Skill Claude CodeCodex
Reviews Angular PWA/offline-first setup for apps that need to work in the field with intermittent connectivity. Flags @angular/service-worker not configured, no offline fallback page/shell, a caching strategy that doesn't distinguish app-shell assets from API data, and no conflict-resolution story for data edited…
Skill Claude CodeCodex
Reviews the Angular SignalR client — the frontend counterpart to dotnet-realtime's hub. Flags a raw HubConnection scattered across components instead of a typed connection service, no automatic reconnect with backoff, the access token not attached (or not refreshed) on the socket, untyped on()/invoke() calls that…
Skill Claude CodeCodex
Reviews Angular Router architecture beyond permission guards (owned by angular-security) — resolvers, typed route data, nested composition. Flags detail data fetched in ngOnInit instead of a Resolver, magic-string route data, deep routes with no lazy boundary, missing wildcard/redirect strategy, guards duplicated…
Skill Claude CodeCodex
Reviews runtime environment configuration for containerized Angular SPAs — the frontend mirror of dotnet-dynamic-configuration. Flags API URLs/flags baked into environment.ts at build time (one Docker image per environment), no runtime config.json + APPINITIALIZER pattern, config fetched too late for interceptors…
Skill Claude CodeCodex
Angular security hardening: XSS template-binding hygiene, DomSanitizer bypass policy, nonce-based CSP, Trusted Types (v17+), CSRF handling with the .NET backend, and permission-ONLY client-side access control — route guards and UI gating check permissions, never roles; client checks are UX only, real enforcement is…
Skill Claude CodeCodex
Structuring reusable Angular code across an app or Nx/Angular-CLI workspace — shared reactive-forms building blocks (form-group factories, centralized validators) and a generic typed paged/sortable/filterable DataTableComponent, extracted into proper workspace libraries with clean public APIs instead of duplicated per…
Skill Claude CodeCodex
Reviews the shared UI-kit layer beyond forms and tables already covered by angular-shared-libraries — modals/dialogs, toast/notification service, and confirmation prompts. Flags MatDialog/CDK Overlay usage reimplemented per feature instead of a shared DialogService, ad-hoc snackbar/toast calls with inconsistent…
Skill Claude CodeCodex
Guides signal-based state design in Angular 17–20. Covers signal()/computed()/effect() patterns, when RxJS still wins, toSignal()/toObservable() interop (v16+), linkedSignal() (stable v20), and resource()/httpResource() async data (stable v20 / experimental v19.2).
Skill Claude CodeCodex
Reviews Angular SSR (@angular/ssr) and hydration. Flags SEO-sensitive routes without SSR, browser-only APIs (window, localStorage) unguarded by isPlatformBrowser, missing provideClientHydration(), data fetched twice with no TransferState, prerendering vs per-request SSR conflated, and browser-only libraries imported…
Skill Claude CodeCodex
Reviews Angular application telemetry — the frontend counterpart to dotnet-observability. Flags no Application Insights JS SDK (or equivalent) wired, user-interaction events tracked with inconsistent/ad-hoc naming instead of a shared event-tracking convention, no correlation between a frontend user action and the…
Skill Claude CodeCodex
Reviews Angular test suite conventions. Flags component tests that query the DOM by CSS class/tag instead of accessible role/label, HTTP calls in component tests hitting a real HttpClient instead of HttpTestingController, Angular Material components tested via raw DOM queries instead of Component Test Harnesses, no…
Skill Claude CodeCodex
Multi-theme support in Angular apps — light/dark/brand and per-tenant theming via CSS custom property design tokens, runtime theme switching without reload, Angular Material M3 theming (v17+), persisted theme preference with flash-of-wrong-theme prevention, and WCAG contrast validation across theme variants.
Skill Claude CodeCodex
Reviews third-party script governance — CDN-loaded scripts, analytics/chat-widget tags — that angular-security's CSP work doesn't fully close on its own. Flags a CDN-loaded script with no Subresource Integrity (SRI) hash, a third-party tag added with no documented allow-list/review process, a third-party script…
Skill Claude CodeCodex
Reviews visual/UI-UX implementation consistency in Angular apps — spacing/typography scale discipline, mobile-first responsive layout, visual hierarchy between primary/secondary actions, cross-feature component consistency, and a design-to-code fidelity check. Distinct from angular-a11y (ARIA/keyboard)…
Skill Claude CodeCodex
Step-by-step Angular upgrade path from v15 to v17+. Covers standalone migration schematics (v15+), NgModule removal, control-flow migration (v17+), signal input/output adoption, ESLint migration from TSLint, and ng update safety checks. Only skill with deep v15/v16 EOL content.
Skill Claude CodeCodex
Reviews Storybook and visual regression testing coverage for shared Angular component/UI-kit libraries. Flags a shared component library with no isolated component playground documenting variants/states, no visual regression tooling catching unintended pixel-level style changes, stories that only cover the happy-path…
Skill Claude CodeCodex
Guides migration from Zone.js to Angular's zoneless change detection: bootstrapping swap (provideZonelessChangeDetection / provideExperimentalZonelessChangeDetection), component audit for manual tick calls or NgZone.runOutsideAngular usage, CD strategy alignment (OnPush or signal-based), async-pipe alignment, and…
Plugin Claude Code
Azure / Bicep / ACA governance: CAF naming, security baseline, Well-Architected review, Bicep patterns, observability, CI/CD security (OIDC), multi-region DR, cost/FinOps, AKS, API Management, landing zones, SLO/error budgets, and container image security. Ships @infra-reviewer (finds violations), @infra-implementor…
Agent
Implements Azure Bicep and GitHub Actions deployment-workflow fixes in compliance with all pilot-azure rules and skills. Takes an infra-reviewer finding (standard ID + file:line) or an infrastructure change request, applies minimal targeted edits, verifies with az bicep lint/build and what-if guidance, and hands back…
Agent
Reviews Azure Bicep templates and GitHub Actions deployment workflows against pilot-azure rules and skills. Outputs structured findings with standard IDs (ASB-, WAF-, CAF-, BIC-, AOBS-, CICD-, ADR-, FIN-, AKS-, APIM-, LZ-, SLO-, IMG-, SCN-, LPT-, SRS-, STG-, ACA-, AFW-, DRC-), severity, and fix guidance. Invoked…
Agent
Product-support assistant for Azure infrastructure and deployment issues. Takes a symptom (failed deployment, unreachable service, scaling problem, cost spike, alert firing), gathers evidence read-only — including live diagnostics via the bundled Azure MCP tools (resourcehealth, monitor, applens, kusto) when they are…
Skill Claude CodeCodex
Reviews AKS-specific governance for shops running Azure Kubernetes Service instead of Container Apps. Flags pods with no Pod Security Standards enforcement, containers with no resource requests/limits (noisy-neighbor and OOM-kill risk), no NetworkPolicy restricting pod-to-pod traffic, and workload identity not used…
Skill Claude CodeCodex
Reviews Azure API Management gateway-layer policies — a distinct layer from dotnet-rate-limiting's app-layer checks. Flags no rate-limit/quota policy at the gateway, JWT validation duplicated or missing at the gateway when the backend already validates tokens, backend health/circuit-breaker not configured for APIM's…
Skill Claude CodeCodex
Reviews Bicep files for production-readiness: module decomposition vs monolithic templates, parameterization of environment-specific values, what-if step in GitHub Actions deployment workflow, required cost tags on all resources, secure parameter types for secrets, conditional deployment for environment tiers, and…