Open-source Claude Code plugins — build a real project harness, not another pasted CLAUDE.md.
Skill Claude CodeCodex
Diagnose and fix issues in existing auth setups. Scans environment, files, security, middleware, OAuth, database, and dangerous code patterns. Produces scored health report with actionable fixes.
Skill Claude CodeCodex
Set up authentication for web apps. Supports Better Auth and Firebase Auth. Handles email/password, Google OAuth, sessions, middleware, protected routes. Includes UI components. Auto-detects existing project themes. (GitHub & Apple OAuth coming soon).
Skill Claude CodeCodex
Diagnose and fix your Claude Code harness. Scans CLAUDE.md, settings.json, hooks health, and stack consistency. Produces scored report. Run /shipwithai-harness:doctor.
Skill Claude CodeCodex
Generate a Claude Code harness for any project. Scans your actual code to create tailored CLAUDE.md, settings.json, and safety hooks. Run /shipwithai-harness:setup.
Skill Claude CodeCodex
Generate a Flyway or Liquibase migration in lockstep with an entity change. Detects which migration tool the project uses and the next version number. Invoked by jpa-entity after a schema change, or directly. Trigger phrases: "create migration", "add db migration", "new flyway migration", "add liquibase changeset".
Skill Claude CodeCodex
Scaffold idempotency-key handling for unsafe POSTs — read an Idempotency-Key header, replay the stored response on a retry instead of re-processing, otherwise process once and store the response keyed by (key, request fingerprint). Ships a servlet filter plus a storage SPI the project implements with Redis or a DB.…
Skill Claude CodeCodex
Scaffold a Spring Boot integration test against REAL infrastructure via Testcontainers — a throwaway Postgres (Kafka optional), wired with Spring Boot 3.1+ @ServiceConnection so there's no manual datasource config. Async assertions use Awaitility, never Thread.sleep. Trigger phrases: "integration test"…
Skill Claude CodeCodex
Scaffold a Spring Data JPA @Entity correct-by-default so the guardrails never fire: @Version optimistic locking, business-key equals/hashCode (never the generated @Id), JPA auditing fields, optional soft-delete, plus a matching repository — all matching this project's conventions. Trigger phrases: "create entity"…
Skill Claude CodeCodex
Scaffold JWT bearer authentication for a stateless JSON API. Recommends Spring Security's resource server (framework verifies signature + exp); also ships a custom OncePerRequestFilter using jjwt for teams that need it — it verifies the signature, rejects alg=none, checks exp/nbf, and returns 401 JSON on failure.…
Skill Claude CodeCodex
Scaffold a global REST error contract — a @RestControllerAdvice that maps every exception to an RFC 7807 ProblemDetail (Spring 6): validation errors → 400 with field details, a domain NotFoundException → 404, and a fallback 500 that never leaks stack traces. This is the fix the entity-in-controller / error-contract…
Skill Claude CodeCodex
Scaffold a Spring Security 6 SecurityFilterChain @Bean baseline — deny-by-default authorizeHttpRequests, a BCryptPasswordEncoder, explicit CORS, and CSRF guidance (kept for cookie/session auth, disabled only for stateless token APIs). Lambda DSL, Jakarta, no deprecated .and() chaining. Trigger phrases: "set up spring…
Skill Claude CodeCodex
Wire the Spring Boot guardrails into this project — install the jpa-guardrail PostToolUse hook + ruleset, register it in settings.json, copy the springboot-reviewer agent, and inject the Spring Boot rule block into CLAUDE.md. Short interview fills project slots (base entity, migration tool, strict mode). Trigger…
Skill Claude CodeCodex
Scaffold a Spring Web REST endpoint correct-by-default — controller + request/ response DTOs + service method + mapper. Never exposes a JPA entity (satisfies the entity-in-controller guardrail). Request bodies are @Valid DTOs. Trigger phrases: "add endpoint", "scaffold rest controller", "new REST endpoint", "create…
Skill Claude CodeCodex
Fine-grained Spring Boot 3.x + JPA conventions and the rationale behind the toolkit's guardrail rules. Split by domain — load the reference for what you're touching. Use when working on persistence, controllers, transactions, or tests and you want the why, not just the what. Trigger phrases: "spring boot conventions"…
Skill Claude CodeCodex
Scaffold focused Spring slice tests — @DataJpaTest for the persistence layer (rolls back per test) and @WebMvcTest for the web layer (MockMvc + mocked services). Pick the narrowest slice that proves the behavior; reach for full @SpringBootTest only for cross-layer flows. Trigger phrases: "datajpatest", "webmvctest"…
Skill Claude CodeCodex
Use when adding or extending automated module-boundary / architecture enforcement in a Kotlin or Kotlin Multiplatform Gradle project — rules like "core must not depend on feature", "api must not leak impl", layer/package dependency directions that should fail the build the moment a bad import is written. Covers tool…
Skill Claude CodeCodex
Evaluation criteria for grading rendered mobile UI screens. Use when reviewing, critiquing, or self-checking a mobile UI screenshot — especially after any UI edit in an agentic loop — to decide pass/fail and produce concrete fixes. Targets Compose Multiplatform (Android + iOS), Material 3. The mobile counterpart to…
Skill Claude CodeCodex
Set up the Claude Code harness for this project. Configures CLAUDE.md, permissions, hooks, MCP servers, agents, and SSOT docs based on your stack and chosen tier. Run on first setup or when CLAUDE.md is missing or has [PLACEHOLDER] markers. Trigger phrases: "set up harness", "configure claude", "onboard project"…
Skill Claude CodeCodex
Start a new project from scratch. 3-phase interview: project goals → tech stack → architecture → conventions. Scaffolds using official tools then configures the Claude Code harness. Run on an empty directory. Trigger phrases: "start a new project", "create project from scratch", "greenfield setup", "I have an empty…
Skill Claude CodeCodex
Analyze Claude Code tool call logs and suggest harness improvements based on actual usage patterns. Requires observability enabled + 7 days of data. Trigger phrases: "optimize harness", "harness suggestions", "improve my setup", "analyze tool usage", "what hooks should I add".
Skill Claude CodeCodex
Audit the current Claude Code harness health: check configured components, detect drift from the codebase, and suggest fixes or tier upgrades. Trigger phrases: "review harness", "check setup", "harness health", "what's missing", "upgrade tier", "audit claude config".
Skill Claude CodeCodex
Configure .claude/agents/ with specialized sub-agents for your project. Called by init or standalone to configure the agents pillar. Trigger phrases: "setup agents", "configure agents", "add claude agents".
Skill Claude CodeCodex
Configure .claude/settings.json hooks section for your stack: auto-format, auto-lint, and test-on-stop triggers. Called by init or standalone to configure the hooks pillar. Trigger phrases: "setup hooks", "configure auto-format", "add lint hook".
Skill Claude CodeCodex
Configure .mcp.json with MCP servers for external services your project uses. Called by init or standalone to configure the MCP pillar. Trigger phrases: "setup mcp", "configure mcp servers", "connect to [service]".