments including initial setup, configuration of deploy.yml, deployment workflows, rollbacks, managing accessories (databases, Redis, Litestream), troubleshooting deployment issues, CI/CD integration, multi-environment setups, or understanding Kamal commands and best practices. Also use when working with Kamal Proxy, Docker-based deployments, zero-downtime deploys, or 37signals deployment tooling.

ruby

Ruby language conventions, idioms, and modern features (3.x+) for writing idiomatic Ruby code. Covers error handling patterns, performance optimization, and Ruby-specific idioms. Use when writing or reviewing pure Ruby code, using modern Ruby features (pattern matching, ractors, RBS), optimizing Ruby performance, or establishing Ruby conventions. For Rails-specific guidance use the rails skill. For design patterns use design-patterns-ruby. For testing use rspec. For code style use rubocop.

rubycritic

Integrate RubyCritic to analyze Ruby code quality and maintain high standards throughout development. Use when working on Ruby projects to check code smells, complexity, and duplication. Triggers include creating/editing Ruby files, refactoring code, reviewing code quality, or when user requests code analysis or quality checks.

vitest

Comprehensive Vitest testing framework guide with strong emphasis on Jest-to-Vitest migration. Covers automated migration using codemods, configuration setup, API differences, best practices, and troubleshooting. Use when migrating from Jest, setting up Vitest, writing tests, configuring test environments, or resolving migration issues. Primary focus is seamless Jest migration with minimal code changes.