Skill Claude CodeCodex
Web application security review for TypeScript/JavaScript stacks, frontend and backend: XSS and output encoding, CSRF, clickjacking, secrets leaking into client bundles, authn/authz and IDOR, injection (SQL/command/NoSQL/ template), SSRF, mass assignment, insecure deserialization, file upload, path traversal, security…
Skill Claude CodeCodex
SOLID object-oriented design principles for TypeScript projects. Use when designing or refactoring classes and modules, reviewing code for design smells (rigid, fragile, tightly coupled code), deciding how to split responsibilities or introduce abstractions, or answering "is this good OO design / which SOLID principle…
Skill Claude CodeCodex
Opinionated SQLite conventions for local TypeScript + Bun web development with Drizzle ORM, where Postgres is the likely production target. Keeps the postgres-dba naming and modeling rules (snakecase, plural tables, id surrogate keys, NOT NULL FKs with explicit ON DELETE, compound junction keys, JSON document store)…
Skill Claude CodeCodex
Idiomatic TypeScript conventions and best practices: strict compiler settings, type-level modeling (discriminated unions, branded/nominal types, as const/satisfies, exhaustiveness), unknown over any, immutability, error handling with a Result type, null/undefined hygiene, async/promise rules, module and naming…
Skill Claude CodeCodex
Write, split, and refine agile/scrum user stories and acceptance criteria. Produces /docs/STORIES.md as the canonical backlog, formatted to feed directly into the bdd-specs skill (Story → Feature, Given/When/Then acceptance criteria → Scenario/Specification). Use this whenever the user wants to write a user story…
Instructions file
Claude Code instructions for robconery/kolea, covering 🐦 kōlea, 📚 docs — read before you write, 🔁 phase commands, 🛠 stack and 🧭 layering.