Skip to content

tartinerlabs/skills

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

136 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Skills

Release Skills Version License

Powertools for coding agents: git workflows, GitHub automation, code quality, and project tooling. Each skill ships with modular, independently editable rules for deep, opinionated guidance.

Why These Skills

  • Modular rules architecture — Each skill ships with standalone rule files in rules/ directories. Rules can be added, removed, or edited independently without touching the main skill logic.
  • Opinionated audit workflows — Skills like security, github-actions, tailwind, and refactor produce structured severity-graded reports, then auto-fix issues.
  • GitLeaks built in — The commit, security, and setup skills all enforce GitLeaks secret detection as a first-class concern.
  • Convention-aware — Skills detect your project's existing conventions (language variant, commit format, package manager, project structure) and adapt automatically.

Skills

Install the plugin for your agent, then invoke skills through that agent's native skill or command interface.

Git

Skill Description
commit Clean git commits with conventional commit detection and GitLeaks secret scanning
create-branch Create and checkout a branch with naming validation and GitHub issue linking

GitHub

Skill Description
create-pr Push branch and create a pull request with structured description and auto-assignment
github-issues Create, update, query, and comment on GitHub issues with MCP
github-actions Create and audit GitHub Actions workflows with SHA pinning, permissions, and caching checks

Code Quality

Skill Description
deps Harden npm supply chain with .npmrc flags, version pinning, Renovate config, and CI audit workflows
refactor Audit and refactor TypeScript/JavaScript code for dead code, deep nesting, type assertions, and design patterns
security OWASP Top 10 security audit with GitLeaks secret detection and dependency vulnerability scanning
tailwind Audit and fix Tailwind CSS v4 anti-patterns for spacing, 8px grid, mobile-first, and GPU animations
testing Write and run tests with Vitest and React Testing Library for JS/TS projects

Project

Skill Description
setup Add Biome, Husky, commitlint, lint-staged, GitLeaks, and TypeScript to JS/TS projects
project-structure Audit project directory structure for colocation, grouping, and anti-pattern detection
naming-format Audit and fix filename and export naming conventions for consistency
update-project Update and maintain CLAUDE.md, README.md, agents, skills, and rules to match current project state

Agents

Agents invoke skills autonomously with an isolated worktree. Invoke with claude agent run <name>.

Agent Description
deps Autonomous supply chain hardening — runs the deps skill in an isolated worktree and outputs a structured summary

Installation

claude plugin install tartinerlabs/skills

Codex Plugin

This repository includes repo-scoped Codex plugin metadata in .codex-plugin/plugin.json and .agents/plugins/marketplace.json.

To use it in Codex:

  1. Open this repository in Codex
  2. Restart Codex if needed so it reloads the repo marketplace
  3. Open the plugin directory and install tartinerlabs from the repo marketplace

Cursor Plugin

This repository includes Cursor plugin metadata in .cursor-plugin/plugin.json and .cursor-plugin/marketplace.json.

For local development, install the plugin with Cursor's plugin flow or copy the repository into Cursor's local plugin directory:

mkdir -p ~/.cursor/plugins/local
ln -s "$(pwd)" ~/.cursor/plugins/local/tartinerlabs

The shared skills/ directory is exposed to Cursor directly. Claude-specific hooks are intentionally not declared in the Cursor manifest.

Install all skills:

pnpm dlx skills add tartinerlabs/skills

Install a single skill:

pnpm dlx skills add tartinerlabs/skills/commit

Install a subset for specific workflows:

# Git and GitHub workflow skills only
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/create-branch
pnpm dlx skills add tartinerlabs/skills/create-pr
pnpm dlx skills add tartinerlabs/skills/github-issues

# Security-focused subset
pnpm dlx skills add tartinerlabs/skills/security
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/setup
pnpm dlx ctx7 skills install /tartinerlabs/skills --all --universal

Note: The OpenCode plugin is currently in Beta and might not work.

Add to opencode.json:

{
  "$schema": "https://opencode.ai/config.json",
  "plugin": ["@tartinerlabs/skills"]
}

Plugin Metadata

Plugin manifests are maintained manually on purpose.

  • Codex metadata lives in .codex-plugin/plugin.json and .agents/plugins/marketplace.json
  • Claude metadata lives in .claude-plugin/plugin.json and .claude-plugin/marketplace.json
  • Cursor metadata lives in .cursor-plugin/plugin.json and .cursor-plugin/marketplace.json
  • package.json.version is the shared source of truth across plugin manifests; semantic-release syncs manifest versions during release

Architecture

Skills use a modular rules pattern. Each skill directory contains:

skills/<name>/
  SKILL.md          # Skill definition with frontmatter
  rules/            # Independent, editable rule files
    some-rule.md    # Severity, examples, fix instructions

agents/<name>.md    # Optional Claude Code agents that invoke skills autonomously

This means you can:

  • Customise a rule's severity or examples without forking the skill
  • Add project-specific rules by dropping a new .md file in rules/
  • Remove rules you disagree with

Skill Format

Each skill is a directory with a SKILL.md file following the Agent Skills spec.

License

MIT

About

Claude Code skills for git workflows, GitHub automation, security audits, code refactoring, and project tooling

Topics

Resources

License

Contributing

Stars

Watchers

Forks

Packages

 
 
 

Contributors