StefanTheCode/dotnet-ai-toolkit
Plugin Claude Code
AI skills and agents for mid/senior .NET developers — EF Core, performance, architecture, testing, security, observability, and DevOps. By TheCodeMan.net.
StefanTheCode/dotnet-ai-toolkit
Plugin Claude Code
AI skills and agents for mid/senior .NET developers — EF Core, performance, architecture, testing, security, observability, and DevOps. By TheCodeMan.net.
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that audits an ASP.NET Core codebase against the OWASP Top 10 and .NET-specific risks — broken access control, secrets in source, injection, insecure config, CORS, mass assignment, weak auth, vulnerable dependencies. It produces a risk-ranked report where every finding shows the vulnerable code…
StefanTheCode/dotnet-ai-toolkit
Agent
Audits an ASP.NET Core codebase for security vulnerabilities against the OWASP Top 10 and .NET-specific risks — auth/authorization gaps, injection, secrets in source, insecure config, CORS, mass assignment, and dependency vulnerabilities. Produces a ranked report with concrete fixes. Use when the user wants a security…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that audits a whole .NET data layer — EF query patterns, indexing, DbContext config, resiliency, bulk-op opportunities — and produces a ranked report with fixes.
StefanTheCode/dotnet-ai-toolkit
Agent
Audits a .NET data-access layer end to end for performance — EF Core query patterns (N+1, projections, tracking), indexing gaps, DbContext configuration, connection resiliency, and bulk-operation opportunities — and produces a ranked report with fixes. Use when the user wants a database/EF performance review of a…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent (not a single-shot skill) that reads a whole .NET repository, maps the project dependency graph, detects the intended architecture style, and produces a ranked report: layering/dependency-rule violations, coupling, CQRS hygiene, EF boundary leaks, testability — each with a concrete fix, plus a…
StefanTheCode/dotnet-ai-toolkit
Agent
Reviews a .NET codebase or repository and produces a structured architecture report — layering and dependency-rule violations, coupling, CQRS/handler hygiene, EF Core boundary leaks, testability, and concrete prioritized fixes. Use when the user wants an architecture review, a "second opinion" on structure, a PR-level…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that does a PR-level review of C#/.NET changes — correctness, async/EF/performance pitfalls, error handling, API design, readability, and test coverage. It returns severity-ranked comments (🔴 must-fix / 🟡 suggestion / 🟢 nit), a verdict (approve / approve-with-comments / request-changes), and…
StefanTheCode/dotnet-ai-toolkit
Agent
Performs a PR-level code review of C#/.NET changes — correctness, readability, naming, error handling, async/EF/performance pitfalls, test coverage, and idiomatic .NET. Produces inline-style comments ranked by severity plus an overall verdict. Use when the user wants a code review, a second pair of eyes on a…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that plans and (with approval) executes a .NET version upgrade across a solution — TFM bumps, breaking-change remediation, obsolete-API replacement, package updates, and per-stage verification.
StefanTheCode/dotnet-ai-toolkit
Agent
Plans and executes a .NET version upgrade across a solution — target framework bumps, breaking-change remediation, obsolete-API replacement, package updates, and a verification plan (e.g. .NET 6→8→9→10). Use when the user wants to upgrade .NET, migrate target frameworks, modernize to a newer .NET, handle upgrade…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that assesses a legacy .NET codebase and produces a pragmatic, incremental modernization roadmap (strangler-fig, not big-bang) — platform, architecture, DI, async, testability — sequenced by risk and value.
StefanTheCode/dotnet-ai-toolkit
Agent
Assesses a legacy .NET codebase and produces a pragmatic, incremental modernization roadmap — from .NET Framework to modern .NET, monolith to modular, and toward testability, DI, async, and current patterns — prioritized by risk and value. Use when the user wants to modernize legacy code, migrate from .NET Framework…
StefanTheCode/dotnet-ai-toolkit
Agent
What it is. An agent that audits a .NET service across traces, metrics, logs, health checks, and correlation, then gives a prioritized plan to make it properly observable.
StefanTheCode/dotnet-ai-toolkit
Agent
Audits a .NET service for observability gaps — missing or incomplete tracing, metrics, logging, health checks, and correlation — and produces a prioritized plan to make the service properly observable. Use when the user wants an observability review, "can I actually debug this in production", a pre-production…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Audit and fix classic ADO.NET data-access code (SqlConnection / SqlCommand / SqlDataReader / DataSet) on .NET Framework. Use this skill whenever the user shares raw ADO.NET code, a DAL / repository built on SqlCommand, stored-proc calls, string-concatenated SQL, or mentions SQL injection, parameterized queries…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Audit C#/.NET code for async/await anti-patterns and concurrency bugs. Use this skill whenever the user shares async C# code or asks about deadlocks, async void, .Result/.Wait(), blocking calls, ConfigureAwait, sync-over-async, fire-and-forget tasks, CancellationToken usage, or "why does my async code hang/deadlock".…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Design ASP.NET Core authorization — policy-based, role-based, and claims/requirement-based with custom authorization handlers and resource-based checks. Use this skill whenever the user wants authorization policies, role/claim checks, custom AuthorizationHandler, resource-based authorization, permission checks, or…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Set up BenchmarkDotNet for a .NET project and interpret the results — proper benchmark classes, memory diagnostics, baselines, and reading ns/op + allocations. Use this skill whenever the user wants to benchmark code, measure performance, compare two implementations, set up BenchmarkDotNet, or asks "which is faster /…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Add the right caching to a .NET app — IMemoryCache, distributed cache, or HybridCache (.NET 9+) — with correct keys, expiration, stampede protection, and invalidation. Use this skill whenever the user wants caching, to cache a query/response, IMemoryCache, Redis/distributed cache, HybridCache, output caching, or asks…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Generate a CI/CD pipeline for a .NET app — GitHub Actions or Azure DevOps — with restore, build, test, coverage, vulnerability scan, container build, and deploy stages. Use this skill whenever the user wants a CI/CD pipeline, GitHub Actions workflow, Azure DevOps YAML, build/test automation, a release pipeline, or…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Scaffold a .NET solution using Clean Architecture or Vertical Slice Architecture. Use this skill whenever the user wants to start a new .NET project/solution, structure an existing one, add a new feature/use-case/slice, set up layers (Domain, Application, Infrastructure, API), wire up CQRS/MediatR, or asks "how should…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Run the whole toolkit against a .NET repo and produce a single scored "health dashboard" - an overall score plus per-category scores (security, architecture, EF/database, performance, observability, testing, dependencies, code quality), each with findings and the top fixes. Use this skill whenever the user wants a…
StefanTheCode/dotnet-ai-toolkit
Skill Claude CodeCodex
Add correlation-ID middleware to ASP.NET Core so every request has a traceable id flowing through logs, downstream HTTP calls, and messaging. Use this skill whenever the user wants a correlation id, request id, to trace a request across services in logs, propagate an id to downstream calls, or asks "how do I add a…